This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft File: C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json) Hash identifier: OSIKMWMoi255WorSiz9evcPp9869WgG/Gf5jA+NK6sw= Subject key identifier: 91:4A:1F:7D:45:EB:67:33:37:D5:F8:65:69:7F:F2:05:B4:66:6F:57 Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 Certificate issuer: /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Certificate serial: 3BBC6AFEC90510920AC360BE37C7CC7BEEF6CF1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft Manifest number: 01AB Signing time: Wed 17 Dec 2025 14:50:02 +0000 Manifest this update: Wed 17 Dec 2025 14:45:02 +0000 Manifest next update: Sat 20 Dec 2025 18:18:02 +0000 Files and hashes: 1: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: fJ0Ws/IemPAY5QfZcvlmtohchCyvKnlgP2BKOO+mFNs=) 2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: M+WZc7qSf2CmAB/JGuGAm2J24ap4dhEUP+j6m1qwiAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:bc:6a:fe:c9:05:10:92:0a:c3:60:be:37:c7:cc:7b:ee:f6:cf:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Validity Not Before: Dec 17 14:45:02 2025 GMT Not After : Dec 20 18:18:02 2025 GMT Subject: CN=914A1F7D45EB673337D5F865697FF205B4666F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:df:a0:14:3c:e9:8d:97:b1:46:b6:cf:45: e3:df:df:c3:93:21:45:65:45:5e:51:df:26:e7:5e: d1:19:80:78:53:08:51:cb:da:9a:b8:cc:8b:9b:3e: fd:90:5b:24:85:f8:b9:3c:5b:c0:6e:c5:4f:47:f0: b5:f8:19:05:ef:d5:8c:fd:4c:3e:a8:ed:d8:79:1e: 8f:d9:d9:e2:30:db:c9:d9:8e:40:aa:ad:6c:bf:72: 52:87:e5:90:a8:1f:4d:18:2d:06:f3:3d:a3:87:94: ec:77:35:8b:52:58:86:e8:9a:27:f7:f5:3e:37:ed: cd:a2:54:d3:cc:14:72:48:16:f1:f2:8f:fd:d4:37: b5:52:18:b5:2b:8d:8b:a6:b8:b5:85:5d:54:c3:74: 67:a8:a5:ff:67:f5:ff:ee:ad:36:bc:a5:e0:a5:92: 07:25:38:0a:ef:41:e1:e2:90:5b:0a:45:bb:ac:1b: dc:24:a9:21:27:1a:60:45:b3:e2:ac:29:09:1e:16: dc:d7:35:f0:4c:73:e3:21:79:15:2f:52:ea:38:23: e9:b5:d8:1d:7d:10:e7:bd:c9:75:2d:cd:00:b4:5a: 1b:40:ef:42:c3:fd:9c:76:fa:77:6d:1b:f3:21:a3: 6e:bb:3e:e6:d4:e7:63:ca:07:00:1e:41:2b:47:53: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4A:1F:7D:45:EB:67:33:37:D5:F8:65:69:7F:F2:05:B4:66:6F:57 X509v3 Authority Key Identifier: keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:db:98:b0:54:5b:ac:32:1f:10:87:b6:03:c1:e5:ee:d4:3d: c4:a0:19:6a:ee:65:f8:f3:93:98:68:72:a7:33:a2:b4:04:58: 72:dd:87:ad:f9:f9:19:87:e8:1d:ee:60:1f:c8:b3:da:1f:b9: 0c:5d:c7:9c:45:6b:51:78:07:af:d9:52:ae:42:ce:ad:69:b2: dd:59:e3:09:4d:31:f3:67:d6:bb:41:56:d0:fa:05:c4:94:ff: 4a:5b:9b:d2:fe:2a:50:82:1b:aa:cb:23:2a:04:e6:fa:9b:7f: 93:fb:57:78:84:5a:97:62:23:6f:df:c0:47:94:1e:b0:25:81: f4:83:48:b4:9b:5f:90:7d:26:5a:78:12:98:e0:dc:3f:7f:37: 9b:e0:ea:86:4b:83:5c:9f:e4:ed:50:41:a2:a3:7a:ab:3f:a6: 53:63:70:96:a3:7b:67:25:e2:e6:6a:04:41:72:12:ac:a4:7c: b4:32:5f:27:bd:81:c8:43:2e:fa:87:6a:80:9e:2d:c8:b5:d1: 69:e1:6e:f2:1e:0c:12:c4:e7:d2:0b:63:56:27:96:93:98:04: 30:05:97:09:f5:2e:a2:0b:ed:cb:37:a1:19:f9:e1:9f:b5:f4: 11:72:b9:28:8e:b7:01:5e:27:86:60:b5:12:b5:83:f8:e3:b1: e5:fb:d9:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7xq/skFEJIKw2C+N8fMe+72zxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZF MDY3Q0FGNzAeFw0yNTEyMTcxNDQ1MDJaFw0yNTEyMjAxODE4MDJaMDMxMTAvBgNV BAMTKDkxNEExRjdENDVFQjY3MzMzN0Q1Rjg2NTY5N0ZGMjA1QjQ2NjZGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtN+gFDzpjZexRrbPRePf38OT IUVlRV5R3ybnXtEZgHhTCFHL2pq4zIubPv2QWySF+Lk8W8BuxU9H8LX4GQXv1Yz9 TD6o7dh5Ho/Z2eIw28nZjkCqrWy/clKH5ZCoH00YLQbzPaOHlOx3NYtSWIbomif3 9T437c2iVNPMFHJIFvHyj/3UN7VSGLUrjYumuLWFXVTDdGeopf9n9f/urTa8peCl kgclOArvQeHikFsKRbusG9wkqSEnGmBFs+KsKQkeFtzXNfBMc+MheRUvUuo4I+m1 2B19EOe9yXUtzQC0WhtA70LD/Zx2+ndtG/Mho267PubU52PKBwAeQStHU8xzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkUoffUXrZzM31fhlaX/yBbRmb1cwHwYDVR0j BBgwFoAUyBdefp4V5WX+aXKSo34Uv+BnyvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzZmZDU1MS02YWJhLTQyMjItOGEyNi05ODYzNDY4MjViMzgvMC9DODE3NUU3RTlF MTVFNTY1RkU2OTcyOTJBMzdFMTRCRkUwNjdDQUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZFMDY3 Q0FGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0 QkZFMDY3Q0FGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzbmLBUW6wyHxCHtgPB5e7UPcSgGWruZfjz k5hocqczorQEWHLdh635+RmH6B3uYB/Is9ofuQxdx5xFa1F4B6/ZUq5Czq1pst1Z 4wlNMfNn1rtBVtD6BcSU/0pbm9L+KlCCG6rLIyoE5vqbf5P7V3iEWpdiI2/fwEeU HrAlgfSDSLSbX5B9Jlp4Epjg3D9/N5vg6oZLg1yf5O1QQaKjeqs/plNjcJaje2cl 4uZqBEFyEqykfLQyXye9gchDLvqHaoCeLci10WnhbvIeDBLE59ILY1YnlpOYBDAF lwn1LqIL7cs3oRn54Z+19BFyuSiOtwFeJ4ZgtRK1g/jjseX72Sg= -----END CERTIFICATE-----Generated at Fri Dec 19 17:26:43 2025 by rpki-client