This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft File: 1FA59BCEE428AFC03264229113A5539024697A14.mft (raw, json) Hash identifier: iCeA2+o9kz7g4FmKX+1pu6FwfwLCWs/tXEt8VOSAm9k= Subject key identifier: 0C:14:95:A4:F8:90:82:1A:D2:21:10:17:52:47:B9:8F:27:3C:1F:E9 Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 Certificate issuer: /CN=1FA59BCEE428AFC03264229113A5539024697A14 Certificate serial: 519B57156A64B01180E3F69A89F84D2001E7787C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft Manifest number: 0535 Signing time: Wed 24 Dec 2025 12:11:10 +0000 Manifest this update: Wed 24 Dec 2025 12:06:10 +0000 Manifest next update: Sat 27 Dec 2025 16:24:10 +0000 Files and hashes: 1: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: nRE7xahMjMVa2flPv3xh8lSxkHzcuvl44NR7lfyUvFs=) 2: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: GvgldOQCXz+vUN0l5dc2pbWfnQQKd7ihZyYtPpd8mRM=) 3: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: pJwvm882Mg2XhUmsTwO4kQV+vaRmkryt9jvtdZPqIks=) 4: 1FA59BCEE428AFC03264229113A5539024697A14.crl (hash: Tlw2zmJTKyrMRMk8yOSWPcfCkB0kYDkIyiu2wJTuNFA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9b:57:15:6a:64:b0:11:80:e3:f6:9a:89:f8:4d:20:01:e7:78:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14 Validity Not Before: Dec 24 12:06:10 2025 GMT Not After : Dec 27 16:24:10 2025 GMT Subject: CN=0C1495A4F890821AD22110175247B98F273C1FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:6f:31:0a:b5:2c:5a:52:55:ad:32:e2:b7: 1d:9e:0e:7c:94:ee:1c:62:b9:54:8c:9e:51:1c:13: 8d:44:c0:33:17:c0:4d:61:cd:54:67:42:90:92:b4: b5:9d:64:fc:59:83:b8:b6:2e:1b:11:5a:fe:6e:c2: bd:2f:24:13:ba:70:fd:9b:3e:8e:bd:22:27:3d:fd: 69:d9:0b:e6:10:2a:34:45:4e:a6:e5:a4:13:b6:8b: ca:94:b6:37:c3:30:a6:ff:c6:23:2f:e9:b2:d3:76: 1a:c9:8b:a1:64:55:91:9b:67:7f:a8:07:06:94:b9: 7c:05:b3:d1:e5:76:0a:09:9e:84:34:d4:59:13:cb: 3d:fe:5b:c2:6e:d6:f0:d7:6c:51:1f:e7:4e:47:3b: 4d:a5:83:f1:96:dc:28:41:76:92:c2:23:eb:9d:f2: 0c:1f:ac:91:1c:d5:20:8a:78:0c:0e:4a:19:0c:b2: dc:04:2f:67:0f:e9:a4:5f:ee:ce:db:69:82:f3:4b: 07:3a:03:66:b6:9a:b9:3a:fd:c0:81:60:33:32:5b: 02:ab:4a:2c:b1:c1:6c:2b:3c:a1:68:ef:4b:45:a4: 42:9a:54:f9:b9:16:0b:9f:25:b6:d1:2b:d0:9b:be: e9:e6:08:15:7b:db:af:b4:df:bf:46:5b:fb:e9:02: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:14:95:A4:F8:90:82:1A:D2:21:10:17:52:47:B9:8F:27:3C:1F:E9 X509v3 Authority Key Identifier: keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b7:f7:4e:cc:21:f9:a7:5b:19:31:3e:39:a6:8f:5b:a5:d0: a5:d6:00:5d:b9:4d:16:86:99:30:d4:05:24:9f:9d:8a:da:dc: 9c:b4:bb:62:71:8d:75:10:0c:15:a5:1b:58:5c:98:d0:62:44: 98:75:ad:2e:a1:7b:53:32:70:17:c5:f8:ad:42:3e:b1:83:e3: 21:d7:e0:dc:50:aa:cb:93:31:f8:09:98:a3:3a:1b:da:7b:f4: a9:0d:a9:95:8c:0d:b2:3c:64:e8:f9:4e:87:73:46:c2:0a:a2: 69:80:83:b2:85:3a:69:29:9f:ef:0e:ef:68:f1:e5:53:ed:51: 7d:8f:1d:52:8d:31:a7:dc:c9:56:03:b6:cc:22:d2:92:eb:21: 13:01:6f:71:0f:2a:4e:e3:37:83:6b:e4:0f:5b:9a:1c:0b:c7: 71:e8:f2:99:a3:b2:f6:b6:83:41:7f:59:b7:f6:58:d2:ac:3a: c7:47:24:45:9c:9a:45:a5:14:ef:de:73:d9:48:02:45:f9:25: 0d:1f:9d:04:7b:e7:7d:0c:ba:13:32:6c:dd:db:3c:55:50:94: 52:74:75:e3:70:60:50:e0:29:d2:3a:e0:eb:18:5f:68:2b:ab: 42:bc:d0:50:42:74:03:5f:81:8c:e2:8c:56:3a:e2:59:7c:99: 81:d4:ab:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZtXFWpksBGA4/aaifhNIAHneHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAy NDY5N0ExNDAeFw0yNTEyMjQxMjA2MTBaFw0yNTEyMjcxNjI0MTBaMDMxMTAvBgNV BAMTKDBDMTQ5NUE0Rjg5MDgyMUFEMjIxMTAxNzUyNDdCOThGMjczQzFGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDW8xCrUsWlJVrTLitx2eDnyU 7hxiuVSMnlEcE41EwDMXwE1hzVRnQpCStLWdZPxZg7i2LhsRWv5uwr0vJBO6cP2b Po69Iic9/WnZC+YQKjRFTqblpBO2i8qUtjfDMKb/xiMv6bLTdhrJi6FkVZGbZ3+o BwaUuXwFs9HldgoJnoQ01FkTyz3+W8Ju1vDXbFEf505HO02lg/GW3ChBdpLCI+ud 8gwfrJEc1SCKeAwOShkMstwEL2cP6aRf7s7baYLzSwc6A2a2mrk6/cCBYDMyWwKr SiyxwWwrPKFo70tFpEKaVPm5FgufJbbRK9CbvunmCBV726+0379GW/vpAovFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDBSVpPiQghrSIRAXUke5jyc8H+kwHwYDVR0j BBgwFoAUH6WbzuQor8AyZCKRE6VTkCRpehQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQ0MjA0My0yNDRlLTRiODctYjAwYy1lNTdmNDg3MWQwZWYvMC8xRkE1OUJDRUU0 MjhBRkMwMzI2NDIyOTExM0E1NTM5MDI0Njk3QTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAyNDY5 N0ExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUz OTAyNDY5N0ExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+3907MIfmnWxkxPjmmj1ul0KXWAF25TRaG mTDUBSSfnYra3Jy0u2JxjXUQDBWlG1hcmNBiRJh1rS6he1MycBfF+K1CPrGD4yHX 4NxQqsuTMfgJmKM6G9p79KkNqZWMDbI8ZOj5TodzRsIKommAg7KFOmkpn+8O72jx 5VPtUX2PHVKNMafcyVYDtswi0pLrIRMBb3EPKk7jN4Nr5A9bmhwLx3Ho8pmjsva2 g0F/Wbf2WNKsOsdHJEWcmkWlFO/ec9lIAkX5JQ0fnQR7530MuhMybN3bPFVQlFJ0 deNwYFDgKdI64OsYX2grq0K80FBCdANfgYzijFY64ll8mYHUq7A= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:41 2025 by rpki-client