This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json) Hash identifier: ROSiMmH1jdlRHH93RhZIPR4vxLmiqyq0W5qrqN2XNdU= Subject key identifier: AA:35:82:54:AB:CE:99:E9:FF:7D:17:23:45:B7:47:6D:F1:AA:4F:49 Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Certificate serial: 4438141A5CC10049CD2CFA07559087435A80B17F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft Manifest number: 01CF Signing time: Sun 14 Dec 2025 21:11:03 +0000 Manifest this update: Sun 14 Dec 2025 21:06:03 +0000 Manifest next update: Thu 18 Dec 2025 05:47:03 +0000 Files and hashes: 1: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: EANS/BbBSV3D2lqyFzIlb0gYJ6M3G6ZH8tGtZE5xhF4=) 2: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: SPILoD0YuDgHkCG/UcROiBKV6NuzifUgiPor6w8kdtI=) 3: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: 39gJYB1QnFieX/gdF8bBHmlo6O9FxkEme0UKFCfGDfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 05:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:38:14:1a:5c:c1:00:49:cd:2c:fa:07:55:90:87:43:5a:80:b1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Validity Not Before: Dec 14 21:06:03 2025 GMT Not After : Dec 18 05:47:03 2025 GMT Subject: CN=AA358254ABCE99E9FF7D172345B7476DF1AA4F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:d0:7b:95:f3:b0:3e:19:12:d6:8e:b9:d9: 63:9a:20:e7:50:ff:8c:bf:c7:16:64:b6:85:ed:3c: 97:11:7b:60:e2:9f:23:21:8f:d1:c2:b8:52:20:8f: 6c:22:24:6c:e2:af:64:4a:34:c4:73:83:b3:e3:47: fe:45:2f:79:39:10:17:88:5f:36:2a:56:6c:b4:0e: c8:bd:f2:55:d1:09:fb:5f:8b:6b:c9:1e:8d:60:a5: d9:96:05:67:6b:56:95:8a:e2:f4:85:2f:50:46:0d: 2a:95:9d:40:7d:6e:3b:74:ee:48:f0:f5:85:70:84: 71:5e:91:81:d3:ce:54:8c:18:f6:72:fb:e0:b5:03: bf:cb:24:6a:a4:0f:c8:1c:f1:0c:b7:a9:af:87:db: 4e:73:76:20:fc:60:d8:7e:d5:53:af:d8:50:17:dd: bb:68:1b:91:81:43:2f:dc:dd:78:46:c6:49:19:f9: e7:b7:8a:75:f9:3d:d1:1c:31:f8:81:94:bc:96:09: 04:9e:da:c5:aa:65:33:6b:d1:d8:97:bb:39:54:43: d7:a1:bf:7c:85:35:de:14:7e:1f:0a:99:09:eb:33: 0d:2e:39:5d:17:9c:ef:10:db:e6:26:5e:35:e1:aa: 9a:6c:a4:26:83:f5:00:2e:73:80:24:46:d2:7e:f0: ac:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:35:82:54:AB:CE:99:E9:FF:7D:17:23:45:B7:47:6D:F1:AA:4F:49 X509v3 Authority Key Identifier: keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ab:d0:7a:05:bd:5d:62:aa:00:3f:d5:39:bd:16:25:fe:7b: c2:b5:e4:16:6f:29:ed:df:a9:55:f3:61:55:1b:54:23:24:11: ef:80:e6:51:fa:f4:a4:18:0a:30:e5:6a:47:80:76:e0:71:1d: bc:d0:ce:14:c9:91:18:b6:0e:18:d7:75:59:ee:47:c3:3e:6f: 34:b4:da:7d:86:3e:73:30:b3:ef:f5:6c:0c:6c:81:4e:47:1f: 36:45:f9:68:91:a6:76:ae:75:f4:5a:7d:87:a1:8d:1f:36:f6: 32:16:9d:62:88:50:03:86:a9:99:c2:f5:55:66:47:64:8d:97: e5:68:08:8a:9b:00:49:bf:47:ac:da:6b:63:07:0e:35:a8:8b: e0:89:20:ad:08:4b:1e:c6:c2:2d:a9:c6:0b:94:60:ba:0f:31: 42:ee:ff:e9:3f:5a:5c:13:93:81:dd:64:ee:dc:a2:42:d0:d2: 89:24:5c:04:51:b7:56:fd:d6:8a:ad:70:73:93:26:09:df:d8: 83:5c:03:0d:26:f4:d0:23:70:50:24:02:fd:47:dc:4e:55:91: 52:db:f9:8b:b1:b5:39:32:79:75:f9:6f:b1:98:25:7f:39:a7: 0e:8b:83:13:fa:7b:04:10:59:94:b9:2f:ad:a1:ac:9c:dc:55: 71:f8:f4:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDgUGlzBAEnNLPoHVZCHQ1qAsX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw MEVGNUM3MDAeFw0yNTEyMTQyMTA2MDNaFw0yNTEyMTgwNTQ3MDNaMDMxMTAvBgNV BAMTKEFBMzU4MjU0QUJDRTk5RTlGRjdEMTcyMzQ1Qjc0NzZERjFBQTRGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP19B7lfOwPhkS1o652WOaIOdQ /4y/xxZktoXtPJcRe2DinyMhj9HCuFIgj2wiJGzir2RKNMRzg7PjR/5FL3k5EBeI XzYqVmy0Dsi98lXRCftfi2vJHo1gpdmWBWdrVpWK4vSFL1BGDSqVnUB9bjt07kjw 9YVwhHFekYHTzlSMGPZy++C1A7/LJGqkD8gc8Qy3qa+H205zdiD8YNh+1VOv2FAX 3btoG5GBQy/c3XhGxkkZ+ee3inX5PdEcMfiBlLyWCQSe2sWqZTNr0diXuzlUQ9eh v3yFNd4Ufh8KmQnrMw0uOV0XnO8Q2+YmXjXhqppspCaD9QAuc4AkRtJ+8Kz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqjWCVKvOmen/fRcjRbdHbfGqT0kwHwYDVR0j BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWr0HoFvV1iqgA/1Tm9FiX+e8K15BZvKe3f qVXzYVUbVCMkEe+A5lH69KQYCjDlakeAduBxHbzQzhTJkRi2DhjXdVnuR8M+bzS0 2n2GPnMws+/1bAxsgU5HHzZF+WiRpnaudfRafYehjR829jIWnWKIUAOGqZnC9VVm R2SNl+VoCIqbAEm/R6zaa2MHDjWoi+CJIK0ISx7Gwi2pxguUYLoPMULu/+k/WlwT k4HdZO7cokLQ0okkXARRt1b91oqtcHOTJgnf2INcAw0m9NAjcFAkAv1H3E5VkVLb +YuxtTkyeXX5b7GYJX85pw6LgxP6ewQQWZS5L62hrJzcVXH49DI= -----END CERTIFICATE-----Generated at Tue Dec 16 22:30:52 2025 by rpki-client