This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: xZpSV1pREhqVeHE6fy8hXlXEGGXGBeQZOz+fgf6Xoh4= Subject key identifier: 74:56:5C:E3:C8:9E:4D:20:92:61:25:1F:8B:1C:D7:AA:F0:B6:D5:94 Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 43ED203D82B20FD52FF58C0C529C8EDB503608D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 0205 Signing time: Sat 06 Dec 2025 18:01:48 +0000 Manifest this update: Sat 06 Dec 2025 17:56:48 +0000 Manifest next update: Wed 10 Dec 2025 04:15:48 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM=) 2: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: 4BPUI1RRBcj1jbTagUUI0ybsItMoAMwd0235amIbFxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ed:20:3d:82:b2:0f:d5:2f:f5:8c:0c:52:9c:8e:db:50:36:08:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Dec 6 17:56:48 2025 GMT Not After : Dec 10 04:15:48 2025 GMT Subject: CN=74565CE3C89E4D209261251F8B1CD7AAF0B6D594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:0c:14:1a:dc:19:e8:64:88:25:2e:51:f6: c6:6b:67:b8:6b:ba:64:a5:e1:39:42:7c:53:de:05: 88:c6:48:de:9e:f9:7e:7b:d4:50:39:55:dd:eb:d5: 92:fd:2d:ac:6a:15:14:a2:c9:1f:66:2e:e1:1d:22: df:28:69:99:58:9a:6b:ad:0b:a6:15:c1:ce:3d:c2: de:ed:3a:72:bf:3a:b5:29:80:7d:d2:3c:11:26:19: ee:e0:f4:d6:69:3e:1a:e4:a9:ae:0a:fe:ba:f1:e4: ef:05:4d:87:d5:af:ab:9f:2f:d8:50:07:c1:55:f6: d8:80:1d:55:43:27:18:6c:b6:e8:a4:4d:8e:f1:4f: 0b:b8:de:93:07:56:65:b0:f4:e3:a2:d3:dc:09:72: 7d:71:96:d6:24:eb:e4:42:07:eb:11:7c:da:5c:d5: de:ec:89:33:a3:cc:89:05:8e:14:68:29:73:68:d4: 64:79:6d:cd:17:59:1f:6b:9a:89:e2:aa:e4:30:c1: f1:15:55:89:1f:83:75:30:38:68:2e:66:d0:47:2a: f9:ce:16:cb:85:ad:00:0d:6c:a2:ce:e0:38:ec:f1: a3:0d:29:0b:e4:41:f1:0a:6f:f7:20:24:cc:c6:37: fe:83:5f:14:ec:b8:f2:39:90:b2:ff:90:3f:82:45: b0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:56:5C:E3:C8:9E:4D:20:92:61:25:1F:8B:1C:D7:AA:F0:B6:D5:94 X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fe:c7:c5:1f:cf:9d:a6:77:bf:93:5b:10:ac:83:6b:10:b7: a7:8f:5d:01:0a:10:1a:9a:4a:01:29:20:e0:66:b5:1b:d5:f1: 4b:4d:c6:4a:4b:0a:af:1f:16:e1:7a:89:47:bd:15:25:31:d4: 92:aa:05:b6:46:0b:73:fb:f2:46:8a:f8:bc:f9:aa:58:ca:29: 2b:a4:00:27:90:f2:77:25:94:3b:74:19:bf:07:99:3b:16:57: 06:52:f9:fc:a3:be:d5:e5:a7:ae:8a:15:2a:cb:0b:a1:a5:4e: 5e:74:b5:22:92:cf:48:2c:8a:04:be:ee:0d:18:3d:41:df:42: 44:33:92:51:77:d0:86:b4:95:a8:2c:83:1b:7d:d0:e1:45:3e: 7b:5a:d7:30:bf:b5:b5:cf:f4:69:fa:19:d2:74:63:13:07:8c: 32:6f:b5:d3:71:f7:f3:9f:c0:9e:9d:5b:85:57:55:ee:35:c6: 67:8d:20:c4:65:c9:23:67:88:09:7a:c0:62:32:e6:2b:49:35: 10:17:68:b4:34:2e:0b:4a:70:f2:80:3e:84:03:6e:60:f9:26: a2:9e:19:90:cb:98:cc:44:b2:44:36:13:39:40:49:39:36:8a: 53:d9:b3:9a:51:62:76:67:ce:73:e5:ea:da:fb:78:71:d5:cf: d9:44:8c:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+0gPYKyD9Uv9YwMUpyO21A2CNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNTEyMDYxNzU2NDhaFw0yNTEyMTAwNDE1NDhaMDMxMTAvBgNV BAMTKDc0NTY1Q0UzQzg5RTREMjA5MjYxMjUxRjhCMUNEN0FBRjBCNkQ1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdzgwUGtwZ6GSIJS5R9sZrZ7hr umSl4TlCfFPeBYjGSN6e+X571FA5Vd3r1ZL9LaxqFRSiyR9mLuEdIt8oaZlYmmut C6YVwc49wt7tOnK/OrUpgH3SPBEmGe7g9NZpPhrkqa4K/rrx5O8FTYfVr6ufL9hQ B8FV9tiAHVVDJxhstuikTY7xTwu43pMHVmWw9OOi09wJcn1xltYk6+RCB+sRfNpc 1d7siTOjzIkFjhRoKXNo1GR5bc0XWR9rmoniquQwwfEVVYkfg3UwOGguZtBHKvnO FsuFrQANbKLO4Djs8aMNKQvkQfEKb/cgJMzGN/6DXxTsuPI5kLL/kD+CRbADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdFZc48ieTSCSYSUfixzXqvC21ZQwHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJb+x8Ufz52md7+TWxCsg2sQt6ePXQEKEBqa SgEpIOBmtRvV8UtNxkpLCq8fFuF6iUe9FSUx1JKqBbZGC3P78kaK+Lz5qljKKSuk ACeQ8ncllDt0Gb8HmTsWVwZS+fyjvtXlp66KFSrLC6GlTl50tSKSz0gsigS+7g0Y PUHfQkQzklF30Ia0lagsgxt90OFFPnta1zC/tbXP9Gn6GdJ0YxMHjDJvtdNx9/Of wJ6dW4VXVe41xmeNIMRlySNniAl6wGIy5itJNRAXaLQ0LgtKcPKAPoQDbmD5JqKe GZDLmMxEskQ2EzlASTk2ilPZs5pRYnZnznPl6tr7eHHVz9lEjGE= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:07 2025 by rpki-client