This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json) Hash identifier: PRw3nMuDgBzyR/YblLp7ucY1C7O+XTJWzzJIGKus68A= Subject key identifier: 25:93:59:6C:B8:BA:63:09:33:66:0C:67:B9:CE:68:76:AD:5F:85:C0 Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 44D867AE2F777F47816E153F749EEF6821849EF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft Manifest number: 0256 Signing time: Thu 18 Dec 2025 11:11:25 +0000 Manifest this update: Thu 18 Dec 2025 11:06:25 +0000 Manifest next update: Sun 21 Dec 2025 19:00:25 +0000 Files and hashes: 1: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: JLV2V8ZaD2I76vimfL1CNFQ6BgYkzCpkdczbRH8Fr1M=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: kHBDyPefqsguh5TCEwR1/CilgDV5vN4olgvGsk/91XM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d8:67:ae:2f:77:7f:47:81:6e:15:3f:74:9e:ef:68:21:84:9e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: Dec 18 11:06:25 2025 GMT Not After : Dec 21 19:00:25 2025 GMT Subject: CN=2593596CB8BA630933660C67B9CE6876AD5F85C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ea:d7:18:19:d1:50:15:fc:bf:8c:39:40:50: 62:fb:fd:d9:74:1c:0d:de:2c:56:49:a2:62:35:3b: 67:b6:24:6c:ec:30:9d:6c:c3:72:b9:06:40:b2:3d: 84:91:1f:8a:2b:4f:ca:39:7a:df:03:8c:28:91:2b: 66:ed:f5:52:49:8c:87:cd:a8:87:e4:d4:99:e7:0a: 4c:a3:76:2f:79:57:fa:8c:25:34:f9:d5:ca:64:9d: e1:b3:68:cd:28:fe:df:d6:06:02:e4:5f:62:3b:2f: 46:f1:37:96:56:26:61:e5:fe:49:ed:4f:35:e6:a4: 8c:39:b4:3a:5c:40:20:61:f4:60:20:aa:02:0b:e7: 52:95:71:cb:f7:70:c2:86:72:04:5a:7a:bc:4c:61: a5:c4:cc:73:f9:02:34:88:4e:af:16:f7:5f:05:29: 11:1f:ff:fd:4d:4d:53:b2:d8:00:b2:37:54:f7:68: 65:41:fd:49:ec:cc:25:2d:20:da:65:72:0a:f5:52: 87:ad:fa:5d:64:41:06:45:0e:60:28:a5:6d:11:fb: c4:43:c2:3f:91:26:f2:fd:fd:b3:62:63:df:9e:16: 81:bf:c9:7c:e9:85:03:46:8b:13:cc:d7:74:03:b7: d9:1a:fd:d7:56:ab:c7:f7:f0:fa:a2:c0:5f:9e:2d: 43:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:93:59:6C:B8:BA:63:09:33:66:0C:67:B9:CE:68:76:AD:5F:85:C0 X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d3:b5:f9:70:da:fa:5a:ed:dc:f0:29:c8:00:bb:b2:67:0c: 07:db:3a:27:e8:24:44:93:88:c4:f9:13:85:99:76:6f:c0:77: 37:62:b2:d9:17:be:21:0e:0b:92:5d:ac:b1:47:bb:ad:cb:fa: 36:cd:a5:6b:65:71:a0:2c:60:8c:68:bb:84:12:2f:62:23:83: 11:d6:e9:cd:ab:6f:5e:41:a3:b6:4f:17:c3:6e:3f:40:05:0b: e8:c4:20:d0:83:1e:f6:77:b6:16:6c:53:08:6d:50:90:24:6b: 9c:a5:bf:72:45:24:49:37:93:86:eb:e4:d0:bd:fd:99:e4:1a: d5:18:19:75:76:ed:a3:d5:08:4d:e0:0b:da:6f:63:79:78:ff: 8c:84:6f:0e:0b:1a:6f:ec:54:cf:75:53:74:96:77:88:ba:1d: 75:bb:3e:8f:a1:d0:f4:8b:b7:ca:5d:a2:da:c6:a0:36:a2:0e: fe:af:10:69:bc:c7:6d:40:fa:22:8a:e9:8a:8a:a4:21:83:75: 5a:55:4f:70:fb:aa:32:94:81:e9:8f:2e:1a:15:3b:74:a9:cc: 51:32:6b:1b:51:70:6b:1f:e2:fe:89:30:45:64:15:4d:ed:4a: 45:f0:f4:5d:99:f0:ae:3a:10:74:3f:77:3d:26:86:1f:90:fa: d9:c5:6a:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNhnri93f0eBbhU/dJ7vaCGEnvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNTEyMTgxMTA2MjVaFw0yNTEyMjExOTAwMjVaMDMxMTAvBgNV BAMTKDI1OTM1OTZDQjhCQTYzMDkzMzY2MEM2N0I5Q0U2ODc2QUQ1Rjg1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk6tcYGdFQFfy/jDlAUGL7/dl0 HA3eLFZJomI1O2e2JGzsMJ1sw3K5BkCyPYSRH4orT8o5et8DjCiRK2bt9VJJjIfN qIfk1JnnCkyjdi95V/qMJTT51cpkneGzaM0o/t/WBgLkX2I7L0bxN5ZWJmHl/knt TzXmpIw5tDpcQCBh9GAgqgIL51KVccv3cMKGcgRaerxMYaXEzHP5AjSITq8W918F KREf//1NTVOy2ACyN1T3aGVB/UnszCUtINplcgr1Uoet+l1kQQZFDmAopW0R+8RD wj+RJvL9/bNiY9+eFoG/yXzphQNGixPM13QDt9ka/ddWq8f38PqiwF+eLUM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJZNZbLi6YwkzZgxnuc5odq1fhcAwHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfTtflw2vpa7dzwKcgAu7JnDAfbOifoJEST iMT5E4WZdm/AdzdistkXviEOC5JdrLFHu63L+jbNpWtlcaAsYIxou4QSL2IjgxHW 6c2rb15Bo7ZPF8NuP0AFC+jEINCDHvZ3thZsUwhtUJAka5ylv3JFJEk3k4br5NC9 /ZnkGtUYGXV27aPVCE3gC9pvY3l4/4yEbw4LGm/sVM91U3SWd4i6HXW7Po+h0PSL t8pdotrGoDaiDv6vEGm8x21A+iKK6YqKpCGDdVpVT3D7qjKUgemPLhoVO3SpzFEy axtRcGsf4v6JMEVkFU3tSkXw9F2Z8K46EHQ/dz0mhh+Q+tnFajQ= -----END CERTIFICATE-----Generated at Sat Dec 20 20:53:43 2025 by rpki-client