This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: taxcfavgBNAJOM5PIvNLlb+navCfD6CeicKiXLy12cs= Subject key identifier: 81:73:08:EA:0E:A5:04:6A:CB:F4:91:F8:00:30:F4:F0:80:86:B2:71 Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 29264851B3825B325EC8D076662EE83F085C596C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 01D1 Signing time: Fri 05 Dec 2025 01:01:24 +0000 Manifest this update: Fri 05 Dec 2025 00:56:24 +0000 Manifest next update: Mon 08 Dec 2025 06:31:24 +0000 Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: XKb8rxYeYuD4PKUeGTZQ0dDYWCAE/hKgR+dYvEQGg4I=) 2: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: 1oqZuOHkJc4Zb+wivXoE+00cZ8nUhlsxrSEz0iB6adw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 06:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:26:48:51:b3:82:5b:32:5e:c8:d0:76:66:2e:e8:3f:08:5c:59:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Dec 5 00:56:24 2025 GMT Not After : Dec 8 06:31:24 2025 GMT Subject: CN=817308EA0EA5046ACBF491F80030F4F08086B271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b7:81:8d:82:2c:05:c7:ac:d8:8c:fc:bd:18: 37:61:08:94:27:40:e3:2d:dd:5c:7b:3d:07:61:c7: ba:dc:40:a7:91:03:19:42:48:6f:4d:56:1b:88:f2: b6:d7:11:74:ac:25:78:43:e9:70:2d:1e:57:18:d2: df:ee:f4:63:4b:61:4c:17:92:21:9c:e4:79:7f:d9: 67:60:f0:f5:7c:53:de:ff:1b:d4:00:a6:5e:e8:62: 90:77:ef:81:96:fa:72:11:d0:c1:c0:89:c4:d3:63: fa:80:92:2b:7d:64:07:76:45:cb:12:f6:2a:f3:9b: 57:3f:68:9a:8c:7a:5f:a5:b1:11:1f:87:17:43:bb: d3:f1:66:b1:c1:44:89:e0:ef:0a:dc:f6:05:db:f5: 6d:aa:5b:48:d9:2c:18:4d:47:71:2a:aa:21:11:7e: e6:b2:b1:db:4c:9a:b9:68:98:81:bf:01:cd:ba:79: 12:04:23:cb:79:a0:4e:72:29:e8:18:ff:63:fc:dd: 02:93:fc:7c:72:88:78:02:80:be:f3:cd:de:dd:16: 65:c5:e9:fd:0e:89:5c:58:7f:fa:c3:44:c0:dd:b1: f1:60:3e:c5:91:ac:c0:87:35:35:e6:99:65:bf:7f: 4a:bc:e5:9a:6b:4d:bd:8f:74:5d:21:f1:91:5a:27: b8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:73:08:EA:0E:A5:04:6A:CB:F4:91:F8:00:30:F4:F0:80:86:B2:71 X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:78:89:a6:05:84:6e:66:9b:9b:d0:38:36:a1:f4:3e:86:c6: dc:48:99:1d:aa:96:60:9c:d4:bc:2c:46:05:27:10:73:8c:d3: 12:f5:50:a4:fd:11:c4:98:cb:e6:a6:3c:64:94:3e:06:c2:27: 89:63:f6:6c:d1:15:7e:24:fb:d4:a7:20:0c:b7:0f:cc:70:4d: 04:ab:bd:3c:ba:06:da:05:b3:5b:fa:8c:6d:b9:5a:e1:31:8b: 35:10:d1:5d:2c:2a:32:08:dd:0a:8e:f2:e9:28:ca:a0:c1:51: f6:14:dd:a4:e5:05:f0:2c:15:47:4a:fc:86:f8:df:5b:99:12: 83:57:d9:fd:e7:71:87:5d:2c:d5:72:5e:7c:ba:32:4b:a2:04: 93:44:43:77:78:70:4b:06:e3:28:15:67:a5:c1:e5:b0:6f:37: 86:c9:de:0a:c5:ee:ec:ab:21:5a:9c:6f:f5:d9:c2:07:7d:33: 65:c9:85:ed:8c:f6:03:33:f8:75:68:53:9c:0f:26:cf:d0:d7: b0:5f:f3:0d:a0:2d:9f:a0:9a:de:f9:40:36:27:a6:29:9e:1a: e1:bb:7a:96:6c:7b:81:6c:57:c5:5a:39:a6:78:aa:a6:ab:04: 5e:f3:32:f1:c2:05:9b:da:eb:57:92:0a:bb:36:9f:ba:fb:c7: e6:b9:50:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSZIUbOCWzJeyNB2Zi7oPwhcWWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNTEyMDUwMDU2MjRaFw0yNTEyMDgwNjMxMjRaMDMxMTAvBgNV BAMTKDgxNzMwOEVBMEVBNTA0NkFDQkY0OTFGODAwMzBGNEYwODA4NkIyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmt4GNgiwFx6zYjPy9GDdhCJQn QOMt3Vx7PQdhx7rcQKeRAxlCSG9NVhuI8rbXEXSsJXhD6XAtHlcY0t/u9GNLYUwX kiGc5Hl/2Wdg8PV8U97/G9QApl7oYpB374GW+nIR0MHAicTTY/qAkit9ZAd2RcsS 9irzm1c/aJqMel+lsREfhxdDu9PxZrHBRIng7wrc9gXb9W2qW0jZLBhNR3EqqiER fuaysdtMmrlomIG/Ac26eRIEI8t5oE5yKegY/2P83QKT/HxyiHgCgL7zzd7dFmXF 6f0OiVxYf/rDRMDdsfFgPsWRrMCHNTXmmWW/f0q85ZprTb2PdF0h8ZFaJ7h7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgXMI6g6lBGrL9JH4ADD08ICGsnEwHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB14iaYFhG5mm5vQODah9D6GxtxImR2qlmCc 1LwsRgUnEHOM0xL1UKT9EcSYy+amPGSUPgbCJ4lj9mzRFX4k+9SnIAy3D8xwTQSr vTy6BtoFs1v6jG25WuExizUQ0V0sKjII3QqO8ukoyqDBUfYU3aTlBfAsFUdK/Ib4 31uZEoNX2f3ncYddLNVyXny6MkuiBJNEQ3d4cEsG4ygVZ6XB5bBvN4bJ3grF7uyr IVqcb/XZwgd9M2XJhe2M9gMz+HVoU5wPJs/Q17Bf8w2gLZ+gmt75QDYnpimeGuG7 epZse4FsV8VaOaZ4qqarBF7zMvHCBZva61eSCrs2n7r7x+a5UBw= -----END CERTIFICATE-----Generated at Sun Dec 7 03:35:38 2025 by rpki-client