This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft File: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft (raw, json) Hash identifier: VPAxcHpCpKTNWTQeV02fIBoyyFA9G8uT91/Vb7IAquo= Subject key identifier: 5B:CF:E5:60:1B:F6:E3:0A:DB:05:D8:93:CA:F7:3D:77:93:2C:60:1B Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Certificate serial: 1543B5A2EDA5760806CE9ED68D90786784CA6240 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft Manifest number: 026A Signing time: Thu 18 Dec 2025 19:01:55 +0000 Manifest this update: Thu 18 Dec 2025 18:56:55 +0000 Manifest next update: Sun 21 Dec 2025 19:01:55 +0000 Files and hashes: 1: 3130332e3138302e3235302e302f32332d3234203d3e20313439333733.roa (hash: 6+aOTOrAxzWsWipZ2VbdRwlhEyJYsC/PS67oMR2JaEk=) 2: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl (hash: i9nije43JgWlxwzU3yqktgNztMLyyKpIVAsXLRuSg24=) 3: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: hUygR1F36BFXE6jZfKUn6z9xWtDxXwKMMrnfrGbDbrA=) 4: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: FU4m4uM0eOvuHrbeEWpDEWdnGc1mYzPxVGKE41GscXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:43:b5:a2:ed:a5:76:08:06:ce:9e:d6:8d:90:78:67:84:ca:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Validity Not Before: Dec 18 18:56:55 2025 GMT Not After : Dec 21 19:01:55 2025 GMT Subject: CN=5BCFE5601BF6E30ADB05D893CAF73D77932C601B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b8:a0:74:07:ff:a9:8c:c2:0b:63:2c:8f:c4: a1:74:64:ee:15:a4:ec:c2:04:92:3a:de:d4:29:0b: 24:a4:75:1f:f5:e1:9d:4d:69:0f:88:7c:09:c3:8e: 42:6e:e7:9f:77:32:72:e8:32:f3:29:4c:c1:21:99: aa:34:3c:c3:ff:3a:37:9a:36:b2:71:a9:46:7a:d5: ab:98:ad:75:14:fe:8b:44:1d:21:5e:fd:5f:87:60: 9f:21:eb:1e:85:06:c8:95:9f:04:36:3b:a8:09:50: 05:68:80:8d:cf:82:42:e8:cb:d3:65:37:3e:77:9f: 9b:3a:7d:d2:81:6b:73:58:cf:46:ca:35:cb:06:94: 0c:5f:fd:52:34:32:bf:a0:5f:31:af:81:e9:ac:e7: 74:e5:cf:48:cd:48:ab:4e:e2:98:dd:f3:49:0c:80: a8:fb:84:b8:7d:1d:33:26:e4:85:20:ec:1a:20:f0: 63:6d:6d:ce:e6:7d:f5:b0:13:df:dd:56:2a:e1:fc: 89:d2:2c:04:fb:8a:4e:a3:6c:87:bb:ca:6b:74:1b: c3:70:4e:91:d2:16:26:a6:b8:be:5b:17:67:85:61: 48:c4:69:df:83:4b:12:9e:b6:e4:76:7f:01:7d:ec: 43:5a:13:13:cc:97:41:16:1a:18:c5:86:2d:0a:8d: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CF:E5:60:1B:F6:E3:0A:DB:05:D8:93:CA:F7:3D:77:93:2C:60:1B X509v3 Authority Key Identifier: keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a0:aa:68:6f:9e:a2:18:9c:f8:51:95:79:c0:ec:bd:fd:f8: 0d:84:0b:7b:1c:46:c7:1c:4e:01:2d:ad:a9:b8:fb:d7:82:de: 56:05:78:02:c3:f0:44:32:33:c6:71:28:ae:3d:0b:c8:29:74: 49:d5:2b:fa:c2:d2:3f:21:ae:d5:b2:b4:7e:64:27:c7:79:d3: ab:95:5b:97:fd:b1:6d:6b:33:e5:5e:ae:a8:57:89:1a:cf:14: 85:9f:45:8a:3b:c3:98:94:65:7e:9b:f6:5a:91:a1:a8:df:3a: 93:de:8f:69:ca:a7:70:eb:06:9e:de:8c:a5:a2:69:4b:63:31: 58:64:48:46:97:51:5f:5c:8c:7e:6d:d9:0e:f9:e0:b4:ba:20: 21:22:d3:03:03:ae:2d:ab:ae:ae:35:13:97:7d:a1:64:fe:d7: b7:0b:ad:20:2e:88:b2:89:32:04:6a:dd:66:63:6f:42:5e:6e: 80:8e:0c:c7:4c:74:b3:87:d7:32:66:7f:d2:28:04:60:aa:24: bb:90:b4:ef:50:89:04:21:43:2d:96:f7:b7:3c:bc:eb:6e:cd: b1:43:69:38:90:b6:dd:12:1f:b2:29:6e:9e:bb:91:cc:29:fb: 0e:ec:67:ed:59:9d:5a:9e:3e:7f:70:ad:ee:c2:e4:7e:52:cb: 10:f8:c2:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUO1ou2ldggGzp7WjZB4Z4TKYkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB MTBBMUUyMDAeFw0yNTEyMTgxODU2NTVaFw0yNTEyMjExOTAxNTVaMDMxMTAvBgNV BAMTKDVCQ0ZFNTYwMUJGNkUzMEFEQjA1RDg5M0NBRjczRDc3OTMyQzYwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjuKB0B/+pjMILYyyPxKF0ZO4V pOzCBJI63tQpCySkdR/14Z1NaQ+IfAnDjkJu5593MnLoMvMpTMEhmao0PMP/Ojea NrJxqUZ61auYrXUU/otEHSFe/V+HYJ8h6x6FBsiVnwQ2O6gJUAVogI3PgkLoy9Nl Nz53n5s6fdKBa3NYz0bKNcsGlAxf/VI0Mr+gXzGvgems53Tlz0jNSKtO4pjd80kM gKj7hLh9HTMm5IUg7Bog8GNtbc7mffWwE9/dVirh/InSLAT7ik6jbIe7ymt0G8Nw TpHSFiamuL5bF2eFYUjEad+DSxKetuR2fwF97ENaExPMl0EWGhjFhi0KjQLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW8/lYBv24wrbBdiTyvc9d5MsYBswHwYDVR0j BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB MUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlC RDdBMTBBMUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2gqmhvnqIYnPhRlXnA7L39+A2EC3scRscc TgEtram4+9eC3lYFeALD8EQyM8ZxKK49C8gpdEnVK/rC0j8hrtWytH5kJ8d506uV W5f9sW1rM+VerqhXiRrPFIWfRYo7w5iUZX6b9lqRoajfOpPej2nKp3DrBp7ejKWi aUtjMVhkSEaXUV9cjH5t2Q754LS6ICEi0wMDri2rrq41E5d9oWT+17cLrSAuiLKJ MgRq3WZjb0JeboCODMdMdLOH1zJmf9IoBGCqJLuQtO9QiQQhQy2W97c8vOtuzbFD aTiQtt0SH7Ipbp67kcwp+w7sZ+1ZnVqePn9wre7C5H5SyxD4wgg= -----END CERTIFICATE-----Generated at Fri Dec 19 19:39:59 2025 by rpki-client