This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft File: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft (raw, json) Hash identifier: OJ7zzYhmruqEAuWzA/BRj0XpW4rK/unJYoHLeS4xdGg= Subject key identifier: 64:8C:3F:A2:F9:EA:D4:E0:3B:74:F0:B3:27:2A:AF:3D:50:E0:56:D2 Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E Certificate issuer: /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Certificate serial: 07852C4F71701D142265C2EEDD94D993C130D4CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft Manifest number: 022A Signing time: Sat 06 Dec 2025 13:21:49 +0000 Manifest this update: Sat 06 Dec 2025 13:16:49 +0000 Manifest next update: Tue 09 Dec 2025 14:54:49 +0000 Files and hashes: 1: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 0sBtxCmbxKq6J3NSJMDZXL4qE7kDKeTCzfpwrIBogLg=) 2: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl (hash: xREvzTvC9heWIyfHfABKEjBG2jw21t7mUdSL20OKq8Q=) 3: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: efHKgumm4W/iDiNoEk+pEOF7/XIOUKbYG+7UFPzA9VU=) 4: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: 6ROZVbNEcqpl1HbbpFIZhVYZrNJ1M6DcybOk7PyTnVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:85:2c:4f:71:70:1d:14:22:65:c2:ee:dd:94:d9:93:c1:30:d4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Validity Not Before: Dec 6 13:16:49 2025 GMT Not After : Dec 9 14:54:49 2025 GMT Subject: CN=648C3FA2F9EAD4E03B74F0B3272AAF3D50E056D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f8:a7:0f:fc:c9:8f:09:63:7c:53:98:fb:7e: f8:ae:33:5c:0e:91:97:1c:ec:35:bb:e7:05:5f:e5: 85:17:39:0d:a1:03:9f:96:41:9d:dd:58:23:4e:af: 9e:9c:59:b8:d8:75:8d:df:da:08:f3:5d:9c:ab:1f: ba:fa:9b:66:4e:bc:da:30:c0:16:28:90:95:d8:93: 71:03:66:9e:8d:9b:87:cf:d8:27:5e:40:cc:86:bf: 57:ba:c1:ec:85:ee:3b:1a:f4:d6:e9:a2:32:69:3c: 9b:d2:57:7d:98:0a:61:5e:36:7a:1f:7b:d1:4a:ac: ba:10:45:ef:5c:64:c0:ab:d0:9c:80:bf:b4:27:01: 4d:82:80:73:dd:f9:41:89:89:12:51:66:be:d1:d3: b2:8d:48:b9:2e:2e:52:72:23:cd:fb:81:aa:2e:c2: f5:7b:98:c9:7e:0c:4a:d9:32:24:3f:58:1d:7a:6e: 30:78:09:a3:35:f1:1f:14:39:4d:60:a2:17:b0:d7: 57:c9:74:d7:5e:ef:f9:95:a3:f9:a5:a0:69:71:db: bd:3b:36:a3:cc:29:69:82:c3:f5:b9:06:33:fa:15: cf:44:9a:40:60:08:0b:59:26:ce:2d:90:6b:4d:9f: 8b:8a:52:76:ec:ff:39:03:a2:38:13:bd:42:07:ed: 99:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8C:3F:A2:F9:EA:D4:E0:3B:74:F0:B3:27:2A:AF:3D:50:E0:56:D2 X509v3 Authority Key Identifier: keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b1:5e:d3:81:92:8c:4a:91:1c:0b:bc:e9:b9:04:ba:ea:3a: 20:ad:3e:db:ba:5d:aa:28:09:24:81:cb:cf:dc:55:fc:28:5b: b3:12:b8:9c:9b:fa:cf:5c:2d:3f:17:48:d1:29:a5:91:1c:19: d5:c1:f6:28:6d:06:05:de:ff:c1:e8:45:79:ee:23:cb:34:ae: 88:35:27:83:b1:48:d3:a1:00:2c:16:86:3b:da:56:e1:c1:1b: 57:6c:5f:61:4c:41:66:56:56:98:d2:fc:e7:76:29:08:e5:1c: ca:0f:01:9d:05:ac:ef:f1:52:35:51:60:94:63:d8:e8:79:ca: d5:bf:6a:56:7b:05:70:8f:04:26:e7:19:d2:dd:8f:bc:0c:1e: bc:01:2f:d8:12:4e:0d:6c:34:18:ac:d9:78:e4:de:9e:d0:ff: f7:47:8c:2e:94:5d:fa:8f:f3:a6:91:5a:d1:c7:28:96:ec:2c: e2:0b:aa:28:b6:46:fc:3d:5c:ec:15:53:25:e3:46:59:56:93: 48:f7:50:bf:69:fb:ab:67:55:29:1e:43:87:6a:d0:05:d0:7f: f0:3d:66:2d:dc:1b:db:73:4d:a4:c2:25:5f:b5:52:c4:52:1a: ad:19:45:e4:db:dc:36:b3:b0:3b:51:82:96:f2:18:91:6f:84: 7c:eb:da:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4UsT3FwHRQiZcLu3ZTZk8Ew1MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYy QTZGRjg3RTAeFw0yNTEyMDYxMzE2NDlaFw0yNTEyMDkxNDU0NDlaMDMxMTAvBgNV BAMTKDY0OEMzRkEyRjlFQUQ0RTAzQjc0RjBCMzI3MkFBRjNENTBFMDU2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+KcP/MmPCWN8U5j7fviuM1wO kZcc7DW75wVf5YUXOQ2hA5+WQZ3dWCNOr56cWbjYdY3f2gjzXZyrH7r6m2ZOvNow wBYokJXYk3EDZp6Nm4fP2CdeQMyGv1e6weyF7jsa9NbpojJpPJvSV32YCmFeNnof e9FKrLoQRe9cZMCr0JyAv7QnAU2CgHPd+UGJiRJRZr7R07KNSLkuLlJyI837gaou wvV7mMl+DErZMiQ/WB16bjB4CaM18R8UOU1gohew11fJdNde7/mVo/mloGlx2707 NqPMKWmCw/W5BjP6Fc9EmkBgCAtZJs4tkGtNn4uKUnbs/zkDojgTvUIH7ZkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIw/ovnq1OA7dPCzJyqvPVDgVtIwHwYDVR0j BBgwFoAUGe15etu40KMYTSsC19HCNipv+H4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTFkNmM5Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMC8xOUVENzk3QURC QjhEMEEzMTg0RDJCMDJEN0QxQzIzNjJBNkZGODdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYyQTZG Rjg3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMy MzYyQTZGRjg3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSxXtOBkoxKkRwLvOm5BLrqOiCtPtu6Xaoo CSSBy8/cVfwoW7MSuJyb+s9cLT8XSNEppZEcGdXB9ihtBgXe/8HoRXnuI8s0rog1 J4OxSNOhACwWhjvaVuHBG1dsX2FMQWZWVpjS/Od2KQjlHMoPAZ0FrO/xUjVRYJRj 2Oh5ytW/alZ7BXCPBCbnGdLdj7wMHrwBL9gSTg1sNBis2Xjk3p7Q//dHjC6UXfqP 86aRWtHHKJbsLOILqii2Rvw9XOwVUyXjRllWk0j3UL9p+6tnVSkeQ4dq0AXQf/A9 Zi3cG9tzTaTCJV+1UsRSGq0ZReTb3DazsDtRgpbyGJFvhHzr2qU= -----END CERTIFICATE-----Generated at Sun Dec 7 07:23:22 2025 by rpki-client