This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json) Hash identifier: Kmarx5ijselCbakI8FJmw41goOWBLiA2kxL/aFH+GN8= Subject key identifier: E4:88:7A:DF:41:65:89:0B:E3:57:62:12:7D:E4:3E:6F:BA:D2:47:E5 Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863 Certificate serial: 750C8C8E17AF64785968D898BBFA1C823E6B59E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft Manifest number: 019B Signing time: Thu 18 Dec 2025 14:02:26 +0000 Manifest this update: Thu 18 Dec 2025 13:57:26 +0000 Manifest next update: Sun 21 Dec 2025 20:06:26 +0000 Files and hashes: 1: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: BLd6q/emexfVlm7VngzEQ5OJ7RS62yZ/WvulX36XvOE=) 2: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: BykA/C83mOPdhHBfKlQxv+Eg7ntzhCZUioRMDEuGdfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0c:8c:8e:17:af:64:78:59:68:d8:98:bb:fa:1c:82:3e:6b:59:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863 Validity Not Before: Dec 18 13:57:26 2025 GMT Not After : Dec 21 20:06:26 2025 GMT Subject: CN=E4887ADF4165890BE35762127DE43E6FBAD247E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:c8:bc:0d:3a:81:47:9f:45:ca:9b:7a:5f: 32:97:d6:22:e6:29:8d:56:8e:1f:66:68:32:d3:e8: e1:bd:ee:f7:17:de:60:62:de:07:5a:59:27:59:2d: ae:6d:8b:34:3d:84:03:20:ec:16:54:3f:c9:14:93: 65:ea:5f:64:40:f8:bd:5b:84:dc:d2:db:82:f8:76: 8f:65:2e:2e:69:8c:2c:a5:4d:23:a5:04:92:80:3a: a0:69:2c:81:53:19:27:18:ed:8b:5f:4b:83:6c:08: 1c:cd:db:da:66:3b:bb:84:de:61:42:bc:a8:9b:27: e8:f6:fe:b7:20:bb:de:48:70:5e:93:c2:01:0e:2f: 81:21:99:4d:17:b1:c4:7b:8d:e9:73:e9:d5:a2:48: 6a:ac:94:a2:cd:4a:02:b7:54:7a:b5:57:48:0f:3b: 19:73:00:e5:80:2d:ab:67:12:43:10:b7:4f:15:76: 18:5c:be:0b:04:43:68:93:7b:00:44:08:41:b2:62: 47:cc:d3:17:c0:6c:6d:a4:b6:81:cc:bd:13:5f:8c: 52:35:cc:4d:6a:6f:26:b6:44:c8:5f:85:5d:52:60: 0b:a1:d0:85:48:98:b5:ec:9c:fb:bc:50:b3:46:6e: 86:be:3e:c3:d3:ac:38:3f:42:e8:25:15:52:29:4b: 02:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:88:7A:DF:41:65:89:0B:E3:57:62:12:7D:E4:3E:6F:BA:D2:47:E5 X509v3 Authority Key Identifier: keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:ca:70:03:44:14:2a:b3:bd:66:45:99:59:fb:9a:66:9d:59: 81:df:c4:f7:62:88:34:31:69:47:e6:6e:79:84:04:14:70:7e: 24:a4:e8:46:53:6a:f7:63:1e:64:4e:1d:b5:39:ea:2e:60:bc: 1d:5e:e3:29:06:ba:27:cc:ce:b1:96:7b:65:ae:e8:38:4f:21: da:25:94:d5:c2:30:68:93:36:fc:53:90:51:5b:9b:10:0a:70: e0:a3:35:7b:1d:08:d9:1f:52:c4:f3:ac:ec:66:3d:61:64:51: bf:7e:c9:18:e0:83:ca:e5:18:6b:d8:8b:44:18:5d:dc:db:01: 58:15:62:b4:a6:05:12:90:50:05:53:31:15:86:3c:12:9e:10: f8:99:8e:a5:40:6b:5b:d7:5b:c7:be:9b:d2:27:1f:2a:68:0e: 27:12:39:63:2c:d9:52:24:05:83:b8:89:1b:cb:05:14:b1:5c: 94:d5:ef:c2:6b:e2:36:7b:5a:ad:e9:ee:f9:c8:f9:ee:00:00: e9:6b:2b:11:8f:25:a2:4b:39:d0:e6:48:a5:aa:9d:ac:95:42: dd:26:22:93:2c:4f:c0:2a:cb:d4:ae:dd:ee:c9:06:55:a5:79: 10:b2:6c:cf:55:d4:9c:a5:cf:c8:95:9e:20:30:14:c9:e6:7a: 0e:e3:20:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQyMjhevZHhZaNiYu/ocgj5rWeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEy QTQwNzg2MzAeFw0yNTEyMTgxMzU3MjZaFw0yNTEyMjEyMDA2MjZaMDMxMTAvBgNV BAMTKEU0ODg3QURGNDE2NTg5MEJFMzU3NjIxMjdERTQzRTZGQkFEMjQ3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+u8i8DTqBR59Fypt6XzKX1iLm KY1Wjh9maDLT6OG97vcX3mBi3gdaWSdZLa5tizQ9hAMg7BZUP8kUk2XqX2RA+L1b hNzS24L4do9lLi5pjCylTSOlBJKAOqBpLIFTGScY7YtfS4NsCBzN29pmO7uE3mFC vKibJ+j2/rcgu95IcF6TwgEOL4EhmU0XscR7jelz6dWiSGqslKLNSgK3VHq1V0gP OxlzAOWALatnEkMQt08VdhhcvgsEQ2iTewBECEGyYkfM0xfAbG2ktoHMvRNfjFI1 zE1qbya2RMhfhV1SYAuh0IVImLXsnPu8ULNGboa+PsPTrDg/QuglFVIpSwJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Ih630FliQvjV2ISfeQ+b7rSR+UwHwYDVR0j BBgwFoAUAMuzFKM5ZQiYRSfcnj+R2ipAeGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzRkYzVlMS0xZDU1LTQ5ZDItOTNkNC01ZDk4ZWFkNzc5ZWQvMC8wMENCQjMxNEEz Mzk2NTA4OTg0NTI3REM5RTNGOTFEQTJBNDA3ODYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEyQTQw Nzg2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkx REEyQTQwNzg2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANPKcANEFCqzvWZFmVn7mmadWYHfxPdiiDQx aUfmbnmEBBRwfiSk6EZTavdjHmROHbU56i5gvB1e4ykGuifMzrGWe2Wu6DhPIdol lNXCMGiTNvxTkFFbmxAKcOCjNXsdCNkfUsTzrOxmPWFkUb9+yRjgg8rlGGvYi0QY XdzbAVgVYrSmBRKQUAVTMRWGPBKeEPiZjqVAa1vXW8e+m9InHypoDicSOWMs2VIk BYO4iRvLBRSxXJTV78Jr4jZ7Wq3p7vnI+e4AAOlrKxGPJaJLOdDmSKWqnayVQt0m IpMsT8Aqy9Su3e7JBlWleRCybM9V1Jylz8iVniAwFMnmeg7jIHc= -----END CERTIFICATE-----Generated at Fri Dec 19 03:13:41 2025 by rpki-client