This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft (raw, json) Hash identifier: UNGLSvipMOHFmCqLrFnPelqH5UJOVcPczWMMIcJ5uok= Subject key identifier: FD:AA:0B:46:F9:96:FC:96:D3:DF:5F:17:DF:EB:80:84:96:06:FF:94 Authority key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE Certificate issuer: /CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Certificate serial: 7EE1978F357F1EB9777F52E0138051BD966BAD3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft Manifest number: 01D1 Signing time: Wed 24 Dec 2025 10:22:39 +0000 Manifest this update: Wed 24 Dec 2025 10:17:39 +0000 Manifest next update: Sat 27 Dec 2025 16:01:39 +0000 Files and hashes: 1: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl (hash: berrQZFFTwqLTpoYmkhZci7mSyf8byJJ1GJytwZOXzE=) 2: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: 5eHMmSOXqcaio0G7mCeIUfZJCaBBOr7GrZWeXm+wBUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e1:97:8f:35:7f:1e:b9:77:7f:52:e0:13:80:51:bd:96:6b:ad:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Validity Not Before: Dec 24 10:17:39 2025 GMT Not After : Dec 27 16:01:39 2025 GMT Subject: CN=FDAA0B46F996FC96D3DF5F17DFEB80849606FF94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:a2:2b:c6:81:c5:11:0b:a1:f6:0a:d6:2f: f6:38:72:c4:eb:f1:6f:79:a8:2f:2b:5a:e0:17:c6: 01:3b:29:b9:b9:e7:2b:e2:18:1e:46:27:83:0b:e5: 0e:77:50:67:77:7f:a7:fe:31:30:fd:ed:36:e6:2a: ea:73:a0:90:34:e6:b2:8c:17:38:d2:07:d3:fc:d3: 15:f7:06:0a:9a:2c:26:4e:5c:1e:c8:94:91:cf:a8: da:0a:ec:cc:02:1f:f7:05:18:e2:e3:15:c3:6f:d6: d4:31:7b:51:f6:1e:a4:4e:b5:5a:13:24:a0:33:9d: 89:fc:d6:da:db:af:e5:20:15:48:01:0b:b7:75:ec: a1:51:77:da:fd:31:a6:b8:81:4f:7a:8f:01:b7:d1: 1a:75:c1:18:97:78:51:05:2f:bb:3a:d1:f3:b2:e2: 30:cb:50:92:ed:db:e6:01:a7:10:71:81:d3:a5:44: 24:44:db:a9:22:5c:07:1d:e8:09:4b:d9:ba:a7:f5: 6a:3f:af:46:80:f2:62:f2:8d:46:8b:76:d9:dc:f4: bc:ef:b4:ee:e4:e1:5d:05:67:c6:6b:c4:45:fa:0b: cf:83:98:50:26:36:e5:7b:55:ef:83:dc:6d:04:21: df:19:91:4c:d5:c0:a2:fe:df:0b:80:64:4d:ec:8e: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AA:0B:46:F9:96:FC:96:D3:DF:5F:17:DF:EB:80:84:96:06:FF:94 X509v3 Authority Key Identifier: keyid:19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d1:78:5a:da:67:28:1e:2e:e3:27:ce:30:47:5e:a1:ab:cf: 8a:67:9a:29:57:dd:56:16:31:17:19:60:a9:ae:b4:ad:1c:b5: e8:28:37:d0:00:39:8c:42:e1:c3:ee:c9:a5:f9:4c:0c:55:94: 18:59:32:3d:b5:56:31:23:12:ff:df:c0:cb:db:f7:05:17:7c: 48:e1:dc:3b:12:fd:de:71:db:3b:97:87:c1:a8:d2:06:23:59: 62:0e:5c:ad:40:87:d8:9f:39:2c:d1:b8:80:14:09:47:5f:ff: 2b:90:d6:54:df:8a:d0:1e:17:0a:7c:1c:3c:47:88:7f:00:4f: 00:9f:c6:15:a7:3a:10:3e:74:d3:d3:d3:86:bf:45:77:2e:58: 5b:47:86:4e:e7:ef:c5:4e:04:da:b9:b3:1a:85:c2:2c:10:ad: e3:d2:ba:6c:53:01:36:2e:d4:b5:2f:1b:c8:80:37:d8:e5:a6: 03:ea:70:8a:a3:60:66:ba:43:b3:3a:77:cb:e7:79:04:eb:04: 49:b3:89:58:cd:6d:3b:d4:7e:4b:3a:39:73:cb:f9:45:9f:42: 10:69:b6:71:53:1f:2e:d0:3e:10:3b:06:a3:06:af:9d:1b:6b: b2:28:d1:50:76:40:ac:d5:dd:8d:3a:43:ee:76:c3:85:63:6e: 8b:68:91:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuGXjzV/Hrl3f1LgE4BRvZZrrT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0 Q0Y3OTFCRTAeFw0yNTEyMjQxMDE3MzlaFw0yNTEyMjcxNjAxMzlaMDMxMTAvBgNV BAMTKEZEQUEwQjQ2Rjk5NkZDOTZEM0RGNUYxN0RGRUI4MDg0OTYwNkZGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8b6IrxoHFEQuh9grWL/Y4csTr 8W95qC8rWuAXxgE7Kbm55yviGB5GJ4ML5Q53UGd3f6f+MTD97TbmKupzoJA05rKM FzjSB9P80xX3BgqaLCZOXB7IlJHPqNoK7MwCH/cFGOLjFcNv1tQxe1H2HqROtVoT JKAznYn81trbr+UgFUgBC7d17KFRd9r9Maa4gU96jwG30Rp1wRiXeFEFL7s60fOy 4jDLUJLt2+YBpxBxgdOlRCRE26kiXAcd6AlL2bqn9Wo/r0aA8mLyjUaLdtnc9Lzv tO7k4V0FZ8ZrxEX6C8+DmFAmNuV7Ve+D3G0EId8ZkUzVwKL+3wuAZE3sjjinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/aoLRvmW/JbT318X3+uAhJYG/5QwHwYDVR0j BBgwFoAUGSgLj1qk+97GecNR6wQNKEz3kb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC8xOTI4MEI4RjVB QTRGQkRFQzY3OUMzNTFFQjA0MEQyODRDRjc5MUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0Q0Y3 OTFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz MWItYWY5MmIxNzI2ZDJlLzAvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBE Mjg0Q0Y3OTFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHReFraZygeLuMnzjBHXqGrz4pnmilX3VYW MRcZYKmutK0ctegoN9AAOYxC4cPuyaX5TAxVlBhZMj21VjEjEv/fwMvb9wUXfEjh 3DsS/d5x2zuXh8Go0gYjWWIOXK1Ah9ifOSzRuIAUCUdf/yuQ1lTfitAeFwp8HDxH iH8ATwCfxhWnOhA+dNPT04a/RXcuWFtHhk7n78VOBNq5sxqFwiwQrePSumxTATYu 1LUvG8iAN9jlpgPqcIqjYGa6Q7M6d8vneQTrBEmziVjNbTvUfks6OXPL+UWfQhBp tnFTHy7QPhA7BqMGr50ba7Io0VB2QKzV3Y06Q+52w4VjbotokbM= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:53 2025 by rpki-client