This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: 9ubmKXPzPGA7BIb/2d9ZMdRhHVHDEBeMosJwIMxMDro= Subject key identifier: 5C:BD:88:EB:29:FD:50:27:5A:E2:15:D2:19:AB:15:2B:AA:50:CF:00 Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 2B230E71B3DB361120B7A9FFCB36D32EBE92EA65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 0537 Signing time: Wed 17 Dec 2025 12:10:02 +0000 Manifest this update: Wed 17 Dec 2025 12:05:02 +0000 Manifest next update: Sat 20 Dec 2025 19:06:02 +0000 Files and hashes: 1: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) 2: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 3: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) 4: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 5: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: wQx1RcXcvnkTv0vLkPxLKP6GolRmM76Q5Z/1Gd0fjwE=) 6: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) 7: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 19:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:23:0e:71:b3:db:36:11:20:b7:a9:ff:cb:36:d3:2e:be:92:ea:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Dec 17 12:05:02 2025 GMT Not After : Dec 20 19:06:02 2025 GMT Subject: CN=5CBD88EB29FD50275AE215D219AB152BAA50CF00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:01:f7:1e:cd:cc:f3:33:82:36:86:49:4d: c0:74:61:be:a7:cf:3f:53:a9:71:35:98:3b:24:d9: ce:87:87:82:cf:09:84:1c:a1:05:1d:0b:04:66:4a: f9:30:d0:c0:82:aa:8f:e2:11:65:c2:f3:4f:37:92: 44:b1:a6:cd:60:19:15:b3:a7:00:89:65:9c:d1:d9: 1f:2d:6c:b9:3b:83:0c:78:9d:32:f3:22:16:de:72: 79:2e:d0:03:37:f0:b2:9a:18:82:d9:11:1e:b8:d4: af:59:04:ba:d0:be:d3:ef:00:c5:44:4e:8f:22:2e: 23:23:93:ae:90:07:6f:62:37:d9:1f:e1:b4:68:6f: c7:98:7f:0a:ac:60:1f:83:86:ce:f2:ac:32:34:fe: 36:42:b3:56:0c:8e:70:36:79:5e:87:7e:73:26:36: 62:a7:d4:cc:7f:54:c1:1f:33:2f:6e:7c:8a:a1:a3: 98:bc:0e:72:3e:dc:73:a4:a5:f9:e8:5b:34:51:7d: 52:05:42:10:87:52:49:12:75:e9:8a:8c:6c:61:ee: 34:3f:2c:7c:c2:0e:4a:e0:ab:f5:d8:a7:63:58:ad: 3b:30:85:57:2d:32:62:ff:7e:8b:97:f8:b8:ac:ff: 55:67:6c:33:c6:81:d2:2a:c3:09:42:27:d5:11:a1: b2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BD:88:EB:29:FD:50:27:5A:E2:15:D2:19:AB:15:2B:AA:50:CF:00 X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:72:9f:13:5f:1e:2f:9d:7e:ec:00:03:a5:dc:06:29:0c:f7: 47:e4:47:af:44:0d:3a:8c:61:6b:9f:58:31:53:99:3b:43:82: 72:2d:30:6c:45:80:bf:ca:47:29:da:e9:75:e9:a3:1a:ac:7b: 8d:4c:7c:2a:51:4b:b7:bf:20:72:ff:70:eb:00:ae:f8:8a:23: 26:63:dd:85:41:c9:75:ac:92:4b:3a:35:26:39:64:a3:7c:c4: 85:19:9c:48:61:a1:0a:7a:03:14:49:db:b6:25:a6:d1:ab:1f: 78:67:aa:c7:2b:c2:3e:3a:7b:60:13:62:96:29:aa:cb:d2:68: 63:9b:98:34:fa:dd:1f:81:21:cd:bd:fd:81:d8:a5:1d:22:59: e5:b4:b6:2d:65:3d:de:31:71:0a:c1:d6:88:cc:a7:8d:03:14: fb:f7:c0:d0:1d:cf:9d:bf:66:31:a4:8b:66:f6:33:7c:f6:91: 01:dd:28:ba:e9:bd:69:ab:d4:15:50:5d:f6:6e:a1:98:15:35: c5:9e:df:1d:d0:c3:60:04:6e:2f:63:b4:30:d4:d3:16:3a:05: d8:bc:12:b4:ca:dc:f9:08:b4:98:11:48:9d:cb:1c:3c:1c:b0: cc:66:dd:6c:d1:a9:fb:87:a4:6a:84:91:6b:cf:10:fc:66:c8: e6:c1:ed:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyMOcbPbNhEgt6n/yzbTLr6S6mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTEyMTcxMjA1MDJaFw0yNTEyMjAxOTA2MDJaMDMxMTAvBgNV BAMTKDVDQkQ4OEVCMjlGRDUwMjc1QUUyMTVEMjE5QUIxNTJCQUE1MENGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUwH3Hs3M8zOCNoZJTcB0Yb6n zz9TqXE1mDsk2c6Hh4LPCYQcoQUdCwRmSvkw0MCCqo/iEWXC8083kkSxps1gGRWz pwCJZZzR2R8tbLk7gwx4nTLzIhbecnku0AM38LKaGILZER641K9ZBLrQvtPvAMVE To8iLiMjk66QB29iN9kf4bRob8eYfwqsYB+Dhs7yrDI0/jZCs1YMjnA2eV6HfnMm NmKn1Mx/VMEfMy9ufIqho5i8DnI+3HOkpfnoWzRRfVIFQhCHUkkSdemKjGxh7jQ/ LHzCDkrgq/XYp2NYrTswhVctMmL/fouX+Lis/1VnbDPGgdIqwwlCJ9URobJ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXL2I6yn9UCda4hXSGasVK6pQzwAwHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5ynxNfHi+dfuwAA6XcBikM90fkR69EDTqM YWufWDFTmTtDgnItMGxFgL/KRyna6XXpoxqse41MfCpRS7e/IHL/cOsArviKIyZj 3YVByXWskks6NSY5ZKN8xIUZnEhhoQp6AxRJ27YlptGrH3hnqscrwj46e2ATYpYp qsvSaGObmDT63R+BIc29/YHYpR0iWeW0ti1lPd4xcQrB1ojMp40DFPv3wNAdz52/ ZjGki2b2M3z2kQHdKLrpvWmr1BVQXfZuoZgVNcWe3x3Qw2AEbi9jtDDU0xY6Bdi8 ErTK3PkItJgRSJ3LHDwcsMxm3WzRqfuHpGqEkWvPEPxmyObB7cA= -----END CERTIFICATE-----Generated at Fri Dec 19 21:15:13 2025 by rpki-client