This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: 32oHTrO5DB1LgoL++8Ot/B2sHN/zWk1AQQlVXruYipI= Subject key identifier: B2:45:58:57:87:C8:0B:F2:DE:26:59:D3:17:73:E8:50:59:33:04:C4 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 196CF567A3A7F1673D58954D0C82E0080DAC3589 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: 011B Signing time: Wed 24 Dec 2025 05:31:08 +0000 Manifest this update: Wed 24 Dec 2025 05:26:08 +0000 Manifest next update: Sat 27 Dec 2025 09:58:08 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) 2: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 3: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) 4: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: Re3X8kBfXsGJ62MzOKITLo+V474ndm0CbUIT5A25f5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 09:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6c:f5:67:a3:a7:f1:67:3d:58:95:4d:0c:82:e0:08:0d:ac:35:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Dec 24 05:26:08 2025 GMT Not After : Dec 27 09:58:08 2025 GMT Subject: CN=B245585787C80BF2DE2659D31773E850593304C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:a5:ec:d1:19:91:0b:34:11:5e:b3:a2:3a: e9:af:d9:8e:83:3c:22:03:0c:ec:44:f8:4c:23:0e: 55:81:c0:9b:c9:14:27:c8:f3:b3:4e:90:e1:cd:3b: cd:6c:63:aa:0a:ab:1a:31:42:cb:af:f4:af:02:0a: 7a:f4:16:9f:98:f3:e1:16:e7:a4:e3:85:67:c1:a8: c2:e8:68:ca:a9:c2:8d:e1:b7:90:6d:d4:15:77:77: 4e:9d:58:de:57:d3:c2:92:fe:f7:38:bf:4e:ee:20: bf:40:9e:1b:4c:f1:bf:c3:61:6c:53:c0:d6:27:09: b8:a7:09:e8:60:f0:00:3e:96:b8:96:fd:1e:ba:b0: 30:b6:29:a5:af:e1:2e:54:b7:2e:fd:cc:ed:58:20: cd:f2:75:44:b5:8d:5f:c4:2a:16:00:4e:05:92:d5: 3d:ea:82:cb:d2:20:a9:6a:f2:c9:87:75:44:97:9c: d7:c4:74:fd:d0:b7:53:39:6f:5d:c0:b0:2f:e7:f3: 50:a0:0d:28:46:ad:49:f7:fa:cf:a9:79:71:46:dd: 56:ea:46:d1:6b:1d:27:e7:22:d3:96:b3:76:0b:35: 63:9f:5b:21:62:e6:38:78:01:9c:56:16:82:3f:f8: 41:a0:f4:ec:18:ba:be:f5:97:80:d3:9e:fc:f0:d5: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:45:58:57:87:C8:0B:F2:DE:26:59:D3:17:73:E8:50:59:33:04:C4 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:92:8d:45:4b:ce:2c:68:8b:b8:7c:ef:d6:27:71:80:95:dc: b7:79:4c:b5:e9:eb:db:1b:f3:ce:f6:cb:81:7a:99:2f:91:87: b1:b2:78:4e:6f:d0:5f:f7:8b:cf:34:96:90:a8:5d:28:9b:6b: 82:a8:34:e9:40:33:3c:0f:47:78:d2:db:e3:a5:e3:db:aa:bd: b2:7b:63:c8:b9:09:a1:a8:e9:9f:b4:1b:0d:2b:b2:cc:17:6e: 46:3a:1e:4c:d9:51:7d:6e:77:43:d9:f5:3b:80:22:db:7f:35: 8e:10:38:94:95:49:ab:ef:eb:d7:a9:f5:c4:a4:17:66:60:b1: 8b:53:5e:28:7c:fb:29:80:43:3e:55:fc:89:61:13:62:19:14: 99:03:c4:e5:4f:62:66:93:f0:94:ab:c3:7f:be:53:d0:20:73: bf:d1:c0:cb:1a:bd:23:1f:51:1d:47:93:53:16:bd:49:aa:38: 5b:91:8f:53:2c:19:37:0c:28:22:69:03:e8:e0:8c:22:e4:03: 31:a5:e4:9f:b8:7e:cd:26:70:96:99:d4:64:6f:7e:7d:42:3c: 49:2e:cb:ba:8e:6e:0e:fc:2d:8d:d0:06:6b:0f:81:1c:f0:74: 27:6f:c1:86:22:ea:33:58:54:67:ea:d2:c5:a1:f6:0d:0a:b1: 5f:59:29:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWz1Z6On8Wc9WJVNDILgCA2sNYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTEyMjQwNTI2MDhaFw0yNTEyMjcwOTU4MDhaMDMxMTAvBgNV BAMTKEIyNDU1ODU3ODdDODBCRjJERTI2NTlEMzE3NzNFODUwNTkzMzA0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmaXs0RmRCzQRXrOiOumv2Y6D PCIDDOxE+EwjDlWBwJvJFCfI87NOkOHNO81sY6oKqxoxQsuv9K8CCnr0Fp+Y8+EW 56TjhWfBqMLoaMqpwo3ht5Bt1BV3d06dWN5X08KS/vc4v07uIL9AnhtM8b/DYWxT wNYnCbinCehg8AA+lriW/R66sDC2KaWv4S5Uty79zO1YIM3ydUS1jV/EKhYATgWS 1T3qgsvSIKlq8smHdUSXnNfEdP3Qt1M5b13AsC/n81CgDShGrUn3+s+peXFG3Vbq RtFrHSfnItOWs3YLNWOfWyFi5jh4AZxWFoI/+EGg9OwYur71l4DTnvzw1dgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUskVYV4fIC/LeJlnTF3PoUFkzBMQwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6SjUVLzixoi7h879YncYCV3Ld5TLXp69sb 8872y4F6mS+Rh7GyeE5v0F/3i880lpCoXSiba4KoNOlAMzwPR3jS2+Ol49uqvbJ7 Y8i5CaGo6Z+0Gw0rsswXbkY6HkzZUX1ud0PZ9TuAItt/NY4QOJSVSavv69ep9cSk F2ZgsYtTXih8+ymAQz5V/IlhE2IZFJkDxOVPYmaT8JSrw3++U9Agc7/RwMsavSMf UR1Hk1MWvUmqOFuRj1MsGTcMKCJpA+jgjCLkAzGl5J+4fs0mcJaZ1GRvfn1CPEku y7qObg78LY3QBmsPgRzwdCdvwYYi6jNYVGfq0sWh9g0KsV9ZKYs= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:42 2025 by rpki-client