This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: KZ22aAewsybBYbdywxdUADqgBcIB3E/H8ZJRwfviDDw= Subject key identifier: 2D:5E:25:74:39:0F:79:A0:E5:65:B0:A5:26:5E:85:4A:5B:CC:A7:5E Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 3562442155AF17913CC67A16B4AB8B31B3DE883F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: EF Signing time: Tue 23 Dec 2025 11:12:15 +0000 Manifest this update: Tue 23 Dec 2025 11:07:15 +0000 Manifest next update: Fri 26 Dec 2025 17:55:15 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: nweHghLj5Jb6hACsJELNnP3o0TgbKBo7tDeIqI/FLF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:62:44:21:55:af:17:91:3c:c6:7a:16:b4:ab:8b:31:b3:de:88:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Dec 23 11:07:15 2025 GMT Not After : Dec 26 17:55:15 2025 GMT Subject: CN=2D5E2574390F79A0E565B0A5265E854A5BCCA75E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:13:52:38:d0:31:2c:af:e9:93:1d:03:b5:ff: 52:78:57:61:0e:a5:09:fe:44:4b:bf:cb:8f:16:6e: 7f:05:dd:94:5c:09:58:ce:f4:bf:b5:cc:25:ac:7d: e1:eb:32:90:4c:1b:65:e0:71:4d:c8:b7:18:ab:e8: 3e:a3:51:1b:58:59:44:8e:4b:0a:58:89:4e:44:41: fe:34:4e:04:a4:41:a6:d7:88:b1:e0:d4:ae:eb:86: 6c:ae:88:d4:41:34:61:18:0a:58:00:7b:96:23:41: 33:e2:4e:22:65:65:0f:d7:45:27:c9:03:86:e0:ce: aa:e1:55:70:66:42:4c:18:a3:e9:81:83:64:bc:75: 82:c5:f3:0a:88:2c:88:b0:bf:a5:67:f6:03:1e:67: 0c:3c:be:10:0b:ca:fa:f2:a6:30:fe:a7:ee:c4:d4: 0b:30:0a:53:a8:44:d0:7e:51:42:fa:5b:8d:a3:0f: e0:75:1d:7d:c2:f8:7b:db:c6:9a:33:71:03:ce:5e: 84:e0:f0:29:47:48:be:c1:c8:bb:76:e2:32:b9:66: ca:16:b7:62:73:c3:15:a9:d2:8e:d8:83:3f:31:89: d7:3a:62:65:e5:83:b5:a4:b8:04:1e:87:20:e3:44: 5a:71:e9:4d:ef:30:1c:44:88:2a:b9:19:7e:53:d1: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5E:25:74:39:0F:79:A0:E5:65:B0:A5:26:5E:85:4A:5B:CC:A7:5E X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f9:73:23:d6:bc:3d:57:7f:ec:3f:1f:d5:50:53:41:71:42: 3a:1b:04:64:7d:bd:64:09:2b:07:be:d2:97:16:68:7f:bc:74: eb:61:fc:d3:c6:89:fa:8e:95:10:85:4e:d7:18:94:e6:bf:9a: 9d:52:aa:c5:2e:2d:a0:52:24:29:df:f0:f0:96:4b:66:19:88: 03:28:5d:e5:6f:e0:8d:53:ac:76:56:a2:a3:93:1d:27:bb:b5: 3b:88:bc:35:1d:02:c3:33:dd:63:d8:73:ff:39:17:17:4d:27: c2:7f:00:76:5c:de:2d:60:f6:82:f0:d3:45:39:7e:42:c7:e5: 22:20:80:10:26:b3:57:82:c7:5d:ae:72:73:92:e1:c5:78:fc: eb:d8:5d:a4:7c:8a:a0:1c:fa:cf:05:02:ae:fa:32:5a:67:4d: ae:28:4e:71:59:f3:43:6c:d5:9b:0e:e4:76:83:1c:74:1c:5b: 8b:29:03:b1:b1:af:65:c0:b3:ec:bd:e5:26:29:f5:a9:f8:56: b5:3d:2d:32:8b:be:af:92:8d:61:c0:e5:d8:42:de:16:cd:8e: 57:1b:a1:b8:68:ab:29:77:84:1b:d1:89:7a:d2:26:63:2c:a8: c0:41:f7:4a:94:a3:41:b5:d3:e1:22:db:d7:0a:ec:79:f2:cc: 0f:de:39:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWJEIVWvF5E8xnoWtKuLMbPeiD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTEyMjMxMTA3MTVaFw0yNTEyMjYxNzU1MTVaMDMxMTAvBgNV BAMTKDJENUUyNTc0MzkwRjc5QTBFNTY1QjBBNTI2NUU4NTRBNUJDQ0E3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeE1I40DEsr+mTHQO1/1J4V2EO pQn+REu/y48Wbn8F3ZRcCVjO9L+1zCWsfeHrMpBMG2XgcU3Itxir6D6jURtYWUSO SwpYiU5EQf40TgSkQabXiLHg1K7rhmyuiNRBNGEYClgAe5YjQTPiTiJlZQ/XRSfJ A4bgzqrhVXBmQkwYo+mBg2S8dYLF8wqILIiwv6Vn9gMeZww8vhALyvrypjD+p+7E 1AswClOoRNB+UUL6W42jD+B1HX3C+HvbxpozcQPOXoTg8ClHSL7ByLt24jK5ZsoW t2JzwxWp0o7Ygz8xidc6YmXlg7WkuAQehyDjRFpx6U3vMBxEiCq5GX5T0UKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULV4ldDkPeaDlZbClJl6FSlvMp14wHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGn5cyPWvD1Xf+w/H9VQU0FxQjobBGR9vWQJ Kwe+0pcWaH+8dOth/NPGifqOlRCFTtcYlOa/mp1SqsUuLaBSJCnf8PCWS2YZiAMo XeVv4I1TrHZWoqOTHSe7tTuIvDUdAsMz3WPYc/85FxdNJ8J/AHZc3i1g9oLw00U5 fkLH5SIggBAms1eCx12ucnOS4cV4/OvYXaR8iqAc+s8FAq76MlpnTa4oTnFZ80Ns 1ZsO5HaDHHQcW4spA7Gxr2XAs+y95SYp9an4VrU9LTKLvq+SjWHA5dhC3hbNjlcb obhoqyl3hBvRiXrSJmMsqMBB90qUo0G10+Ei29cK7HnyzA/eOYU= -----END CERTIFICATE-----Generated at Thu Dec 25 00:55:55 2025 by rpki-client