This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: 2tYtG9jA36yCFLrKQCrWL58iWsGZ9hVDg0i3qfc4p3g= Subject key identifier: 64:AE:67:F9:E1:F7:AC:1F:F3:F7:BA:73:F3:26:75:BD:F9:14:DA:44 Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 4D77B57F4370456609F20A02CC2327B432ADFF0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: D0 Signing time: Tue 23 Dec 2025 07:52:02 +0000 Manifest this update: Tue 23 Dec 2025 07:47:02 +0000 Manifest next update: Fri 26 Dec 2025 12:28:02 +0000 Files and hashes: 1: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: WLCShlxfdsF203Qx2wOYYjy6P8cT8pTLxL//5fp4yiA=) 2: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: vfjUAnFRd+FQBHs3CEW64cnNfX0VGMh9gx/DEda8aNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 12:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:77:b5:7f:43:70:45:66:09:f2:0a:02:cc:23:27:b4:32:ad:ff:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Dec 23 07:47:02 2025 GMT Not After : Dec 26 12:28:02 2025 GMT Subject: CN=64AE67F9E1F7AC1FF3F7BA73F32675BDF914DA44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:aa:c8:a6:f3:c8:ca:5b:c4:67:18:6d:80:92: 04:b6:18:c5:75:4d:58:e8:39:ee:df:32:6b:f3:ca: 65:53:5c:bc:0f:8e:3a:26:b4:33:a6:d1:44:61:9e: 7d:a8:1b:c1:b7:4a:f9:fe:3c:77:6f:5b:4d:b8:fe: 35:95:ff:5f:74:71:3f:81:92:82:3d:a4:21:e8:f7: 4d:52:cf:6e:27:8d:27:95:5a:7f:9e:cd:49:0a:6a: aa:01:2c:26:39:89:5e:ed:c3:ae:d7:8f:b4:03:75: f1:38:4d:92:61:c9:d9:f7:6e:c2:a3:c0:51:50:d1: 06:0b:de:00:3a:e9:c3:04:ba:4e:37:9f:48:f7:b7: ac:24:20:c7:58:95:29:f8:1e:bc:ac:e4:2d:74:2e: 3f:fd:d1:cf:0f:39:8f:7a:71:13:5a:ed:1c:25:93: ec:b6:ad:0f:79:70:20:7f:2a:be:e3:c9:01:e6:ce: bb:90:1d:7d:52:fa:fc:53:d4:bb:f6:1f:02:1b:56: e3:53:60:f6:02:ff:c1:2f:16:ae:04:cd:bb:18:ab: c5:fe:d4:74:0b:3b:ec:b4:88:60:6e:5e:5f:63:f0: fb:80:e5:41:a9:16:2a:81:7e:93:a8:d9:87:6c:d0: f7:a0:7e:70:42:91:94:ac:44:5e:70:aa:a9:db:2e: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AE:67:F9:E1:F7:AC:1F:F3:F7:BA:73:F3:26:75:BD:F9:14:DA:44 X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2f:96:d5:69:3e:c4:d6:7d:71:99:c6:a3:2b:72:18:3c:e9: 17:2a:1b:14:ed:81:5a:0d:a1:cf:0f:14:ec:b2:b0:c8:e9:af: ed:2a:19:76:7c:80:a3:f9:6d:46:4e:5d:e0:cc:ee:60:25:ea: a4:6c:8b:bc:b9:ec:5e:5b:79:e7:db:88:8b:a8:cb:db:8b:31: d4:1c:02:51:c8:57:4d:ca:2c:9b:44:8b:91:76:f7:98:9d:f2: ac:06:82:7d:12:3f:cf:b1:cc:85:cc:fa:3c:f9:9a:f4:42:2a: 32:6d:7b:ca:e7:9b:de:51:e9:8b:31:57:e7:ed:fa:47:ff:d2: d3:a2:aa:93:40:9b:44:97:b8:1e:27:dc:74:c8:1a:76:e9:2b: 0b:0d:ec:c4:be:d0:1b:76:77:0a:a1:d3:04:7b:06:1c:7c:3f: 25:da:28:1f:52:95:14:7b:33:68:cf:33:c7:8e:a9:4f:6c:09: 6e:73:64:ed:5d:ba:d7:84:77:ed:b8:38:c5:8e:06:8a:41:5e: de:00:d4:e2:0f:95:b4:64:d1:2a:05:77:2f:0f:20:17:e0:71: ca:35:34:99:e0:30:ed:ad:5a:21:b1:d3:2b:80:2a:30:f4:9a: 96:f4:a9:e1:96:0e:42:e8:1c:b1:ae:72:d2:a5:33:6c:cd:55: d7:b3:6f:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXe1f0NwRWYJ8goCzCMntDKt/w8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNTEyMjMwNzQ3MDJaFw0yNTEyMjYxMjI4MDJaMDMxMTAvBgNV BAMTKDY0QUU2N0Y5RTFGN0FDMUZGM0Y3QkE3M0YzMjY3NUJERjkxNERBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcqsim88jKW8RnGG2AkgS2GMV1 TVjoOe7fMmvzymVTXLwPjjomtDOm0URhnn2oG8G3Svn+PHdvW024/jWV/190cT+B koI9pCHo901Sz24njSeVWn+ezUkKaqoBLCY5iV7tw67Xj7QDdfE4TZJhydn3bsKj wFFQ0QYL3gA66cMEuk43n0j3t6wkIMdYlSn4Hrys5C10Lj/90c8POY96cRNa7Rwl k+y2rQ95cCB/Kr7jyQHmzruQHX1S+vxT1Lv2HwIbVuNTYPYC/8EvFq4EzbsYq8X+ 1HQLO+y0iGBuXl9j8PuA5UGpFiqBfpOo2Yds0PegfnBCkZSsRF5wqqnbLkdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZK5n+eH3rB/z97pz8yZ1vfkU2kQwHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgvltVpPsTWfXGZxqMrchg86RcqGxTtgVoN oc8PFOyysMjpr+0qGXZ8gKP5bUZOXeDM7mAl6qRsi7y57F5beefbiIuoy9uLMdQc AlHIV03KLJtEi5F295id8qwGgn0SP8+xzIXM+jz5mvRCKjJte8rnm95R6YsxV+ft +kf/0tOiqpNAm0SXuB4n3HTIGnbpKwsN7MS+0Bt2dwqh0wR7Bhx8PyXaKB9SlRR7 M2jPM8eOqU9sCW5zZO1duteEd+24OMWOBopBXt4A1OIPlbRk0SoFdy8PIBfgcco1 NJngMO2tWiGx0yuAKjD0mpb0qeGWDkLoHLGuctKlM2zNVdezb5c= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:53 2025 by rpki-client