This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: tGv/rEisVERwm6aqJULrlNKDAV5aMat+2KZvxF+yPL8= Subject key identifier: F4:45:33:AC:72:A9:73:CA:3A:29:36:C9:F7:0D:2B:89:03:F8:9C:3F Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 526B5DA8D1B0DA575300D4100B9434E032CE34AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: 0101 Signing time: Wed 17 Dec 2025 03:10:04 +0000 Manifest this update: Wed 17 Dec 2025 03:05:04 +0000 Manifest next update: Sat 20 Dec 2025 06:29:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: ++fA/qXT4iqQ3CLta8MJGtLhjl1clf2UnBwoXJOiIIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 06:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6b:5d:a8:d1:b0:da:57:53:00:d4:10:0b:94:34:e0:32:ce:34:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Dec 17 03:05:04 2025 GMT Not After : Dec 20 06:29:04 2025 GMT Subject: CN=F44533AC72A973CA3A2936C9F70D2B8903F89C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:55:28:b1:1e:14:5b:8c:b1:bc:81:10:35:3f: 68:cf:da:7e:25:86:45:47:9a:de:9c:6e:30:68:0d: 5c:62:4d:9f:c5:2c:22:1f:56:fc:73:c5:7c:04:87: 65:87:c5:58:5d:ca:45:c1:70:7e:cb:1a:3f:99:28: 4a:fd:93:19:7a:f3:de:39:d8:12:c7:fe:21:57:ca: 13:5e:90:6a:6d:d6:51:c8:ab:d5:d9:b7:2a:e9:ce: 75:60:8d:15:41:11:0c:e9:ca:96:8c:f7:6e:39:c9: f9:d3:64:7f:aa:97:32:fe:38:0b:70:55:23:1d:b8: 96:8c:20:14:ef:e0:d6:67:a5:63:d1:42:3e:47:43: e9:02:ae:d0:c1:bf:0b:57:79:f9:ee:d2:90:12:ea: 1a:a3:4a:45:be:07:63:ab:48:39:b6:3a:f7:86:cb: be:05:aa:48:c0:26:df:66:90:48:c1:30:2d:0d:4f: 1e:56:4f:1a:1f:97:57:aa:d6:8e:b2:16:25:fe:fe: 5c:0c:1e:4e:e0:59:b2:87:41:bc:56:80:e4:24:d3: c4:93:be:ca:ff:1d:25:04:5b:ed:68:f5:fc:89:0c: 73:95:0b:19:31:05:16:9c:d4:fb:9b:f1:44:f7:d0: bb:bb:38:8b:3b:0e:ec:83:6e:91:2f:00:8d:09:91: c7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:45:33:AC:72:A9:73:CA:3A:29:36:C9:F7:0D:2B:89:03:F8:9C:3F X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:36:01:1b:fb:d2:f2:e2:3b:b5:83:e7:e7:bf:d1:3b:0d:56: 81:48:d1:b6:97:d4:4f:dd:a9:53:33:9d:5a:57:45:59:2b:70: be:21:3f:4d:53:21:e1:99:95:c9:d9:11:57:0a:e9:18:1f:e6: 95:08:e5:d7:58:1b:1f:de:89:72:3a:39:5e:d3:f7:65:1c:bf: 79:a2:9c:74:4d:af:f7:58:92:bb:66:78:92:7e:54:ed:3c:94: 9b:a0:bf:87:88:b2:25:a0:6c:4b:3f:19:62:e9:52:2f:bd:3d: c9:14:39:89:1b:d7:d9:0c:46:6b:ed:a5:6e:08:f2:45:bb:08: a9:2e:c0:57:f0:5f:f1:5b:31:5e:08:57:dc:01:55:a3:ee:97: 1c:0b:ee:8b:aa:c4:e4:8e:16:9f:69:cc:4c:1d:8f:8c:87:37: 71:e9:8e:59:96:9e:40:7a:9b:25:58:19:82:ed:d4:82:9f:02: fe:d2:2b:51:bd:ee:67:63:cf:e5:b6:fc:80:25:94:d1:51:e5: e1:5f:ef:a9:ca:87:95:22:cb:9a:9d:b6:e9:76:42:59:e6:8a: b6:7c:a3:99:14:9e:52:5f:c6:59:53:f0:95:5a:dd:db:cc:a3: 56:0d:c5:31:9d:0d:32:3d:26:c2:61:36:c6:3d:17:12:09:e1: 5e:73:56:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmtdqNGw2ldTANQQC5Q04DLONK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNTEyMTcwMzA1MDRaFw0yNTEyMjAwNjI5MDRaMDMxMTAvBgNV BAMTKEY0NDUzM0FDNzJBOTczQ0EzQTI5MzZDOUY3MEQyQjg5MDNGODlDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVSixHhRbjLG8gRA1P2jP2n4l hkVHmt6cbjBoDVxiTZ/FLCIfVvxzxXwEh2WHxVhdykXBcH7LGj+ZKEr9kxl68945 2BLH/iFXyhNekGpt1lHIq9XZtyrpznVgjRVBEQzpypaM9245yfnTZH+qlzL+OAtw VSMduJaMIBTv4NZnpWPRQj5HQ+kCrtDBvwtXefnu0pAS6hqjSkW+B2OrSDm2OveG y74FqkjAJt9mkEjBMC0NTx5WTxofl1eq1o6yFiX+/lwMHk7gWbKHQbxWgOQk08ST vsr/HSUEW+1o9fyJDHOVCxkxBRac1Pub8UT30Lu7OIs7DuyDbpEvAI0JkcexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9EUzrHKpc8o6KTbJ9w0riQP4nD8wHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJE2ARv70vLiO7WD5+e/0TsNVoFI0baX1E/d qVMznVpXRVkrcL4hP01TIeGZlcnZEVcK6Rgf5pUI5ddYGx/eiXI6OV7T92Ucv3mi nHRNr/dYkrtmeJJ+VO08lJugv4eIsiWgbEs/GWLpUi+9PckUOYkb19kMRmvtpW4I 8kW7CKkuwFfwX/FbMV4IV9wBVaPulxwL7ouqxOSOFp9pzEwdj4yHN3HpjlmWnkB6 myVYGYLt1IKfAv7SK1G97mdjz+W2/IAllNFR5eFf76nKh5Uiy5qdtul2QlnmirZ8 o5kUnlJfxllT8JVa3dvMo1YNxTGdDTI9JsJhNsY9FxIJ4V5zVkU= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:03 2025 by rpki-client