This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft File: 1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json) Hash identifier: 7kip3qU3/XA3xJE3VKm8eujcUWEjoAI2dJ6xjz0wyXY= Subject key identifier: 75:42:DD:E9:F1:17:81:5A:3C:30:B1:33:4D:69:4F:A1:06:A7:0B:CF Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 Certificate issuer: /CN=1D5FBED26611C99226941DBD91139C594B399F46 Certificate serial: 19B7D8D72E9DF5CBF6FF8D1515A1B97B1BB5968E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft Manifest number: 02E0 Signing time: Wed 17 Dec 2025 17:31:36 +0000 Manifest this update: Wed 17 Dec 2025 17:26:36 +0000 Manifest next update: Sun 21 Dec 2025 01:44:36 +0000 Files and hashes: 1: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: ZU8X9RXGkd4hmNQ/W21QNbcr2Du0JleM6HkjIf9yy8k=) 2: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: fmmesiS1WcI4ovgUB3oEnMzQaroROS18Jh1l+/FK5Mw=) 3: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: 0HKqUWxZbI9n+PEVKoTLIbRadeKyFkIWvHvlRbtvAq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b7:d8:d7:2e:9d:f5:cb:f6:ff:8d:15:15:a1:b9:7b:1b:b5:96:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46 Validity Not Before: Dec 17 17:26:36 2025 GMT Not After : Dec 21 01:44:36 2025 GMT Subject: CN=7542DDE9F117815A3C30B1334D694FA106A70BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:37:c0:21:14:31:91:61:58:a1:3b:1b:28:c1: 3a:0a:bd:6b:e9:29:d8:9b:55:e9:82:75:47:6b:21: 1b:1d:a2:f8:50:94:05:ca:76:a2:67:b0:36:9e:50: c1:73:40:3d:59:79:9c:0d:1d:ff:a2:4f:9a:00:5e: e7:42:32:3a:4b:43:8e:61:95:55:7c:4b:99:e9:e4: 20:83:34:9d:26:63:9c:ea:16:50:74:d1:ea:69:08: 7d:b0:c2:ea:e1:14:35:61:60:ed:b4:f2:cd:cc:8a: 54:b8:10:e8:8d:03:7f:42:85:ca:dd:e1:74:bd:20: 25:c1:69:33:c3:8c:21:b2:7c:76:ea:10:4f:09:31: 32:32:df:e5:a1:47:f6:b7:6c:4d:63:b8:d8:6c:91: 01:ff:3e:d8:6a:49:cf:ae:f3:3f:79:bb:ff:95:e9: a8:65:68:9e:c6:cf:22:5a:47:4a:18:e5:e0:79:d6: c1:02:2d:60:0a:9c:c5:30:29:74:ee:15:5c:a0:e2: 06:1d:2e:1c:44:5c:b5:d8:f2:e8:c2:6f:2e:f7:18: 16:1d:5a:c6:46:c0:0f:48:16:71:8b:bf:c9:d9:53: d7:7a:19:c3:fd:e0:63:48:b2:49:98:f6:83:f3:87: 4b:bd:e6:aa:99:48:f3:34:32:7d:bb:61:8d:18:91: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:42:DD:E9:F1:17:81:5A:3C:30:B1:33:4D:69:4F:A1:06:A7:0B:CF X509v3 Authority Key Identifier: keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:9a:a3:b3:9f:58:cb:77:4b:f1:c7:0f:68:d0:a5:8a:b9: c3:7b:a1:fc:b2:d5:bb:f7:12:bc:84:16:1f:ee:62:27:3f:c7: b8:49:2a:2f:c3:dc:ef:33:28:00:d0:77:20:65:bb:34:21:f8: ec:a9:a3:12:62:a0:22:f4:8e:cf:fc:ba:da:b8:0a:75:a8:a9: d7:82:2b:3d:33:ac:cf:23:4e:3b:1e:0d:a1:b2:ff:a2:48:4c: 67:e6:97:66:61:5d:61:12:9b:ec:20:ac:74:ab:d8:67:89:91: 9e:7d:eb:49:c5:d0:31:56:1f:58:fa:2a:57:ec:7d:c5:94:9f: 7c:4e:27:95:42:3e:70:49:d4:52:c0:b4:42:8c:16:27:fc:58: 33:fe:c8:11:70:3c:ff:9c:37:bc:8e:62:4f:f1:c1:e6:9d:eb: f7:77:65:19:b7:ec:1a:2b:b0:5a:1c:07:b6:e4:3b:96:0c:a4: 89:1e:04:5a:c0:39:17:cd:f5:32:33:83:82:57:06:52:ba:4b: 75:98:ce:15:99:a8:78:d6:f4:90:f4:f7:d4:6a:42:49:e4:32: 1a:36:c4:86:5d:e5:43:2c:36:d0:ed:69:86:91:fc:6f:95:81: 53:2b:fa:60:ff:cc:1e:0a:8c:75:da:7d:a9:34:55:7f:11:95: ef:6e:d6:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbfY1y6d9cv2/40VFaG5exu1lo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0 QjM5OUY0NjAeFw0yNTEyMTcxNzI2MzZaFw0yNTEyMjEwMTQ0MzZaMDMxMTAvBgNV BAMTKDc1NDJEREU5RjExNzgxNUEzQzMwQjEzMzRENjk0RkExMDZBNzBCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaN8AhFDGRYVihOxsowToKvWvp KdibVemCdUdrIRsdovhQlAXKdqJnsDaeUMFzQD1ZeZwNHf+iT5oAXudCMjpLQ45h lVV8S5np5CCDNJ0mY5zqFlB00eppCH2wwurhFDVhYO208s3MilS4EOiNA39Chcrd 4XS9ICXBaTPDjCGyfHbqEE8JMTIy3+WhR/a3bE1juNhskQH/PthqSc+u8z95u/+V 6ahlaJ7GzyJaR0oY5eB51sECLWAKnMUwKXTuFVyg4gYdLhxEXLXY8ujCby73GBYd WsZGwA9IFnGLv8nZU9d6GcP94GNIskmY9oPzh0u95qqZSPM0Mn27YY0YkQ6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdULd6fEXgVo8MLEzTWlPoQanC88wHwYDVR0j BBgwFoAUHV++0mYRyZImlB29kROcWUs5n0YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YjllNmRhNC1kYzQ2LTQ3MGYtYjBlOS0xNmU2ZTU3ZDQ3OWEvMC8xRDVGQkVEMjY2 MTFDOTkyMjY5NDFEQkQ5MTEzOUM1OTRCMzk5RjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0QjM5 OUY0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlD NTk0QjM5OUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABNmqOzn1jLd0vxxw9o0KWKucN7ofyy1bv3 EryEFh/uYic/x7hJKi/D3O8zKADQdyBluzQh+OypoxJioCL0js/8utq4CnWoqdeC Kz0zrM8jTjseDaGy/6JITGfml2ZhXWESm+wgrHSr2GeJkZ5960nF0DFWH1j6Klfs fcWUn3xOJ5VCPnBJ1FLAtEKMFif8WDP+yBFwPP+cN7yOYk/xwead6/d3ZRm37Bor sFocB7bkO5YMpIkeBFrAORfN9TIzg4JXBlK6S3WYzhWZqHjW9JD099RqQknkMho2 xIZd5UMsNtDtaYaR/G+VgVMr+mD/zB4KjHXafak0VX8Rle9u1rI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:30 2025 by rpki-client