This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft File: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft (raw, json) Hash identifier: IPi6327HMgHRjVCz/S3MdNxOVapu+y2L6w6PnEYsXmU= Subject key identifier: 02:F3:E4:D6:45:EC:B8:F7:94:BF:78:91:60:68:9E:84:35:AE:0D:92 Authority key identifier: 19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC Certificate issuer: /CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC Certificate serial: 36DECB201DB2E5AF99ECF4A901553B4B870C7B36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft Manifest number: 052A Signing time: Thu 04 Dec 2025 19:30:50 +0000 Manifest this update: Thu 04 Dec 2025 19:25:50 +0000 Manifest next update: Mon 08 Dec 2025 00:03:50 +0000 Files and hashes: 1: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl (hash: k6vs47QJHRgkhPMn+xavK6zH23/XlaQ7Gr2nk6j8opI=) 2: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: PgHEb146XoyGC0/9tuhNMcAsAzVP9MObWQdPhmy9XiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:de:cb:20:1d:b2:e5:af:99:ec:f4:a9:01:55:3b:4b:87:0c:7b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC Validity Not Before: Dec 4 19:25:50 2025 GMT Not After : Dec 8 00:03:50 2025 GMT Subject: CN=02F3E4D645ECB8F794BF789160689E8435AE0D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:18:f0:89:c1:3f:f4:b2:5b:f4:28:62:de: 13:7f:cd:f1:25:30:08:cb:6f:3a:5a:a5:7b:52:6c: b2:0e:ae:47:13:de:16:2f:9a:ec:df:6f:9a:17:48: 12:63:63:e1:1f:21:b2:07:0c:53:a8:d0:79:72:eb: 52:78:41:96:4a:a3:f3:6f:c8:56:76:30:9d:72:27: fa:06:b8:e4:db:03:f5:cf:94:a0:60:37:0f:20:3d: ad:69:bc:d9:f9:d2:dd:82:4c:4c:15:45:e4:42:b7: e9:c2:b0:ee:ae:5e:b8:84:71:34:16:1d:73:e4:05: 42:a4:61:e0:0e:d7:e4:a9:4e:db:3b:3c:3a:a5:15: 46:53:18:e5:ec:bd:35:59:75:4c:1c:ea:c9:de:e3: 80:96:86:3a:aa:b4:09:0d:df:28:a1:4f:28:92:54: 1c:4f:46:58:2a:2b:9d:1a:02:c2:f2:12:95:d2:8b: 94:26:7a:4a:f8:86:05:8b:fc:de:e9:36:3f:0d:1d: 32:e0:09:44:57:4c:72:42:e9:1d:e9:9b:3b:75:c9: 4e:38:3e:a2:5a:84:36:54:6e:e9:5f:a3:c5:28:fe: ac:0d:b9:ce:21:08:47:a7:c6:77:43:f2:e3:d4:5a: 48:5e:44:5c:5d:3e:98:6b:27:31:b8:b7:d6:3a:4b: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F3:E4:D6:45:EC:B8:F7:94:BF:78:91:60:68:9E:84:35:AE:0D:92 X509v3 Authority Key Identifier: keyid:19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:02:a0:9a:19:94:22:0b:12:6b:9d:4e:66:78:6f:8b:48:81: 1e:bd:b5:0f:e7:c4:e0:81:da:55:23:3a:db:13:87:d8:f1:e2: d5:c6:19:27:46:92:58:e2:52:f8:d0:c0:61:db:29:fb:fa:6d: 28:5a:7e:fb:cb:7f:cc:10:84:d3:50:92:e9:db:8b:33:46:d2: 8e:9e:7a:1a:ad:b2:2d:fe:b7:c0:3e:89:09:1e:2f:79:c2:7f: 2a:ac:e7:b9:5c:2b:e3:b0:14:09:8f:dd:ba:96:56:29:e9:ae: a0:d0:b4:5f:7c:ab:06:2b:ad:a1:0e:81:a0:a0:78:af:57:d6: f5:85:06:35:89:b7:9a:a7:a1:c4:36:6c:b0:18:e5:98:a0:10: ef:d4:50:89:58:78:36:73:6f:32:8a:a7:5d:e2:0e:95:81:58: 69:b1:6f:3d:e1:ba:83:82:d6:4e:f1:4b:3e:62:c1:a6:af:05: 1e:3f:59:11:2d:70:44:d8:46:79:c7:bb:06:93:be:6d:7a:32: d9:07:10:fe:90:30:1c:12:a8:97:98:21:1a:ed:8e:76:17:24: a3:a7:60:62:02:64:01:64:a9:dc:8e:e1:13:02:f3:4e:14:33: 6b:a6:fc:5d:66:28:16:be:93:8f:68:de:f9:7b:fa:bc:bc:dd: 6c:62:f9:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNt7LIB2y5a+Z7PSpAVU7S4cMezYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUx NTk1MEFFQzAeFw0yNTEyMDQxOTI1NTBaFw0yNTEyMDgwMDAzNTBaMDMxMTAvBgNV BAMTKDAyRjNFNEQ2NDVFQ0I4Rjc5NEJGNzg5MTYwNjg5RTg0MzVBRTBEOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSxjwicE/9LJb9Chi3hN/zfEl MAjLbzpapXtSbLIOrkcT3hYvmuzfb5oXSBJjY+EfIbIHDFOo0Hly61J4QZZKo/Nv yFZ2MJ1yJ/oGuOTbA/XPlKBgNw8gPa1pvNn50t2CTEwVReRCt+nCsO6uXriEcTQW HXPkBUKkYeAO1+SpTts7PDqlFUZTGOXsvTVZdUwc6sne44CWhjqqtAkN3yihTyiS VBxPRlgqK50aAsLyEpXSi5Qmekr4hgWL/N7pNj8NHTLgCURXTHJC6R3pmzt1yU44 PqJahDZUbulfo8Uo/qwNuc4hCEenxndD8uPUWkheRFxdPphrJzG4t9Y6Sy3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAvPk1kXsuPeUv3iRYGiehDWuDZIwHwYDVR0j BBgwFoAUGXXwsvJ95K/0PMJGBYornhWVCuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDMzNjJlMi05NzY1LTQyYmQtYjU5Yi02OGQ0M2NhZGViNWMvMC8xOTc1RjBCMkYy N0RFNEFGRjQzQ0MyNDYwNThBMkI5RTE1OTUwQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUxNTk1 MEFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJC OUUxNTk1MEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoCoJoZlCILEmudTmZ4b4tIgR69tQ/nxOCB 2lUjOtsTh9jx4tXGGSdGkljiUvjQwGHbKfv6bShafvvLf8wQhNNQkunbizNG0o6e ehqtsi3+t8A+iQkeL3nCfyqs57lcK+OwFAmP3bqWVinprqDQtF98qwYrraEOgaCg eK9X1vWFBjWJt5qnocQ2bLAY5ZigEO/UUIlYeDZzbzKKp13iDpWBWGmxbz3huoOC 1k7xSz5iwaavBR4/WREtcETYRnnHuwaTvm16MtkHEP6QMBwSqJeYIRrtjnYXJKOn YGICZAFkqdyO4RMC804UM2um/F1mKBa+k49o3vl7+ry83Wxi+Ro= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:53 2025 by rpki-client