This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: 4+ak+aJyC+6mYiBUJiSndK1oWJVhAG1HSt6Bb/3vWw8= Subject key identifier: EE:9F:6E:04:B1:99:C0:83:9E:00:05:21:76:52:6F:4B:FB:17:CC:4B Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 67C4BAA8D7942456F1048398AFA665491E9C63C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 0532 Signing time: Fri 05 Dec 2025 15:10:02 +0000 Manifest this update: Fri 05 Dec 2025 15:05:02 +0000 Manifest next update: Tue 09 Dec 2025 02:46:02 +0000 Files and hashes: 1: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: 3423JmWWy9kOostkCHVdZor34pBLU/KNR/hoF2VmLJY=) 2: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 3: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) 4: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) 5: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) 6: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 7: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c4:ba:a8:d7:94:24:56:f1:04:83:98:af:a6:65:49:1e:9c:63:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Dec 5 15:05:02 2025 GMT Not After : Dec 9 02:46:02 2025 GMT Subject: CN=EE9F6E04B199C0839E00052176526F4BFB17CC4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:c5:e2:8c:3c:d7:ae:eb:d2:48:c2:cd:41: dd:e8:e3:6e:63:27:23:d0:be:05:37:65:10:97:76: 8c:19:ff:8a:2a:13:ee:a9:99:00:63:e8:16:fb:69: 02:52:49:06:f9:dd:e0:63:74:03:7c:bd:98:e1:ff: 3a:25:45:59:7c:e6:e9:5f:fe:45:7e:b7:ad:90:cf: fe:74:8d:49:62:e5:5f:1e:c2:5c:2d:8e:48:80:d0: 8a:91:8a:89:bc:a3:22:98:d9:2d:8d:dd:a2:c5:68: 90:b6:1d:df:11:60:24:3b:e8:a3:d5:97:3d:9a:3e: e8:ae:d7:d8:0b:0d:c7:bf:5a:cd:1f:c2:6b:4a:d4: cb:77:77:46:4b:8e:10:c7:27:a9:68:0e:90:37:44: b7:3b:fd:e9:5d:4a:95:7f:d8:20:0f:43:ee:c4:ef: b4:29:5e:1c:03:fe:ff:38:a9:3b:76:94:44:65:4a: cb:fe:55:65:d3:86:ef:4c:39:5b:5a:52:ee:3d:e3: 9c:12:cf:31:1c:39:4d:e2:54:d0:5b:d0:5d:39:ac: 42:1a:99:05:57:75:52:f2:d5:b1:79:56:b6:64:c6: 19:27:bf:3a:45:93:c5:94:08:4b:06:91:87:43:d5: 40:89:bd:ec:06:50:68:15:ea:d2:7e:9b:27:fb:2a: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9F:6E:04:B1:99:C0:83:9E:00:05:21:76:52:6F:4B:FB:17:CC:4B X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0a:55:ba:46:a7:6c:16:8f:c4:86:96:13:7c:bb:c1:ce:49: a7:3f:aa:82:fd:7f:1d:63:b8:83:f1:82:4d:24:f7:7c:b1:d4: e3:a0:07:e3:0b:a1:f1:20:23:42:fb:bd:f7:81:1d:8a:87:22: ad:5f:6a:e9:c7:bb:b1:b2:4d:92:47:7f:9c:a2:1b:61:76:e1: 4e:70:a5:0d:87:be:b5:3a:47:2c:29:87:b4:22:f1:36:34:72: f2:41:4d:f5:29:21:b3:40:ec:da:05:ef:3a:7f:4e:9e:88:32: 83:97:1c:b3:95:47:d7:50:0c:d9:ad:e0:89:8a:bb:de:98:11: 6b:06:9c:10:4a:5c:87:1b:de:f2:80:74:02:56:21:ce:39:03: 7c:f4:cd:d4:0c:04:c8:25:77:1a:8a:c0:26:b4:67:e9:db:d7: 2f:ae:52:2e:b4:74:4f:06:9f:d8:33:13:71:7b:cc:62:41:87: a8:3e:90:bd:42:bd:cc:65:4f:46:03:ea:f7:f9:01:19:c1:00: 2c:c7:e0:7e:e4:56:40:a9:4f:d9:6e:dd:76:ba:f1:af:9d:b4: ff:97:0c:af:d1:28:d1:86:b1:17:f6:c1:80:72:7d:7d:96:77: fd:7d:5b:00:19:08:bd:c1:dd:92:55:5b:72:07:91:62:f0:1f: a0:32:be:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8S6qNeUJFbxBIOYr6ZlSR6cY8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTEyMDUxNTA1MDJaFw0yNTEyMDkwMjQ2MDJaMDMxMTAvBgNV BAMTKEVFOUY2RTA0QjE5OUMwODM5RTAwMDUyMTc2NTI2RjRCRkIxN0NDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3c8XijDzXruvSSMLNQd3o425j JyPQvgU3ZRCXdowZ/4oqE+6pmQBj6Bb7aQJSSQb53eBjdAN8vZjh/zolRVl85ulf /kV+t62Qz/50jUli5V8ewlwtjkiA0IqRiom8oyKY2S2N3aLFaJC2Hd8RYCQ76KPV lz2aPuiu19gLDce/Ws0fwmtK1Mt3d0ZLjhDHJ6loDpA3RLc7/eldSpV/2CAPQ+7E 77QpXhwD/v84qTt2lERlSsv+VWXThu9MOVtaUu4945wSzzEcOU3iVNBb0F05rEIa mQVXdVLy1bF5VrZkxhknvzpFk8WUCEsGkYdD1UCJvewGUGgV6tJ+myf7Knm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7p9uBLGZwIOeAAUhdlJvS/sXzEswHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsKVbpGp2wWj8SGlhN8u8HOSac/qoL9fx1j uIPxgk0k93yx1OOgB+MLofEgI0L7vfeBHYqHIq1faunHu7GyTZJHf5yiG2F24U5w pQ2HvrU6Rywph7Qi8TY0cvJBTfUpIbNA7NoF7zp/Tp6IMoOXHLOVR9dQDNmt4ImK u96YEWsGnBBKXIcb3vKAdAJWIc45A3z0zdQMBMgldxqKwCa0Z+nb1y+uUi60dE8G n9gzE3F7zGJBh6g+kL1CvcxlT0YD6vf5ARnBACzH4H7kVkCpT9lu3Xa68a+dtP+X DK/RKNGGsRf2wYByfX2Wd/19WwAZCL3B3ZJVW3IHkWLwH6AyvsE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:32 2025 by rpki-client