This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: Nz+5BfMY+RpSgn/E6E4FSDlcVwecilpzRcdSOud43gI= Subject key identifier: 8E:B5:6A:4E:C8:AA:97:D0:A9:FC:67:2A:FD:23:A5:CB:DB:3B:20:F4 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 38C77A5955172F095E967636FEB06FE60912A71D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: 010F Signing time: Sat 06 Dec 2025 01:01:49 +0000 Manifest this update: Sat 06 Dec 2025 00:56:49 +0000 Manifest next update: Tue 09 Dec 2025 08:11:49 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: TPY4FvdmQkhcSNZfpJR14M8IET9n0uH65q/TX+06uKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c7:7a:59:55:17:2f:09:5e:96:76:36:fe:b0:6f:e6:09:12:a7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Dec 6 00:56:49 2025 GMT Not After : Dec 9 08:11:49 2025 GMT Subject: CN=8EB56A4EC8AA97D0A9FC672AFD23A5CBDB3B20F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:68:68:ec:21:29:7f:c5:ee:03:41:d4:92:d4: 79:91:f6:ce:d4:49:c8:5f:8e:e7:81:05:21:2c:a5: 8d:1b:37:47:6b:5f:d8:5e:f6:f5:2a:b7:a4:d9:f2: 7f:f2:19:b4:c5:ed:95:13:c6:31:38:e7:95:c3:6d: 31:12:71:5d:65:0d:4d:cf:89:18:91:7b:60:37:5f: 96:89:d5:37:a6:b5:45:73:f8:2b:56:63:7a:bb:fa: c5:70:2f:0f:30:54:e6:bc:93:23:65:e3:b2:55:d4: 6f:e9:68:7b:73:5c:3b:38:95:65:70:13:a6:82:62: 4d:25:64:78:aa:0f:ac:18:36:cc:61:02:8a:b2:7a: 43:e7:e1:89:1b:8d:09:13:39:db:13:2a:ae:9d:90: c5:c1:82:64:5c:92:89:6f:bc:a4:9e:87:a5:43:85: 1b:25:21:8e:4c:96:11:e9:1e:ca:21:68:ce:7f:a9: ab:76:e1:b6:6e:0d:df:6a:97:94:e1:3e:7e:09:55: 04:df:3f:f1:69:75:7b:41:05:a1:a8:a6:d4:ec:26: b0:49:cf:a9:93:50:8b:54:89:fb:a8:5d:ea:ea:7b: d1:e1:de:71:06:9b:28:58:3f:ce:7c:a1:38:11:be: a7:11:93:de:14:bc:99:7a:ad:c7:3a:c7:8e:dd:dc: ad:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B5:6A:4E:C8:AA:97:D0:A9:FC:67:2A:FD:23:A5:CB:DB:3B:20:F4 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:12:ad:a1:93:34:f9:9b:59:9e:db:80:b9:6e:de:de:94:8c: f9:28:c2:da:6c:b4:22:07:b3:76:27:17:a0:4c:48:98:36:30: b2:b2:d9:2c:e8:d7:ad:9a:28:90:b3:dc:dd:ce:67:4b:d2:a6: 20:09:28:35:76:d5:8b:ed:7c:02:6f:35:a0:d9:7f:a9:7d:53: af:fe:9b:0f:4a:dd:fd:1d:c1:80:8b:5d:3c:4b:a4:55:c5:db: f4:b9:02:47:5b:a8:db:21:80:40:cf:11:56:aa:7c:c9:9b:94: b2:a9:13:62:41:e0:37:71:f3:50:d7:22:e0:15:b2:5e:ec:66: 44:14:1b:99:1c:b1:23:c2:d3:54:96:5d:93:1e:d9:dc:66:30: c5:4c:af:2e:b0:26:f1:e5:fd:9d:e7:fe:02:5e:44:4a:30:54: 7b:81:ed:ed:94:ad:3a:3e:63:94:df:6c:90:1f:4c:66:3a:69: 12:16:d9:b5:67:54:c2:0b:7b:7d:e7:5f:c0:d8:67:6c:27:e6: b1:e7:d4:38:ec:44:80:cb:b4:c7:d3:9d:2f:8a:f9:7c:f4:28: 89:dd:9c:cb:82:80:14:0c:a7:77:fa:b4:41:95:5a:e7:7a:e3: fd:fa:88:ab:de:89:38:df:da:44:c5:9a:4e:4a:e7:8e:90:55: 24:7f:ce:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMd6WVUXLwlelnY2/rBv5gkSpx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTEyMDYwMDU2NDlaFw0yNTEyMDkwODExNDlaMDMxMTAvBgNV BAMTKDhFQjU2QTRFQzhBQTk3RDBBOUZDNjcyQUZEMjNBNUNCREIzQjIwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTaGjsISl/xe4DQdSS1HmR9s7U SchfjueBBSEspY0bN0drX9he9vUqt6TZ8n/yGbTF7ZUTxjE455XDbTEScV1lDU3P iRiRe2A3X5aJ1TemtUVz+CtWY3q7+sVwLw8wVOa8kyNl47JV1G/paHtzXDs4lWVw E6aCYk0lZHiqD6wYNsxhAoqyekPn4YkbjQkTOdsTKq6dkMXBgmRckolvvKSeh6VD hRslIY5MlhHpHsohaM5/qat24bZuDd9ql5ThPn4JVQTfP/FpdXtBBaGoptTsJrBJ z6mTUItUifuoXerqe9Hh3nEGmyhYP858oTgRvqcRk94UvJl6rcc6x47d3K0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjrVqTsiql9Cp/Gcq/SOly9s7IPQwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0SraGTNPmbWZ7bgLlu3t6UjPkowtpstCIH s3YnF6BMSJg2MLKy2Szo162aKJCz3N3OZ0vSpiAJKDV21YvtfAJvNaDZf6l9U6/+ mw9K3f0dwYCLXTxLpFXF2/S5AkdbqNshgEDPEVaqfMmblLKpE2JB4Ddx81DXIuAV sl7sZkQUG5kcsSPC01SWXZMe2dxmMMVMry6wJvHl/Z3n/gJeREowVHuB7e2UrTo+ Y5TfbJAfTGY6aRIW2bVnVMILe33nX8DYZ2wn5rHn1DjsRIDLtMfTnS+K+Xz0KInd nMuCgBQMp3f6tEGVWud64/36iKveiTjf2kTFmk5K546QVSR/zh4= -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:46 2025 by rpki-client