This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: Vy1XSQjOfSk9CMr7yU5ZDkRahzAjG5fjwlCreLoIz00= Subject key identifier: D9:68:DA:F4:06:AC:9C:B0:9A:E8:70:8A:26:41:70:C6:0C:6B:40:5F Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 25B14B141281F2C0DF1C4D3FC8999EB670C008B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 0256 Signing time: Tue 16 Dec 2025 19:21:47 +0000 Manifest this update: Tue 16 Dec 2025 19:16:47 +0000 Manifest next update: Sat 20 Dec 2025 01:55:47 +0000 Files and hashes: 1: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) 2: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) 3: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) 4: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) 5: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) 6: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: +xdjocOtElQIG+6u7S7ychH60kvHZe6sItFiSMkswMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b1:4b:14:12:81:f2:c0:df:1c:4d:3f:c8:99:9e:b6:70:c0:08:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Dec 16 19:16:47 2025 GMT Not After : Dec 20 01:55:47 2025 GMT Subject: CN=D968DAF406AC9CB09AE8708A264170C60C6B405F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:c4:6b:ac:4f:30:3f:81:77:05:9f:cd:06: af:9a:dc:ec:16:cb:75:9d:2c:b4:ba:1d:70:87:7d: 88:19:8e:d1:cb:58:25:d8:4d:5a:04:90:51:72:c0: 57:39:d2:01:bb:7e:f5:b3:9c:28:72:7b:44:19:5f: af:1c:59:c2:de:a4:38:cd:9b:26:76:01:99:55:5d: fe:c4:cf:e4:03:86:14:8e:c6:ce:8b:04:f2:bb:6a: b6:d9:19:ae:35:78:73:04:f8:f2:41:67:c4:71:b9: 45:3d:84:2c:9f:62:40:cc:e9:5d:e1:02:81:47:39: 46:8f:18:e0:0e:1f:92:36:24:aa:a6:85:72:b3:d0: 0e:20:19:50:59:3b:9e:cf:c9:11:e0:95:87:73:4d: 71:50:45:fc:5e:08:9a:79:eb:c4:8c:d2:06:63:14: 22:e0:28:a4:35:8c:84:1b:d5:6b:63:56:63:41:8f: 19:9b:14:fe:16:77:17:e5:1e:cc:1a:ef:93:b1:43: 8b:a2:3b:43:be:5d:04:b4:ef:28:1f:5b:76:2a:df: ad:7a:fe:76:4b:04:b3:96:1a:eb:4a:e4:65:ef:6f: 14:89:98:3a:2b:fe:36:43:e0:0e:25:64:1b:55:77: fe:59:61:43:24:d3:91:3a:83:56:27:a7:fe:d1:7f: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:68:DA:F4:06:AC:9C:B0:9A:E8:70:8A:26:41:70:C6:0C:6B:40:5F X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a7:44:9b:70:fb:3c:b0:e9:c4:36:07:64:69:cc:62:d7:a2: 1f:37:33:d3:b8:e5:b5:48:94:c8:12:c8:82:7a:b6:a5:6e:ed: 83:15:ab:bf:b7:f7:50:79:58:02:90:70:42:78:96:00:5f:a7: dd:50:72:bc:1d:e2:7a:cf:91:f1:9d:db:f8:44:7e:4c:9b:c8: 48:7b:26:4c:15:2b:9d:05:e6:ad:26:83:bf:27:39:29:fa:ea: 0b:da:ad:c5:b6:56:93:4e:f9:c0:b5:7c:91:77:8c:8f:d3:a1: 1f:5f:90:54:5f:11:1d:26:ad:b1:5f:71:33:d8:b9:bf:7d:b1: 08:d6:8a:3f:4d:99:78:a3:2f:54:91:10:e3:26:b2:76:24:5b: 59:1c:11:45:0a:7f:3d:7d:7e:7c:bd:98:93:fa:73:ef:8d:80: f8:9d:a0:ec:79:f7:3b:02:9b:6d:bb:e6:77:49:39:4a:28:a6: bc:e4:d9:e6:91:6c:95:06:bc:bd:6a:25:15:fc:59:06:dc:8c: 64:72:c0:65:c9:34:07:2f:49:ca:6f:b5:88:d6:cb:6f:8c:31: e6:42:ec:23:63:55:67:89:8a:cf:d9:7a:ae:fd:d5:b3:f8:ee: 46:33:35:9d:01:44:e3:84:20:80:3d:ee:e3:41:33:b8:be:a8: d3:69:9e:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbFLFBKB8sDfHE0/yJmetnDACLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTEyMTYxOTE2NDdaFw0yNTEyMjAwMTU1NDdaMDMxMTAvBgNV BAMTKEQ5NjhEQUY0MDZBQzlDQjA5QUU4NzA4QTI2NDE3MEM2MEM2QjQwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPcRrrE8wP4F3BZ/NBq+a3OwW y3WdLLS6HXCHfYgZjtHLWCXYTVoEkFFywFc50gG7fvWznChye0QZX68cWcLepDjN myZ2AZlVXf7Ez+QDhhSOxs6LBPK7arbZGa41eHME+PJBZ8RxuUU9hCyfYkDM6V3h AoFHOUaPGOAOH5I2JKqmhXKz0A4gGVBZO57PyRHglYdzTXFQRfxeCJp568SM0gZj FCLgKKQ1jIQb1WtjVmNBjxmbFP4WdxflHswa75OxQ4uiO0O+XQS07ygfW3Yq3616 /nZLBLOWGutK5GXvbxSJmDor/jZD4A4lZBtVd/5ZYUMk05E6g1Ynp/7RfwtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Wja9AasnLCa6HCKJkFwxgxrQF8wHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKnRJtw+zyw6cQ2B2RpzGLXoh83M9O45bVI lMgSyIJ6tqVu7YMVq7+391B5WAKQcEJ4lgBfp91Qcrwd4nrPkfGd2/hEfkybyEh7 JkwVK50F5q0mg78nOSn66gvarcW2VpNO+cC1fJF3jI/ToR9fkFRfER0mrbFfcTPY ub99sQjWij9NmXijL1SREOMmsnYkW1kcEUUKfz19fny9mJP6c++NgPidoOx59zsC m2275ndJOUooprzk2eaRbJUGvL1qJRX8WQbcjGRywGXJNAcvScpvtYjWy2+MMeZC 7CNjVWeJis/Zeq791bP47kYzNZ0BROOEIIA97uNBM7i+qNNpnqI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:56 2025 by rpki-client