This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft File: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft (raw, json) Hash identifier: Zy519FTWuUJNdyQe7fgnJ7KfnkKcpxZadYTElXN6wNI= Subject key identifier: 74:62:CA:DD:49:86:FA:21:2C:CF:5D:A0:8F:67:AE:3D:E9:5A:BA:B0 Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 Certificate issuer: /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Certificate serial: 9854B346658010DBFBD8FB5308C6CA3862A8BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft Manifest number: 0231 Signing time: Sun 21 Dec 2025 10:41:47 +0000 Manifest this update: Sun 21 Dec 2025 10:36:47 +0000 Manifest next update: Wed 24 Dec 2025 17:20:47 +0000 Files and hashes: 1: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: +Y8f9IKZhXyPRNzOP8gLDO5FItamxPZwT5YuJiQ+z+Y=) 2: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl (hash: 6QUl22pR1uQDrw/MtCjRew7OWnhJMNjmR2kUt3V6OYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98:54:b3:46:65:80:10:db:fb:d8:fb:53:08:c6:ca:38:62:a8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Validity Not Before: Dec 21 10:36:47 2025 GMT Not After : Dec 24 17:20:47 2025 GMT Subject: CN=7462CADD4986FA212CCF5DA08F67AE3DE95ABAB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:70:00:8c:83:88:fd:b6:c4:a4:5e:7f:88: ed:d2:76:c8:cc:3e:80:7a:dd:12:1b:32:cf:a7:52: d6:a7:74:7e:32:86:8f:fb:97:e3:e7:02:b5:f8:d3: ba:d5:ce:54:c9:da:3c:a3:e4:5e:8d:65:ab:53:1d: 98:c8:69:4a:96:59:f4:d7:18:f7:9c:96:d3:a1:51: 32:d6:1d:5a:96:ae:70:79:ef:d1:ca:09:1f:12:24: 32:42:d6:6f:48:18:3c:70:71:a8:b3:0e:1d:93:11: 69:01:b3:26:90:e9:69:de:09:73:64:1e:ad:fd:58: 12:76:14:28:58:31:65:f3:17:ff:1b:aa:b9:a8:20: c5:1f:72:b6:a4:16:3c:a6:e9:7a:d3:9c:de:18:24: eb:e3:e7:63:d9:58:31:45:bc:34:12:91:28:1d:6e: 5f:4e:d3:44:36:d5:05:c2:97:87:c0:02:d2:d2:19: 93:5a:23:36:83:e5:19:ad:3c:41:d7:b7:8e:09:b5: 24:82:9d:54:57:30:42:fa:11:cc:eb:3a:99:b3:f6: 6f:7c:42:aa:a5:6e:fd:4b:de:94:7f:06:d7:ee:1f: 4a:6f:f1:17:15:be:b6:77:34:95:8b:db:58:c6:62: 26:30:f3:68:de:23:ef:ac:84:eb:83:43:76:01:8d: 0f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:62:CA:DD:49:86:FA:21:2C:CF:5D:A0:8F:67:AE:3D:E9:5A:BA:B0 X509v3 Authority Key Identifier: keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f3:6d:d2:54:4c:cb:4f:60:a4:a5:98:07:3f:d3:3a:84:af: 0d:9d:d5:34:b8:4a:77:79:d9:a4:64:81:49:f1:19:98:ae:ab: 7d:05:db:c8:02:ff:87:8e:34:4a:1a:d3:11:21:b0:d6:8b:0e: 60:61:98:02:23:a2:6b:e4:aa:18:70:5d:12:1d:32:67:6f:e2: ef:5a:9d:11:50:f8:c2:ec:98:73:b7:79:a8:63:2e:fc:c9:c6: 2a:99:49:ff:8a:3f:d2:04:9d:88:1d:de:c1:a4:39:39:af:37: 2a:af:b2:ee:8e:f6:0c:3a:5b:5b:48:a1:27:95:4b:ec:66:1f: fe:3a:39:91:a8:1d:3d:96:c3:26:1f:0e:40:4c:57:7f:a7:0a: d1:12:3c:c3:6e:5e:e5:ef:22:d4:1e:32:60:40:02:41:5f:37: 36:5d:1a:42:f0:2f:bc:80:47:29:8e:60:21:a2:a0:b9:90:e0: eb:3d:04:e0:fe:f4:47:34:0f:07:c8:77:46:fa:3a:11:68:02: cf:4d:93:7c:e2:bd:e8:04:fe:88:75:0a:76:ef:6e:81:16:ab: a0:cf:14:5d:e3:dd:35:7a:1d:c4:cd:fd:88:8f:f3:46:f2:5e: e2:b6:2d:c1:64:a0:3c:ee:da:ad:bd:9c:79:57:b3:c6:d9:2e: ea:98:5c:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJhUs0ZlgBDb+9j7UwjGyjhiqLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2 MkRDQjM0MDAeFw0yNTEyMjExMDM2NDdaFw0yNTEyMjQxNzIwNDdaMDMxMTAvBgNV BAMTKDc0NjJDQURENDk4NkZBMjEyQ0NGNURBMDhGNjdBRTNERTk1QUJBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04nAAjIOI/bbEpF5/iO3SdsjM PoB63RIbMs+nUtandH4yho/7l+PnArX407rVzlTJ2jyj5F6NZatTHZjIaUqWWfTX GPecltOhUTLWHVqWrnB579HKCR8SJDJC1m9IGDxwcaizDh2TEWkBsyaQ6WneCXNk Hq39WBJ2FChYMWXzF/8bqrmoIMUfcrakFjym6XrTnN4YJOvj52PZWDFFvDQSkSgd bl9O00Q21QXCl4fAAtLSGZNaIzaD5RmtPEHXt44JtSSCnVRXMEL6EczrOpmz9m98 Qqqlbv1L3pR/BtfuH0pv8RcVvrZ3NJWL21jGYiYw82jeI++shOuDQ3YBjQ9VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdGLK3UmG+iEsz12gj2euPelaurAwHwYDVR0j BBgwFoAUoZGMFWqaz83yRx3q/GGO4WLcs0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjhjN2EzNC1iYTMxLTRkMjktODM4NC0xODY3ODliMzg0ZjEvMC9BMTkxOEMxNTZB OUFDRkNERjI0NzFERUFGQzYxOEVFMTYyRENCMzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2MkRD QjM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThF RTE2MkRDQjM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHzbdJUTMtPYKSlmAc/0zqErw2d1TS4Snd5 2aRkgUnxGZiuq30F28gC/4eONEoa0xEhsNaLDmBhmAIjomvkqhhwXRIdMmdv4u9a nRFQ+MLsmHO3eahjLvzJxiqZSf+KP9IEnYgd3sGkOTmvNyqvsu6O9gw6W1tIoSeV S+xmH/46OZGoHT2WwyYfDkBMV3+nCtESPMNuXuXvItQeMmBAAkFfNzZdGkLwL7yA RymOYCGioLmQ4Os9BOD+9Ec0DwfId0b6OhFoAs9Nk3zivegE/oh1CnbvboEWq6DP FF3j3TV6HcTN/YiP80byXuK2LcFkoDzu2q29nHlXs8bZLuqYXFI= -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:04 2025 by rpki-client