This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft File: 00C1EB3BEE971CEAB531D756361F934BE0179628.mft (raw, json) Hash identifier: vyrAd/RYY9TT4uFWHp9rm80tRvfW6PlN4nXn20+nOno= Subject key identifier: 8E:08:D3:11:FE:98:87:D5:A2:49:96:4D:24:5C:67:13:5A:4E:14:A5 Authority key identifier: 00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 Certificate issuer: /CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Certificate serial: 0E7A6DDAB28C109A41EC13CBE241405399CEF033 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft Manifest number: DB Signing time: Thu 25 Dec 2025 10:11:49 +0000 Manifest this update: Thu 25 Dec 2025 10:06:49 +0000 Manifest next update: Sun 28 Dec 2025 18:56:49 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 2PH25lGx4aoDxJSQ/LOSozIUBGDxDVOVLodCc7y15nU=) 2: 00C1EB3BEE971CEAB531D756361F934BE0179628.crl (hash: YOqnseVdIWoSwOWPa+J2ph5UYNZgX72S4pc3nYiiweM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 18:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7a:6d:da:b2:8c:10:9a:41:ec:13:cb:e2:41:40:53:99:ce:f0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Validity Not Before: Dec 25 10:06:49 2025 GMT Not After : Dec 28 18:56:49 2025 GMT Subject: CN=8E08D311FE9887D5A249964D245C67135A4E14A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:b3:3a:95:2b:12:46:6d:ef:e1:d2:7b:3b: 10:92:83:3d:20:33:46:53:c0:65:6d:d1:0c:62:ac: 8e:df:c4:0f:39:d6:21:00:90:a5:b4:4c:1d:d9:0f: e0:c5:48:35:57:08:54:17:92:c8:80:c6:bb:4b:c9: 5e:c2:55:cf:c1:1a:0e:ec:02:31:11:74:9c:ca:76: 17:25:35:d4:18:9a:a0:aa:a9:22:68:5d:ab:e6:16: cc:d2:a2:41:f2:c3:9b:a3:bc:c8:95:28:d6:df:7e: e8:76:3b:87:ef:c1:ea:e0:9f:72:8c:d8:9f:20:75: 2e:5c:c8:60:ff:d3:76:88:22:65:12:ae:74:a6:79: 1e:16:36:34:cf:e5:83:78:ef:9d:a5:e9:3e:4d:cb: 0f:63:ce:17:e1:6c:54:62:a4:32:47:80:d8:40:84: 7a:46:97:b6:76:c0:6f:3e:d2:41:6f:ce:a3:0a:37: 61:d4:d1:81:0e:c7:ac:e1:b5:5f:5c:73:38:8f:64: 45:13:bc:4b:7a:ad:b4:da:c0:8d:58:94:8c:7b:0e: 90:a6:cf:8e:8c:f4:d8:8a:32:32:c1:15:0e:7b:21: 8e:6f:5d:be:b1:7c:18:08:65:82:b4:9f:4b:20:8d: 02:dd:3b:97:99:e1:14:74:6d:c0:94:5b:aa:20:20: 9d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:08:D3:11:FE:98:87:D5:A2:49:96:4D:24:5C:67:13:5A:4E:14:A5 X509v3 Authority Key Identifier: keyid:00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f9:83:e3:cd:fa:99:e7:13:61:3a:e4:c3:0e:a4:2f:42:f2: 3e:0e:0e:a6:39:66:49:c6:69:c4:bf:28:72:34:31:ea:31:01: 1f:74:a6:8c:97:e6:4b:9f:e1:db:a2:5d:65:b7:7d:8f:e8:d2: 1a:01:a4:10:fa:1e:cc:c6:38:c8:07:dc:e7:26:6d:01:28:fa: 45:8f:50:ac:35:ac:1a:89:e3:3a:54:2c:f1:57:27:ef:f5:95: 6c:3a:74:35:a3:e8:45:a2:39:c4:ec:0f:c4:33:1a:3c:42:53: ae:95:10:4b:00:a1:22:ca:d8:20:c0:3e:b7:6d:09:64:1c:ab: 21:ce:1a:42:8d:9f:32:12:3b:4d:53:8f:09:50:97:2e:a8:53: 50:15:e7:6d:25:ce:17:60:11:77:66:fe:a0:7e:31:99:6a:ed: 53:c7:80:ad:6c:65:c0:7f:16:b3:a5:00:93:f9:55:7b:b8:fe: 7a:2e:1d:2d:ce:e2:f0:14:69:ae:46:e2:d1:8d:8d:93:46:df: 53:a6:7c:7f:54:3a:f1:5e:32:42:86:6e:ed:11:ce:34:eb:2d: 7f:6c:34:7c:dd:0f:06:2b:34:01:1f:68:b0:b1:f2:3b:15:f0: 92:a3:c9:66:1e:c3:d7:bd:b2:94:f7:f7:e8:fd:4d:53:de:1b: a4:2d:74:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnpt2rKMEJpB7BPL4kFAU5nO8DMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkzNEJF MDE3OTYyODAeFw0yNTEyMjUxMDA2NDlaFw0yNTEyMjgxODU2NDlaMDMxMTAvBgNV BAMTKDhFMDhEMzExRkU5ODg3RDVBMjQ5OTY0RDI0NUM2NzEzNUE0RTE0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQLM6lSsSRm3v4dJ7OxCSgz0g M0ZTwGVt0QxirI7fxA851iEAkKW0TB3ZD+DFSDVXCFQXksiAxrtLyV7CVc/BGg7s AjERdJzKdhclNdQYmqCqqSJoXavmFszSokHyw5ujvMiVKNbffuh2O4fvwergn3KM 2J8gdS5cyGD/03aIImUSrnSmeR4WNjTP5YN4752l6T5Nyw9jzhfhbFRipDJHgNhA hHpGl7Z2wG8+0kFvzqMKN2HU0YEOx6zhtV9ccziPZEUTvEt6rbTawI1YlIx7DpCm z46M9NiKMjLBFQ57IY5vXb6xfBgIZYK0n0sgjQLdO5eZ4RR0bcCUW6ogIJ07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjgjTEf6Yh9WiSZZNJFxnE1pOFKUwHwYDVR0j BBgwFoAUAMHrO+6XHOq1MddWNh+TS+AXligwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIwY2U3Ni1kYjc1LTQ2NTEtODViMC0wYmZiMThlMGIxNzUvMC8wMEMxRUIzQkVF OTcxQ0VBQjUzMUQ3NTYzNjFGOTM0QkUwMTc5NjI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkzNEJFMDE3 OTYyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMGNlNzYtZGI3NS00NjUxLTg1 YjAtMGJmYjE4ZTBiMTc1LzAvMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkz NEJFMDE3OTYyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAID5g+PN+pnnE2E65MMOpC9C8j4ODqY5ZknG acS/KHI0MeoxAR90poyX5kuf4duiXWW3fY/o0hoBpBD6HszGOMgH3OcmbQEo+kWP UKw1rBqJ4zpULPFXJ+/1lWw6dDWj6EWiOcTsD8QzGjxCU66VEEsAoSLK2CDAPrdt CWQcqyHOGkKNnzISO01TjwlQly6oU1AV520lzhdgEXdm/qB+MZlq7VPHgK1sZcB/ FrOlAJP5VXu4/nouHS3O4vAUaa5G4tGNjZNG31OmfH9UOvFeMkKGbu0RzjTrLX9s NHzdDwYrNAEfaLCx8jsV8JKjyWYew9e9spT39+j9TVPeG6QtdGY= -----END CERTIFICATE-----Generated at Fri Dec 26 05:05:31 2025 by rpki-client