This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json) Hash identifier: bt2/uV9lR3rsQKQI3TVlIJHiQzMMcpehOoeR3qcPCXI= Subject key identifier: 27:96:69:25:0A:F3:FE:10:C6:65:75:5E:DB:42:4B:68:90:C5:81:A5 Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Certificate serial: 1AAE9890F9A6ABA41DE9EDC5F3FDB3D9283883BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft Manifest number: D1 Signing time: Sat 20 Dec 2025 14:41:12 +0000 Manifest this update: Sat 20 Dec 2025 14:36:12 +0000 Manifest next update: Wed 24 Dec 2025 00:40:12 +0000 Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=) 2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: +Xuklaxtr+Nu42M9brEN00I8ZzIBDLqUgnSraGisAnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ae:98:90:f9:a6:ab:a4:1d:e9:ed:c5:f3:fd:b3:d9:28:38:83:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Validity Not Before: Dec 20 14:36:12 2025 GMT Not After : Dec 24 00:40:12 2025 GMT Subject: CN=279669250AF3FE10C665755EDB424B6890C581A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:ac:7e:97:67:74:e7:c4:04:4a:49:64:bd: c4:48:fa:7a:cf:ab:77:f7:11:51:e7:64:cd:84:c8: d1:30:04:99:7d:35:03:79:9b:a1:ec:0a:9a:52:b1: 48:5f:a9:72:d9:70:67:08:d6:54:b4:b7:ae:1c:b2: c3:27:42:9b:28:f0:2b:31:f2:5e:53:77:6e:34:c3: d8:6e:d9:b3:57:ed:f1:da:18:ae:0c:0d:50:03:71: 29:d2:57:2b:9c:aa:b8:b6:1e:40:c3:7f:0f:90:34: 17:d6:a8:42:29:82:ae:19:09:b2:41:0f:32:30:50: c9:5c:86:45:ae:dd:d7:94:4d:44:21:24:aa:a3:70: 47:7d:49:3c:e2:e3:82:37:b6:bc:52:4e:6c:45:19: e9:96:2a:db:ef:2d:f0:f4:83:91:65:e5:8a:1d:6d: 36:e3:d2:aa:2d:0b:98:e1:00:d7:8c:70:21:af:91: 23:dd:31:47:15:35:72:a7:c8:c8:b2:ba:0e:cf:77: e7:16:95:b5:03:0e:8d:cc:d1:4d:44:8c:9c:4f:11: ed:49:62:a5:04:c0:5b:c2:be:5c:82:29:14:69:04: d1:1d:f0:95:db:cc:d1:a1:f7:10:25:24:19:91:1b: 83:b8:c7:7f:e6:55:89:f6:16:a7:c8:fe:aa:25:ca: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:96:69:25:0A:F3:FE:10:C6:65:75:5E:DB:42:4B:68:90:C5:81:A5 X509v3 Authority Key Identifier: keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9a:96:f6:ef:be:21:48:50:5f:45:2b:a5:a0:9d:17:0d:e7: 27:3f:1a:26:29:3e:98:97:bb:86:fe:53:90:39:d0:b6:71:80: b0:b5:6e:a7:3a:95:3a:ff:41:51:6b:81:1f:29:0d:b0:2a:9c: a6:ea:50:48:6b:d8:fe:0d:c1:b6:a4:9d:6e:48:f1:e6:ae:db: e7:2a:be:47:0c:98:5d:12:d1:ba:f3:87:e0:3a:6a:86:11:f0: cc:29:78:cd:17:31:d1:5c:8d:a4:96:e7:65:3b:c8:f6:52:08: 48:da:b0:48:f6:c6:0a:cb:1c:e8:a2:af:fa:36:89:e1:4f:cb: b1:10:31:30:c1:00:a6:9a:11:1c:51:8f:6c:37:a5:bc:74:a7: 24:d7:69:eb:06:cd:df:5b:3d:24:45:76:0f:6b:09:8d:33:10: fc:e7:02:21:3d:11:68:f1:31:ff:8f:78:f0:6e:be:77:52:fd: 25:02:a4:57:71:c0:e5:6e:fc:a4:21:91:26:2b:8a:43:34:7c: 14:24:82:64:dd:b5:04:b2:de:39:42:bd:1d:5e:9d:c4:f6:ea: 67:6d:a2:d3:59:a6:0f:de:dc:81:19:7c:97:72:a2:cc:4e:54: b8:af:d6:36:f5:26:d5:40:8b:1c:0d:a6:7a:75:b4:e7:31:0a: 24:c2:09:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGq6YkPmmq6Qd6e3F8/2z2Sg4g70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4 M0ZCN0RDRDAeFw0yNTEyMjAxNDM2MTJaFw0yNTEyMjQwMDQwMTJaMDMxMTAvBgNV BAMTKDI3OTY2OTI1MEFGM0ZFMTBDNjY1NzU1RURCNDI0QjY4OTBDNTgxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBKx+l2d058QESklkvcRI+nrP q3f3EVHnZM2EyNEwBJl9NQN5m6HsCppSsUhfqXLZcGcI1lS0t64cssMnQpso8Csx 8l5Td240w9hu2bNX7fHaGK4MDVADcSnSVyucqri2HkDDfw+QNBfWqEIpgq4ZCbJB DzIwUMlchkWu3deUTUQhJKqjcEd9STzi44I3trxSTmxFGemWKtvvLfD0g5Fl5Yod bTbj0qotC5jhANeMcCGvkSPdMUcVNXKnyMiyug7Pd+cWlbUDDo3M0U1EjJxPEe1J YqUEwFvCvlyCKRRpBNEd8JXbzNGh9xAlJBmRG4O4x3/mVYn2FqfI/qolyllbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5ZpJQrz/hDGZXVe20JLaJDFgaUwHwYDVR0j BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1 QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKalvbvviFIUF9FK6WgnRcN5yc/GiYpPpiX u4b+U5A50LZxgLC1bqc6lTr/QVFrgR8pDbAqnKbqUEhr2P4NwbaknW5I8eau2+cq vkcMmF0S0brzh+A6aoYR8MwpeM0XMdFcjaSW52U7yPZSCEjasEj2xgrLHOiir/o2 ieFPy7EQMTDBAKaaERxRj2w3pbx0pyTXaesGzd9bPSRFdg9rCY0zEPznAiE9EWjx Mf+PePBuvndS/SUCpFdxwOVu/KQhkSYrikM0fBQkgmTdtQSy3jlCvR1encT26mdt otNZpg/e3IEZfJdyosxOVLiv1jb1JtVAixwNpnp1tOcxCiTCCVU= -----END CERTIFICATE-----Generated at Sun Dec 21 09:52:17 2025 by rpki-client