This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json) Hash identifier: 7I5fZ/D86TudTCxg32rJRoUAwKJpAg/Ln08Z8liHjNo= Subject key identifier: 4D:6B:87:06:56:4F:59:AF:4C:10:34:8B:0B:D7:4F:C0:0B:87:9E:DD Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 Certificate issuer: /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Certificate serial: 66C3B065D077F7E2F0BFF8B94CCDE0A7010AC0BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject info access: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft Manifest number: 0532 Signing time: Mon 22 Dec 2025 17:40:43 +0000 Manifest this update: Mon 22 Dec 2025 17:35:43 +0000 Manifest next update: Thu 25 Dec 2025 23:31:43 +0000 Files and hashes: 1: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: uwP6NWIIfI/LDL7oJCVOhkyMHj9sPpEmyvxSBmvYrNI=) 2: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: orZMBlY9QwaffF3Sj5GAYnuUKegFXWi6cel4pBtcO+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c3:b0:65:d0:77:f7:e2:f0:bf:f8:b9:4c:cd:e0:a7:01:0a:c0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Validity Not Before: Dec 22 17:35:43 2025 GMT Not After : Dec 25 23:31:43 2025 GMT Subject: CN=4D6B8706564F59AF4C10348B0BD74FC00B879EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:ce:2c:eb:95:0c:b8:c5:f0:03:23:e2:d0: e3:35:6d:a1:bc:98:e2:20:d8:15:68:eb:4c:d4:75: 05:a3:a7:b5:38:23:14:9d:e9:ca:af:d0:69:4f:bd: 4f:ed:15:4e:3b:d9:51:f2:ec:5c:09:39:81:a3:73: 38:13:52:b2:ba:dd:aa:da:e3:18:7f:d1:63:4e:41: 4e:3c:12:6e:a3:99:a4:c0:6a:0b:29:d0:7c:19:3a: 4c:ce:74:3f:c1:89:82:fa:b4:66:19:c5:43:23:a8: 91:ff:30:13:92:53:52:33:a2:cc:72:f4:cf:95:6a: ec:fb:e1:93:98:53:58:0d:d5:3f:f5:a5:10:a5:1a: bb:21:e0:28:02:92:0d:1e:e3:7f:2b:b0:ac:a1:a9: 2b:06:e8:ca:f2:4f:7d:c0:a0:45:d7:22:e9:09:26: dc:ce:67:3d:2a:70:06:56:76:ff:90:58:15:fd:e1: 3f:f9:1e:1c:89:f3:70:28:a8:ff:c3:d2:c3:f2:df: be:da:63:20:74:fa:29:7a:c2:60:a0:90:f4:8b:4e: d1:84:bb:28:14:d5:b4:22:f7:b7:24:37:da:65:73: 12:04:66:01:8b:89:19:b5:ea:c8:be:5d:54:21:3f: ff:26:60:a8:74:a9:15:24:4a:33:68:ab:01:d6:21: b8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:87:06:56:4F:59:AF:4C:10:34:8B:0B:D7:4F:C0:0B:87:9E:DD X509v3 Authority Key Identifier: keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4c:2c:ae:ee:b0:65:ee:7b:da:76:d1:80:d2:54:0d:92:ff: 45:2d:b6:4f:3d:94:53:d4:ef:dc:da:64:09:0e:a5:4e:79:99: e6:82:09:6d:2b:6f:c5:db:c2:b3:f9:87:25:f9:fa:d2:bb:ed: 90:5c:5e:ae:80:16:1f:e7:73:76:61:e4:c8:9c:ec:0a:af:9c: 52:df:a9:7c:0e:c4:22:cb:7e:37:ff:24:94:76:ea:16:bc:2e: 53:e0:a9:2a:df:d2:fd:01:37:24:e7:55:3f:84:20:f9:6a:5f: 06:4f:62:05:bf:c7:8a:42:0e:83:81:ee:7b:75:cc:b2:87:ef: 6d:3f:91:50:d3:e8:b3:bc:5a:a1:39:87:6a:a2:98:4f:51:b0: 52:a2:ab:5d:77:c4:ee:18:ca:e0:0a:7f:7b:38:ab:aa:33:8b: ea:10:d3:82:a6:9a:a5:65:68:5e:05:09:8b:dc:b1:48:d7:c6: 0b:5a:f4:d3:45:d6:f3:1f:67:6c:d0:b5:a9:2c:87:35:6a:84: 84:13:fe:33:86:89:44:37:cf:cb:45:7c:36:c0:47:7c:95:12: 4c:9d:60:28:94:f2:d1:d9:b1:b2:4a:ec:b3:fa:86:84:a4:41: b6:a3:db:ce:45:65:19:ef:36:7e:ff:f9:eb:75:4b:60:8a:d8: 84:38:e7:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsOwZdB39+Lwv/i5TM3gpwEKwLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUw MkEzQTAxODAeFw0yNTEyMjIxNzM1NDNaFw0yNTEyMjUyMzMxNDNaMDMxMTAvBgNV BAMTKDRENkI4NzA2NTY0RjU5QUY0QzEwMzQ4QjBCRDc0RkMwMEI4NzlFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDH84s65UMuMXwAyPi0OM1baG8 mOIg2BVo60zUdQWjp7U4IxSd6cqv0GlPvU/tFU472VHy7FwJOYGjczgTUrK63ara 4xh/0WNOQU48Em6jmaTAagsp0HwZOkzOdD/BiYL6tGYZxUMjqJH/MBOSU1Izosxy 9M+Vauz74ZOYU1gN1T/1pRClGrsh4CgCkg0e438rsKyhqSsG6MryT33AoEXXIukJ JtzOZz0qcAZWdv+QWBX94T/5HhyJ83AoqP/D0sPy377aYyB0+il6wmCgkPSLTtGE uygU1bQi97ckN9plcxIEZgGLiRm16si+XVQhP/8mYKh0qRUkSjNoqwHWIbiZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTWuHBlZPWa9MEDSLC9dPwAuHnt0wHwYDVR0j BBgwFoAUkZtg5NfhFxtmJPMYraG3RQKjoBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MDBhZWQxZC05NGM5LTQ5YTYtYTYwOS04ODJlMDNjZDA3YmEvMC85MTlCNjBFNEQ3 RTExNzFCNjYyNEYzMThBREExQjc0NTAyQTNBMDE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUwMkEz QTAxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzAwYWVkMWQtOTRjOS00OWE2LWE2 MDktODgyZTAzY2QwN2JhLzAvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3 NDUwMkEzQTAxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhMLK7usGXue9p20YDSVA2S/0Uttk89lFPU 79zaZAkOpU55meaCCW0rb8XbwrP5hyX5+tK77ZBcXq6AFh/nc3Zh5Mic7AqvnFLf qXwOxCLLfjf/JJR26ha8LlPgqSrf0v0BNyTnVT+EIPlqXwZPYgW/x4pCDoOB7nt1 zLKH720/kVDT6LO8WqE5h2qimE9RsFKiq113xO4YyuAKf3s4q6ozi+oQ04KmmqVl aF4FCYvcsUjXxgta9NNF1vMfZ2zQtakshzVqhIQT/jOGiUQ3z8tFfDbAR3yVEkyd YCiU8tHZsbJK7LP6hoSkQbaj285FZRnvNn7/+et1S2CK2IQ45+c= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:38 2025 by rpki-client