This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: SLtlP0UJVdJUbgeBUnWSD1Qz64wQfk5Upi0KWxS/xK4= Subject key identifier: CB:14:7E:D8:04:DA:17:00:C4:49:62:8B:DD:5D:CF:4E:5F:8C:2D:41 Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 1296B1BF5C51BF09C6642C7C245EE0C99F3998E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 0240 Signing time: Thu 04 Dec 2025 13:51:12 +0000 Manifest this update: Thu 04 Dec 2025 13:46:12 +0000 Manifest next update: Sun 07 Dec 2025 22:42:12 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: VG4IRLN8ORX8Pk+gsdhOr0PuURsueI0hGyvDGznvE1Y=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 22:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:96:b1:bf:5c:51:bf:09:c6:64:2c:7c:24:5e:e0:c9:9f:39:98:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Dec 4 13:46:12 2025 GMT Not After : Dec 7 22:42:12 2025 GMT Subject: CN=CB147ED804DA1700C449628BDD5DCF4E5F8C2D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d3:11:64:a1:d6:90:cd:77:85:cd:f3:b6:97: 78:1f:71:fe:cd:e5:ce:ac:6f:dc:b7:40:e8:f6:c0: be:3b:a2:6b:31:cd:58:e5:f2:2c:2b:e5:c5:3f:e2: 69:92:64:09:8b:09:e5:90:97:a8:b9:c7:b6:ba:fb: cc:7d:f1:4f:1c:42:29:a7:66:cc:d6:81:11:5a:08: 6c:d0:b1:f4:30:2b:fb:bb:1e:e3:ee:f6:cf:24:f7: 1c:cf:58:6a:9e:b6:7c:5f:45:f2:37:b3:39:51:79: 1f:de:73:3d:3d:99:65:27:4a:67:89:70:26:76:85: 74:5a:f1:bc:b7:68:d0:99:96:19:a6:ea:ff:b2:b0: 4a:9c:08:67:6f:3f:44:1d:1f:de:d5:68:8c:eb:9d: f3:5f:5c:96:ba:c4:2d:62:c9:23:6e:99:ee:43:ad: 1f:fc:e8:71:8c:5d:7a:18:0b:3c:89:e8:3c:16:50: 54:14:54:9f:52:41:46:8a:ac:ea:66:53:18:cc:9b: 33:58:66:cc:79:81:a7:4f:07:9c:df:2b:43:05:c7: eb:44:bf:23:26:25:49:65:a6:8c:56:95:43:0b:de: 49:52:c6:cf:30:ec:5f:08:17:78:5c:74:f5:37:00: ed:4b:93:2b:66:d5:a8:23:20:8d:0a:39:c0:17:f1: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:14:7E:D8:04:DA:17:00:C4:49:62:8B:DD:5D:CF:4E:5F:8C:2D:41 X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c2:34:d5:41:ce:8f:0b:2c:49:43:87:a2:4f:ee:93:81:1d: 8c:0d:7e:1d:d6:8f:2d:41:56:48:87:c7:f4:67:72:e9:a8:19: f6:c2:bc:c4:2c:a6:0a:e3:03:8f:63:e5:87:1d:ee:97:7c:18: db:68:f0:10:34:ec:9a:9e:46:13:0c:41:8b:24:48:27:e7:0c: cd:52:8c:e4:38:3e:84:e9:15:01:42:a4:bc:7a:e6:60:55:75: e5:81:68:92:71:27:d0:3a:9e:73:41:9b:44:a0:5f:32:70:24: 3a:54:60:1d:bf:68:ab:f2:ed:b3:95:45:02:e5:82:a6:b9:aa: fd:b1:5e:5c:b2:84:f9:83:66:f4:3c:20:a7:01:24:ba:fb:0c: 91:70:f7:0a:f6:2f:ec:55:43:a7:5c:38:fe:79:5f:10:02:fb: 6b:cc:90:5c:22:6e:f5:8c:90:d5:35:74:2e:92:cf:b6:be:f3: 90:d2:63:4a:db:76:fc:fc:65:8c:55:df:07:ea:83:19:98:af: 7f:29:45:2a:0a:4f:45:a7:f4:4d:56:a8:05:77:e1:28:e2:07: 23:81:4d:35:a6:e5:e1:37:57:3f:31:f9:00:1e:d1:5e:58:07: 24:8f:9c:a2:2f:98:3c:d4:bf:0d:67:19:89:fa:fc:70:a2:49: 31:91:0c:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpaxv1xRvwnGZCx8JF7gyZ85mOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTEyMDQxMzQ2MTJaFw0yNTEyMDcyMjQyMTJaMDMxMTAvBgNV BAMTKENCMTQ3RUQ4MDREQTE3MDBDNDQ5NjI4QkRENURDRjRFNUY4QzJENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu0xFkodaQzXeFzfO2l3gfcf7N 5c6sb9y3QOj2wL47omsxzVjl8iwr5cU/4mmSZAmLCeWQl6i5x7a6+8x98U8cQimn ZszWgRFaCGzQsfQwK/u7HuPu9s8k9xzPWGqetnxfRfI3szlReR/ecz09mWUnSmeJ cCZ2hXRa8by3aNCZlhmm6v+ysEqcCGdvP0QdH97VaIzrnfNfXJa6xC1iySNume5D rR/86HGMXXoYCzyJ6DwWUFQUVJ9SQUaKrOpmUxjMmzNYZsx5gadPB5zfK0MFx+tE vyMmJUllpoxWlUML3klSxs8w7F8IF3hcdPU3AO1Lkytm1agjII0KOcAX8cq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyxR+2ATaFwDESWKL3V3PTl+MLUEwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXCNNVBzo8LLElDh6JP7pOBHYwNfh3Wjy1B VkiHx/RncumoGfbCvMQspgrjA49j5Ycd7pd8GNto8BA07JqeRhMMQYskSCfnDM1S jOQ4PoTpFQFCpLx65mBVdeWBaJJxJ9A6nnNBm0SgXzJwJDpUYB2/aKvy7bOVRQLl gqa5qv2xXlyyhPmDZvQ8IKcBJLr7DJFw9wr2L+xVQ6dcOP55XxAC+2vMkFwibvWM kNU1dC6Sz7a+85DSY0rbdvz8ZYxV3wfqgxmYr38pRSoKT0Wn9E1WqAV34SjiByOB TTWm5eE3Vz8x+QAe0V5YBySPnKIvmDzUvw1nGYn6/HCiSTGRDCw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:36 2025 by rpki-client