This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: Is68T5iHxttTZJT/byYQ5sOIPg8k9zc00hY53+flCEI= Subject key identifier: 7B:A6:75:5F:47:B1:B9:F9:D0:7B:48:42:EE:A2:F9:AD:53:DD:9F:38 Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 1BDFAE4DC54A98C8DEFA42C27F221351783437D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 0196 Signing time: Mon 22 Dec 2025 22:02:20 +0000 Manifest this update: Mon 22 Dec 2025 21:57:20 +0000 Manifest next update: Fri 26 Dec 2025 02:02:20 +0000 Files and hashes: 1: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: pyePXLNXSXdBS3rrss1XjWFaPVM1+EM4qBys2mxQor8=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:df:ae:4d:c5:4a:98:c8:de:fa:42:c2:7f:22:13:51:78:34:37:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Dec 22 21:57:20 2025 GMT Not After : Dec 26 02:02:20 2025 GMT Subject: CN=7BA6755F47B1B9F9D07B4842EEA2F9AD53DD9F38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:f3:f7:53:41:41:79:82:33:87:17:3a:45: ef:e9:a7:9c:c8:05:e1:31:01:8f:36:0c:a3:e0:ee: cd:2c:93:85:6e:1a:4b:5b:63:a4:52:27:84:14:5f: 79:19:cf:cf:94:2b:25:3d:64:a1:89:94:1e:d8:15: 84:cf:da:be:9d:0c:b6:74:ac:1b:df:d2:69:d8:8d: be:83:44:cb:52:2f:e8:ee:a5:a1:eb:aa:c0:db:17: 03:47:ed:52:a6:c6:3e:ea:01:f7:c8:bf:10:19:4b: 2c:96:cc:9f:fa:45:0f:e8:d6:74:3c:40:da:91:03: 35:0d:04:12:78:45:d3:df:16:c5:b4:00:8e:f2:6d: 8e:b0:f0:c8:90:6d:9c:1d:75:8c:64:d2:b7:0c:77: 4f:7a:00:57:e0:9f:a5:66:1f:14:03:07:3c:40:b9: 5c:a4:0c:d7:71:b3:2b:2a:92:97:6d:27:c2:06:0b: dc:d6:c8:7e:3e:e5:ce:ea:9a:36:cf:c8:ae:75:7f: 21:46:9e:65:c4:74:d4:5a:1b:42:45:7f:55:41:86: 63:c6:cf:f3:e6:8f:a2:a0:19:b4:bc:56:4d:7b:ad: 47:1e:1a:91:cf:55:45:ee:c4:bd:55:a8:29:98:53: a2:89:4e:7d:08:b0:83:fd:b8:2c:5f:0d:4b:44:26: 6b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A6:75:5F:47:B1:B9:F9:D0:7B:48:42:EE:A2:F9:AD:53:DD:9F:38 X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:59:6d:e5:51:12:5a:15:ea:98:12:3b:3b:3c:e7:f3:d9:ec: c5:87:4a:d7:8e:41:f9:e4:e0:8c:63:f5:b5:e6:8e:30:a5:db: bf:e3:d2:de:c2:a8:3a:2b:84:e6:4d:d2:98:76:ce:ca:81:7d: c0:34:ac:30:c3:ae:95:86:18:a6:0d:fc:d0:69:06:c2:46:b2: ef:52:9a:54:b0:2f:fd:48:e0:61:b9:53:53:b4:c0:8e:dd:05: ae:fa:f4:d2:45:18:8d:56:2e:c5:dd:3e:86:c7:89:18:80:8c: 91:81:5d:7a:dc:5f:92:ce:f0:c9:ce:ad:79:7d:b3:35:fb:72: 8e:5d:82:0f:a9:ed:41:d6:76:54:10:71:6c:bd:81:74:26:29: be:6c:f9:87:5d:94:dd:f5:79:83:82:1d:e9:55:f9:c7:81:de: e3:9e:16:89:17:dd:17:fa:67:3c:cc:24:77:9d:c3:3f:64:85: 1c:a7:db:57:f0:fa:b8:6c:5c:b7:fe:c6:b6:b6:81:c7:e0:8f: a4:77:21:40:bb:7f:72:43:bb:34:8f:ca:32:56:47:7c:74:26: 34:7a:f7:bb:59:73:6d:d5:e9:43:9c:c6:ea:fb:d3:f7:04:1f: c3:b9:24:ff:52:1f:ad:cd:df:72:b7:91:34:c4:4d:ce:18:a4: 3b:72:62:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9+uTcVKmMje+kLCfyITUXg0N9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTEyMjIyMTU3MjBaFw0yNTEyMjYwMjAyMjBaMDMxMTAvBgNV BAMTKDdCQTY3NTVGNDdCMUI5RjlEMDdCNDg0MkVFQTJGOUFENTNERDlGMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvPP3U0FBeYIzhxc6Re/pp5zI BeExAY82DKPg7s0sk4VuGktbY6RSJ4QUX3kZz8+UKyU9ZKGJlB7YFYTP2r6dDLZ0 rBvf0mnYjb6DRMtSL+jupaHrqsDbFwNH7VKmxj7qAffIvxAZSyyWzJ/6RQ/o1nQ8 QNqRAzUNBBJ4RdPfFsW0AI7ybY6w8MiQbZwddYxk0rcMd096AFfgn6VmHxQDBzxA uVykDNdxsysqkpdtJ8IGC9zWyH4+5c7qmjbPyK51fyFGnmXEdNRaG0JFf1VBhmPG z/Pmj6KgGbS8Vk17rUceGpHPVUXuxL1VqCmYU6KJTn0IsIP9uCxfDUtEJmt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe6Z1X0exufnQe0hC7qL5rVPdnzgwHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExZbeVREloV6pgSOzs85/PZ7MWHSteOQfnk 4Ixj9bXmjjCl27/j0t7CqDorhOZN0ph2zsqBfcA0rDDDrpWGGKYN/NBpBsJGsu9S mlSwL/1I4GG5U1O0wI7dBa769NJFGI1WLsXdPobHiRiAjJGBXXrcX5LO8MnOrXl9 szX7co5dgg+p7UHWdlQQcWy9gXQmKb5s+YddlN31eYOCHelV+ceB3uOeFokX3Rf6 ZzzMJHedwz9khRyn21fw+rhsXLf+xra2gcfgj6R3IUC7f3JDuzSPyjJWR3x0JjR6 97tZc23V6UOcxur70/cEH8O5JP9SH63N33K3kTTETc4YpDtyYuY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:35 2025 by rpki-client