This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft File: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft (raw, json) Hash identifier: bxJnSB+E5AKOTl+fUAnCRaKkMSiBc/i5dLPBIGbj4dE= Subject key identifier: 61:6B:D2:57:F3:82:1C:FF:50:1A:26:CB:BF:46:AD:B1:22:9F:C9:40 Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C Certificate issuer: /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Certificate serial: 5800E55BB3E73BB51525FECEEBDED441DFD6B2A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft Manifest number: 052E Signing time: Fri 05 Dec 2025 10:31:41 +0000 Manifest this update: Fri 05 Dec 2025 10:26:41 +0000 Manifest next update: Mon 08 Dec 2025 16:08:41 +0000 Files and hashes: 1: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Be1o2enB5OVbfeTb11FQx0y/6KQQnTeDSPNmLL8NRc4=) 2: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: 4brGPOCgGPQmWwoETwSHHbE2lw9R22KEcXYm0M7Fp90=) 3: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: U5fnoyr/5IIStrT2HEQ+BlCOUuRxzROoZ8IEFi9/L1Q=) 4: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: hclG6eHZVb4H2Dv3mKJVXKKatJdKMCXUFJ5B8dDmEf4=) 5: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl (hash: vzb2LoqBSgnXtOwUl078oYaW3/3ngmnUeGOXBaaz1UM=) 6: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: HO0xgGTKI8hDqeJBD1vkonWKYqVkEjngRgMiBcK+FFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:00:e5:5b:b3:e7:3b:b5:15:25:fe:ce:eb:de:d4:41:df:d6:b2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Validity Not Before: Dec 5 10:26:41 2025 GMT Not After : Dec 8 16:08:41 2025 GMT Subject: CN=616BD257F3821CFF501A26CBBF46ADB1229FC940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:3c:ba:1e:a3:c1:dd:e0:3a:44:b7:20:65: e7:8d:47:c3:7a:cd:30:06:5e:f0:e4:b7:9d:f9:15: 85:d7:36:da:29:70:c4:50:69:3c:5e:0f:df:56:ee: 11:89:c7:82:2f:00:2d:6e:bc:e8:9f:92:67:8c:9c: e3:d8:d1:12:b7:b4:ce:83:53:31:38:23:13:94:ad: a1:3c:53:79:bd:0d:9b:33:fa:7f:9b:c5:97:99:bf: da:34:fa:0d:c8:a3:38:0f:d0:3f:0e:52:bc:d1:3e: d7:88:63:ac:90:04:8a:6f:7c:c3:94:b2:f3:38:7b: 17:55:29:d3:e7:f8:9c:fe:aa:44:70:63:48:0a:62: 69:b2:67:0d:72:5e:7b:4b:6f:0b:82:1f:5c:ae:05: 5b:28:20:a4:53:d4:90:0a:25:9d:da:bf:11:f6:7a: e5:d4:ea:b1:67:cf:26:2d:55:80:1b:6e:4b:68:85: e3:76:e9:1e:7c:ec:c3:e9:30:1f:0f:24:68:77:de: 6f:4e:fe:0d:10:24:21:7c:10:a9:f7:ab:ff:4d:06: 51:07:bb:ba:45:02:dd:1d:b2:c7:45:eb:1f:b1:10: 90:fe:6b:50:c8:6a:f8:17:11:18:15:b7:a0:47:27: fe:09:6e:1f:4d:e1:42:34:8a:fc:84:8b:8c:9b:c4: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6B:D2:57:F3:82:1C:FF:50:1A:26:CB:BF:46:AD:B1:22:9F:C9:40 X509v3 Authority Key Identifier: keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:59:10:47:ee:3b:fb:f2:07:a0:32:d6:b8:d5:b7:bc:2c:2b: c4:9a:55:23:13:64:fa:c2:0c:e7:e2:39:7b:c9:13:4d:13:c9: ff:d9:3e:f2:1b:9d:b1:1e:19:ff:28:cb:51:7f:7f:40:dd:83: 47:47:4b:20:d2:e0:df:e7:4e:ff:59:4c:b8:95:0e:68:11:05: 5a:cf:77:1b:c7:4c:89:2c:58:29:5a:f5:89:fa:c5:6c:70:57: 49:36:78:c1:66:af:5a:cf:1a:44:f1:91:0a:2b:3d:49:a4:e6: 11:10:5a:8e:6b:d9:d9:81:48:3e:94:04:18:aa:22:9a:86:23: bc:18:64:41:77:02:3e:b3:25:d4:e5:20:f6:f8:ca:0b:0b:87: 02:8a:61:14:9e:ed:14:4c:58:b7:dc:3b:50:a2:ce:ff:ea:ec: 7b:a8:d4:1f:5d:5a:65:c0:fe:2b:d9:8f:1f:55:0f:38:74:20: c0:b8:fb:c1:c5:01:09:7e:7f:0d:85:98:07:70:25:08:6b:3a: 36:fb:15:a1:17:dd:aa:a7:cf:1a:24:80:67:24:a4:90:35:76: 18:da:b3:49:3e:b3:db:56:a1:d1:6d:d7:a3:43:e5:5e:f2:31: cd:96:42:1c:41:2c:f9:0f:34:3d:18:5f:2f:75:4a:37:fb:74: c6:45:94:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWADlW7PnO7UVJf7O697UQd/WsqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4 N0U2NUMzQzAeFw0yNTEyMDUxMDI2NDFaFw0yNTEyMDgxNjA4NDFaMDMxMTAvBgNV BAMTKDYxNkJEMjU3RjM4MjFDRkY1MDFBMjZDQkJGNDZBREIxMjI5RkM5NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUzzy6HqPB3eA6RLcgZeeNR8N6 zTAGXvDkt535FYXXNtopcMRQaTxeD99W7hGJx4IvAC1uvOifkmeMnOPY0RK3tM6D UzE4IxOUraE8U3m9DZsz+n+bxZeZv9o0+g3IozgP0D8OUrzRPteIY6yQBIpvfMOU svM4exdVKdPn+Jz+qkRwY0gKYmmyZw1yXntLbwuCH1yuBVsoIKRT1JAKJZ3avxH2 euXU6rFnzyYtVYAbbktoheN26R587MPpMB8PJGh33m9O/g0QJCF8EKn3q/9NBlEH u7pFAt0dssdF6x+xEJD+a1DIavgXERgVt6BHJ/4Jbh9N4UI0ivyEi4ybxPF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYWvSV/OCHP9QGibLv0atsSKfyUAwHwYDVR0j BBgwFoAUGaGW9eW6ujGSbFru9E/BY4fmXDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yjg4NThlMC1lY2YwLTRlNTMtYTQ5MC0zYjdjMmRlMTY5M2MvMC8xOUExOTZGNUU1 QkFCQTMxOTI2QzVBRUVGNDRGQzE2Mzg3RTY1QzNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4N0U2 NUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMx NjM4N0U2NUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZZEEfuO/vyB6Ay1rjVt7wsK8SaVSMTZPrC DOfiOXvJE00Tyf/ZPvIbnbEeGf8oy1F/f0Ddg0dHSyDS4N/nTv9ZTLiVDmgRBVrP dxvHTIksWCla9Yn6xWxwV0k2eMFmr1rPGkTxkQorPUmk5hEQWo5r2dmBSD6UBBiq IpqGI7wYZEF3Aj6zJdTlIPb4ygsLhwKKYRSe7RRMWLfcO1Cizv/q7Huo1B9dWmXA /ivZjx9VDzh0IMC4+8HFAQl+fw2FmAdwJQhrOjb7FaEX3aqnzxokgGckpJA1dhja s0k+s9tWodFt16ND5V7yMc2WQhxBLPkPND0YXy91Sjf7dMZFlGc= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:37 2025 by rpki-client