This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: CK/lpOJODqgMw9iWveHAsaBhKlVqusafU5RS1cO+3Fo= Subject key identifier: F3:8C:88:F9:CC:C8:1D:25:A2:48:D0:B5:03:C2:F8:D2:96:38:8F:84 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 3A89C743FB85AA51A60AB015F90339304141E93D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: FA Signing time: Wed 17 Dec 2025 11:02:08 +0000 Manifest this update: Wed 17 Dec 2025 10:57:08 +0000 Manifest next update: Sat 20 Dec 2025 11:43:08 +0000 Files and hashes: 1: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: eD1aFTXlsycdlMK9wLBjghbPbgBoCdHe33gXpqRdy+g=) 2: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:89:c7:43:fb:85:aa:51:a6:0a:b0:15:f9:03:39:30:41:41:e9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Dec 17 10:57:08 2025 GMT Not After : Dec 20 11:43:08 2025 GMT Subject: CN=F38C88F9CCC81D25A248D0B503C2F8D296388F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:92:f5:2a:39:6f:1a:60:a9:61:4b:2c:d8: a1:35:04:34:9e:4f:bc:5a:d8:ac:50:15:00:65:2b: f6:5a:19:63:c9:59:5e:8d:e6:94:a8:d8:e3:4e:bb: e2:08:4a:41:2d:bc:a8:e4:2d:bb:ed:b7:e1:f5:83: 08:fe:40:1f:81:0f:96:1e:78:19:1f:05:21:86:81: af:65:96:55:9c:ec:7b:48:da:95:61:8b:4a:93:09: b5:af:74:e0:e2:04:98:09:af:a6:0b:50:99:9b:b1: 85:f4:bd:3d:7e:ef:40:03:3d:9f:38:78:f3:45:a5: 8c:1c:9f:55:92:07:f6:84:66:75:96:39:c6:5e:4b: 85:e6:88:9a:23:93:3b:77:32:22:d8:b4:f2:2f:ef: da:b1:2f:84:ad:c5:cb:12:ab:ff:4a:f5:b6:7c:82: 9c:22:1c:6a:67:91:5c:ee:76:69:4a:36:12:cc:11: c7:12:0a:6a:9a:88:35:f9:b0:c8:09:d2:c9:03:6d: ca:40:42:63:2a:bd:9b:a4:00:8e:ea:43:97:56:5b: 65:b3:44:62:ff:c2:3e:cf:17:8c:e7:e4:37:4b:ba: d2:8a:94:d2:ef:b6:25:d2:4a:5d:b0:6e:1c:1f:d6: e1:6b:90:58:b9:78:79:3c:6d:cc:30:fe:9e:28:a5: f5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8C:88:F9:CC:C8:1D:25:A2:48:D0:B5:03:C2:F8:D2:96:38:8F:84 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:86:f7:94:7c:6d:cd:8c:5a:78:54:75:c6:8b:23:98:2b:12: ea:06:3e:d9:14:bc:3e:19:5e:be:ff:c6:14:3b:1c:a9:78:b2: 9a:60:61:68:7d:33:8b:db:28:ce:7e:60:bc:ec:07:4e:4e:d8: 88:36:de:6b:66:ee:ec:87:ba:57:03:53:d2:5f:ad:d4:13:93: fa:47:b7:c5:f9:39:ed:02:01:3f:e3:c5:ce:f2:8f:24:94:f4: 0d:f8:7b:1a:53:c5:c8:9f:e4:15:dd:96:8c:a0:04:c3:f4:bc: ea:11:5c:30:5f:b0:86:b6:ae:2a:4e:17:c8:b7:f5:44:7b:4f: 3d:f1:bc:3c:42:0b:f3:a7:ed:53:4f:51:c2:e7:74:c8:d3:da: 50:76:50:cf:2b:d6:95:f9:c8:6b:13:e5:ca:c8:6c:3f:3a:6c: f3:a2:d3:51:de:4d:cc:fb:ff:fd:9c:1c:e6:aa:36:bb:e5:0e: 15:4e:8a:f7:c8:43:27:68:c2:9f:e9:81:1b:f8:cd:44:fb:e0: 99:e0:3a:5e:8b:cb:06:30:2a:31:ea:b0:91:21:83:f7:1d:59: 34:cb:ee:b7:88:eb:d8:db:5b:fb:09:92:6a:02:16:72:41:a4: 91:bc:e0:59:21:19:6a:2c:e8:aa:c8:4a:c6:a2:e5:aa:74:a9: 94:c2:5c:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOonHQ/uFqlGmCrAV+QM5MEFB6T0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNTEyMTcxMDU3MDhaFw0yNTEyMjAxMTQzMDhaMDMxMTAvBgNV BAMTKEYzOEM4OEY5Q0NDODFEMjVBMjQ4RDBCNTAzQzJGOEQyOTYzODhGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jZL1KjlvGmCpYUss2KE1BDSe T7xa2KxQFQBlK/ZaGWPJWV6N5pSo2ONOu+IISkEtvKjkLbvtt+H1gwj+QB+BD5Ye eBkfBSGGga9lllWc7HtI2pVhi0qTCbWvdODiBJgJr6YLUJmbsYX0vT1+70ADPZ84 ePNFpYwcn1WSB/aEZnWWOcZeS4XmiJojkzt3MiLYtPIv79qxL4StxcsSq/9K9bZ8 gpwiHGpnkVzudmlKNhLMEccSCmqaiDX5sMgJ0skDbcpAQmMqvZukAI7qQ5dWW2Wz RGL/wj7PF4zn5DdLutKKlNLvtiXSSl2wbhwf1uFrkFi5eHk8bcww/p4opfWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU84yI+czIHSWiSNC1A8L40pY4j4QwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWG95R8bc2MWnhUdcaLI5grEuoGPtkUvD4Z Xr7/xhQ7HKl4sppgYWh9M4vbKM5+YLzsB05O2Ig23mtm7uyHulcDU9JfrdQTk/pH t8X5Oe0CAT/jxc7yjySU9A34expTxcif5BXdloygBMP0vOoRXDBfsIa2ripOF8i3 9UR7Tz3xvDxCC/On7VNPUcLndMjT2lB2UM8r1pX5yGsT5crIbD86bPOi01HeTcz7 //2cHOaqNrvlDhVOivfIQydowp/pgRv4zUT74JngOl6LywYwKjHqsJEhg/cdWTTL 7reI69jbW/sJkmoCFnJBpJG84FkhGWos6KrISsai5ap0qZTCXO4= -----END CERTIFICATE-----Generated at Thu Dec 18 11:53:47 2025 by rpki-client