This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: tsboL/AIFVLmg6z+32rbFz5+wfe1HKbpLNJnSJnRJM0= Subject key identifier: 26:D5:1C:EB:60:F0:46:9D:96:5C:92:7D:D8:8D:F2:FF:E4:3F:AE:A5 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 0E725A8E10B43408B61EC058D17035AA764070C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 0214 Signing time: Wed 24 Dec 2025 14:43:32 +0000 Manifest this update: Wed 24 Dec 2025 14:38:32 +0000 Manifest next update: Sat 27 Dec 2025 16:28:32 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: ZFOidr9GvHGDgkG4cuXNbi8aFXF710mqbgUgWV23yv4=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:72:5a:8e:10:b4:34:08:b6:1e:c0:58:d1:70:35:aa:76:40:70:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Dec 24 14:38:32 2025 GMT Not After : Dec 27 16:28:32 2025 GMT Subject: CN=26D51CEB60F0469D965C927DD88DF2FFE43FAEA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:f8:52:87:c8:bf:55:6e:79:7c:04:3f:33: 69:fd:29:6f:65:8d:57:f9:a5:f8:46:5e:9c:9e:fd: be:24:28:e7:bc:ac:e6:30:96:69:1d:b7:62:21:d6: 87:86:58:15:92:d6:5d:ab:41:02:31:a0:27:4a:59: b7:df:0d:7a:fc:53:99:e3:de:07:f3:49:a5:9e:7c: 1f:24:73:a8:13:46:7f:ab:d0:3a:1d:ba:1d:b7:c7: dc:55:a5:6b:4b:e9:2f:d3:e6:72:56:ae:b3:ff:1c: 94:af:5a:15:1e:0f:53:d5:28:7d:75:94:52:37:5d: 5c:3e:c5:6d:65:94:d2:07:5a:4e:e1:67:7e:69:f6: eb:8f:9e:a4:48:21:24:3c:22:ae:6d:e9:1b:fa:c6: b2:e3:b1:e4:33:59:34:81:d7:49:f4:87:bd:c5:a2: c3:7e:ee:c5:db:0b:d2:de:60:c0:51:8c:52:2c:a8: 45:47:3e:86:f8:fa:8f:29:b9:d6:0f:bf:3b:36:49: 4c:ea:67:9b:b4:3d:4c:33:06:b1:4c:5b:66:d3:88: d6:2b:ce:65:9b:54:60:f0:5e:58:a3:f6:4d:e0:6c: 3c:22:cf:6e:7d:db:23:c1:7a:4c:45:81:b6:8a:6f: 64:be:06:56:99:64:d7:fe:0d:db:f0:ea:fa:16:53: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D5:1C:EB:60:F0:46:9D:96:5C:92:7D:D8:8D:F2:FF:E4:3F:AE:A5 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9a:39:4e:44:be:20:2b:65:0e:00:d9:b3:cc:41:ef:67:ff: 35:9c:96:80:80:f8:7b:57:c8:52:f7:67:f5:e4:76:65:0a:60: 6e:73:c6:f3:9a:4b:6c:f8:4f:5e:41:9b:a6:09:9d:20:22:f9: 9f:6c:2e:27:c6:5d:42:82:04:11:78:37:65:3c:24:6e:19:e6: 1e:6e:0e:df:03:8e:48:ef:17:42:b9:8e:52:7c:19:f1:29:ae: 27:4b:55:a8:80:72:30:e0:de:72:29:a7:9a:f3:6d:b3:4b:69: 2c:55:47:04:33:97:73:c8:1b:bb:a6:ac:97:fa:d7:cc:e1:21: d1:0e:61:33:86:ad:6c:f6:53:74:1d:08:e1:4d:8f:5d:c0:52: 83:d4:58:f2:4d:6f:22:e4:fc:e7:2c:e0:88:3a:cb:a6:36:8a: b5:a1:6c:2e:6d:79:d7:55:af:3e:e9:99:04:b9:3b:1c:22:41: 8a:41:8e:cb:fd:20:d2:fd:9b:d0:00:66:6a:06:0a:41:81:67: 47:1f:51:91:98:e1:60:6a:cd:51:e8:98:bc:06:49:58:04:ad: 45:61:36:ae:e0:50:d1:ec:28:10:54:c6:a2:f7:68:16:9a:d8: d3:26:24:9d:13:94:ab:a3:a8:f6:b0:40:12:d4:a2:1d:fb:36: 91:84:86:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnJajhC0NAi2HsBY0XA1qnZAcMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTEyMjQxNDM4MzJaFw0yNTEyMjcxNjI4MzJaMDMxMTAvBgNV BAMTKDI2RDUxQ0VCNjBGMDQ2OUQ5NjVDOTI3REQ4OERGMkZGRTQzRkFFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmfhSh8i/VW55fAQ/M2n9KW9l jVf5pfhGXpye/b4kKOe8rOYwlmkdt2Ih1oeGWBWS1l2rQQIxoCdKWbffDXr8U5nj 3gfzSaWefB8kc6gTRn+r0Doduh23x9xVpWtL6S/T5nJWrrP/HJSvWhUeD1PVKH11 lFI3XVw+xW1llNIHWk7hZ35p9uuPnqRIISQ8Iq5t6Rv6xrLjseQzWTSB10n0h73F osN+7sXbC9LeYMBRjFIsqEVHPob4+o8pudYPvzs2SUzqZ5u0PUwzBrFMW2bTiNYr zmWbVGDwXlij9k3gbDwiz2592yPBekxFgbaKb2S+BlaZZNf+Ddvw6voWU1tTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJtUc62DwRp2WXJJ92I3y/+Q/rqUwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWaOU5EviArZQ4A2bPMQe9n/zWcloCA+HtX yFL3Z/XkdmUKYG5zxvOaS2z4T15Bm6YJnSAi+Z9sLifGXUKCBBF4N2U8JG4Z5h5u Dt8DjkjvF0K5jlJ8GfEpridLVaiAcjDg3nIpp5rzbbNLaSxVRwQzl3PIG7umrJf6 18zhIdEOYTOGrWz2U3QdCOFNj13AUoPUWPJNbyLk/Ocs4Ig6y6Y2irWhbC5teddV rz7pmQS5OxwiQYpBjsv9INL9m9AAZmoGCkGBZ0cfUZGY4WBqzVHomLwGSVgErUVh Nq7gUNHsKBBUxqL3aBaa2NMmJJ0TlKujqPawQBLUoh37NpGEhqc= -----END CERTIFICATE-----Generated at Thu Dec 25 14:53:03 2025 by rpki-client