This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: UqVb1onnCuE1zzaCekQEuqXCaTpf++wr2aj+SoG7UvU= Subject key identifier: 4E:D8:D8:71:78:42:F5:27:6A:D9:51:A3:B9:A4:E7:24:36:39:85:5A Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 20AAC5426AD7DF9B0BB8EB1658C7C7C5E235D6E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 0248 Signing time: Mon 22 Dec 2025 12:42:15 +0000 Manifest this update: Mon 22 Dec 2025 12:37:15 +0000 Manifest next update: Thu 25 Dec 2025 21:33:15 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: n4CwmCRRP22lTe1/0pJq1y7+8RlhzxXT1TtNTzu4xlo=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:aa:c5:42:6a:d7:df:9b:0b:b8:eb:16:58:c7:c7:c5:e2:35:d6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Dec 22 12:37:15 2025 GMT Not After : Dec 25 21:33:15 2025 GMT Subject: CN=4ED8D8717842F5276AD951A3B9A4E7243639855A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:48:75:27:ec:be:aa:c9:01:a6:69:92:7e: 51:2e:3e:50:50:84:27:ce:9e:07:88:28:7d:06:d0: 04:2f:f2:03:80:3f:d7:5f:e3:6e:be:e4:cc:18:e2: f5:0f:a9:a1:7c:d6:58:56:a6:4b:25:ae:32:43:21: 3e:03:14:a6:cf:27:61:cf:89:4f:b0:89:bf:c0:3d: a2:34:8e:7b:dc:01:3a:2b:6c:b5:c9:92:dd:65:50: 60:0e:02:1c:e9:1a:53:49:af:2a:4f:24:fc:6b:b5: 02:41:4c:3f:0d:2e:80:ec:63:66:47:55:58:96:4c: 31:24:ba:52:4d:5b:7c:57:2b:ec:b7:a8:9c:03:46: 30:00:1e:5d:52:77:97:96:2c:91:a2:6b:59:60:6c: f5:99:7e:d3:a5:53:0d:6b:1b:eb:b7:5f:e4:d2:04: 1d:c6:72:97:18:b5:89:58:40:86:67:31:6c:6e:68: f8:99:2c:38:cd:60:5f:fb:ce:e3:bc:e0:6f:72:0e: ee:0c:c2:3e:d9:00:a6:e3:07:4c:af:3b:16:79:26: 67:c3:7f:3a:d5:e7:5e:a1:20:18:71:87:bd:ba:90: 33:d5:d3:71:76:42:c5:7f:35:7b:c5:8e:96:ee:72: 3c:4b:b8:8a:08:bc:fd:68:6a:2a:d3:3a:61:a1:54: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D8:D8:71:78:42:F5:27:6A:D9:51:A3:B9:A4:E7:24:36:39:85:5A X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:69:bb:59:b4:27:78:f8:d4:f4:bf:67:cd:95:a8:88:71:f3: b4:fc:27:0b:31:44:42:51:bf:9c:fe:54:ff:89:12:3b:43:59: 05:48:ad:7b:7e:99:90:ef:0f:ee:5c:1e:41:37:5b:20:f9:05: 35:92:ed:6f:54:2b:3a:37:36:f4:54:6a:85:33:d9:21:60:ec: 9f:05:d1:3b:b1:c6:6e:3d:ef:5c:c1:08:3b:d2:e0:42:ca:a6: c6:f2:ab:9d:ec:b9:3d:26:20:05:c1:c6:e1:fb:f9:bb:bd:16: a6:a7:2d:1d:79:4b:e1:fb:04:bf:4b:61:8e:19:57:26:1e:93: 69:8a:2f:5d:1a:2f:90:5c:d2:2b:51:05:57:7e:29:ba:e4:71: 90:eb:15:ba:22:5b:ec:ed:ba:02:c4:63:01:f4:20:eb:cd:aa: f9:ed:5c:99:df:f0:7b:8a:16:ce:85:bb:15:a3:92:55:48:40: 66:71:cd:b5:83:a1:0f:28:ed:a4:2c:e5:58:a1:41:af:d6:08: 85:61:b3:85:16:be:23:51:1e:54:8f:ff:ca:90:6a:a5:bb:9d: 14:aa:11:6e:d8:9d:42:1c:98:e4:df:73:20:e6:df:5c:60:51: df:99:a5:66:9f:65:b0:53:38:4b:4d:65:78:c0:0f:ee:66:5e: fd:3e:9c:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKrFQmrX35sLuOsWWMfHxeI11ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTEyMjIxMjM3MTVaFw0yNTEyMjUyMTMzMTVaMDMxMTAvBgNV BAMTKDRFRDhEODcxNzg0MkY1Mjc2QUQ5NTFBM0I5QTRFNzI0MzYzOTg1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkNUh1J+y+qskBpmmSflEuPlBQ hCfOngeIKH0G0AQv8gOAP9df426+5MwY4vUPqaF81lhWpkslrjJDIT4DFKbPJ2HP iU+wib/APaI0jnvcATorbLXJkt1lUGAOAhzpGlNJrypPJPxrtQJBTD8NLoDsY2ZH VViWTDEkulJNW3xXK+y3qJwDRjAAHl1Sd5eWLJGia1lgbPWZftOlUw1rG+u3X+TS BB3GcpcYtYlYQIZnMWxuaPiZLDjNYF/7zuO84G9yDu4Mwj7ZAKbjB0yvOxZ5JmfD fzrV516hIBhxh726kDPV03F2QsV/NXvFjpbucjxLuIoIvP1oairTOmGhVEZhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTtjYcXhC9Sdq2VGjuaTnJDY5hVowHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlpu1m0J3j41PS/Z82VqIhx87T8JwsxREJR v5z+VP+JEjtDWQVIrXt+mZDvD+5cHkE3WyD5BTWS7W9UKzo3NvRUaoUz2SFg7J8F 0Tuxxm4971zBCDvS4ELKpsbyq53suT0mIAXBxuH7+bu9FqanLR15S+H7BL9LYY4Z VyYek2mKL10aL5Bc0itRBVd+KbrkcZDrFboiW+ztugLEYwH0IOvNqvntXJnf8HuK Fs6FuxWjklVIQGZxzbWDoQ8o7aQs5VihQa/WCIVhs4UWviNRHlSP/8qQaqW7nRSq EW7YnUIcmOTfcyDm31xgUd+ZpWafZbBTOEtNZXjAD+5mXv0+nGM= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:19 2025 by rpki-client