This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: WY7BmTAyzU/HTgVxTZVlFFH3yaCXnMf0GwJUxZmHdGg= Subject key identifier: FA:AC:C4:82:9F:F2:87:67:8D:11:69:41:78:AA:28:C5:5E:1B:77:C6 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 77310A0EFF11563343B6978F28F1E0F0F100A89B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 025D Signing time: Sun 28 Dec 2025 16:51:10 +0000 Manifest this update: Sun 28 Dec 2025 16:46:10 +0000 Manifest next update: Wed 31 Dec 2025 17:53:10 +0000 Files and hashes: 1: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: 1HQUgBaMMc8FXO2SWeKN9gV36q4emO7zTpOs+ZYJF8Y=) 2: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: hiWh/b3DKWRZmTYGRFGi8kbrLRamFgmWjHV47lBj4Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:31:0a:0e:ff:11:56:33:43:b6:97:8f:28:f1:e0:f0:f1:00:a8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Dec 28 16:46:10 2025 GMT Not After : Dec 31 17:53:10 2025 GMT Subject: CN=FAACC4829FF287678D11694178AA28C55E1B77C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:6a:88:21:dc:61:33:70:31:81:71:1f:e0: b0:ca:4d:e8:d7:99:1a:36:8e:2a:17:12:e9:12:f7: cb:d6:10:a1:fb:f5:3f:45:40:2f:01:68:35:72:2f: 53:ff:43:b8:b2:11:68:f1:12:ca:8e:f4:82:06:1b: f9:fc:68:d6:25:a0:3a:a1:a3:6f:0f:73:f3:fe:26: db:67:26:5b:b6:13:38:b7:fd:ca:45:86:2c:6f:4d: a4:22:5f:b1:c2:90:d9:a8:9e:e6:cc:71:09:b1:03: 28:63:7d:ba:44:de:ff:06:94:08:81:b7:c2:91:d0: 0f:d1:4e:3e:23:fd:0c:b5:cb:ad:05:07:3d:16:72: 9e:d3:4c:ea:8b:5c:5d:c0:cf:5d:49:97:db:3c:4b: db:98:ff:34:cf:a8:b8:bf:8e:e2:e4:8d:14:76:0a: 54:44:f9:2b:d0:35:43:fd:f1:e4:01:95:20:f3:c3: ce:8f:ea:98:6f:21:0f:75:f5:7b:04:58:d9:67:8f: 65:59:c2:e5:e0:ab:7b:22:f9:87:b2:6a:c9:dd:9c: 8f:a0:b3:74:24:6c:ba:ac:4c:99:d6:1a:9b:b2:13: 43:7e:b2:77:59:9d:ba:5e:dd:4e:04:b9:a2:38:c8: c1:40:e5:d6:43:fe:13:66:70:11:73:12:1a:08:eb: 1c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AC:C4:82:9F:F2:87:67:8D:11:69:41:78:AA:28:C5:5E:1B:77:C6 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ab:d0:eb:fe:08:42:f7:7a:e2:53:9a:57:fc:54:73:42:0d: 4b:b1:61:f5:e0:f7:a2:4e:26:ba:33:ac:b1:a2:bd:06:7c:7e: ef:76:f3:d6:83:18:cf:a5:0f:0b:d1:f8:c5:c0:c5:d6:76:d8: 04:ad:21:05:bd:f1:56:9e:2c:27:f1:ff:a2:a7:f9:cf:a4:fb: ff:b8:67:fc:53:5b:59:4b:0b:5b:df:ed:0a:e1:9c:59:a3:f5: d8:35:1b:35:16:0a:31:a7:22:87:9e:a0:56:7d:7b:74:31:3f: 19:78:bc:9d:14:24:4e:91:5b:b6:43:cc:67:c0:a4:f2:d4:90: 62:30:de:08:70:60:60:a8:2d:2b:85:90:d5:25:81:50:4d:ac: 23:2b:ef:50:c1:0e:23:26:df:29:31:aa:0c:02:12:07:1b:98: 11:52:55:17:8f:2c:ad:8c:22:81:4d:b6:38:f4:9b:b9:19:5e: 04:03:9a:6d:ce:8d:da:90:b5:25:dc:4d:74:31:ea:5d:59:33: 56:4a:23:bf:e4:2c:78:f0:7c:53:8f:dd:d4:b8:eb:2f:c2:82: f9:01:ee:91:9d:2f:71:be:ce:e9:71:57:bd:6e:67:bc:82:01: 17:de:27:7d:b1:87:af:96:f1:97:cf:ef:4f:29:65:40:8f:c6: fa:aa:7d:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdzEKDv8RVjNDtpePKPHg8PEAqJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTEyMjgxNjQ2MTBaFw0yNTEyMzExNzUzMTBaMDMxMTAvBgNV BAMTKEZBQUNDNDgyOUZGMjg3Njc4RDExNjk0MTc4QUEyOEM1NUUxQjc3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClK2qIIdxhM3AxgXEf4LDKTejX mRo2jioXEukS98vWEKH79T9FQC8BaDVyL1P/Q7iyEWjxEsqO9IIGG/n8aNYloDqh o28Pc/P+JttnJlu2Ezi3/cpFhixvTaQiX7HCkNmonubMcQmxAyhjfbpE3v8GlAiB t8KR0A/RTj4j/Qy1y60FBz0Wcp7TTOqLXF3Az11Jl9s8S9uY/zTPqLi/juLkjRR2 ClRE+SvQNUP98eQBlSDzw86P6phvIQ919XsEWNlnj2VZwuXgq3si+YeyasndnI+g s3QkbLqsTJnWGpuyE0N+sndZnbpe3U4EuaI4yMFA5dZD/hNmcBFzEhoI6xzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+qzEgp/yh2eNEWlBeKooxV4bd8YwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqr0Ov+CEL3euJTmlf8VHNCDUuxYfXg96JO JrozrLGivQZ8fu9289aDGM+lDwvR+MXAxdZ22AStIQW98VaeLCfx/6Kn+c+k+/+4 Z/xTW1lLC1vf7QrhnFmj9dg1GzUWCjGnIoeeoFZ9e3QxPxl4vJ0UJE6RW7ZDzGfA pPLUkGIw3ghwYGCoLSuFkNUlgVBNrCMr71DBDiMm3ykxqgwCEgcbmBFSVRePLK2M IoFNtjj0m7kZXgQDmm3OjdqQtSXcTXQx6l1ZM1ZKI7/kLHjwfFOP3dS46y/CgvkB 7pGdL3G+zulxV71uZ7yCARfeJ32xh6+W8ZfP708pZUCPxvqqfVU= -----END CERTIFICATE-----Generated at Mon Dec 29 06:51:02 2025 by rpki-client