This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft File: 1B42B2BB5674F23468744614CDF9B0B00D510190.mft (raw, json) Hash identifier: TShJ0FzPA7NtauKxunXRGCVAVU48y3z/HG1YF9MVpK4= Subject key identifier: 01:DF:BD:D0:CE:F5:E2:54:18:B9:17:3D:15:25:DF:AA:FD:20:00:CC Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 Certificate issuer: /CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Certificate serial: 2E242DAC1EC585FA5277AEE4B9BFE7AAEA9525C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft Manifest number: 01FE Signing time: Mon 22 Dec 2025 20:32:13 +0000 Manifest this update: Mon 22 Dec 2025 20:27:13 +0000 Manifest next update: Fri 26 Dec 2025 06:38:13 +0000 Files and hashes: 1: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: 7jDOzKEybqHgosjfCyx4hqCz0tcDh6a5dAdb4UBUTOc=) 2: 1B42B2BB5674F23468744614CDF9B0B00D510190.crl (hash: NemgTlpJJNUSpu4ljCmDr1hboTCaAclJqcFI5VGYKC0=) 3: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: Czzvj4vJQSB2KKayEoKqCf4S1sGvCeEbVuyOD7N/uO0=) 4: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: oFFK8blgpeKf9LD5SV2KXd2JEMT+aIlFev67ub7lEjE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:24:2d:ac:1e:c5:85:fa:52:77:ae:e4:b9:bf:e7:aa:ea:95:25:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Validity Not Before: Dec 22 20:27:13 2025 GMT Not After : Dec 26 06:38:13 2025 GMT Subject: CN=01DFBDD0CEF5E25418B9173D1525DFAAFD2000CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:84:c7:a7:fa:e2:f3:08:bb:0b:e3:d0:f7: 21:13:66:02:37:50:ab:6c:1e:ca:e7:10:c5:84:d8: be:48:0d:0a:c3:16:46:9e:23:ab:f1:10:86:83:ba: d0:4c:8f:e1:88:85:9f:e3:97:a8:20:96:0d:bc:21: d0:c9:b9:d7:62:45:57:ad:b6:cf:f7:2d:23:41:a3: e4:b2:64:4b:12:eb:3b:4e:91:3b:48:75:af:10:32: ca:0a:1f:cb:aa:97:bf:de:57:60:87:73:a3:e1:00: 34:09:ee:7e:5d:75:09:7d:e4:38:11:69:d9:83:b7: 16:bd:14:3f:a7:0b:1f:98:68:ee:1b:fc:d8:18:75: ce:05:be:82:f5:6a:57:7d:89:ed:21:aa:9d:b4:f4: 1e:3e:81:ee:df:36:f8:80:40:88:d0:58:39:f0:c3: bf:27:9a:54:2a:31:80:18:db:9a:9f:9d:a3:f7:de: ca:eb:b6:fb:0c:24:d6:cb:4e:be:cd:63:d1:0b:85: d2:e8:2a:a8:fc:3c:63:ae:69:4f:12:bd:56:ad:2e: 44:ae:99:47:a9:13:c6:0d:64:1d:78:fe:2d:cd:8d: 61:a6:e7:86:4c:6a:6d:dc:19:53:8a:f9:a3:e6:2e: 23:fe:43:1f:14:cb:3a:d3:f7:a4:6c:2f:36:96:56: c7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DF:BD:D0:CE:F5:E2:54:18:B9:17:3D:15:25:DF:AA:FD:20:00:CC X509v3 Authority Key Identifier: keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:54:07:6a:d3:78:47:ee:a0:5a:09:49:fe:e3:27:0c:f0:b7: fa:51:96:02:54:6c:56:06:7b:1a:91:0e:fe:c6:f5:21:93:68: c4:53:00:cf:2b:c3:b7:c7:69:5e:50:b3:b2:1b:c1:9c:ba:5f: 56:a0:5e:d0:9a:f9:bd:ca:cf:85:a3:c6:aa:c8:7b:94:37:be: ed:66:07:0e:34:68:d1:2d:b7:77:34:cb:d1:54:d7:fe:b3:8d: 58:49:29:f9:9d:56:66:1b:9a:3e:cb:12:00:2d:04:8c:08:5c: cb:6f:3f:71:d5:9f:96:4c:d3:42:a9:6f:76:0f:7f:19:94:fa: 53:64:a9:7f:c6:90:8c:2b:0b:9a:57:00:f1:2a:c2:15:49:71: 72:9d:ae:80:60:95:1a:45:0c:07:13:6a:8a:9b:c7:07:14:cb: 29:1b:38:28:48:2b:10:79:ac:d6:8d:3b:d8:c7:12:69:29:d9: 62:9c:69:93:2e:47:8c:53:51:41:ff:df:2a:7c:4e:f3:d2:89: aa:5e:86:bc:57:4d:7d:34:0a:0f:80:c9:e0:4a:0a:4f:a7:c4: f2:68:d6:1d:79:4c:96:23:a1:35:0a:93:36:22:03:d9:16:8c: 15:58:5f:8b:6d:1a:a0:29:92:f9:5d:ef:a9:9f:1e:ec:47:8f: 2d:0c:d8:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULiQtrB7FhfpSd67kub/nquqVJcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAw RDUxMDE5MDAeFw0yNTEyMjIyMDI3MTNaFw0yNTEyMjYwNjM4MTNaMDMxMTAvBgNV BAMTKDAxREZCREQwQ0VGNUUyNTQxOEI5MTczRDE1MjVERkFBRkQyMDAwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCYTHp/ri8wi7C+PQ9yETZgI3 UKtsHsrnEMWE2L5IDQrDFkaeI6vxEIaDutBMj+GIhZ/jl6gglg28IdDJuddiRVet ts/3LSNBo+SyZEsS6ztOkTtIda8QMsoKH8uql7/eV2CHc6PhADQJ7n5ddQl95DgR admDtxa9FD+nCx+YaO4b/NgYdc4FvoL1ald9ie0hqp209B4+ge7fNviAQIjQWDnw w78nmlQqMYAY25qfnaP33srrtvsMJNbLTr7NY9ELhdLoKqj8PGOuaU8SvVatLkSu mUepE8YNZB14/i3NjWGm54ZMam3cGVOK+aPmLiP+Qx8UyzrT96RsLzaWVsezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAd+90M714lQYuRc9FSXfqv0gAMwwHwYDVR0j BBgwFoAUG0Kyu1Z08jRodEYUzfmwsA1RAZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ0MjUyYi1kMzBlLTRiZGMtODMyZi1iMzhiMDVjN2EwMzUvMC8xQjQyQjJCQjU2 NzRGMjM0Njg3NDQ2MTRDREY5QjBCMDBENTEwMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAwRDUx MDE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIw QjAwRDUxMDE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5UB2rTeEfuoFoJSf7jJwzwt/pRlgJUbFYG exqRDv7G9SGTaMRTAM8rw7fHaV5Qs7IbwZy6X1agXtCa+b3Kz4WjxqrIe5Q3vu1m Bw40aNEtt3c0y9FU1/6zjVhJKfmdVmYbmj7LEgAtBIwIXMtvP3HVn5ZM00Kpb3YP fxmU+lNkqX/GkIwrC5pXAPEqwhVJcXKdroBglRpFDAcTaoqbxwcUyykbOChIKxB5 rNaNO9jHEmkp2WKcaZMuR4xTUUH/3yp8TvPSiapehrxXTX00Cg+AyeBKCk+nxPJo 1h15TJYjoTUKkzYiA9kWjBVYX4ttGqApkvld76mfHuxHjy0M2N8= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:40 2025 by rpki-client