This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: R1UGhY9ScMEe2O6ne7DW4w496huxRSAtRGa4kWcpaRQ= Subject key identifier: F3:20:BB:FC:8B:F6:AB:0B:65:9A:C1:D8:04:F6:A3:1D:70:17:5A:60 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 1E394C9300AFA2423E5F3A5203AE0309787F39D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: B0 Signing time: Tue 23 Dec 2025 19:23:55 +0000 Manifest this update: Tue 23 Dec 2025 19:18:55 +0000 Manifest next update: Fri 26 Dec 2025 22:57:55 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: VsZ6f1W+UmGuNc9w7KiR3rEORb/CoT8RxPu7/01wbTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 22:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:39:4c:93:00:af:a2:42:3e:5f:3a:52:03:ae:03:09:78:7f:39:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Dec 23 19:18:55 2025 GMT Not After : Dec 26 22:57:55 2025 GMT Subject: CN=F320BBFC8BF6AB0B659AC1D804F6A31D70175A60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:4a:69:21:f9:b6:73:a2:80:94:82:0c:1b: 5f:bb:6e:9d:ca:43:06:b9:5c:ce:e7:fa:5c:b0:ad: 4c:9e:6b:cc:43:6e:fc:3b:16:39:b3:53:12:8c:1b: 42:5e:82:4f:a0:4f:53:09:55:cd:6b:28:80:d7:9a: 83:d3:cc:42:fe:89:1a:d7:45:b3:e0:38:d9:16:d3: 41:0c:87:6e:bc:22:45:6f:bf:c6:78:36:f8:2d:7f: ee:34:f1:21:f6:c5:0c:fe:76:57:f9:13:3c:f8:e3: 30:cc:46:7c:6a:e3:79:90:89:f4:8a:19:19:47:01: 92:3f:19:94:c6:25:99:0d:61:e3:c0:b5:82:26:24: a1:53:bf:1e:bf:8a:18:8f:a1:81:7d:a6:b2:ea:9f: a8:6d:5a:0a:a1:bf:0b:34:38:7b:2e:2a:d8:1d:5b: 09:71:89:ce:98:9d:3e:30:18:71:85:36:d8:1e:81: bf:de:7f:c5:98:0a:27:70:a4:e4:54:5e:09:56:fa: f3:8e:6d:cc:a9:8f:7a:68:49:ee:78:fb:04:f6:df: 70:9d:a8:3f:5e:f5:ce:61:9d:b9:83:41:ac:62:0a: 7a:10:9a:d7:ac:0a:7b:49:53:a7:85:fb:0a:4a:11: fc:53:22:54:76:cc:d1:72:6b:64:4b:50:e7:79:53: 66:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:BB:FC:8B:F6:AB:0B:65:9A:C1:D8:04:F6:A3:1D:70:17:5A:60 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b4:79:d7:b1:d8:5a:15:02:20:36:83:a5:a8:7f:f4:fd:c2: f3:1b:32:57:d0:56:45:1b:7d:77:2c:49:40:97:bd:c0:d2:47: 03:af:f9:a0:e8:b1:33:44:97:ee:28:5b:58:9d:4a:30:d3:c0: 95:67:bc:26:61:7d:e2:c9:ce:0c:06:db:fe:e9:e8:fb:4c:47: 9b:22:12:17:fb:43:95:3c:9a:79:88:a1:c1:22:61:96:90:c4: 93:f9:48:53:f7:84:f1:31:ad:c7:b0:c0:2b:74:8b:ee:73:d6: 70:1f:e1:ee:2b:33:47:8f:9d:05:ac:05:3b:9c:08:1f:69:2b: b0:cf:00:42:21:56:b2:06:63:03:8e:64:60:38:8d:0e:69:f0: e9:2a:41:92:4a:1f:8d:d6:4c:03:1e:5b:40:e0:fb:a0:9b:46: b6:f0:88:85:e5:3d:22:5d:df:36:73:4e:eb:e4:5a:ee:f5:83: a7:a5:e2:e0:c0:f7:e5:50:5b:31:92:0c:dc:1a:8c:61:c9:fc: 7d:73:be:15:21:cd:24:5a:c5:86:40:31:83:ef:64:44:5e:f7: 42:47:ba:d7:2c:10:fa:18:74:4a:ce:14:ca:a6:a7:eb:9f:80: f9:5c:99:97:9a:6a:b3:95:7f:87:13:48:b7:b0:e2:69:52:25: 24:10:ef:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjlMkwCvokI+XzpSA64DCXh/OdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTEyMjMxOTE4NTVaFw0yNTEyMjYyMjU3NTVaMDMxMTAvBgNV BAMTKEYzMjBCQkZDOEJGNkFCMEI2NTlBQzFEODA0RjZBMzFENzAxNzVBNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJm0ppIfm2c6KAlIIMG1+7bp3K Qwa5XM7n+lywrUyea8xDbvw7FjmzUxKMG0Jegk+gT1MJVc1rKIDXmoPTzEL+iRrX RbPgONkW00EMh268IkVvv8Z4Nvgtf+408SH2xQz+dlf5Ezz44zDMRnxq43mQifSK GRlHAZI/GZTGJZkNYePAtYImJKFTvx6/ihiPoYF9prLqn6htWgqhvws0OHsuKtgd Wwlxic6YnT4wGHGFNtgegb/ef8WYCidwpORUXglW+vOObcypj3poSe54+wT233Cd qD9e9c5hnbmDQaxiCnoQmtesCntJU6eF+wpKEfxTIlR2zNFya2RLUOd5U2YrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8yC7/Iv2qwtlmsHYBPajHXAXWmAwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADK0edex2FoVAiA2g6Wof/T9wvMbMlfQVkUb fXcsSUCXvcDSRwOv+aDosTNEl+4oW1idSjDTwJVnvCZhfeLJzgwG2/7p6PtMR5si Ehf7Q5U8mnmIocEiYZaQxJP5SFP3hPExrcewwCt0i+5z1nAf4e4rM0ePnQWsBTuc CB9pK7DPAEIhVrIGYwOOZGA4jQ5p8OkqQZJKH43WTAMeW0Dg+6CbRrbwiIXlPSJd 3zZzTuvkWu71g6el4uDA9+VQWzGSDNwajGHJ/H1zvhUhzSRaxYZAMYPvZERe90JH utcsEPoYdErOFMqmp+ufgPlcmZeaarOVf4cTSLew4mlSJSQQ79A= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:55 2025 by rpki-client