This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: HQTJYeiyCH4CbiB2N23w4krYaWU/68DG1EdmZbKXh54= Subject key identifier: 7B:5A:46:D8:D5:A5:97:0D:2B:D7:4F:5B:F2:76:2E:2A:08:CC:7D:48 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 0CDE9347FB9B0B76B688B9FD7117C0F8BAEDB438 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 0219 Signing time: Sat 20 Dec 2025 03:22:30 +0000 Manifest this update: Sat 20 Dec 2025 03:17:30 +0000 Manifest next update: Tue 23 Dec 2025 15:19:30 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) 2: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 4: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: hUmKqVK1OftrNtnxCy4Mryw/d9EcfQ9rubfAQO4eIys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:de:93:47:fb:9b:0b:76:b6:88:b9:fd:71:17:c0:f8:ba:ed:b4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Dec 20 03:17:30 2025 GMT Not After : Dec 23 15:19:30 2025 GMT Subject: CN=7B5A46D8D5A5970D2BD74F5BF2762E2A08CC7D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:48:fb:8c:09:9e:58:90:a4:c2:5a:e1:ff: 4e:9d:e4:e7:80:ba:8a:f2:63:fa:94:0a:c2:3b:34: 42:e4:19:f5:37:55:bf:b2:52:aa:44:12:10:a9:04: 6e:ee:2c:65:af:11:46:9b:b4:0d:53:87:74:c5:0c: 68:87:e4:5c:72:fc:7f:40:86:19:9f:48:47:80:53: d5:5b:ed:1e:05:8a:e4:b4:a5:c5:19:f5:6f:6e:25: 47:45:14:2e:35:e1:1f:15:33:54:68:c1:da:c4:b4: c0:ea:05:dd:bb:eb:2b:06:2d:7c:0b:df:09:12:f3: 88:bb:27:9c:f8:5d:99:20:e0:60:7c:a5:d7:06:6d: 50:e1:47:ad:c0:c6:60:4c:74:43:0d:92:a5:2b:3d: 19:d6:79:6c:18:9f:46:08:57:74:f0:91:60:fe:34: d6:b2:00:69:00:f7:d2:cb:db:16:20:ee:e7:82:6b: 1a:45:4c:7d:11:13:3d:62:83:b9:c6:52:27:d3:62: 6a:2c:25:51:2a:8b:66:49:02:fe:8b:ad:2e:2f:ec: 99:08:e7:b6:6c:45:36:e5:73:3f:e7:a0:1f:d1:af: c8:da:c9:35:17:93:f9:9b:86:1f:d7:9b:b4:98:1b: 5a:3d:f7:e0:dd:1c:f8:03:49:e9:85:00:1f:a6:f2: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5A:46:D8:D5:A5:97:0D:2B:D7:4F:5B:F2:76:2E:2A:08:CC:7D:48 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:48:c7:de:44:2e:44:3b:13:9e:d8:68:52:76:e7:c5:19:9d: b7:ee:e8:86:9c:8a:43:50:a6:f1:2a:b9:92:67:95:19:b3:a0: 72:00:46:37:5d:43:4c:f8:58:86:bf:b9:1b:c4:c5:ea:e9:66: 57:40:eb:49:b0:88:b2:11:e4:30:53:be:d9:2c:da:52:13:a4: 88:aa:87:6b:3d:06:b0:5d:bc:37:66:d5:54:28:e0:9b:6b:c6: 13:05:de:96:db:54:c9:a0:ac:ab:b2:56:37:55:a0:ec:1c:36: 15:24:ed:c8:10:0b:fc:55:23:f5:c4:ef:8e:6c:6d:a4:84:ea: 33:52:46:e9:81:8e:3b:51:b8:f0:81:84:f4:c8:4d:96:a9:5b: c8:50:12:49:35:51:40:21:5c:cb:50:20:61:99:cb:d7:b1:1a: d9:48:25:66:80:95:ce:d6:d5:9f:80:24:a8:f2:6a:e7:c3:7e: d6:4e:8a:0d:cf:db:54:d8:6f:ff:cf:3f:39:03:7e:01:30:9f: 5c:38:2b:84:6c:db:55:60:05:4d:48:90:a9:7e:8a:07:06:63: 86:02:83:01:39:54:14:11:93:dc:4c:ee:2e:a7:e9:f9:8b:0a: d4:30:42:72:92:ad:f8:9d:11:42:c5:77:db:33:df:27:72:e4: 4f:2d:18:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDN6TR/ubC3a2iLn9cRfA+LrttDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTEyMjAwMzE3MzBaFw0yNTEyMjMxNTE5MzBaMDMxMTAvBgNV BAMTKDdCNUE0NkQ4RDVBNTk3MEQyQkQ3NEY1QkYyNzYyRTJBMDhDQzdENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsEj7jAmeWJCkwlrh/06d5OeA uoryY/qUCsI7NELkGfU3Vb+yUqpEEhCpBG7uLGWvEUabtA1Th3TFDGiH5Fxy/H9A hhmfSEeAU9Vb7R4FiuS0pcUZ9W9uJUdFFC414R8VM1RowdrEtMDqBd276ysGLXwL 3wkS84i7J5z4XZkg4GB8pdcGbVDhR63AxmBMdEMNkqUrPRnWeWwYn0YIV3TwkWD+ NNayAGkA99LL2xYg7ueCaxpFTH0REz1ig7nGUifTYmosJVEqi2ZJAv6LrS4v7JkI 57ZsRTblcz/noB/Rr8jayTUXk/mbhh/Xm7SYG1o99+DdHPgDSemFAB+m8k3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe1pG2NWllw0r109b8nYuKgjMfUgwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMNIx95ELkQ7E57YaFJ258UZnbfu6IacikNQ pvEquZJnlRmzoHIARjddQ0z4WIa/uRvExerpZldA60mwiLIR5DBTvtks2lITpIiq h2s9BrBdvDdm1VQo4JtrxhMF3pbbVMmgrKuyVjdVoOwcNhUk7cgQC/xVI/XE745s baSE6jNSRumBjjtRuPCBhPTITZapW8hQEkk1UUAhXMtQIGGZy9exGtlIJWaAlc7W 1Z+AJKjyaufDftZOig3P21TYb//PPzkDfgEwn1w4K4Rs21VgBU1IkKl+igcGY4YC gwE5VBQRk9xM7i6n6fmLCtQwQnKSrfidEULFd9sz3ydy5E8tGCI= -----END CERTIFICATE-----Generated at Sun Dec 21 15:31:34 2025 by rpki-client