This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
File: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json)
Hash identifier: 8DzQAGIhzDPzRe1aCC4LL2Rlz9Eq7vfoh/q2jbtmHN4=
Subject key identifier: AD:F8:A0:30:7F:35:D6:B1:44:A3:B1:C5:84:9A:9F:4C:20:47:59:09
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Certificate issuer: /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial: 7AC3A6F9BE84AE082722FCAB64AA1C3B4396565F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
Manifest number: 057F
Signing time: Fri 19 Dec 2025 10:14:29 +0000
Manifest this update: Fri 19 Dec 2025 10:09:29 +0000
Manifest next update: Mon 22 Dec 2025 13:40:29 +0000
Files and hashes: 1: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: /xCTIh9hwcxKjknnAI3eSpvSHoqSTZNnozfD2XT8CVw=)
2: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: UtJjITDA9JHQ6VJXBVisu99jt556rMiuNEZSGObwvAc=)
3: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: o4EuiIX65DjYa3ywyHTPaQSCo34pp+K8+jEM2BCf1A4=)
4: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: 516xDtvKLseki+IBX6h+mKjxbuiKgwqfJB4LmOXicXw=)
5: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: K0Qyq4TQNm4Gb6O7QApcWBMQFh1hlsrrhE70FrRZJng=)
6: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: aY0anTpEZIat4/VeI01P3kjwTwtzNISJMDgT1crbBNU=)
7: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: Ln/zBXifrR3kRN5QO8V+SWT6tpUWR1WnEob5sCVgP4s=)
8: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: VU0ZIZ2pkWLbL/yZX6A7PXJh4wAgz1Lfo/SmUnfVxjs=)
9: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: lYC97M7czZENsGA56DBP3wQzS5RPrmngqjz3tezTtX4=)
10: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: EI/U6V5bg24RVZ09I8vLipweFogO+Ea7cNH372pUyZY=)
11: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: FQpoIAC9AkHOj7gF3JsxAlTSaEMd9sYKYRZgoHuK7yw=)
12: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: bNy3O3/D8sze1XtEAGH5p80v+qY7OivRx/ulln1yeBc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 13:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c3:a6:f9:be:84:ae:08:27:22:fc:ab:64:aa:1c:3b:43:96:56:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Validity
Not Before: Dec 19 10:09:29 2025 GMT
Not After : Dec 22 13:40:29 2025 GMT
Subject: CN=ADF8A0307F35D6B144A3B1C5849A9F4C20475909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:16:37:fb:f9:d7:5c:e9:9f:bf:ce:82:5b:
98:3f:dd:6d:70:6d:ad:11:45:7c:1c:a4:68:ec:76:
72:ca:06:0f:ff:7d:f4:53:30:91:ef:ec:a5:64:7c:
29:90:84:e4:d3:30:8f:2f:4a:68:33:aa:13:e5:e0:
23:66:7e:91:4d:8e:1e:2d:f3:4a:17:fc:15:20:ae:
6f:47:ab:a2:94:48:76:93:dc:e4:48:27:a3:ea:57:
e1:58:c0:0d:e8:af:f3:f3:d5:76:3f:0e:8a:1e:de:
57:84:b5:c4:65:01:6c:6f:37:50:9b:66:e8:88:bd:
8f:3e:ef:08:ae:c2:9a:0d:cb:a6:27:c2:d5:9f:75:
3f:3d:56:39:ef:2e:9d:b7:b8:a0:63:30:39:9f:e0:
37:50:7e:ef:c3:c8:0e:ce:4d:ce:03:ab:80:2b:80:
53:d8:4a:f3:46:81:2e:7e:bc:f1:ce:4d:90:ed:14:
c4:63:ae:3e:01:64:52:07:cf:9d:bd:ed:3c:a4:2f:
01:65:be:c9:29:66:cd:35:99:28:c0:8a:dc:af:b3:
5f:23:d2:4f:4c:25:c4:d6:81:43:2f:49:92:b9:eb:
b2:a6:50:a6:de:7e:cf:89:32:da:c2:e9:b9:1e:2f:
33:a0:9e:fd:6d:70:82:8a:c6:39:33:d4:aa:41:3b:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F8:A0:30:7F:35:D6:B1:44:A3:B1:C5:84:9A:9F:4C:20:47:59:09
X509v3 Authority Key Identifier:
keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:04:10:68:c7:75:4f:56:05:0e:87:1c:82:92:f4:69:ea:70:
87:f3:20:a7:65:4f:77:d4:e5:ee:0c:38:13:ee:c6:16:32:6e:
4e:ee:ac:b3:a2:87:57:86:44:20:68:9e:cb:30:ef:f1:6e:60:
83:04:ec:91:f2:fd:66:a2:bd:ba:c7:3d:ee:28:78:52:18:d7:
6f:d4:ba:54:6b:9a:7a:9e:70:dd:e4:76:d8:7b:37:49:45:05:
5b:dc:54:ff:b2:0c:d2:37:1a:f4:66:3c:44:3f:0d:60:4a:2a:
ed:7b:0f:88:b9:a9:62:f1:79:e3:d4:ad:ef:56:3e:64:76:bc:
8d:fd:29:eb:bf:5e:5e:93:29:1d:51:41:9b:e7:14:f1:0e:70:
92:09:77:db:e7:b7:7f:52:8a:2e:07:52:06:e5:02:14:f6:de:
ca:43:7e:2d:bf:b7:ff:3e:b7:06:bd:c3:91:de:b1:15:8b:c3:
00:69:ab:f6:6e:2b:5b:2a:09:16:4c:3a:58:a0:df:60:d4:97:
f8:4c:81:4f:6f:a2:87:37:29:52:ed:0d:b4:5a:9b:a9:51:9a:
dc:e3:26:0d:4e:dc:c7:45:14:39:cf:94:1e:f8:dc:1a:83:a4:
e1:b4:a7:ae:10:d6:4f:9d:ba:44:42:4d:64:bb:31:b9:71:2f:
78:b3:5e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:27:51 2025 by rpki-client