This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft File: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft (raw, json) Hash identifier: 5BWswcIs5d6qXPgz+AAfPYKFBFHJqlbht/XOfp/lLMQ= Subject key identifier: 84:15:46:C2:A0:76:F4:DB:DD:4B:23:0C:2E:86:72:6F:D3:53:F3:E0 Authority key identifier: C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 Certificate issuer: /CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Certificate serial: 405C033C08EAACD394523B7DF4FB1E5D9F370343 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft Manifest number: 4D Signing time: Tue 23 Dec 2025 00:32:45 +0000 Manifest this update: Tue 23 Dec 2025 00:27:45 +0000 Manifest next update: Fri 26 Dec 2025 01:06:45 +0000 Files and hashes: 1: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: gE+l6BtwnE696koy6eWA+mSXnnRQKbYtsxfkWucx8c8=) 2: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl (hash: jinJTSzy7Xk3aAwSIlwxZ6An6Fu3Wn9J1aNNr6e+2PU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5c:03:3c:08:ea:ac:d3:94:52:3b:7d:f4:fb:1e:5d:9f:37:03:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Validity Not Before: Dec 23 00:27:45 2025 GMT Not After : Dec 26 01:06:45 2025 GMT Subject: CN=841546C2A076F4DBDD4B230C2E86726FD353F3E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:eb:54:0b:22:79:71:36:99:94:2f:f8:a2: 60:59:92:ab:3b:45:7d:4e:52:4c:5a:91:3e:bc:d5: eb:ce:4c:f0:f6:6a:78:9a:b5:4f:28:36:49:9a:f3: e9:06:70:5b:6e:e7:c3:8a:57:40:08:c9:a3:7e:6c: 1b:3c:d8:9e:51:46:ab:5c:88:c6:09:b2:0c:c2:b2: 45:f4:4d:77:f4:98:4e:72:0e:01:85:21:c9:d0:89: f4:83:15:8a:5d:83:60:4c:d2:53:20:03:6f:35:a5: 20:dd:35:dd:2a:cf:04:ed:87:25:31:91:b4:d4:09: 9e:2e:48:f4:87:0f:16:85:26:87:df:a3:00:a3:19: 47:25:94:86:87:31:23:70:79:db:ee:c9:83:91:cd: 93:9d:86:7a:66:bd:0f:a7:7a:ab:40:64:a6:55:fc: 9d:0e:85:33:7f:8e:3e:00:fe:ef:a3:c0:04:25:12: e1:e0:43:fa:91:8d:68:a2:55:8c:d9:9a:bf:a4:e5: 8a:69:1e:2f:a3:94:50:f2:e2:c7:96:f9:a6:0c:48: a8:d5:7d:77:53:79:cd:35:c5:92:cb:2f:e6:27:70: e0:f2:11:15:8a:2d:84:92:7a:dd:4d:a5:5a:5c:f6: a6:55:b6:2d:23:b5:40:8d:c3:01:c8:4e:fa:24:7a: ad:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:15:46:C2:A0:76:F4:DB:DD:4B:23:0C:2E:86:72:6F:D3:53:F3:E0 X509v3 Authority Key Identifier: keyid:C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:62:d1:e4:e8:b2:56:d0:09:6e:5f:49:f4:bb:08:a4:51:da: 3e:0f:7d:ce:57:cc:4f:80:d1:2e:c6:2b:ef:b0:74:25:ca:65: 93:e6:ca:d2:55:fc:38:bf:dd:3d:71:c1:27:f6:0c:6c:0b:ef: 80:e3:e0:a4:fe:53:c0:f1:e0:ad:a9:cc:09:3c:32:1d:c8:a5: 67:2b:36:66:4a:85:58:da:a9:2c:95:aa:8e:fa:4e:4f:8e:6e: 36:00:2b:08:9a:e6:e4:99:5a:59:05:70:98:99:4f:13:2c:3f: 54:0b:37:a2:aa:e2:9f:ec:6a:2c:68:91:09:6c:2e:3b:50:f3: bf:bd:6d:7c:8d:ca:2e:fc:c6:77:f0:7f:b2:dd:e6:16:8e:c9: 7e:19:56:8c:68:6b:51:f6:42:7e:ac:d6:d6:55:cd:19:40:4b: 35:65:a5:e0:a2:b7:4a:c5:f5:9f:51:d8:bb:c4:c5:b4:67:7b: df:c0:04:0c:7d:63:d9:eb:e4:eb:5a:a1:bc:f5:34:16:57:95: 8a:0d:13:88:50:a2:95:80:ef:60:69:9d:57:db:07:9d:d8:04: eb:9f:44:aa:74:bb:cb:5a:b1:74:b6:75:0e:5c:bc:db:78:c6: ca:4d:9b:42:1d:6a:4b:40:04:50:b2:ec:a4:a2:e4:b4:b2:97: ba:6e:9a:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFwDPAjqrNOUUjt99PseXZ83A0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3 NUU0RjU4NTAeFw0yNTEyMjMwMDI3NDVaFw0yNTEyMjYwMTA2NDVaMDMxMTAvBgNV BAMTKDg0MTU0NkMyQTA3NkY0REJERDRCMjMwQzJFODY3MjZGRDM1M0YzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLq+tUCyJ5cTaZlC/4omBZkqs7 RX1OUkxakT681evOTPD2aniatU8oNkma8+kGcFtu58OKV0AIyaN+bBs82J5RRqtc iMYJsgzCskX0TXf0mE5yDgGFIcnQifSDFYpdg2BM0lMgA281pSDdNd0qzwTthyUx kbTUCZ4uSPSHDxaFJoffowCjGUcllIaHMSNwedvuyYORzZOdhnpmvQ+neqtAZKZV /J0OhTN/jj4A/u+jwAQlEuHgQ/qRjWiiVYzZmr+k5YppHi+jlFDy4seW+aYMSKjV fXdTec01xZLLL+YncODyERWKLYSSet1NpVpc9qZVti0jtUCNwwHITvokeq0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhBVGwqB29NvdSyMMLoZyb9NT8+AwHwYDVR0j BBgwFoAUwffMDI1eMVWWrxD27PRvLHXk9YUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjYyNDdmOS0xZWVjLTQ5MDEtYmE0Mi05ZGYyNjQyNGY1YjgvMC9DMUY3Q0MwQzhE NUUzMTU1OTZBRjEwRjZFQ0Y0NkYyQzc1RTRGNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3NUU0 RjU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY2MjQ3ZjktMWVlYy00OTAxLWJh NDItOWRmMjY0MjRmNWI4LzAvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZG MkM3NUU0RjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBi0eToslbQCW5fSfS7CKRR2j4Pfc5XzE+A 0S7GK++wdCXKZZPmytJV/Di/3T1xwSf2DGwL74Dj4KT+U8Dx4K2pzAk8Mh3IpWcr NmZKhVjaqSyVqo76Tk+ObjYAKwia5uSZWlkFcJiZTxMsP1QLN6Kq4p/saixokQls LjtQ87+9bXyNyi78xnfwf7Ld5haOyX4ZVoxoa1H2Qn6s1tZVzRlASzVlpeCit0rF 9Z9R2LvExbRne9/ABAx9Y9nr5Otaobz1NBZXlYoNE4hQopWA72BpnVfbB53YBOuf RKp0u8tasXS2dQ5cvNt4xspNm0IdaktABFCy7KSi5LSyl7pumj0= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:05 2025 by rpki-client