This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: Fb89bSLEDBRXY6a5t123c92RJUkiZ5PFHhc9+yMGhM8= Subject key identifier: 3A:2F:FD:B5:71:38:D6:58:BC:3C:01:08:28:9A:78:A5:CA:40:39:76 Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 733FB32C34E99FA573478E130E5B237CA48676B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 053C Signing time: Wed 24 Dec 2025 14:32:06 +0000 Manifest this update: Wed 24 Dec 2025 14:27:06 +0000 Manifest next update: Sat 27 Dec 2025 17:12:06 +0000 Files and hashes: 1: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=) 2: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: apY/Fi1I0D4nMgwUdy49dG0HZCYyoGyUoNIuTbkTvp0=) 3: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=) 4: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) 5: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 6: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3f:b3:2c:34:e9:9f:a5:73:47:8e:13:0e:5b:23:7c:a4:86:76:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Dec 24 14:27:06 2025 GMT Not After : Dec 27 17:12:06 2025 GMT Subject: CN=3A2FFDB57138D658BC3C0108289A78A5CA403976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:00:6b:75:b7:6d:a6:a4:52:2f:2e:e2:77:d6: bd:a0:65:85:fe:d8:34:be:32:24:0c:af:89:d0:53: 46:c1:28:7f:41:ad:a4:be:85:ef:41:c4:e8:2b:a8: 3d:04:f0:ff:7b:09:dd:41:44:df:60:73:20:1f:df: ef:ae:a3:4d:05:37:e4:d1:bf:72:e2:00:58:fb:5f: 59:03:86:3a:1c:e9:9a:5e:91:11:59:26:67:dc:21: 9b:d8:7b:be:c8:24:3e:93:b1:74:c1:3b:cd:0e:7a: 03:26:66:aa:b0:3b:83:ec:34:a2:c8:14:0b:c0:bf: 7e:d8:61:25:ae:d9:e1:61:07:97:1b:11:a1:12:59: 8f:4b:8b:2b:79:e1:16:a6:e3:e6:18:45:a5:70:c5: 21:39:1d:c0:11:d2:69:74:dd:79:ff:6b:36:0a:e8: d7:45:15:10:40:0b:6c:92:05:a1:b4:f8:d3:60:bf: 27:4c:2d:13:15:bd:a0:ce:17:01:1e:e7:4c:c8:44: ad:6d:95:04:29:15:4d:74:fa:7f:00:15:5c:f5:33: 37:82:86:43:1f:01:fc:62:07:f6:06:d8:c7:79:b0: 57:a3:7a:9d:ed:ad:d2:09:29:24:58:03:22:99:70: bf:da:91:f4:5e:f8:63:78:cf:35:fb:74:55:32:8c: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2F:FD:B5:71:38:D6:58:BC:3C:01:08:28:9A:78:A5:CA:40:39:76 X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:44:a7:3c:0d:16:11:a6:0b:2a:fb:01:48:1a:fb:8e:ab:3f: b2:a8:21:e1:a2:c6:31:b7:2c:b9:27:6d:28:42:d6:44:e5:68: 18:48:ed:bb:5b:9e:01:31:8a:4a:b1:e1:06:03:a3:c0:61:33: cf:ff:d0:d5:71:9e:d5:b4:4d:9e:b4:2a:0a:df:22:e5:f0:50: b7:d8:d5:49:e1:5c:9d:12:ab:df:e6:84:34:3b:6a:74:c9:b5: 8a:4a:51:a5:bd:f2:2a:aa:45:b5:d9:81:62:88:1c:a0:0a:8e: 1b:49:f3:8f:e3:03:fd:46:08:3e:36:5d:32:af:ea:b1:88:8a: bd:88:8d:3e:7b:a7:ef:a2:82:de:6f:ca:7e:37:53:69:4a:cb: 66:04:d9:5a:22:50:7f:fe:59:a8:d3:52:52:e5:6e:21:e2:e2: 6b:2a:99:83:26:db:41:8d:bc:a4:70:9e:30:73:a5:28:95:e1: 3c:42:b6:f3:a8:7b:d0:7f:ed:1b:f1:a2:85:b4:42:c8:17:5d: 52:9b:16:68:25:5e:3e:cf:fb:cf:ae:52:9d:2e:48:6a:1c:8d: 76:34:1c:6e:fe:45:dd:c8:65:aa:5f:8c:22:c3:e0:7b:c6:57: c4:d7:f5:da:c1:3d:04:dd:a8:27:b4:ab:79:43:fa:af:9e:b3: 2e:c5:25:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcz+zLDTpn6VzR44TDlsjfKSGdrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNTEyMjQxNDI3MDZaFw0yNTEyMjcxNzEyMDZaMDMxMTAvBgNV BAMTKDNBMkZGREI1NzEzOEQ2NThCQzNDMDEwODI4OUE3OEE1Q0E0MDM5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvAGt1t22mpFIvLuJ31r2gZYX+ 2DS+MiQMr4nQU0bBKH9BraS+he9BxOgrqD0E8P97Cd1BRN9gcyAf3++uo00FN+TR v3LiAFj7X1kDhjoc6ZpekRFZJmfcIZvYe77IJD6TsXTBO80OegMmZqqwO4PsNKLI FAvAv37YYSWu2eFhB5cbEaESWY9Liyt54Ram4+YYRaVwxSE5HcAR0ml03Xn/azYK 6NdFFRBAC2ySBaG0+NNgvydMLRMVvaDOFwEe50zIRK1tlQQpFU10+n8AFVz1MzeC hkMfAfxiB/YG2Md5sFejep3trdIJKSRYAyKZcL/akfRe+GN4zzX7dFUyjLWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOi/9tXE41li8PAEIKJp4pcpAOXYwHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxEpzwNFhGmCyr7AUga+46rP7KoIeGixjG3 LLknbShC1kTlaBhI7btbngExikqx4QYDo8BhM8//0NVxntW0TZ60KgrfIuXwULfY 1UnhXJ0Sq9/mhDQ7anTJtYpKUaW98iqqRbXZgWKIHKAKjhtJ84/jA/1GCD42XTKv 6rGIir2IjT57p++igt5vyn43U2lKy2YE2VoiUH/+WajTUlLlbiHi4msqmYMm20GN vKRwnjBzpSiV4TxCtvOoe9B/7RvxooW0QsgXXVKbFmglXj7P+8+uUp0uSGocjXY0 HG7+Rd3IZapfjCLD4HvGV8TX9drBPQTdqCe0q3lD+q+esy7FJQE= -----END CERTIFICATE-----Generated at Thu Dec 25 02:49:24 2025 by rpki-client