This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json) Hash identifier: +gszVDlivtlRR2w9descyersVBm6YOVtGyXlNzcC73w= Subject key identifier: E8:3F:7C:FF:68:4D:4D:E4:73:E0:E6:46:17:D9:A0:1F:16:81:31:4E Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Certificate serial: 63B0E234309A9AEDB29B3361411662BED878FBA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft Manifest number: 0234 Signing time: Wed 17 Dec 2025 11:51:16 +0000 Manifest this update: Wed 17 Dec 2025 11:46:16 +0000 Manifest next update: Sat 20 Dec 2025 21:39:16 +0000 Files and hashes: 1: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=) 2: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: wM3aaBQU4HpuYUcyDf+3ZS5BWcuPobd6QTTDdfMQuHU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 21:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b0:e2:34:30:9a:9a:ed:b2:9b:33:61:41:16:62:be:d8:78:fb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Validity Not Before: Dec 17 11:46:16 2025 GMT Not After : Dec 20 21:39:16 2025 GMT Subject: CN=E83F7CFF684D4DE473E0E64617D9A01F1681314E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:74:a5:eb:d7:a2:cb:06:3a:7b:bf:fa:e3:34: e1:67:38:70:7d:de:7e:6a:6e:70:5b:aa:b9:26:61: 57:fc:1b:c6:91:28:a9:d6:5b:d1:56:b0:91:3e:c1: 65:65:19:5f:1a:6d:0d:6e:c2:b2:85:5b:7c:6e:a5: 55:4b:43:df:74:01:26:b3:f4:52:c3:2f:f5:8a:2c: a3:c1:b4:d8:07:9b:ca:7a:e2:3e:41:8f:fc:6c:11: a4:72:9b:eb:ed:18:98:76:b9:d3:ac:64:d7:f6:69: 14:7d:ef:0d:2e:37:e9:12:7c:f2:8b:c4:04:15:6c: 5d:29:c6:73:06:a3:40:e4:d5:d5:bb:3b:dd:73:e6: f3:76:ad:f8:52:bc:13:85:83:25:57:98:0a:a2:1f: ed:42:c4:70:a8:14:ad:2d:51:38:bb:73:0d:ba:01: 59:7c:74:2a:6d:77:7e:99:8c:4c:91:40:50:35:81: 91:8e:ad:56:b6:09:6a:b7:67:6d:f1:90:2a:ce:c2: d8:6e:c6:b3:7c:29:c4:5f:c5:23:da:95:f1:2b:5a: cd:06:60:84:3c:fc:9b:c1:41:93:a9:ba:da:74:b2: 28:e9:34:ac:97:eb:7a:6c:97:9d:23:83:9b:ff:c5: 01:7a:ea:32:de:f9:ff:9e:54:d5:e7:6f:58:15:61: 84:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3F:7C:FF:68:4D:4D:E4:73:E0:E6:46:17:D9:A0:1F:16:81:31:4E X509v3 Authority Key Identifier: keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8b:0a:8b:47:ca:53:82:94:2e:2d:b6:aa:1f:88:65:c6:63: fb:55:c3:ec:80:b8:95:ab:e4:48:83:c1:7a:6a:b5:b6:a9:4a: a6:f2:c1:09:77:6d:cd:ff:e4:a0:b2:93:f4:ab:3b:43:1e:ee: d0:61:bf:78:00:11:f9:61:cb:ba:35:28:b8:14:b8:bf:e6:28: ac:8b:67:97:30:75:84:a6:98:ff:81:8f:9e:5e:52:ca:5c:9c: 49:3f:b4:2d:fb:ce:35:ac:cd:40:5f:fc:4a:14:55:31:e2:56: b1:d5:f8:3f:65:a0:89:b6:04:0f:42:a2:b9:0b:67:6f:ce:b8: ee:e8:30:c2:ca:b3:97:3f:02:4e:39:99:53:f3:b1:cb:6f:fb: ee:4b:7b:d6:81:54:0b:7e:43:71:ca:66:86:fc:a7:78:e9:c3: 46:56:49:6c:f0:fb:00:18:6a:76:69:fa:3b:94:48:79:58:30: d5:7a:a7:96:4e:d6:b6:10:94:4e:16:b1:9c:91:13:95:41:3e: 8a:39:4a:21:8e:34:90:7a:0d:27:e8:96:db:d5:b8:86:3d:af: 85:46:d6:23:92:2e:2c:75:1d:a5:be:c2:58:7f:5c:c9:a6:1b: 19:ba:d2:29:0a:3e:f0:9f:9a:1a:34:37:fd:5e:1c:e5:10:70: 33:58:02:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7DiNDCamu2ymzNhQRZivth4+6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC MzZCMjYzODAeFw0yNTEyMTcxMTQ2MTZaFw0yNTEyMjAyMTM5MTZaMDMxMTAvBgNV BAMTKEU4M0Y3Q0ZGNjg0RDRERTQ3M0UwRTY0NjE3RDlBMDFGMTY4MTMxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOdKXr16LLBjp7v/rjNOFnOHB9 3n5qbnBbqrkmYVf8G8aRKKnWW9FWsJE+wWVlGV8abQ1uwrKFW3xupVVLQ990ASaz 9FLDL/WKLKPBtNgHm8p64j5Bj/xsEaRym+vtGJh2udOsZNf2aRR97w0uN+kSfPKL xAQVbF0pxnMGo0Dk1dW7O91z5vN2rfhSvBOFgyVXmAqiH+1CxHCoFK0tUTi7cw26 AVl8dCptd36ZjEyRQFA1gZGOrVa2CWq3Z23xkCrOwthuxrN8KcRfxSPalfErWs0G YIQ8/JvBQZOputp0sijpNKyX63psl50jg5v/xQF66jLe+f+eVNXnb1gVYYQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6D98/2hNTeRz4OZGF9mgHxaBMU4wHwYDVR0j BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1 NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4 NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWLCotHylOClC4ttqofiGXGY/tVw+yAuJWr 5EiDwXpqtbapSqbywQl3bc3/5KCyk/SrO0Me7tBhv3gAEflhy7o1KLgUuL/mKKyL Z5cwdYSmmP+Bj55eUspcnEk/tC37zjWszUBf/EoUVTHiVrHV+D9loIm2BA9CorkL Z2/OuO7oMMLKs5c/Ak45mVPzsctv++5Le9aBVAt+Q3HKZob8p3jpw0ZWSWzw+wAY anZp+juUSHlYMNV6p5ZO1rYQlE4WsZyRE5VBPoo5SiGONJB6DSfoltvVuIY9r4VG 1iOSLix1HaW+wlh/XMmmGxm60ikKPvCfmho0N/1eHOUQcDNYAtE= -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:17 2025 by rpki-client