This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft File: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft (raw, json) Hash identifier: qzjhzTtyfV/jAxj7O/30GIWyK9FhhSUQQ8+A0hN7cRA= Subject key identifier: A7:4C:0A:F7:91:2B:5D:49:F2:BF:CF:6F:DD:8E:86:E4:62:1C:CD:C2 Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E Certificate issuer: /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Certificate serial: 1EBFD1C5C66DB2918ED929CE11B940A19E67D93F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft Manifest number: 022F Signing time: Wed 17 Dec 2025 22:21:49 +0000 Manifest this update: Wed 17 Dec 2025 22:16:49 +0000 Manifest next update: Sat 20 Dec 2025 23:47:49 +0000 Files and hashes: 1: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl (hash: EINpqglCeBXquVVb5uyoN0kUkUm2MYZle6gMBnXd0sI=) 2: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: efHKgumm4W/iDiNoEk+pEOF7/XIOUKbYG+7UFPzA9VU=) 3: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: 6ROZVbNEcqpl1HbbpFIZhVYZrNJ1M6DcybOk7PyTnVE=) 4: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 0sBtxCmbxKq6J3NSJMDZXL4qE7kDKeTCzfpwrIBogLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:bf:d1:c5:c6:6d:b2:91:8e:d9:29:ce:11:b9:40:a1:9e:67:d9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Validity Not Before: Dec 17 22:16:49 2025 GMT Not After : Dec 20 23:47:49 2025 GMT Subject: CN=A74C0AF7912B5D49F2BFCF6FDD8E86E4621CCDC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6b:0c:fc:37:01:de:58:d4:d5:20:dd:8a:85: 03:5e:7d:5e:ab:62:12:84:47:30:93:97:02:3a:3b: e7:5d:f3:89:97:60:9e:80:98:74:b3:46:33:89:8d: 54:3e:a9:56:68:6e:d6:ce:ec:23:e6:fe:74:2b:41: 58:98:a7:f2:6b:27:b8:ca:f1:84:e9:34:cd:1c:a4: 39:81:42:a5:34:d6:bf:99:1e:ba:9e:28:03:b1:45: 07:fa:73:af:22:ec:47:7c:5d:16:43:34:51:fd:d7: f7:3f:41:1d:80:86:4a:a6:6c:b3:bb:32:02:37:c7: 94:af:80:21:cd:e5:ab:c4:38:27:c9:29:ef:4d:9f: b6:cb:37:9b:64:74:24:25:40:c5:93:22:81:a4:1a: 83:85:5c:3e:77:af:e9:d1:2d:43:ee:b7:fd:38:16: 1b:49:f4:1e:bb:ab:dc:93:c7:b1:1a:d7:0a:d5:d3: c0:64:63:fc:01:ed:e2:fc:18:7a:b7:97:d7:c2:d9: 79:e5:76:93:4c:1e:59:fc:97:9e:99:a5:f0:b5:cb: e8:cb:c9:57:ac:c1:84:f6:59:61:40:7b:62:32:b2: 63:27:f6:25:b0:46:e5:43:91:b9:0c:dd:84:dc:21: 5c:fd:79:44:43:5d:0f:2f:ad:da:86:cc:4e:d8:6c: ea:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4C:0A:F7:91:2B:5D:49:F2:BF:CF:6F:DD:8E:86:E4:62:1C:CD:C2 X509v3 Authority Key Identifier: keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b6:dc:25:f6:50:3e:d5:fb:43:61:e4:08:5f:85:fd:c7:83: 7a:24:81:74:9d:b2:a3:24:d1:e2:9d:e9:d8:4f:a0:12:69:dc: 1d:45:16:40:dd:1e:c7:3f:71:b1:7c:63:9d:63:74:34:c9:5e: 82:67:70:ec:53:4d:fa:99:70:f7:d0:50:84:33:2e:61:67:c1: 8f:aa:bb:38:ad:49:88:71:a5:49:88:84:13:a3:45:8b:c6:af: c8:81:10:26:5c:25:c8:02:61:2a:ee:b9:45:b0:7b:a6:eb:dc: 16:47:98:87:2b:0f:d4:22:b0:53:67:5d:5b:1c:16:a5:a5:6e: 1d:5a:cb:93:2b:8f:db:90:3f:57:1e:ec:69:45:8b:b4:ad:7b: b8:89:24:57:a1:21:5e:fc:f9:45:b4:34:ff:a5:6e:30:19:f5: b9:c1:a9:1d:fb:2e:c2:06:c6:a8:1d:5a:5b:ac:60:8d:38:11: 7c:af:ec:98:1f:67:ee:91:be:68:fa:89:04:d1:0f:3a:39:94: 64:f3:d5:51:53:89:cb:ed:e3:7a:1c:be:50:64:3a:cb:09:74: be:2a:17:a5:5c:25:23:f9:e1:bb:e2:57:90:ab:8b:aa:7e:7b: 9f:01:85:b4:e2:3a:cb:55:74:56:7c:4b:fd:04:35:69:fc:6f: cb:2d:ab:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHr/RxcZtspGO2SnOEblAoZ5n2T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYy QTZGRjg3RTAeFw0yNTEyMTcyMjE2NDlaFw0yNTEyMjAyMzQ3NDlaMDMxMTAvBgNV BAMTKEE3NEMwQUY3OTEyQjVENDlGMkJGQ0Y2RkREOEU4NkU0NjIxQ0NEQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfawz8NwHeWNTVIN2KhQNefV6r YhKERzCTlwI6O+dd84mXYJ6AmHSzRjOJjVQ+qVZobtbO7CPm/nQrQViYp/JrJ7jK 8YTpNM0cpDmBQqU01r+ZHrqeKAOxRQf6c68i7Ed8XRZDNFH91/c/QR2AhkqmbLO7 MgI3x5SvgCHN5avEOCfJKe9Nn7bLN5tkdCQlQMWTIoGkGoOFXD53r+nRLUPut/04 FhtJ9B67q9yTx7Ea1wrV08BkY/wB7eL8GHq3l9fC2XnldpNMHln8l56ZpfC1y+jL yVeswYT2WWFAe2IysmMn9iWwRuVDkbkM3YTcIVz9eURDXQ8vrdqGzE7YbOqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp0wK95ErXUnyv89v3Y6G5GIczcIwHwYDVR0j BBgwFoAUGe15etu40KMYTSsC19HCNipv+H4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTFkNmM5Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMC8xOUVENzk3QURC QjhEMEEzMTg0RDJCMDJEN0QxQzIzNjJBNkZGODdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYyQTZG Rjg3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMy MzYyQTZGRjg3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGa23CX2UD7V+0Nh5Ahfhf3Hg3okgXSdsqMk 0eKd6dhPoBJp3B1FFkDdHsc/cbF8Y51jdDTJXoJncOxTTfqZcPfQUIQzLmFnwY+q uzitSYhxpUmIhBOjRYvGr8iBECZcJcgCYSruuUWwe6br3BZHmIcrD9QisFNnXVsc FqWlbh1ay5Mrj9uQP1ce7GlFi7Ste7iJJFehIV78+UW0NP+lbjAZ9bnBqR37LsIG xqgdWlusYI04EXyv7JgfZ+6Rvmj6iQTRDzo5lGTz1VFTicvt43ocvlBkOssJdL4q F6VcJSP54bviV5Cri6p+e58BhbTiOstVdFZ8S/0ENWn8b8stq5I= -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:39 2025 by rpki-client