This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: nviPNyXXirihceM3ScdDUFRhxkETLwBDXgWmAz0rgNs= Subject key identifier: 91:45:92:CA:62:9A:87:62:18:BC:49:44:F9:26:04:6D:42:89:39:0C Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 656319B25E7CE70F89DEAABF9700FCC9EA801D0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 0258 Signing time: Fri 19 Dec 2025 13:31:43 +0000 Manifest this update: Fri 19 Dec 2025 13:26:43 +0000 Manifest next update: Tue 23 Dec 2025 00:23:43 +0000 Files and hashes: 1: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A=) 2: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: He31aMFfL60HebegV64ycJNThPD9F51IpOfNTmMfBgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:63:19:b2:5e:7c:e7:0f:89:de:aa:bf:97:00:fc:c9:ea:80:1d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Dec 19 13:26:43 2025 GMT Not After : Dec 23 00:23:43 2025 GMT Subject: CN=914592CA629A876218BC4944F926046D4289390C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:45:b1:1c:d1:bd:e3:de:03:c7:e9:01:47: e7:91:1d:ac:79:eb:e2:17:4b:19:db:f0:eb:03:27: 11:50:01:04:54:e4:0d:f0:47:e4:1e:bd:0c:39:24: 71:90:ea:b6:90:d6:7b:1a:05:d0:93:c8:95:94:34: 23:8f:0c:d9:37:7b:9c:d7:b4:17:7e:0c:20:35:a3: 35:36:c2:ad:69:71:37:00:65:f8:3a:48:11:81:eb: 48:ff:77:b6:c3:7e:0a:49:a0:ce:99:b2:1b:8b:c4: d4:2e:16:36:01:b3:18:85:4c:b8:d3:49:33:3d:a5: ca:ed:7f:b3:34:99:b7:a1:3a:85:fd:48:d1:57:49: e7:33:55:e6:94:71:e9:85:af:3e:26:e0:e6:46:0f: 9f:9f:9a:8f:00:6f:cd:9b:c6:f3:28:e8:25:43:a6: 44:9e:6b:78:0a:d5:c5:cf:a9:90:98:d1:62:03:b0: 7b:d3:55:a5:5b:48:4c:8d:e7:f4:2f:9d:8f:4f:8b: c2:5e:d0:8b:70:3f:27:bb:6f:51:6b:c7:78:b5:6c: 29:3b:76:19:96:3c:92:5c:bf:ff:2c:5b:08:b7:17: b0:58:8f:09:6e:74:d3:1e:3f:4e:25:e0:b1:db:06: c2:5b:52:78:d7:66:88:7b:33:ef:11:a0:2d:03:b9: cc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:45:92:CA:62:9A:87:62:18:BC:49:44:F9:26:04:6D:42:89:39:0C X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:07:7a:c6:a1:62:ca:7b:fe:57:64:a0:e9:1b:f6:43:56:db: bc:39:57:d4:8d:51:ce:9e:cf:41:d7:75:3c:ed:02:94:fa:f3: 32:0c:55:8d:44:63:7a:56:84:de:a6:ed:07:da:1e:45:26:f8: 93:d0:3d:c0:71:56:1d:86:e1:bb:9c:82:77:e5:4e:f0:47:e5: b8:46:9d:71:e2:7f:22:35:29:4d:92:05:6f:b0:d9:c4:03:9e: f2:01:1f:b7:d7:19:7b:38:91:4f:cf:f4:63:75:5b:5f:ac:29: ee:18:4b:e7:cc:57:e1:10:a7:9b:94:19:e1:b7:3b:22:93:ea: 27:7b:78:a5:c9:7a:f9:88:34:3c:20:05:03:bf:fb:dd:95:ef: 60:7c:8c:e6:80:67:c9:d1:45:8f:fb:03:8a:ca:f3:37:8a:50: c8:5e:fc:2a:53:dc:ce:9f:c7:9f:70:3e:e0:53:6d:c8:f0:93: 57:36:7c:8e:5e:ab:43:9c:8e:fe:49:84:e5:e0:7b:3b:05:2e: cc:3b:b8:5a:5f:16:40:fe:31:88:43:e7:7a:70:b5:48:64:bb: 94:bb:00:72:37:54:33:9e:4a:97:e7:dc:23:61:42:51:8a:e3: 68:6f:b0:29:fe:bd:ac:8a:34:46:b7:f3:b8:f9:a0:d1:c1:dc: db:51:5b:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWMZsl585w+J3qq/lwD8yeqAHQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTEyMTkxMzI2NDNaFw0yNTEyMjMwMDIzNDNaMDMxMTAvBgNV BAMTKDkxNDU5MkNBNjI5QTg3NjIxOEJDNDk0NEY5MjYwNDZENDI4OTM5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DkWxHNG9494Dx+kBR+eRHax5 6+IXSxnb8OsDJxFQAQRU5A3wR+QevQw5JHGQ6raQ1nsaBdCTyJWUNCOPDNk3e5zX tBd+DCA1ozU2wq1pcTcAZfg6SBGB60j/d7bDfgpJoM6ZshuLxNQuFjYBsxiFTLjT STM9pcrtf7M0mbehOoX9SNFXSeczVeaUcemFrz4m4OZGD5+fmo8Ab82bxvMo6CVD pkSea3gK1cXPqZCY0WIDsHvTVaVbSEyN5/QvnY9Pi8Je0ItwPye7b1Frx3i1bCk7 dhmWPJJcv/8sWwi3F7BYjwludNMeP04l4LHbBsJbUnjXZoh7M+8RoC0DucwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkUWSymKah2IYvElE+SYEbUKJOQwwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0HesahYsp7/ldkoOkb9kNW27w5V9SNUc6e z0HXdTztApT68zIMVY1EY3pWhN6m7QfaHkUm+JPQPcBxVh2G4bucgnflTvBH5bhG nXHifyI1KU2SBW+w2cQDnvIBH7fXGXs4kU/P9GN1W1+sKe4YS+fMV+EQp5uUGeG3 OyKT6id7eKXJevmINDwgBQO/+92V72B8jOaAZ8nRRY/7A4rK8zeKUMhe/CpT3M6f x59wPuBTbcjwk1c2fI5eq0Ocjv5JhOXgezsFLsw7uFpfFkD+MYhD53pwtUhku5S7 AHI3VDOeSpfn3CNhQlGK42hvsCn+vayKNEa387j5oNHB3NtRW5U= -----END CERTIFICATE-----Generated at Sun Dec 21 19:20:03 2025 by rpki-client