This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: OGKh/uiEKAmoON5JhTY5TLbfBSOVryAR7n5H8K9G77k= Subject key identifier: 3D:D1:A8:EC:3E:E7:DC:81:C9:27:90:B1:CA:E1:AF:63:24:BF:FA:9A Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 6AEEA2F237BDD331CDA95EE2BC9D6A6419421659 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 0213 Signing time: Mon 29 Dec 2025 20:02:17 +0000 Manifest this update: Mon 29 Dec 2025 19:57:17 +0000 Manifest next update: Fri 02 Jan 2026 07:30:17 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) 2: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: EcI2h2Wd+KLa8CJGSW5rPrj+mcoZyfjmQkFV5lxTInI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 07:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ee:a2:f2:37:bd:d3:31:cd:a9:5e:e2:bc:9d:6a:64:19:42:16:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Dec 29 19:57:17 2025 GMT Not After : Jan 2 07:30:17 2026 GMT Subject: CN=3DD1A8EC3EE7DC81C92790B1CAE1AF6324BFFA9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:98:8f:ea:1f:49:99:79:22:8f:35:35:69: ef:2a:e0:5d:13:61:8b:86:2c:fb:69:5d:31:43:73: c3:a0:85:75:2f:03:25:59:2f:03:6c:60:1d:38:a3: 57:9e:e5:a5:fc:87:3a:54:03:11:57:3f:7c:2e:2c: 7f:ac:5c:23:31:16:5b:32:4b:27:20:01:5b:89:66: 5c:0d:b1:51:fd:f0:8e:8d:2f:42:eb:a8:dc:b6:72: a6:6d:ef:bf:6e:e2:a3:fe:c3:1a:d6:ec:e2:43:70: b0:63:90:5f:a4:e4:f0:f5:3d:a1:08:ee:b5:d6:20: 8c:09:3c:36:2a:44:da:60:76:34:63:9d:c6:fb:af: 0e:42:63:26:12:ae:3c:5f:01:67:9f:92:21:4c:d2: 9d:a5:91:8b:65:04:c0:b0:39:a4:8f:19:2d:94:25: b8:59:b7:ef:eb:e0:97:bb:98:06:96:1e:a3:3e:17: a9:75:2c:24:10:aa:1b:24:ff:15:19:43:df:64:7b: 94:f9:3d:df:80:df:ba:57:16:65:03:e3:5c:88:44: 1e:52:72:06:f1:2a:c6:0c:a4:d1:96:a6:9e:3c:b9: d8:46:d1:e0:66:89:11:f9:4d:01:ec:ed:6a:ba:ef: 23:ea:f3:ca:e7:a5:85:3e:9b:40:17:0e:d8:36:6b: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D1:A8:EC:3E:E7:DC:81:C9:27:90:B1:CA:E1:AF:63:24:BF:FA:9A X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:34:18:2a:eb:98:74:d1:83:40:b8:92:d4:31:6a:65:ef:6c: 09:5f:f8:14:e8:04:d8:98:02:09:da:68:64:e9:a4:0e:11:aa: 23:7d:a8:32:37:f9:86:46:a7:8c:4c:d2:eb:db:c9:94:fa:ee: 8d:fe:11:e5:fa:23:28:0e:52:ad:86:ce:0a:b1:7d:28:e9:ff: bc:2b:5b:f8:e4:cb:22:14:40:61:10:c9:e6:3d:56:66:db:e0: c7:a1:93:49:21:30:5a:9e:b4:b7:bf:aa:f9:42:88:51:a8:54: 8b:a0:dd:fc:22:07:93:c6:20:3c:95:cb:70:6b:fd:02:69:55: bc:20:1a:a3:5a:2e:63:7a:c1:d9:fb:27:41:94:17:de:f4:6d: 43:76:b8:58:d7:d5:d0:c2:23:3f:cc:36:53:b1:fd:70:d5:67: 7a:7a:4b:f5:f6:9e:33:53:18:09:de:e1:ae:c4:cb:96:54:2c: 64:e6:36:85:b6:d8:e9:7f:56:0d:92:cc:0a:4a:40:3f:f5:66: e8:02:f1:85:07:8a:12:ed:b7:0b:7a:ec:e7:61:a5:62:e6:a3: dd:cd:2a:91:a7:dd:a8:09:ac:51:84:96:5a:3e:a2:ae:67:dd: aa:77:c0:3c:1e:b0:5d:a5:f5:e3:6b:66:93:24:bc:1c:82:7b: 1c:22:10:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUau6i8je90zHNqV7ivJ1qZBlCFlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNTEyMjkxOTU3MTdaFw0yNjAxMDIwNzMwMTdaMDMxMTAvBgNV BAMTKDNERDFBOEVDM0VFN0RDODFDOTI3OTBCMUNBRTFBRjYzMjRCRkZBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoW5iP6h9JmXkijzU1ae8q4F0T YYuGLPtpXTFDc8OghXUvAyVZLwNsYB04o1ee5aX8hzpUAxFXP3wuLH+sXCMxFlsy SycgAVuJZlwNsVH98I6NL0LrqNy2cqZt779u4qP+wxrW7OJDcLBjkF+k5PD1PaEI 7rXWIIwJPDYqRNpgdjRjncb7rw5CYyYSrjxfAWefkiFM0p2lkYtlBMCwOaSPGS2U JbhZt+/r4Je7mAaWHqM+F6l1LCQQqhsk/xUZQ99ke5T5Pd+A37pXFmUD41yIRB5S cgbxKsYMpNGWpp48udhG0eBmiRH5TQHs7Wq67yPq88rnpYU+m0AXDtg2a8bRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPdGo7D7n3IHJJ5CxyuGvYyS/+powHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw0GCrrmHTRg0C4ktQxamXvbAlf+BToBNiY AgnaaGTppA4RqiN9qDI3+YZGp4xM0uvbyZT67o3+EeX6IygOUq2GzgqxfSjp/7wr W/jkyyIUQGEQyeY9Vmbb4Mehk0khMFqetLe/qvlCiFGoVIug3fwiB5PGIDyVy3Br /QJpVbwgGqNaLmN6wdn7J0GUF970bUN2uFjX1dDCIz/MNlOx/XDVZ3p6S/X2njNT GAne4a7Ey5ZULGTmNoW22Ol/Vg2SzApKQD/1ZugC8YUHihLttwt67OdhpWLmo93N KpGn3agJrFGEllo+oq5n3ap3wDwesF2l9eNrZpMkvByCexwiEAE= -----END CERTIFICATE-----Generated at Tue Dec 30 08:55:10 2025 by rpki-client