This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: 7t9rOGVf69fa8vjxsNGeXTfgv6cEIuVdqaYsN66JmnQ= Subject key identifier: CD:61:0E:B2:0E:1D:06:FA:50:71:96:15:A0:A8:5F:9E:65:98:03:6C Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 32109223FC114BAD27A924B2BAAFC9120892B816 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: BC Signing time: Mon 15 Dec 2025 21:01:21 +0000 Manifest this update: Mon 15 Dec 2025 20:56:21 +0000 Manifest next update: Fri 19 Dec 2025 03:30:21 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: 2o2jdCVbNyj/6dX+oq2zQPU0J+pHhSRrwsuCtvlNp9A=) 2: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: VI5amVZMC5v2utwkbkM6uux1JOpkEgEOw5W8n9olw68=) 3: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: 7k7XFHKvAJgbfv69fk0B1iO6Jf5r6QgARL5WGyhtdrw=) 4: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: xQqvUTJq/TqdKwLf4G80fezav1LupyUO9lDHs53vxIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 03:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:10:92:23:fc:11:4b:ad:27:a9:24:b2:ba:af:c9:12:08:92:b8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Dec 15 20:56:21 2025 GMT Not After : Dec 19 03:30:21 2025 GMT Subject: CN=CD610EB20E1D06FA50719615A0A85F9E6598036C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:dd:cc:4a:75:f3:ca:24:69:09:3f:53:37: 83:b2:f2:13:50:29:ae:49:ba:bd:d8:73:21:de:1b: 94:d3:c2:7a:53:20:92:7d:47:44:01:91:69:85:ce: a6:ef:b2:6c:6f:2e:e8:56:c4:c1:56:9a:42:05:8d: 73:fa:03:c0:c3:f8:95:c6:f1:db:87:48:1a:97:0f: d1:83:c3:35:bb:3b:1d:b1:d3:aa:16:7d:19:a0:2c: ac:36:52:13:14:d2:88:be:62:48:31:ea:91:90:89: bf:37:8a:a3:fc:d2:6b:32:ce:e1:96:e4:33:1e:25: 01:a8:46:11:88:e4:b5:08:9a:2c:7e:74:9f:c6:21: de:10:ca:a0:5d:86:fb:47:75:c5:e8:54:b4:68:6a: a7:c2:cf:69:8b:38:00:d0:db:71:42:4f:91:2d:d7: 7d:6e:4b:60:63:27:34:9f:2e:86:ca:d4:b9:c1:50: fd:f5:23:0a:d8:cb:b3:74:d0:78:7f:15:c4:38:ab: 1f:03:4d:4f:5f:8d:16:0b:4f:01:c8:12:27:fe:0e: 07:19:54:e7:d6:05:dc:42:bb:9e:33:e0:8c:07:5a: a0:0b:cd:cc:32:bd:20:a8:47:24:56:b5:1a:4a:87: fc:0b:3a:98:78:a1:6d:30:4f:fc:b8:d1:c9:15:1f: 95:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:61:0E:B2:0E:1D:06:FA:50:71:96:15:A0:A8:5F:9E:65:98:03:6C X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b9:41:92:1f:ea:b5:a2:a0:b4:38:57:97:7c:bb:79:30:13: fb:99:a6:d0:4d:c1:34:da:58:ae:1b:12:af:56:61:8a:2c:d2: 90:3d:e2:3c:24:58:5d:7b:52:4b:e0:75:8c:54:e6:26:61:c7: 7b:d3:ca:09:2a:7d:7b:01:d8:48:7e:2e:e7:28:84:54:c0:b6: d4:ec:16:7c:a5:60:d3:1a:af:01:70:0a:e0:e5:dd:5f:5f:3c: 0e:84:9d:52:65:bc:21:ae:61:67:f8:ab:94:67:04:d6:4f:21: d7:3f:6c:db:05:82:8b:b0:9f:3c:3b:20:97:c8:43:04:97:a9: e4:c2:d1:78:9b:54:3f:2e:f2:c1:24:21:4b:a1:cd:bf:50:6d: ec:c2:8e:99:61:9c:8e:9d:3c:4a:29:46:43:8a:d8:9e:7e:d4: a9:26:b2:9c:cb:73:29:e7:db:05:f0:46:13:eb:d9:3f:05:85: 66:16:0f:72:c9:76:d9:9a:d8:48:fa:60:3d:6f:37:1a:1c:8c: 65:27:f1:10:40:da:ed:95:2a:88:15:5b:17:d7:18:34:46:17: 4e:21:47:b8:4d:b4:ae:d3:4a:17:9b:d8:13:99:56:83:57:8a: 3d:4a:70:7d:77:1f:70:8b:95:58:4d:57:f3:20:e8:80:f1:d2: be:3b:47:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhCSI/wRS60nqSSyuq/JEgiSuBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTEyMTUyMDU2MjFaFw0yNTEyMTkwMzMwMjFaMDMxMTAvBgNV BAMTKENENjEwRUIyMEUxRDA2RkE1MDcxOTYxNUEwQTg1RjlFNjU5ODAzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqt3MSnXzyiRpCT9TN4Oy8hNQ Ka5Jur3YcyHeG5TTwnpTIJJ9R0QBkWmFzqbvsmxvLuhWxMFWmkIFjXP6A8DD+JXG 8duHSBqXD9GDwzW7Ox2x06oWfRmgLKw2UhMU0oi+Ykgx6pGQib83iqP80msyzuGW 5DMeJQGoRhGI5LUImix+dJ/GId4QyqBdhvtHdcXoVLRoaqfCz2mLOADQ23FCT5Et 131uS2BjJzSfLobK1LnBUP31IwrYy7N00Hh/FcQ4qx8DTU9fjRYLTwHIEif+DgcZ VOfWBdxCu54z4IwHWqALzcwyvSCoRyRWtRpKh/wLOph4oW0wT/y40ckVH5UpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWEOsg4dBvpQcZYVoKhfnmWYA2wwHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI25QZIf6rWioLQ4V5d8u3kwE/uZptBNwTTa WK4bEq9WYYos0pA94jwkWF17UkvgdYxU5iZhx3vTygkqfXsB2Eh+LucohFTAttTs FnylYNMarwFwCuDl3V9fPA6EnVJlvCGuYWf4q5RnBNZPIdc/bNsFgouwnzw7IJfI QwSXqeTC0XibVD8u8sEkIUuhzb9QbezCjplhnI6dPEopRkOK2J5+1KkmspzLcynn 2wXwRhPr2T8FhWYWD3LJdtma2Ej6YD1vNxocjGUn8RBA2u2VKogVWxfXGDRGF04h R7hNtK7TSheb2BOZVoNXij1KcH13H3CLlVhNV/Mg6IDx0r47R3A= -----END CERTIFICATE-----Generated at Wed Dec 17 15:12:33 2025 by rpki-client