This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft File: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft (raw, json) Hash identifier: TKnCQbsA1/qzxrUSYsiR4ggHFHEnWxfp43eZbYmBUrU= Subject key identifier: 4D:D5:1A:8A:94:67:0F:A6:0B:C5:78:13:AB:38:BE:F7:CC:B5:39:1B Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C Certificate issuer: /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Certificate serial: 66DF83EF099FFA5811C78FAB5DF6FED0F007A2B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft Manifest number: 0533 Signing time: Tue 16 Dec 2025 13:31:41 +0000 Manifest this update: Tue 16 Dec 2025 13:26:41 +0000 Manifest next update: Fri 19 Dec 2025 16:45:41 +0000 Files and hashes: 1: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl (hash: j9w+Kr8edLSuaMuC3IGVNNaE2Obl99aReZq7gdT0BX0=) 2: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: 4brGPOCgGPQmWwoETwSHHbE2lw9R22KEcXYm0M7Fp90=) 3: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: hclG6eHZVb4H2Dv3mKJVXKKatJdKMCXUFJ5B8dDmEf4=) 4: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: HO0xgGTKI8hDqeJBD1vkonWKYqVkEjngRgMiBcK+FFk=) 5: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Be1o2enB5OVbfeTb11FQx0y/6KQQnTeDSPNmLL8NRc4=) 6: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: U5fnoyr/5IIStrT2HEQ+BlCOUuRxzROoZ8IEFi9/L1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 16:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:df:83:ef:09:9f:fa:58:11:c7:8f:ab:5d:f6:fe:d0:f0:07:a2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Validity Not Before: Dec 16 13:26:41 2025 GMT Not After : Dec 19 16:45:41 2025 GMT Subject: CN=4DD51A8A94670FA60BC57813AB38BEF7CCB5391B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:bc:8d:52:e7:06:6a:7c:13:34:5e:a9:df: 6c:48:aa:1e:91:f6:f7:aa:7a:8e:53:ab:0b:19:6c: b1:71:ab:d7:c3:c1:23:2f:66:18:36:65:99:74:ac: 55:8d:bf:6a:df:0d:91:5e:9b:81:1d:47:56:7a:74: 20:a1:4f:79:84:c2:be:33:88:4c:d4:b5:e9:96:3f: 2b:b1:17:41:c6:38:37:db:d7:ee:77:32:f9:14:23: 8a:4b:31:fe:07:72:de:ac:f2:ab:1c:e3:cf:07:a4: 30:26:01:25:04:9b:f3:0e:2b:01:e4:df:af:7f:0a: c8:0c:15:b5:8d:a4:a4:44:7c:4a:20:c4:d5:11:2c: 10:a3:71:ec:92:73:8e:6d:83:80:59:42:67:29:b5: 13:15:e1:34:bc:d8:f3:fc:a6:f3:9a:97:01:ee:45: cc:ed:22:c3:b4:14:e8:4e:f4:80:c2:f3:ee:8c:0f: a4:4e:93:ac:f2:75:21:a8:f4:56:12:5b:26:65:84: ce:3b:c5:8f:19:11:77:aa:0a:af:22:5a:22:95:09: ba:53:83:94:06:ac:7f:90:b2:3a:f3:6a:5a:95:9e: 28:cb:46:e7:f0:af:8f:db:fe:d0:df:2f:a7:29:0b: e5:0b:6f:7c:36:c9:03:e3:05:b5:0b:f9:6a:67:e6: 9d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D5:1A:8A:94:67:0F:A6:0B:C5:78:13:AB:38:BE:F7:CC:B5:39:1B X509v3 Authority Key Identifier: keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ea:75:e5:d5:b6:bd:74:a4:b4:23:49:7a:a5:63:ca:a8:41: 37:fc:2a:bf:3e:d3:4f:b6:7f:4b:9f:b5:25:50:6d:cc:fb:e5: 92:db:19:82:22:e5:56:69:e2:3d:1b:e3:73:95:34:37:1d:01: bc:ac:39:37:d2:4d:c8:22:cb:49:93:58:d9:ac:02:f3:15:0a: a9:aa:13:c1:96:c8:4f:ef:ea:2f:2a:1c:a0:30:a4:42:10:0c: f8:0e:5c:21:54:03:0a:04:ee:e7:89:d5:5f:3b:67:36:85:be: 3a:6c:cd:56:59:cf:ab:9d:bc:b7:f3:d4:de:8e:da:9c:e9:aa: ce:78:ca:0a:a1:12:5d:96:a2:14:83:5f:de:6f:cc:2a:82:7e: 26:1f:97:d2:94:3c:59:f5:48:f5:11:17:e2:99:19:a8:f4:72: 80:2c:f0:5e:a6:3b:66:3c:bd:fa:50:a7:5b:98:fb:32:48:63: 67:b5:1e:69:82:8e:4b:ef:84:d4:68:51:ee:a2:7a:f7:3f:c4: 17:df:b5:83:25:8b:9b:ac:51:f3:51:41:a2:e6:0b:a2:c1:b5: 00:12:5f:1e:1d:c1:06:84:c1:7f:88:a2:19:da:42:06:5b:c8: 80:79:1f:b7:db:d7:74:cb:1d:f2:e8:f9:34:0e:d3:7a:72:2f: fc:89:89:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZt+D7wmf+lgRx4+rXfb+0PAHorUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4 N0U2NUMzQzAeFw0yNTEyMTYxMzI2NDFaFw0yNTEyMTkxNjQ1NDFaMDMxMTAvBgNV BAMTKDRERDUxQThBOTQ2NzBGQTYwQkM1NzgxM0FCMzhCRUY3Q0NCNTM5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3P7yNUucGanwTNF6p32xIqh6R 9veqeo5TqwsZbLFxq9fDwSMvZhg2ZZl0rFWNv2rfDZFem4EdR1Z6dCChT3mEwr4z iEzUtemWPyuxF0HGODfb1+53MvkUI4pLMf4Hct6s8qsc488HpDAmASUEm/MOKwHk 369/CsgMFbWNpKREfEogxNURLBCjceySc45tg4BZQmcptRMV4TS82PP8pvOalwHu RcztIsO0FOhO9IDC8+6MD6ROk6zydSGo9FYSWyZlhM47xY8ZEXeqCq8iWiKVCbpT g5QGrH+QsjrzalqVnijLRufwr4/b/tDfL6cpC+ULb3w2yQPjBbUL+Wpn5p0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdUaipRnD6YLxXgTqzi+98y1ORswHwYDVR0j BBgwFoAUGaGW9eW6ujGSbFru9E/BY4fmXDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yjg4NThlMC1lY2YwLTRlNTMtYTQ5MC0zYjdjMmRlMTY5M2MvMC8xOUExOTZGNUU1 QkFCQTMxOTI2QzVBRUVGNDRGQzE2Mzg3RTY1QzNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4N0U2 NUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMx NjM4N0U2NUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3qdeXVtr10pLQjSXqlY8qoQTf8Kr8+00+2 f0uftSVQbcz75ZLbGYIi5VZp4j0b43OVNDcdAbysOTfSTcgiy0mTWNmsAvMVCqmq E8GWyE/v6i8qHKAwpEIQDPgOXCFUAwoE7ueJ1V87ZzaFvjpszVZZz6udvLfz1N6O 2pzpqs54ygqhEl2WohSDX95vzCqCfiYfl9KUPFn1SPURF+KZGaj0coAs8F6mO2Y8 vfpQp1uY+zJIY2e1HmmCjkvvhNRoUe6ievc/xBfftYMli5usUfNRQaLmC6LBtQAS Xx4dwQaEwX+IohnaQgZbyIB5H7fb13TLHfLo+TQO03pyL/yJie0= -----END CERTIFICATE-----Generated at Tue Dec 16 22:36:34 2025 by rpki-client