This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json) Hash identifier: nkDO75Kl5lmZ/rrna9qHPN/c8I/We+bUFme69Q5ro80= Subject key identifier: 27:35:A9:B4:90:74:B5:4D:EB:7E:C6:FA:AD:21:6C:61:AA:86:66:E7 Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Certificate serial: 0D1939B691E54492147FD32EA2B00B262EFB49A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft Manifest number: 012C Signing time: Sun 21 Dec 2025 03:30:53 +0000 Manifest this update: Sun 21 Dec 2025 03:25:53 +0000 Manifest next update: Wed 24 Dec 2025 03:58:53 +0000 Files and hashes: 1: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: ckDkEW3cG2O5qrAfsiwEZ8Ml9Jb8W4Cprdzwh9EFjCQ=) 2: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: WRQr/4s6i86uzriKB9RHRYKn5SQtBKQDw9UpfGvIHbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:19:39:b6:91:e5:44:92:14:7f:d3:2e:a2:b0:0b:26:2e:fb:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Validity Not Before: Dec 21 03:25:53 2025 GMT Not After : Dec 24 03:58:53 2025 GMT Subject: CN=2735A9B49074B54DEB7EC6FAAD216C61AA8666E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:43:14:5e:4d:14:2e:31:b0:26:5e:10:85:6a: bc:94:a1:27:d9:cd:f8:55:12:a6:7b:f3:96:1f:f9: 64:a8:14:10:74:da:8a:1a:24:1b:5a:51:c9:d9:b0: c8:d7:a3:b6:ae:31:a0:9c:7d:4e:51:65:50:4f:ff: 47:e4:b9:d4:d4:fb:a9:5c:53:75:d1:5d:6e:fd:b5: 0d:90:ac:a2:af:88:f3:b1:f0:c5:fa:9f:5f:b0:f8: e3:2a:e3:e3:84:00:93:ce:b7:ef:6f:5b:d7:5f:47: 64:6f:ac:35:b7:ec:e9:ae:9a:ee:5a:4c:f4:39:be: 8e:b6:53:44:43:40:2e:3f:6c:bc:d8:6c:84:16:41: 04:cf:29:93:31:4e:39:8e:08:a4:09:29:c7:cc:68: 5b:e0:07:a8:4f:e0:ef:b8:48:30:af:99:92:fb:2a: 94:df:2e:1d:10:b3:0d:40:20:f7:50:96:3a:2b:d5: 58:df:e4:ce:89:81:c5:61:23:d9:66:fc:3e:e4:2e: 4e:b3:e0:81:fd:11:68:7e:b9:21:f1:79:ac:2c:1a: 7f:ed:8d:f5:a0:48:c5:cb:8f:73:1c:ee:c4:45:bd: d6:18:ea:bb:de:e5:93:dc:43:83:c9:9d:83:1f:1a: fa:af:ca:3a:8f:22:ab:2e:98:59:e9:82:bc:54:c3: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:35:A9:B4:90:74:B5:4D:EB:7E:C6:FA:AD:21:6C:61:AA:86:66:E7 X509v3 Authority Key Identifier: keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:02:69:53:77:08:4a:00:cd:83:4c:f2:f4:96:29:50:16:d7: 50:f0:45:fc:d8:97:32:46:41:bb:82:5b:d5:67:99:34:c9:d3: d7:be:d5:46:89:d2:0b:e5:88:54:80:f4:cc:47:8e:96:a5:62: f1:a0:fc:5a:8b:04:f0:44:a1:b5:1c:a3:20:f1:b7:3d:91:93: 5f:05:67:72:94:73:de:c0:90:82:91:b3:04:d3:b7:7e:20:b5: 28:9d:e1:89:79:bd:48:d6:4f:c6:8e:00:15:86:de:f7:5f:10: 82:e4:72:a4:8f:ef:c1:5d:75:74:5b:5f:32:c4:72:3d:e8:b9: 35:d9:bd:92:82:c2:ea:28:2b:a4:ae:f3:e7:f1:a9:dc:65:81: ab:4c:85:1f:8c:6d:61:ad:db:07:66:ff:35:bb:17:f6:69:06: a0:70:18:83:86:0d:93:66:84:11:e7:20:03:63:f5:27:6d:d7: d8:1d:49:cd:1f:65:c5:26:ce:bf:f1:54:db:c6:e1:6c:f7:4b: 33:70:f5:3f:c7:9c:9b:82:16:e1:b9:03:61:89:1e:9a:46:ae: dd:85:31:a6:b9:80:cc:08:2a:90:c5:9b:73:b4:08:0c:fd:fe: ba:0f:ab:e5:9b:90:7a:c5:d1:4a:5c:7e:dc:01:4a:d3:b6:79: 5f:e2:94:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRk5tpHlRJIUf9MuorALJi77SaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMz MzFCODY2OTAeFw0yNTEyMjEwMzI1NTNaFw0yNTEyMjQwMzU4NTNaMDMxMTAvBgNV BAMTKDI3MzVBOUI0OTA3NEI1NERFQjdFQzZGQUFEMjE2QzYxQUE4NjY2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoQxReTRQuMbAmXhCFaryUoSfZ zfhVEqZ785Yf+WSoFBB02ooaJBtaUcnZsMjXo7auMaCcfU5RZVBP/0fkudTU+6lc U3XRXW79tQ2QrKKviPOx8MX6n1+w+OMq4+OEAJPOt+9vW9dfR2RvrDW37Omumu5a TPQ5vo62U0RDQC4/bLzYbIQWQQTPKZMxTjmOCKQJKcfMaFvgB6hP4O+4SDCvmZL7 KpTfLh0Qsw1AIPdQljor1Vjf5M6JgcVhI9lm/D7kLk6z4IH9EWh+uSHxeawsGn/t jfWgSMXLj3Mc7sRFvdYY6rve5ZPcQ4PJnYMfGvqvyjqPIqsumFnpgrxUw9aJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJzWptJB0tU3rfsb6rSFsYaqGZucwHwYDVR0j BBgwFoAUyJr9sBW0UWNC5HAiROi4rDMbhmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMS9DODlBRkRCMDE1 QjQ1MTYzNDJFNDcwMjI0NEU4QjhBQzMzMUI4NjY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMzMzFC ODY2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzEvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4 QUMzMzFCODY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcCaVN3CEoAzYNM8vSWKVAW11DwRfzYlzJG QbuCW9VnmTTJ09e+1UaJ0gvliFSA9MxHjpalYvGg/FqLBPBEobUcoyDxtz2Rk18F Z3KUc97AkIKRswTTt34gtSid4Yl5vUjWT8aOABWG3vdfEILkcqSP78FddXRbXzLE cj3ouTXZvZKCwuooK6Su8+fxqdxlgatMhR+MbWGt2wdm/zW7F/ZpBqBwGIOGDZNm hBHnIANj9Sdt19gdSc0fZcUmzr/xVNvG4Wz3SzNw9T/HnJuCFuG5A2GJHppGrt2F Maa5gMwIKpDFm3O0CAz9/roPq+WbkHrF0UpcftwBStO2eV/ilMk= -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:10 2025 by rpki-client