This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft File: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft (raw, json) Hash identifier: Asf2OlOuXvZEOgFyiBqaKNHHR+janCZaFszYEjvY3A8= Subject key identifier: 9D:35:59:46:C4:25:70:E1:D9:4D:8D:A5:F8:BE:1C:78:75:28:30:30 Authority key identifier: 81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 Certificate issuer: /CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Certificate serial: 3560C7D4549AD9B11D8B4159FA494FA0118D2DF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft Manifest number: 01D7 Signing time: Wed 17 Dec 2025 07:12:10 +0000 Manifest this update: Wed 17 Dec 2025 07:07:10 +0000 Manifest next update: Sat 20 Dec 2025 07:50:10 +0000 Files and hashes: 1: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl (hash: zw1MeblO7aXhRKADB9GU2jpOfwT/j66kQHLRCv0fdtk=) 2: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: tGutfHYLd+1w5afOstLzep3nkeXsmFCSKPGKSJYYWl0=) 3: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: YeGR8oOh1UfyEQoGwDtsTMZrPfaKasaF2ECFyYxm2Hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 07:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:60:c7:d4:54:9a:d9:b1:1d:8b:41:59:fa:49:4f:a0:11:8d:2d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Validity Not Before: Dec 17 07:07:10 2025 GMT Not After : Dec 20 07:50:10 2025 GMT Subject: CN=9D355946C42570E1D94D8DA5F8BE1C7875283030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:ba:2f:d9:e4:b4:8a:d5:e3:f4:a9:dd:15: 4e:2e:0c:7e:c6:25:6c:f0:fe:74:94:72:b5:1e:f0: 1f:22:d2:12:2f:47:9a:a4:78:54:4c:8d:5a:7e:c3: ed:5f:66:e2:f4:bc:8a:f6:10:d1:f2:ad:7a:3d:8f: 14:2c:57:48:bf:43:d2:7c:4e:cb:5e:0f:6b:39:45: 5f:05:2f:ca:c7:d2:d0:89:8c:e1:b1:57:e4:de:56: 1e:44:7b:6a:6b:d8:de:7e:e9:f4:a7:3e:de:ea:bb: 89:90:08:84:fd:ae:c9:8b:76:81:ca:7a:95:d3:50: 45:a1:eb:d3:00:e5:8a:0f:f2:69:6a:d7:dc:ce:c1: 49:3f:cd:85:5b:c7:22:9c:cf:a9:c3:70:79:67:ef: cb:ea:91:6f:2a:3c:bf:b6:86:e9:c3:f4:4b:07:4c: f7:d7:72:19:2b:fc:e1:be:43:a9:09:98:27:6c:19: 23:2f:26:5a:a6:eb:0d:59:fd:8f:1e:24:56:11:dc: ea:53:85:03:39:4b:c4:6f:39:03:a2:9a:a4:fe:d2: 5f:ba:af:d0:99:16:53:e3:a5:cb:b6:6c:7a:5c:57: c1:79:5b:d9:c9:3f:bc:ea:f1:02:b7:f9:f8:1b:50: 90:e2:44:0a:6a:34:74:a8:d5:fd:ee:6e:70:cf:61: 6a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:35:59:46:C4:25:70:E1:D9:4D:8D:A5:F8:BE:1C:78:75:28:30:30 X509v3 Authority Key Identifier: keyid:81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:85:3d:9e:51:67:34:dc:0e:f2:0a:58:04:14:c1:a1:4c:b7: 8b:f5:bb:71:22:a8:65:89:3e:9d:c6:5b:27:a8:7c:18:cb:20: 44:58:4b:f1:01:5a:31:48:d2:ee:fc:03:eb:ce:52:e4:80:ab: d2:cd:3d:50:01:91:9f:b9:aa:89:8b:9d:1b:dd:0a:43:87:48: ab:5d:ca:7b:3f:44:55:49:40:7c:1c:ea:9e:e6:2f:b6:a5:84: 15:ad:96:e8:fb:42:31:e2:b3:8f:29:99:97:f0:d2:8a:f8:94: f7:b9:95:be:83:f4:65:9a:68:28:70:bb:4b:61:94:7a:e9:8b: 30:98:61:23:ef:49:b6:5d:41:c8:6a:c2:52:9a:86:58:64:83: 8f:51:19:5b:98:77:72:e3:7e:f6:05:df:ee:98:10:e1:43:d2: 2a:82:71:c5:cb:91:0e:f0:13:9e:64:c3:c2:38:38:fa:22:37: 23:73:37:73:60:a6:1c:09:9e:7c:4e:f4:cc:3b:85:0f:7e:f5: 85:c0:c6:46:f4:71:8a:8c:ba:b2:37:a8:b5:9c:50:eb:71:bc: dd:bd:41:60:62:5b:32:03:6f:84:cb:f5:fa:4b:b9:2f:0e:ac: df:4d:1c:64:31:20:ed:fc:87:f6:ec:5b:4b:c7:57:15:ba:d8: a2:a8:b9:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWDH1FSa2bEdi0FZ+klPoBGNLfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3 MDUwN0ZDMzAeFw0yNTEyMTcwNzA3MTBaFw0yNTEyMjAwNzUwMTBaMDMxMTAvBgNV BAMTKDlEMzU1OTQ2QzQyNTcwRTFEOTREOERBNUY4QkUxQzc4NzUyODMwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCts7ov2eS0itXj9KndFU4uDH7G JWzw/nSUcrUe8B8i0hIvR5qkeFRMjVp+w+1fZuL0vIr2ENHyrXo9jxQsV0i/Q9J8 TsteD2s5RV8FL8rH0tCJjOGxV+TeVh5Ee2pr2N5+6fSnPt7qu4mQCIT9rsmLdoHK epXTUEWh69MA5YoP8mlq19zOwUk/zYVbxyKcz6nDcHln78vqkW8qPL+2hunD9EsH TPfXchkr/OG+Q6kJmCdsGSMvJlqm6w1Z/Y8eJFYR3OpThQM5S8RvOQOimqT+0l+6 r9CZFlPjpcu2bHpcV8F5W9nJP7zq8QK3+fgbUJDiRApqNHSo1f3ubnDPYWo5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTVZRsQlcOHZTY2l+L4ceHUoMDAwHwYDVR0j BBgwFoAUgZrQQ6ei+EJKvJ5s/ZxRhnBQf8MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzhkNGVlMi01NDllLTQxNjAtOGQ2Zi04NzczMGU4YWU1ZTIvMC84MTlBRDA0M0E3 QTJGODQyNEFCQzlFNkNGRDlDNTE4NjcwNTA3RkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3MDUw N0ZDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUx ODY3MDUwN0ZDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSFPZ5RZzTcDvIKWAQUwaFMt4v1u3EiqGWJ Pp3GWyeofBjLIERYS/EBWjFI0u78A+vOUuSAq9LNPVABkZ+5qomLnRvdCkOHSKtd yns/RFVJQHwc6p7mL7alhBWtluj7QjHis48pmZfw0or4lPe5lb6D9GWaaChwu0th lHrpizCYYSPvSbZdQchqwlKahlhkg49RGVuYd3LjfvYF3+6YEOFD0iqCccXLkQ7w E55kw8I4OPoiNyNzN3NgphwJnnxO9Mw7hQ9+9YXAxkb0cYqMurI3qLWcUOtxvN29 QWBiWzIDb4TL9fpLuS8OrN9NHGQxIO38h/bsW0vHVxW62KKoubE= -----END CERTIFICATE-----Generated at Fri Dec 19 08:50:12 2025 by rpki-client