This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: sHso/AteOScK8OaoJFxJ7rmsNDX5k2v7LsHYg2pC/8M= Subject key identifier: 67:47:D3:C0:47:91:BF:47:88:B4:67:FF:59:1E:7A:68:76:C8:87:DE Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 7FFBC51457ABA276217CE9312C835F03ECCF7590 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 02E1 Signing time: Tue 23 Dec 2025 13:43:10 +0000 Manifest this update: Tue 23 Dec 2025 13:38:10 +0000 Manifest next update: Fri 26 Dec 2025 15:42:10 +0000 Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=) 2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: 6uqUUWkRZlK4acD0hoPOoIdoUAvOCtsSwqXWO5u3cHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 15:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fb:c5:14:57:ab:a2:76:21:7c:e9:31:2c:83:5f:03:ec:cf:75:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Dec 23 13:38:10 2025 GMT Not After : Dec 26 15:42:10 2025 GMT Subject: CN=6747D3C04791BF4788B467FF591E7A6876C887DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:92:06:c8:43:04:cc:16:6a:b5:d1:c8:a8:e4: e1:da:8f:78:b5:25:6d:23:ce:8c:a8:a0:06:08:07: fa:b4:46:ea:d9:0c:7b:c0:af:b9:d2:5f:6c:93:67: b3:f2:3a:c3:27:c3:28:ac:56:36:8a:9a:8c:9d:d9: 0b:b9:bc:8b:77:de:77:73:78:d2:a3:a9:26:5f:39: 9c:18:ad:ca:d2:4d:3a:fc:7c:87:c3:cf:44:81:3f: bc:79:55:39:a4:cd:a1:67:38:fe:d4:28:19:8c:de: ff:b8:14:92:c4:62:29:01:01:a9:8a:b7:33:f2:b5: 33:20:aa:2d:7e:cd:d4:78:f7:9b:d3:3d:1f:4b:aa: be:6f:03:18:f8:d5:db:96:d6:b8:97:94:db:2b:61: 0f:17:68:c0:9a:99:66:4b:d3:63:ad:b0:64:d1:2f: 36:f7:04:b2:50:b2:bc:e9:6a:ab:a0:20:e7:f1:fb: 5f:57:c8:17:15:d4:e8:6c:c1:e3:be:9b:f9:d3:2b: b0:3d:64:cb:8f:17:02:c5:75:58:94:76:19:84:9f: 74:bb:e5:ef:95:e5:cf:2d:1e:52:e4:45:30:d0:20: e5:36:02:81:52:9b:fb:46:16:be:97:8c:e9:18:c5: a1:93:56:44:13:d9:e4:a3:4e:6a:21:c2:b2:91:cb: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:47:D3:C0:47:91:BF:47:88:B4:67:FF:59:1E:7A:68:76:C8:87:DE X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a0:f7:0a:e3:29:a4:7d:47:2f:cb:09:61:78:57:64:34:ad: 5a:8b:63:b5:8a:4d:3b:0a:fc:13:d0:75:c0:b9:dc:12:f5:a8: 1c:86:54:90:cf:c3:74:71:59:e7:42:e1:2a:51:0c:c5:b9:a9: 96:ae:bd:02:96:ec:2f:31:6a:cc:df:72:0f:6a:24:6b:16:14: 29:87:51:d7:67:8b:8a:ab:99:13:a2:39:2b:ce:c5:1b:11:7b: 27:a3:a8:dc:0a:99:6e:38:f2:1f:05:25:80:12:68:74:9a:ad: 09:72:70:a3:5a:bb:a2:14:98:aa:d7:88:db:db:cd:fe:9c:2d: af:07:96:27:a0:7f:a4:c9:69:fb:12:87:cf:f5:d1:eb:1f:34: 80:5c:ea:08:45:e4:55:c0:c3:3a:fb:37:57:9e:7a:9e:16:49: 82:2a:0f:a2:2c:28:4c:b6:3e:7b:e4:23:50:7d:c3:43:fc:e4: 4a:d2:3c:20:9f:21:91:af:ec:1c:34:98:44:85:83:f6:aa:72: bd:64:74:f8:0e:2c:3e:b1:78:ff:7e:bd:7a:f6:e0:30:6f:89: 4d:b4:cf:c1:f3:5e:4a:61:22:78:6d:1a:5a:db:38:d1:63:0e: 01:62:ae:75:60:76:5c:bf:68:46:92:51:22:0f:21:ed:a2:7e: c0:3b:51:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/vFFFeronYhfOkxLINfA+zPdZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNTEyMjMxMzM4MTBaFw0yNTEyMjYxNTQyMTBaMDMxMTAvBgNV BAMTKDY3NDdEM0MwNDc5MUJGNDc4OEI0NjdGRjU5MUU3QTY4NzZDODg3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkgbIQwTMFmq10cio5OHaj3i1 JW0jzoyooAYIB/q0RurZDHvAr7nSX2yTZ7PyOsMnwyisVjaKmoyd2Qu5vIt33ndz eNKjqSZfOZwYrcrSTTr8fIfDz0SBP7x5VTmkzaFnOP7UKBmM3v+4FJLEYikBAamK tzPytTMgqi1+zdR495vTPR9Lqr5vAxj41duW1riXlNsrYQ8XaMCamWZL02OtsGTR Lzb3BLJQsrzpaqugIOfx+19XyBcV1OhsweO+m/nTK7A9ZMuPFwLFdViUdhmEn3S7 5e+V5c8tHlLkRTDQIOU2AoFSm/tGFr6XjOkYxaGTVkQT2eSjTmohwrKRy2H/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ0fTwEeRv0eItGf/WR56aHbIh94wHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCg9wrjKaR9Ry/LCWF4V2Q0rVqLY7WKTTsK /BPQdcC53BL1qByGVJDPw3RxWedC4SpRDMW5qZauvQKW7C8xaszfcg9qJGsWFCmH Uddni4qrmROiOSvOxRsReyejqNwKmW448h8FJYASaHSarQlycKNau6IUmKrXiNvb zf6cLa8Hliegf6TJafsSh8/10esfNIBc6ghF5FXAwzr7N1eeep4WSYIqD6IsKEy2 PnvkI1B9w0P85ErSPCCfIZGv7Bw0mESFg/aqcr1kdPgOLD6xeP9+vXr24DBviU20 z8HzXkphInhtGlrbONFjDgFirnVgdly/aEaSUSIPIe2ifsA7UY8= -----END CERTIFICATE-----Generated at Thu Dec 25 14:17:48 2025 by rpki-client