This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: u1xYjv26+4gm+kvkUjtqaSyhu/ah1SnCPfwV4jaXeuM= Subject key identifier: 1C:0D:ED:FD:29:FA:14:36:E6:E8:22:F6:37:5B:35:17:23:84:54:D0 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 3162279D29AF7B3A818F254274EFC9065DEB9126 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: 0117 Signing time: Tue 23 Dec 2025 22:22:31 +0000 Manifest this update: Tue 23 Dec 2025 22:17:31 +0000 Manifest next update: Sat 27 Dec 2025 03:08:31 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: MfsFv5ExgflBFJyUSw7ThP00IexZQ7DbXFCr9MfMpLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:62:27:9d:29:af:7b:3a:81:8f:25:42:74:ef:c9:06:5d:eb:91:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Dec 23 22:17:31 2025 GMT Not After : Dec 27 03:08:31 2025 GMT Subject: CN=1C0DEDFD29FA1436E6E822F6375B3517238454D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:7d:73:2c:f1:d2:2c:47:96:34:81:3a:16: c8:c2:48:64:af:21:7e:9c:d8:39:51:2e:8b:c1:33: f2:95:ba:5f:fb:7b:8d:2d:9e:5f:45:4e:14:d7:0c: c9:20:91:de:08:50:7d:0c:c8:10:2c:42:27:74:92: 5d:11:5c:e2:78:b1:bb:fb:e4:b8:64:0f:f6:60:85: 11:56:4e:f6:31:e5:43:c5:98:91:19:c2:39:cf:ec: 58:5e:33:9d:0f:d6:5f:20:ab:ac:02:de:09:72:e1: 4b:23:59:05:92:cd:c5:dd:f5:4b:c8:48:9b:d9:c0: ef:72:24:29:a7:6c:7b:1a:96:39:1e:09:fe:07:83: eb:ab:25:e7:c4:cd:24:df:d7:2f:7d:62:c2:40:72: 85:12:57:e8:ef:58:d7:a3:ba:f9:75:9e:0c:55:51: e1:c8:f5:2e:62:77:13:96:e9:96:e1:4d:fb:61:b9: db:69:06:9d:9a:8e:e6:52:78:7c:df:30:37:2b:88: b1:56:59:56:15:1b:d9:6d:50:29:df:ee:14:cd:c9: c7:f3:63:db:b4:d5:57:6b:ee:ab:e5:d7:38:fb:46: 4a:fc:09:b5:02:24:70:a8:37:1c:69:e9:c7:d7:e0: 55:1b:56:c5:05:db:27:ac:7e:fb:56:bc:ae:a0:8b: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0D:ED:FD:29:FA:14:36:E6:E8:22:F6:37:5B:35:17:23:84:54:D0 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9b:7f:e6:11:b8:9f:74:0a:b5:d1:4d:38:5c:3b:0d:91:51: 78:b3:56:f3:aa:46:9e:4f:fe:92:44:33:ca:61:92:85:57:42: bd:9e:a0:79:d5:1e:f2:e2:6f:fb:21:21:f5:86:2f:7c:4c:c7: 2e:d6:38:b8:57:9d:c2:f9:8c:55:b8:5d:29:d6:25:01:d8:35: c6:10:d8:16:a3:96:8a:62:fa:70:b9:60:59:cf:a8:c8:7c:30: 6f:e2:e4:87:46:7d:47:96:13:eb:c8:65:e0:cf:b0:2e:0e:ec: 23:cc:cf:2b:29:db:56:cd:11:e4:a4:12:31:84:67:2e:fe:bb: 46:aa:c9:76:8b:38:ca:96:6d:91:e2:e4:28:39:28:11:5d:4c: 55:6b:f1:57:3a:d1:a5:6b:28:98:9c:fd:ad:54:65:01:96:01: 22:6c:37:ea:5d:7e:03:0c:e2:35:69:7d:10:0c:83:48:fd:0a: 46:d1:79:52:80:ea:4e:f7:20:8f:78:6a:99:fa:7d:bc:61:04: 9d:cd:0c:76:5f:da:7e:9e:6f:ee:05:ac:56:2b:75:dc:93:54: 6f:6a:e3:97:cf:c9:8e:c5:91:b5:44:c1:fa:74:0f:db:51:c1: 31:c4:22:f0:93:93:81:a8:f3:be:c6:37:0b:a2:d1:54:1a:90: c5:75:d6:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMWInnSmvezqBjyVCdO/JBl3rkSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTEyMjMyMjE3MzFaFw0yNTEyMjcwMzA4MzFaMDMxMTAvBgNV BAMTKDFDMERFREZEMjlGQTE0MzZFNkU4MjJGNjM3NUIzNTE3MjM4NDU0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7M31zLPHSLEeWNIE6FsjCSGSv IX6c2DlRLovBM/KVul/7e40tnl9FThTXDMkgkd4IUH0MyBAsQid0kl0RXOJ4sbv7 5LhkD/ZghRFWTvYx5UPFmJEZwjnP7FheM50P1l8gq6wC3gly4UsjWQWSzcXd9UvI SJvZwO9yJCmnbHsaljkeCf4Hg+urJefEzSTf1y99YsJAcoUSV+jvWNejuvl1ngxV UeHI9S5idxOW6ZbhTfthudtpBp2ajuZSeHzfMDcriLFWWVYVG9ltUCnf7hTNycfz Y9u01Vdr7qvl1zj7Rkr8CbUCJHCoNxxp6cfX4FUbVsUF2yesfvtWvK6giyTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHA3t/Sn6FDbm6CL2N1s1FyOEVNAwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6bf+YRuJ90CrXRTThcOw2RUXizVvOqRp5P /pJEM8phkoVXQr2eoHnVHvLib/shIfWGL3xMxy7WOLhXncL5jFW4XSnWJQHYNcYQ 2Bajlopi+nC5YFnPqMh8MG/i5IdGfUeWE+vIZeDPsC4O7CPMzysp21bNEeSkEjGE Zy7+u0aqyXaLOMqWbZHi5Cg5KBFdTFVr8Vc60aVrKJic/a1UZQGWASJsN+pdfgMM 4jVpfRAMg0j9CkbReVKA6k73II94apn6fbxhBJ3NDHZf2n6eb+4FrFYrddyTVG9q 45fPyY7FkbVEwfp0D9tRwTHEIvCTk4Go877GNwui0VQakMV11tw= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:15 2025 by rpki-client