This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: 0mUj7TssNut+u64xj9BpNYiozV5acZzkIz/PNRatK8Q= Subject key identifier: 13:4F:AF:DC:6C:87:D7:3F:E3:AF:5C:65:62:AC:97:7B:63:A4:A1:61 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 7BD0C984AB00F6BDCD9961B73F9884B9D62FC617 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: C2 Signing time: Sat 20 Dec 2025 05:53:26 +0000 Manifest this update: Sat 20 Dec 2025 05:48:26 +0000 Manifest next update: Tue 23 Dec 2025 09:15:26 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=) 2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: TN5hZ6LofEjad0KG+thKakg1wx9ZmXaSPUqy8ydMAps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 09:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d0:c9:84:ab:00:f6:bd:cd:99:61:b7:3f:98:84:b9:d6:2f:c6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Dec 20 05:48:26 2025 GMT Not After : Dec 23 09:15:26 2025 GMT Subject: CN=134FAFDC6C87D73FE3AF5C6562AC977B63A4A161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:8c:d7:88:73:1f:69:d2:f1:1d:f8:96:9e: bb:80:33:c9:45:c0:b1:9b:93:0c:60:c2:60:6d:10: ca:d2:77:14:62:14:87:62:88:c7:fc:b9:b4:ca:a3: c5:82:62:b5:12:a9:97:49:f3:9c:78:1b:55:8b:d9: bd:33:08:b0:f3:5d:fe:b2:51:5f:99:9b:ff:24:e0: a7:c1:06:8d:da:d1:64:2d:3c:d6:96:be:70:d6:2a: 28:87:82:3d:6e:63:b5:7b:c0:15:2a:49:03:19:76: 23:62:3a:00:c1:99:42:39:b3:30:21:25:14:69:a3: 47:f8:80:88:9f:7b:31:ba:05:51:cd:0e:24:79:10: 3c:f9:75:2f:62:02:9e:2f:a2:05:25:45:7d:df:fa: 97:82:5e:6e:16:c9:3b:26:7e:86:f7:af:a2:3b:c9: 69:47:da:a4:c5:74:26:92:5a:4c:7c:b1:1d:35:02: 81:2a:6a:eb:96:8c:64:e6:2b:73:bb:32:bf:fe:71: c5:f6:2a:b5:c0:cc:48:43:be:3f:2c:f6:a1:99:af: 12:22:f9:d3:99:ba:a6:38:e6:c6:af:0a:22:49:b2: 49:86:99:76:72:70:1b:80:f3:e7:f8:5f:b0:63:90: aa:8d:3d:51:1e:24:1b:da:d3:5c:59:6b:98:ab:fc: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4F:AF:DC:6C:87:D7:3F:E3:AF:5C:65:62:AC:97:7B:63:A4:A1:61 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d3:b7:01:c6:62:bb:ec:be:15:fb:fc:12:fb:00:6b:92:8c: 1c:64:3e:92:e1:22:f0:e0:58:4c:7f:2f:27:21:a6:61:b2:bb: 03:2b:cd:ab:2b:24:c8:92:4c:50:4f:65:f5:26:19:ec:1f:57: bc:26:20:cd:ed:ac:4f:6a:c2:35:19:4a:00:73:75:ed:2c:4c: 36:04:03:2f:76:61:56:8c:4f:c7:a4:a4:4b:5f:d6:7a:2b:53: 9f:f2:dd:3f:be:2e:ab:44:17:aa:18:82:a7:50:f0:54:57:5a: ac:b4:8d:34:b1:3d:17:5f:92:1c:51:47:3b:5e:41:3f:12:ff: a2:5a:05:77:ea:82:64:cf:ef:71:ac:45:50:f2:b7:71:b5:ea: 58:f4:dc:71:f9:1d:5e:9b:f7:0f:c0:c1:d0:18:76:06:33:7d: c8:16:20:ab:d8:74:91:6d:ab:02:71:0e:86:87:8b:21:03:34: bc:da:7d:67:fe:47:b9:77:49:03:e4:47:78:51:95:66:34:5b: 45:f5:da:f8:e3:4b:96:b3:26:c5:08:37:91:c3:76:84:ed:97: a9:a6:49:c2:b7:cc:49:7c:a1:c8:87:25:0a:b3:59:55:5e:30: b4:a0:06:12:57:cd:d6:23:4c:11:b3:e6:31:36:7d:62:32:ab: 7f:b4:51:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9DJhKsA9r3NmWG3P5iEudYvxhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTEyMjAwNTQ4MjZaFw0yNTEyMjMwOTE1MjZaMDMxMTAvBgNV BAMTKDEzNEZBRkRDNkM4N0Q3M0ZFM0FGNUM2NTYyQUM5NzdCNjNBNEExNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iozXiHMfadLxHfiWnruAM8lF wLGbkwxgwmBtEMrSdxRiFIdiiMf8ubTKo8WCYrUSqZdJ85x4G1WL2b0zCLDzXf6y UV+Zm/8k4KfBBo3a0WQtPNaWvnDWKiiHgj1uY7V7wBUqSQMZdiNiOgDBmUI5szAh JRRpo0f4gIifezG6BVHNDiR5EDz5dS9iAp4vogUlRX3f+peCXm4WyTsmfob3r6I7 yWlH2qTFdCaSWkx8sR01AoEqauuWjGTmK3O7Mr/+ccX2KrXAzEhDvj8s9qGZrxIi +dOZuqY45savCiJJskmGmXZycBuA8+f4X7BjkKqNPVEeJBva01xZa5ir/EihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE0+v3GyH1z/jr1xlYqyXe2OkoWEwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHTtwHGYrvsvhX7/BL7AGuSjBxkPpLhIvDg WEx/LychpmGyuwMrzasrJMiSTFBPZfUmGewfV7wmIM3trE9qwjUZSgBzde0sTDYE Ay92YVaMT8ekpEtf1norU5/y3T++LqtEF6oYgqdQ8FRXWqy0jTSxPRdfkhxRRzte QT8S/6JaBXfqgmTP73GsRVDyt3G16lj03HH5HV6b9w/AwdAYdgYzfcgWIKvYdJFt qwJxDoaHiyEDNLzafWf+R7l3SQPkR3hRlWY0W0X12vjjS5azJsUIN5HDdoTtl6mm ScK3zEl8ociHJQqzWVVeMLSgBhJXzdYjTBGz5jE2fWIyq3+0Ufc= -----END CERTIFICATE-----Generated at Mon Dec 22 10:42:27 2025 by rpki-client