This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: JwsiNnfoI+vCqIYoGbI9Tv3MQbSASwzM3BHQ0FBpYc0= Subject key identifier: 41:03:5E:4D:FD:40:73:8B:89:C0:DB:BA:E3:AF:08:FE:F3:27:97:E9 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 39238568B8364A92F12729CAA43078C0B14CC96F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 04A4 Signing time: Thu 18 Dec 2025 23:03:04 +0000 Manifest this update: Thu 18 Dec 2025 22:58:04 +0000 Manifest next update: Mon 22 Dec 2025 05:10:04 +0000 Files and hashes: 1: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=) 2: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=) 3: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: tf673MU/6yIf3fG8356CRWhySU1MGvJNaBZeOh8Y/h4=) 4: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 05:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:23:85:68:b8:36:4a:92:f1:27:29:ca:a4:30:78:c0:b1:4c:c9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Dec 18 22:58:04 2025 GMT Not After : Dec 22 05:10:04 2025 GMT Subject: CN=41035E4DFD40738B89C0DBBAE3AF08FEF32797E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:f2:50:2a:8f:5b:09:e4:a5:ca:3b:30:ff: 07:40:a2:88:32:ff:af:b5:f5:a0:eb:e1:d0:b7:99: 07:6d:de:d8:bd:52:2c:f3:bf:ad:fb:1f:ed:74:22: 57:e4:82:e5:83:e1:de:87:b0:b8:ea:21:17:25:11: 74:f8:7a:67:90:b6:bf:92:0e:f9:19:d8:ac:9e:96: 71:4e:d2:39:e9:3e:59:88:66:17:92:61:a9:47:5d: 18:77:41:c8:60:36:72:34:5e:21:f9:bc:18:69:90: 9c:56:bd:18:ae:25:16:49:62:59:d6:8a:4c:c0:b5: 9c:3f:44:56:75:b3:1b:66:2c:7d:35:1c:dd:24:15: 43:d1:e9:fd:99:f5:5b:a3:9b:2a:ad:92:18:0b:7b: 11:a6:c6:a5:f3:bb:51:24:b7:b9:93:ee:e1:1a:ec: 5f:82:47:92:ee:f3:63:8b:56:7c:71:24:5d:07:96: 5e:ab:c9:cc:17:2a:3f:73:e7:7f:1b:04:2f:5b:51: 67:22:fb:c8:fa:c9:bb:05:2c:47:d5:7d:1d:8b:46: 09:6f:b2:fe:cb:fb:22:c5:12:60:9f:3f:0a:42:85: fc:76:fe:67:80:24:e4:e9:61:77:0e:56:a2:fc:7f: 82:72:93:2e:c8:a1:c1:d6:a3:bb:29:af:99:6d:95: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:03:5E:4D:FD:40:73:8B:89:C0:DB:BA:E3:AF:08:FE:F3:27:97:E9 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:31:b7:63:01:ba:28:fc:4c:84:c7:24:5e:b0:b3:61:5d:0c: 21:81:d2:fa:a2:cb:2d:44:31:65:1c:5e:25:e6:dc:27:e9:ee: 6f:4b:5c:a3:dc:f8:0a:7f:bb:9b:33:b3:fb:f1:e1:ff:12:67: 81:d3:db:9d:31:e4:d7:7f:70:3e:36:ba:05:0b:08:2e:50:d0: 59:1a:0d:2e:f2:ee:30:fd:81:df:d9:28:c5:31:49:8c:2c:12: 1b:d0:d5:24:7e:ac:b3:15:cd:0e:a7:85:a2:7e:9c:d4:78:fa: 18:bf:31:47:c9:f3:34:06:29:c2:16:b1:df:45:44:f6:6b:5f: 8c:b3:1e:bf:0a:01:9a:2d:82:1f:29:af:07:32:78:0b:54:4c: 39:d3:6d:52:f4:b7:14:97:69:6e:fe:ff:27:4e:1c:0f:94:72: d5:4f:c0:d0:a2:fa:73:d0:aa:64:a5:32:4e:da:7a:ca:bc:0e: c4:ac:df:97:7b:25:4e:bb:29:26:36:14:32:c2:40:d8:28:f8: 82:d4:c6:72:bb:52:bc:8b:36:4a:46:06:5e:56:61:31:4e:40: c8:dd:45:e4:66:e6:78:54:da:9f:dc:7a:1c:de:0a:68:7e:da: 84:1c:57:15:d1:97:f3:50:5f:17:b5:5c:60:26:ea:23:06:77: 48:7c:8a:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSOFaLg2SpLxJynKpDB4wLFMyW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTEyMTgyMjU4MDRaFw0yNTEyMjIwNTEwMDRaMDMxMTAvBgNV BAMTKDQxMDM1RTRERkQ0MDczOEI4OUMwREJCQUUzQUYwOEZFRjMyNzk3RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNa/JQKo9bCeSlyjsw/wdAoogy /6+19aDr4dC3mQdt3ti9Uizzv637H+10IlfkguWD4d6HsLjqIRclEXT4emeQtr+S DvkZ2KyelnFO0jnpPlmIZheSYalHXRh3QchgNnI0XiH5vBhpkJxWvRiuJRZJYlnW ikzAtZw/RFZ1sxtmLH01HN0kFUPR6f2Z9VujmyqtkhgLexGmxqXzu1Ekt7mT7uEa 7F+CR5Lu82OLVnxxJF0Hll6rycwXKj9z538bBC9bUWci+8j6ybsFLEfVfR2LRglv sv7L+yLFEmCfPwpChfx2/meAJOTpYXcOVqL8f4Jyky7IocHWo7spr5ltlbPnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQQNeTf1Ac4uJwNu6468I/vMnl+kwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUxt2MBuij8TITHJF6ws2FdDCGB0vqiyy1E MWUcXiXm3Cfp7m9LXKPc+Ap/u5szs/vx4f8SZ4HT250x5Nd/cD42ugULCC5Q0Fka DS7y7jD9gd/ZKMUxSYwsEhvQ1SR+rLMVzQ6nhaJ+nNR4+hi/MUfJ8zQGKcIWsd9F RPZrX4yzHr8KAZotgh8prwcyeAtUTDnTbVL0txSXaW7+/ydOHA+UctVPwNCi+nPQ qmSlMk7aesq8DsSs35d7JU67KSY2FDLCQNgo+ILUxnK7UryLNkpGBl5WYTFOQMjd ReRm5nhU2p/cehzeCmh+2oQcVxXRl/NQXxe1XGAm6iMGd0h8iuo= -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:50 2025 by rpki-client