This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft File: 1678F34665D7A5281AECD895B892F07EA136CF72.mft (raw, json) Hash identifier: pXrh40kWE+INkHzvfVkX7Zt2T/yTKdNKc8yyNIJkmpU= Subject key identifier: C2:C2:41:78:14:52:E5:3B:EE:C4:5F:04:77:46:6F:DD:5E:E6:7D:B4 Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72 Certificate serial: 1CDD75D53B2BA99379826CBD4AFDD18461F91BC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft Manifest number: 0532 Signing time: Thu 18 Dec 2025 01:31:23 +0000 Manifest this update: Thu 18 Dec 2025 01:26:23 +0000 Manifest next update: Sun 21 Dec 2025 06:58:23 +0000 Files and hashes: 1: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: KKdgbWLDDouRzCILnrDemBFX6Nv6Y8LRFzPrNN7B8tE=) 2: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: D6yeTZeAuFxEtqmSKbk3UU6vmrij1x8nL+p5b0eR7L4=) 3: 1678F34665D7A5281AECD895B892F07EA136CF72.crl (hash: cleZinBZS/BlvRETBIlpc7qmpu2ZIp2vLA+7ujbu6VU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:dd:75:d5:3b:2b:a9:93:79:82:6c:bd:4a:fd:d1:84:61:f9:1b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72 Validity Not Before: Dec 18 01:26:23 2025 GMT Not After : Dec 21 06:58:23 2025 GMT Subject: CN=C2C241781452E53BEEC45F0477466FDD5EE67DB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:24:e3:8e:4f:7b:57:d4:9b:66:20:da:05: c9:28:69:46:b0:10:14:9e:fd:d3:a6:1f:d4:43:96: e2:2d:b9:de:91:26:d3:66:55:d6:7a:9f:1b:14:b2: db:97:69:2f:be:f1:b9:06:26:c4:e9:b0:57:77:1b: de:d8:81:eb:1b:bb:02:ae:79:94:33:27:69:48:5c: 7e:4d:97:8e:97:38:b8:9e:6d:8b:bb:9f:88:ad:ac: 7f:4a:3e:56:a8:40:55:a1:12:38:75:99:ef:da:ec: 84:18:ea:c9:b2:d9:a3:c4:3e:a5:1f:61:9b:5f:8c: 25:46:a6:fb:26:57:0c:8e:57:59:9c:86:f7:79:fa: 03:95:e6:3c:ef:f4:02:b4:68:e0:cf:f8:29:14:3d: 5f:a6:65:89:44:00:c9:8c:fa:bf:14:6b:a9:fd:69: ef:86:33:66:5d:35:9a:fb:fd:b2:29:37:84:85:49: 73:f3:bd:ac:ef:22:89:f5:4f:36:53:38:cb:34:27: 52:b2:c9:58:08:75:f0:44:06:61:3c:2d:b9:c1:f9: 7e:ec:b3:a7:90:58:11:59:bc:8a:dd:ce:05:ab:49: bc:64:0d:ec:2f:ca:1a:9f:c6:a9:4d:76:16:21:4f: 28:da:37:4b:af:3e:fa:5a:d6:7f:6e:bb:18:34:6f: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C2:41:78:14:52:E5:3B:EE:C4:5F:04:77:46:6F:DD:5E:E6:7D:B4 X509v3 Authority Key Identifier: keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:11:db:ba:4b:a5:6c:db:b4:f1:bf:71:ab:b6:46:2f:da:ed: f2:f6:65:98:c1:f4:da:5b:65:c8:67:79:ba:cc:51:4c:c9:30: 38:31:91:5c:72:fd:9e:fe:73:f5:6f:47:71:9f:2b:88:ee:3b: 6a:fd:07:24:b6:48:45:e1:93:9c:15:df:9e:05:89:40:b5:55: f8:ce:d5:87:ed:97:f3:e7:64:72:ef:e7:20:fa:30:2d:cb:7c: 0f:31:e4:00:38:82:f4:f7:00:eb:75:54:ec:82:a6:1d:8a:62: ae:81:77:a6:49:bb:b1:5b:bd:8b:d6:92:a9:43:e2:09:67:b4: 82:86:0e:65:d4:64:98:ab:62:ca:19:06:88:ec:d7:03:f1:41: 5d:73:f3:a8:46:37:b8:0e:ee:8c:9d:23:ff:92:ad:18:e6:d7: 41:f2:45:ce:83:56:b3:3e:17:2c:0b:39:78:92:9a:a6:2c:5f: f5:14:03:14:4c:13:e5:e1:93:5e:c2:1c:83:76:b8:7d:48:b6: 8e:9f:3e:b3:02:a0:40:66:a2:4e:c1:a8:62:6c:ba:e7:2e:93: e1:3a:2e:4e:92:8f:cb:f2:04:86:23:58:1d:06:73:b4:21:33: 50:95:b0:10:bf:3a:2f:42:6a:d7:08:b4:54:9a:a2:b9:8b:31: 75:53:a2:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHN111TsrqZN5gmy9Sv3RhGH5G8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VB MTM2Q0Y3MjAeFw0yNTEyMTgwMTI2MjNaFw0yNTEyMjEwNjU4MjNaMDMxMTAvBgNV BAMTKEMyQzI0MTc4MTQ1MkU1M0JFRUM0NUYwNDc3NDY2RkRENUVFNjdEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpiTjjk97V9SbZiDaBckoaUaw EBSe/dOmH9RDluItud6RJtNmVdZ6nxsUstuXaS++8bkGJsTpsFd3G97YgesbuwKu eZQzJ2lIXH5Nl46XOLiebYu7n4itrH9KPlaoQFWhEjh1me/a7IQY6smy2aPEPqUf YZtfjCVGpvsmVwyOV1mchvd5+gOV5jzv9AK0aODP+CkUPV+mZYlEAMmM+r8Ua6n9 ae+GM2ZdNZr7/bIpN4SFSXPzvazvIon1TzZTOMs0J1KyyVgIdfBEBmE8LbnB+X7s s6eQWBFZvIrdzgWrSbxkDewvyhqfxqlNdhYhTyjaN0uvPvpa1n9uuxg0b3eLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwsJBeBRS5TvuxF8Ed0Zv3V7mfbQwHwYDVR0j BBgwFoAUFnjzRmXXpSga7NiVuJLwfqE2z3IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzkzNjg2Yi0zMzg0LTQ0MTItOGU3Yy1lOWQxYjg1MmFhMWUvMC8xNjc4RjM0NjY1 RDdBNTI4MUFFQ0Q4OTVCODkyRjA3RUExMzZDRjcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VBMTM2 Q0Y3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5MzY4NmItMzM4NC00NDEyLThl N2MtZTlkMWI4NTJhYTFlLzAvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYw N0VBMTM2Q0Y3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgR27pLpWzbtPG/cau2Ri/a7fL2ZZjB9Npb ZchnebrMUUzJMDgxkVxy/Z7+c/VvR3GfK4juO2r9ByS2SEXhk5wV354FiUC1VfjO 1Yftl/PnZHLv5yD6MC3LfA8x5AA4gvT3AOt1VOyCph2KYq6Bd6ZJu7FbvYvWkqlD 4glntIKGDmXUZJirYsoZBojs1wPxQV1z86hGN7gO7oydI/+SrRjm10HyRc6DVrM+ FywLOXiSmqYsX/UUAxRME+Xhk17CHIN2uH1Ito6fPrMCoEBmok7BqGJsuucuk+E6 Lk6Sj8vyBIYjWB0Gc7QhM1CVsBC/Oi9CatcItFSaormLMXVTovo= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:57 2025 by rpki-client