This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: ewgZ7bgDTzEMWR/9SWr3bnTFzpJUnB9o5iODKSFq3OA= Subject key identifier: 02:00:C2:91:27:59:3E:8A:2E:78:8B:61:47:3B:77:55:34:90:72:B2 Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 47F1DF065C6F15DC98EC91EFE4DAE066511DC831 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 0212 Signing time: Mon 22 Dec 2025 23:00:56 +0000 Manifest this update: Mon 22 Dec 2025 22:55:56 +0000 Manifest next update: Fri 26 Dec 2025 08:29:56 +0000 Files and hashes: 1: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: pMQiWvKd48wf5rITL9Zbhu99YItoT/h4E7pYsOjpbzM=) 2: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f1:df:06:5c:6f:15:dc:98:ec:91:ef:e4:da:e0:66:51:1d:c8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Dec 22 22:55:56 2025 GMT Not After : Dec 26 08:29:56 2025 GMT Subject: CN=0200C29127593E8A2E788B61473B7755349072B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f5:17:0c:fe:14:7f:3c:e3:19:3f:17:9e:f2: d1:b3:0f:29:53:d8:06:26:bd:2b:ce:28:ea:46:bf: 35:9c:ae:c8:e8:c2:e1:74:b9:2a:09:21:24:78:bd: 65:8e:93:91:d1:e4:65:e1:cf:33:be:34:a3:3b:e2: ac:62:e7:e3:89:51:54:96:61:a0:60:ec:ff:3b:e9: 4e:f2:c6:bb:f6:c9:85:d6:6b:ac:46:06:16:e7:65: ac:f2:8a:f9:87:6f:60:57:a6:f4:5a:f2:3c:dc:3a: e6:b1:25:85:79:9a:31:44:2b:98:c9:6a:17:1c:74: 3d:b8:7d:ee:82:f8:3d:b2:03:58:56:76:86:e4:bc: 0b:f2:da:fb:4d:4c:35:43:0f:d7:e1:c8:95:4c:66: 38:06:97:fd:50:57:d4:85:6f:71:8c:01:c0:8d:8e: d8:83:af:de:6f:ff:98:07:57:63:29:b7:9a:4d:d1: 3a:9e:96:69:33:4a:b9:38:f9:26:24:b4:a2:70:dc: 26:f1:66:df:63:9b:79:be:c1:b9:b2:0d:07:b6:eb: cf:9e:de:c0:1c:78:45:c9:e3:aa:81:1f:23:7a:83: 5c:9e:5e:a4:ec:f6:6b:ba:3b:f7:59:35:b3:74:29: 44:ba:f7:ec:f6:a7:12:a0:38:75:2a:0a:db:6b:17: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:00:C2:91:27:59:3E:8A:2E:78:8B:61:47:3B:77:55:34:90:72:B2 X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d4:82:98:03:64:7c:1b:d6:8b:9a:00:98:8a:f3:5d:84:4b: 98:64:a4:a0:da:ad:60:0a:dd:d9:aa:de:d6:fa:26:ca:38:b6: 7e:d6:29:9e:18:71:1a:55:f3:5d:41:0f:de:59:70:84:29:92: f9:04:ca:bc:08:42:30:5e:f4:cc:30:33:9d:9c:72:9e:14:a6: 93:86:86:27:f1:3b:cb:c6:7d:f3:7b:84:0b:5f:97:69:a4:6b: 0a:fd:d1:4b:f2:7c:5c:fc:84:21:18:da:8f:12:2a:7d:97:0f: 80:ad:85:f3:50:4f:ed:bc:de:33:47:ed:89:5c:10:13:04:1c: a8:8c:dc:2b:24:7e:53:32:98:d0:09:47:25:38:a8:d3:d9:07: 51:0d:83:72:4a:3c:a7:c3:ac:cf:65:c2:bf:c5:d6:de:03:de: 7c:51:69:e8:75:dd:0d:e4:53:95:f2:c9:79:0e:a5:af:63:17: 9f:a8:d5:70:33:7e:06:b7:75:eb:ad:60:68:84:3c:e8:74:a0: f1:33:d2:27:f4:2f:30:fb:87:5c:3d:39:bc:53:2c:a5:34:1d: 00:7c:18:fe:26:12:28:d8:f8:a1:ce:b7:4b:e1:16:b5:75:49: 9e:0b:cf:2d:dd:c1:dd:27:25:bb:e4:8e:1f:c4:06:68:5d:ae: 9a:ed:99:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/HfBlxvFdyY7JHv5NrgZlEdyDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNTEyMjIyMjU1NTZaFw0yNTEyMjYwODI5NTZaMDMxMTAvBgNV BAMTKDAyMDBDMjkxMjc1OTNFOEEyRTc4OEI2MTQ3M0I3NzU1MzQ5MDcyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD09RcM/hR/POMZPxee8tGzDylT 2AYmvSvOKOpGvzWcrsjowuF0uSoJISR4vWWOk5HR5GXhzzO+NKM74qxi5+OJUVSW YaBg7P876U7yxrv2yYXWa6xGBhbnZazyivmHb2BXpvRa8jzcOuaxJYV5mjFEK5jJ ahccdD24fe6C+D2yA1hWdobkvAvy2vtNTDVDD9fhyJVMZjgGl/1QV9SFb3GMAcCN jtiDr95v/5gHV2Mpt5pN0TqelmkzSrk4+SYktKJw3CbxZt9jm3m+wbmyDQe268+e 3sAceEXJ46qBHyN6g1yeXqTs9mu6O/dZNbN0KUS69+z2pxKgOHUqCttrF7obAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAgDCkSdZPooueIthRzt3VTSQcrIwHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPUgpgDZHwb1ouaAJiK812ES5hkpKDarWAK 3dmq3tb6Jso4tn7WKZ4YcRpV811BD95ZcIQpkvkEyrwIQjBe9MwwM52ccp4UppOG hifxO8vGffN7hAtfl2mkawr90UvyfFz8hCEY2o8SKn2XD4CthfNQT+283jNH7Ylc EBMEHKiM3CskflMymNAJRyU4qNPZB1ENg3JKPKfDrM9lwr/F1t4D3nxRaeh13Q3k U5XyyXkOpa9jF5+o1XAzfga3deutYGiEPOh0oPEz0if0LzD7h1w9ObxTLKU0HQB8 GP4mEijY+KHOt0vhFrV1SZ4Lzy3dwd0nJbvkjh/EBmhdrprtmcg= -----END CERTIFICATE-----Generated at Tue Dec 23 20:41:57 2025 by rpki-client