This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft File: 19B904DED71657E1E79F9B50507DCCCB817E9635.mft (raw, json) Hash identifier: nLfQQXbuY8kZ89hR38BxoYRp1MjnbYuxBsN9x1wOxVc= Subject key identifier: 21:BA:CB:5A:B0:B5:C0:BE:43:F5:BF:08:0C:03:D8:15:01:6D:CF:87 Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 Certificate issuer: /CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Certificate serial: 3E69E330A9F759D3193D04DCD15E38E502963526 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft Manifest number: 01EF Signing time: Wed 17 Dec 2025 19:01:23 +0000 Manifest this update: Wed 17 Dec 2025 18:56:23 +0000 Manifest next update: Sat 20 Dec 2025 22:35:23 +0000 Files and hashes: 1: 19B904DED71657E1E79F9B50507DCCCB817E9635.crl (hash: rtkElbWBhDPbNCP32ozlwH86ijBtL8PTHHX0RPCxp8U=) 2: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (hash: rxQ2JaYw7ULxDCv5OE6MiX+tQg4bCcbyeQJKcyeV4Tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:69:e3:30:a9:f7:59:d3:19:3d:04:dc:d1:5e:38:e5:02:96:35:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Validity Not Before: Dec 17 18:56:23 2025 GMT Not After : Dec 20 22:35:23 2025 GMT Subject: CN=21BACB5AB0B5C0BE43F5BF080C03D815016DCF87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:4f:e3:9a:16:6e:2b:4d:3c:ec:35:c1:47: e8:7e:39:39:ae:64:e2:c4:8f:e5:2b:49:02:99:dc: 1f:60:0a:aa:8c:30:37:24:96:49:b8:d6:72:fa:12: 9a:d9:af:b1:46:0b:7e:44:22:0c:b7:e9:f6:b8:84: d1:3d:fa:2f:e5:8a:c4:d7:c6:e0:19:d4:d5:e8:77: 84:e2:71:81:8b:8e:04:17:8f:6c:c3:01:d8:c0:b0: 9a:75:58:f3:85:92:8d:75:f7:34:bd:8e:5f:98:0d: 6c:9d:45:f1:4f:52:ad:f6:b5:12:57:95:37:90:75: d4:af:e2:8a:51:39:48:e9:d1:7b:5b:e8:64:57:22: ff:0c:2a:7b:37:00:2f:f7:c9:5d:0d:72:55:ed:42: c3:c6:bc:51:2f:5c:c8:78:9c:50:29:81:23:bc:74: 12:9d:aa:d4:26:10:66:fd:1a:dd:b9:53:47:ec:f6: c1:e7:7d:e6:00:5c:db:cb:7d:53:d9:51:3f:15:dc: b5:5c:fd:bf:20:67:a9:90:67:8f:db:51:fd:da:9b: aa:58:4f:0b:41:a7:f9:1a:ab:36:0d:e1:26:62:0d: a2:ce:d5:74:1a:f3:fb:6c:14:43:7e:90:76:83:b0: 9f:bb:d6:0a:e8:98:da:8e:b7:6e:3a:84:6c:91:7f: ee:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BA:CB:5A:B0:B5:C0:BE:43:F5:BF:08:0C:03:D8:15:01:6D:CF:87 X509v3 Authority Key Identifier: keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c1:16:9b:e9:e1:df:f8:40:97:b9:39:7e:ad:dc:ad:7b:88: 03:3a:86:c2:b4:be:13:d6:48:a4:86:95:ac:6f:8c:28:58:fd: 64:0c:50:cd:3f:62:4b:01:ac:40:9d:eb:35:3f:5d:38:cc:b1: 5e:be:53:27:de:e0:df:99:23:2f:d6:37:b2:dd:58:b7:a1:53: 1d:68:9b:62:66:4c:2b:2f:67:a9:0a:88:d9:2b:2e:bd:22:19: a3:b0:e1:60:57:5a:5a:94:f4:2c:d9:34:64:fc:e5:e0:61:56: 07:5c:35:19:44:ad:00:8a:28:33:25:cc:1f:87:d9:c8:e7:f9: c1:2f:b2:eb:ae:44:36:75:1f:f3:c7:42:d1:a0:9e:e4:e3:4b: 97:62:b8:79:43:c7:f2:da:9c:56:1c:a8:c8:71:f1:63:29:e7: 5a:7b:76:f1:d5:ad:5a:67:b0:22:db:83:f4:1a:7c:58:0f:12: 5d:3e:2d:52:1c:83:05:b0:4a:60:eb:83:d6:04:43:cc:07:c0: 8a:d7:ab:a0:13:1c:9f:9e:b1:3e:04:4b:a6:0f:93:f4:32:8f: 12:04:0c:68:c4:df:41:b0:b3:10:84:cf:bf:28:21:f4:f6:b1: 87:04:57:15:b4:12:cc:2a:ea:00:b2:cd:e3:77:94:0e:03:11: cc:8a:cd:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmnjMKn3WdMZPQTc0V445QKWNSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4 MTdFOTYzNTAeFw0yNTEyMTcxODU2MjNaFw0yNTEyMjAyMjM1MjNaMDMxMTAvBgNV BAMTKDIxQkFDQjVBQjBCNUMwQkU0M0Y1QkYwODBDMDNEODE1MDE2RENGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCta0/jmhZuK0087DXBR+h+OTmu ZOLEj+UrSQKZ3B9gCqqMMDcklkm41nL6EprZr7FGC35EIgy36fa4hNE9+i/lisTX xuAZ1NXod4TicYGLjgQXj2zDAdjAsJp1WPOFko119zS9jl+YDWydRfFPUq32tRJX lTeQddSv4opROUjp0Xtb6GRXIv8MKns3AC/3yV0NclXtQsPGvFEvXMh4nFApgSO8 dBKdqtQmEGb9Gt25U0fs9sHnfeYAXNvLfVPZUT8V3LVc/b8gZ6mQZ4/bUf3am6pY TwtBp/kaqzYN4SZiDaLO1XQa8/tsFEN+kHaDsJ+71gromNqOt246hGyRf+4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIbrLWrC1wL5D9b8IDAPYFQFtz4cwHwYDVR0j BBgwFoAUGbkE3tcWV+Hnn5tQUH3My4F+ljUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMC8xOUI5MDRERUQ3 MTY1N0UxRTc5RjlCNTA1MDdEQ0NDQjgxN0U5NjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4MTdF OTYzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZlNDBhOTgtOTNlZi00YWY4LWE0 MzYtNDY5NzQwMTU0NzgyLzAvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3REND Q0I4MTdFOTYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnBFpvp4d/4QJe5OX6t3K17iAM6hsK0vhPW SKSGlaxvjChY/WQMUM0/YksBrECd6zU/XTjMsV6+Uyfe4N+ZIy/WN7LdWLehUx1o m2JmTCsvZ6kKiNkrLr0iGaOw4WBXWlqU9CzZNGT85eBhVgdcNRlErQCKKDMlzB+H 2cjn+cEvsuuuRDZ1H/PHQtGgnuTjS5diuHlDx/LanFYcqMhx8WMp51p7dvHVrVpn sCLbg/QafFgPEl0+LVIcgwWwSmDrg9YEQ8wHwIrXq6ATHJ+esT4ES6YPk/QyjxIE DGjE30GwsxCEz78oIfT2sYcEVxW0Eswq6gCyzeN3lA4DEcyKzb4= -----END CERTIFICATE-----Generated at Fri Dec 19 12:58:27 2025 by rpki-client