This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft (raw, json) Hash identifier: pvzg/kv+zlXVXEeVUBLFRGRSMUMwLLD0/TNju6qLHAs= Subject key identifier: 81:79:6A:11:99:27:DF:06:EC:65:75:E5:87:0F:85:2E:1B:EE:AB:88 Authority key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F Certificate issuer: /CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Certificate serial: 21C9D3544944AE67443DF7F277ADA1C1F483C3EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft Manifest number: 011E Signing time: Fri 19 Dec 2025 23:41:16 +0000 Manifest this update: Fri 19 Dec 2025 23:36:16 +0000 Manifest next update: Tue 23 Dec 2025 05:43:16 +0000 Files and hashes: 1: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl (hash: hP+dzSQa73UHNvuZ8t/jylswwsSO5G+M/Wkb7TK5sY8=) 2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: 2lAjycdxeSaqDarXvJpjbjwFWksBTkypcj159AzhKmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 05:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c9:d3:54:49:44:ae:67:44:3d:f7:f2:77:ad:a1:c1:f4:83:c3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Validity Not Before: Dec 19 23:36:16 2025 GMT Not After : Dec 23 05:43:16 2025 GMT Subject: CN=81796A119927DF06EC6575E5870F852E1BEEAB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:00:c9:3e:c9:3d:31:85:c3:d8:09:38:24: 2c:ac:ab:1d:f5:d7:ba:40:46:11:52:eb:21:b5:00: fe:76:bc:99:56:04:68:ba:22:ed:1f:08:1b:1d:1a: b2:70:52:0c:0c:69:d5:07:56:b0:d4:38:63:74:a6: 88:a6:8b:d8:58:87:0b:1b:f0:39:ef:7e:16:47:52: 81:61:ba:5d:a5:b7:52:57:f6:23:8c:44:5e:81:f3: 36:98:cf:f8:c7:e2:f7:11:1a:0b:6d:ae:32:d6:de: d1:82:f2:46:5d:cf:e6:f5:9a:1f:19:4e:89:11:be: 88:c9:d5:f4:e0:37:cf:df:b9:42:7b:ed:87:43:53: 05:e2:75:ef:f4:2e:32:0f:64:a2:f9:91:c3:87:eb: f3:fb:dd:e3:f4:49:d9:c0:e4:ef:eb:80:fe:e8:84: 86:b8:eb:cc:5a:b6:24:ea:29:a3:9a:70:69:51:e1: c8:10:cd:55:8c:a7:aa:0a:06:9f:1f:ab:f4:e9:73: 05:24:9a:bf:5a:0b:0d:b9:9f:b9:1e:76:e4:cc:d0: fb:63:11:00:56:43:bf:ca:99:41:f7:22:0a:fe:e6: e3:1e:05:6a:c8:73:34:4c:91:e4:d5:e0:75:85:3a: 18:47:f5:1c:30:c4:77:02:2d:1e:c1:b3:66:e0:38: 02:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:79:6A:11:99:27:DF:06:EC:65:75:E5:87:0F:85:2E:1B:EE:AB:88 X509v3 Authority Key Identifier: keyid:1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:22:f0:2f:75:dc:69:f8:8d:ed:70:b1:13:ab:b1:51:d6:e1: 1a:a5:58:54:87:a9:74:cd:82:94:85:3f:71:af:19:a3:92:bc: 54:af:0c:7b:6a:63:f2:f7:f9:da:24:b7:63:3c:4c:1c:4a:44: 03:6d:6d:42:50:a3:ac:8b:4d:0b:30:95:8b:7e:11:70:b3:c1: 00:25:c8:00:08:68:6f:0d:5a:5a:92:47:ff:87:69:56:c6:3b: 81:4d:1d:50:e9:42:9c:04:ae:34:c6:22:76:e9:15:0b:38:ff: da:5f:8c:8f:34:22:24:74:6c:47:7f:3e:f2:c8:37:48:16:a2: c2:19:72:c1:8c:81:80:10:02:c8:65:e7:ef:3e:a8:dc:80:9c: 60:4d:4e:55:df:fd:d2:50:90:b6:7c:18:63:67:07:a9:47:66: 00:14:08:f5:b8:22:eb:bc:ed:3c:1f:d0:df:f0:41:0a:a5:e1: fd:d7:ab:96:14:e6:57:24:cf:ba:fe:31:23:16:74:c3:6f:13: 41:15:19:7b:0f:01:91:d5:7e:34:6f:bc:18:16:6d:09:20:d2: 4b:dd:08:6a:b9:7b:50:0d:db:c8:36:5c:e9:36:59:0f:ef:e2: f0:f7:eb:27:5d:16:c8:7e:00:63:dd:72:45:42:b9:54:5d:49: 3c:17:b9:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcnTVElErmdEPffyd62hwfSDw+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhF NDBCN0U0RjAeFw0yNTEyMTkyMzM2MTZaFw0yNTEyMjMwNTQzMTZaMDMxMTAvBgNV BAMTKDgxNzk2QTExOTkyN0RGMDZFQzY1NzVFNTg3MEY4NTJFMUJFRUFCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4QDJPsk9MYXD2Ak4JCysqx31 17pARhFS6yG1AP52vJlWBGi6Iu0fCBsdGrJwUgwMadUHVrDUOGN0poimi9hYhwsb 8DnvfhZHUoFhul2lt1JX9iOMRF6B8zaYz/jH4vcRGgttrjLW3tGC8kZdz+b1mh8Z TokRvojJ1fTgN8/fuUJ77YdDUwXide/0LjIPZKL5kcOH6/P73eP0SdnA5O/rgP7o hIa468xatiTqKaOacGlR4cgQzVWMp6oKBp8fq/TpcwUkmr9aCw25n7keduTM0Ptj EQBWQ7/KmUH3Igr+5uMeBWrIczRMkeTV4HWFOhhH9RwwxHcCLR7Bs2bgOAK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgXlqEZkn3wbsZXXlhw+FLhvuq4gwHwYDVR0j BBgwFoAUGsSa6vSMklHHkT6jjPS6+OQLfk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMS8xQUM0OUFFQUY0 OEM5MjUxQzc5MTNFQTM4Q0Y0QkFGOEU0MEI3RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhFNDBC N0U0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJB RjhFNDBCN0U0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGki8C913Gn4je1wsROrsVHW4RqlWFSHqXTN gpSFP3GvGaOSvFSvDHtqY/L3+dokt2M8TBxKRANtbUJQo6yLTQswlYt+EXCzwQAl yAAIaG8NWlqSR/+HaVbGO4FNHVDpQpwErjTGInbpFQs4/9pfjI80IiR0bEd/PvLI N0gWosIZcsGMgYAQAshl5+8+qNyAnGBNTlXf/dJQkLZ8GGNnB6lHZgAUCPW4Iuu8 7Twf0N/wQQql4f3Xq5YU5lckz7r+MSMWdMNvE0EVGXsPAZHVfjRvvBgWbQkg0kvd CGq5e1AN28g2XOk2WQ/v4vD36yddFsh+AGPdckVCuVRdSTwXuQw= -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:51 2025 by rpki-client