This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft File: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft (raw, json) Hash identifier: 2xiAHrDbhypQA7x5q5fGdSa4ufSH9zYUPJfdvM9UHxg= Subject key identifier: 87:84:1A:8A:26:12:D6:C0:74:31:6A:8F:15:86:18:DA:44:4A:2C:D5 Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 Certificate issuer: /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Certificate serial: 4ED536D13958F5450F31DCD6836D8DAC8C57CEF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft Manifest number: 022A Signing time: Fri 05 Dec 2025 18:11:47 +0000 Manifest this update: Fri 05 Dec 2025 18:06:47 +0000 Manifest next update: Tue 09 Dec 2025 00:48:47 +0000 Files and hashes: 1: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl (hash: rzL4QHSiW8m2T/lkofhuxdJpCzFcZ/pDiC1yTza6zNE=) 2: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: +Y8f9IKZhXyPRNzOP8gLDO5FItamxPZwT5YuJiQ+z+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d5:36:d1:39:58:f5:45:0f:31:dc:d6:83:6d:8d:ac:8c:57:ce:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Validity Not Before: Dec 5 18:06:47 2025 GMT Not After : Dec 9 00:48:47 2025 GMT Subject: CN=87841A8A2612D6C074316A8F158618DA444A2CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:3a:40:5a:7e:9d:bd:92:6f:69:25:57:96: ff:82:3d:d3:11:d4:04:df:16:92:b5:a2:a6:ca:d6: 29:e8:c6:b5:f6:95:0c:7d:d5:63:5a:4f:b8:57:8d: bc:c0:d5:6b:75:f6:25:25:cc:b2:b6:e7:14:07:08: 39:85:ff:75:de:bc:c4:05:ba:af:f9:7d:5b:39:18: 0d:e2:cb:8a:6c:7e:31:a3:aa:63:59:2b:4a:06:6c: b2:f9:0f:32:e5:3a:e8:4a:c5:1e:1b:69:43:63:8c: 4f:ed:c1:80:38:f0:f1:8f:3d:62:36:86:08:5b:30: b3:29:e0:62:40:ec:93:e9:03:c3:50:fa:c3:1e:e1: 6d:ee:5e:e6:b3:2e:3f:6a:55:d8:59:13:95:67:17: 20:9b:1e:8d:8c:da:15:e0:45:d9:88:1d:13:f6:69: 60:2b:86:96:d6:51:9b:02:c6:27:de:c4:d4:11:da: e3:ef:45:f9:1e:df:4a:51:f1:e6:71:87:19:a6:32: 6c:1c:91:49:97:44:83:c9:5d:aa:2d:e9:43:17:e4: f9:ec:e0:2f:c6:fb:39:d7:f3:32:77:05:73:7a:46: 19:5b:5d:e3:e9:3a:e1:d4:6e:b1:97:05:4e:0c:67: 85:4e:71:b3:0f:99:a3:e6:f8:6e:d8:1e:af:18:af: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:84:1A:8A:26:12:D6:C0:74:31:6A:8F:15:86:18:DA:44:4A:2C:D5 X509v3 Authority Key Identifier: keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c7:f3:fa:73:23:e3:85:70:b0:74:d9:07:c0:b5:90:41:03: 07:10:ee:11:cc:b6:ef:2a:bf:f7:94:37:8e:24:f1:43:89:67: cf:f3:4e:72:09:4d:8a:eb:5f:f7:54:54:56:50:e4:3c:d9:c7: d2:29:1c:63:ff:2b:01:0e:37:c7:41:e9:8d:fc:25:16:62:81: 46:5c:d5:be:c8:40:91:b9:8d:d9:df:f3:7a:b3:d4:16:c9:18: 19:68:60:e9:39:11:30:dd:9c:f3:3f:2b:4e:12:7e:c5:c5:2a: 35:bb:b5:6f:1a:e9:87:9b:49:ad:18:0f:7a:bd:eb:71:ab:0f: 9a:e0:c0:22:dc:ad:77:a1:1f:ec:e1:1b:bd:35:88:e0:0a:07: 0b:d2:01:e7:ac:a2:af:21:c7:22:e8:be:00:b2:79:b0:0a:d2: 44:f8:3e:2b:ac:b9:45:b1:3b:ae:6d:1a:93:d8:00:89:15:0d: 1f:98:92:96:49:1c:e1:46:2a:38:39:ec:db:8e:ac:86:65:01: 32:21:34:95:6c:54:f9:ad:e6:69:d6:03:97:b9:5c:f9:75:2f: 0c:b7:04:3f:0e:69:60:ad:43:3c:33:d9:be:f9:88:5a:f2:0b: b6:60:3e:a9:9d:ab:16:da:f6:eb:ed:87:58:90:48:36:cc:fa: fe:29:c4:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtU20TlY9UUPMdzWg22NrIxXzvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2 MkRDQjM0MDAeFw0yNTEyMDUxODA2NDdaFw0yNTEyMDkwMDQ4NDdaMDMxMTAvBgNV BAMTKDg3ODQxQThBMjYxMkQ2QzA3NDMxNkE4RjE1ODYxOERBNDQ0QTJDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCTpAWn6dvZJvaSVXlv+CPdMR 1ATfFpK1oqbK1inoxrX2lQx91WNaT7hXjbzA1Wt19iUlzLK25xQHCDmF/3XevMQF uq/5fVs5GA3iy4psfjGjqmNZK0oGbLL5DzLlOuhKxR4baUNjjE/twYA48PGPPWI2 hghbMLMp4GJA7JPpA8NQ+sMe4W3uXuazLj9qVdhZE5VnFyCbHo2M2hXgRdmIHRP2 aWArhpbWUZsCxifexNQR2uPvRfke30pR8eZxhxmmMmwckUmXRIPJXaot6UMX5Pns 4C/G+znX8zJ3BXN6RhlbXePpOuHUbrGXBU4MZ4VOcbMPmaPm+G7YHq8YryedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh4QaiiYS1sB0MWqPFYYY2kRKLNUwHwYDVR0j BBgwFoAUoZGMFWqaz83yRx3q/GGO4WLcs0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjhjN2EzNC1iYTMxLTRkMjktODM4NC0xODY3ODliMzg0ZjEvMC9BMTkxOEMxNTZB OUFDRkNERjI0NzFERUFGQzYxOEVFMTYyRENCMzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2MkRD QjM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThF RTE2MkRDQjM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInH8/pzI+OFcLB02QfAtZBBAwcQ7hHMtu8q v/eUN44k8UOJZ8/zTnIJTYrrX/dUVFZQ5DzZx9IpHGP/KwEON8dB6Y38JRZigUZc 1b7IQJG5jdnf83qz1BbJGBloYOk5ETDdnPM/K04SfsXFKjW7tW8a6YebSa0YD3q9 63GrD5rgwCLcrXehH+zhG701iOAKBwvSAeesoq8hxyLovgCyebAK0kT4PiusuUWx O65tGpPYAIkVDR+YkpZJHOFGKjg57NuOrIZlATIhNJVsVPmt5mnWA5e5XPl1Lwy3 BD8OaWCtQzwz2b75iFryC7ZgPqmdqxba9uvth1iQSDbM+v4pxKU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:02 2025 by rpki-client