This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft (raw, json) Hash identifier: QDcKD1joYXRzu6vf+iKVaGQwuWx0TyY7CLTpn+TDOWY= Subject key identifier: 96:8A:FA:0B:9E:6F:10:B7:7D:7F:8B:D0:11:03:00:B5:FE:56:6F:49 Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Certificate serial: 50D19D356E6BB87685DB9D708AC6906B291CC9A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft Manifest number: 01B6 Signing time: Fri 19 Dec 2025 18:52:13 +0000 Manifest this update: Fri 19 Dec 2025 18:47:13 +0000 Manifest next update: Mon 22 Dec 2025 20:50:13 +0000 Files and hashes: 1: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: tzY1XNU5cVp0pp1q9NAQ2OMSeEZ2zfRfv6jNIeP9/Ac=) 2: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl (hash: pJPuNrlcdyoheT0IBpJW/JJBpm0KLe3IhzUoug6vReo=) 3: 3130332e3133322e34302e302f32342d3234203d3e20313432333836.roa (hash: 7CbGL2bVFpRfzWEmJ1nxU8TaU3ck1Im05psWj/JHkPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d1:9d:35:6e:6b:b8:76:85:db:9d:70:8a:c6:90:6b:29:1c:c9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Validity Not Before: Dec 19 18:47:13 2025 GMT Not After : Dec 22 20:50:13 2025 GMT Subject: CN=968AFA0B9E6F10B77D7F8BD0110300B5FE566F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:b6:a1:dd:cd:f8:0d:33:b8:27:57:87:b3: 77:64:0e:f2:11:e2:52:fe:91:28:9d:bd:0f:77:7f: e7:50:c8:66:5a:6f:08:1c:60:94:b6:3a:a5:95:bf: d9:da:68:34:7d:c8:fc:32:c7:b3:c9:20:35:f2:79: b1:4a:aa:6b:c2:77:d2:5a:05:92:92:90:69:d3:e2: d1:2d:4d:58:c4:60:58:85:df:58:c8:7b:49:39:81: 53:04:1e:fa:25:cd:03:9d:5c:b6:94:c3:23:c8:52: 8b:67:ef:1e:e3:76:2c:94:10:0f:50:e0:ab:7c:c5: b6:5c:51:89:6a:46:ec:eb:95:5f:e9:2e:6e:c9:3e: 2a:4c:99:25:74:fe:65:ee:07:f7:d5:f2:0e:aa:7c: 3a:ac:f9:ed:8a:67:2d:97:0f:3c:6b:76:d5:0c:0c: 3e:5b:19:26:96:f1:3b:5d:3d:c7:34:28:9e:90:d0: e0:1f:ea:72:32:f6:dc:05:90:db:fe:ae:49:0b:cd: a1:d1:8c:60:c2:a3:f5:dc:ad:bf:51:1a:6a:0e:1e: e9:97:aa:75:99:54:29:69:eb:20:fc:00:be:8f:bc: 36:5a:b7:97:97:02:7e:a5:94:cc:3d:65:e3:bb:2f: ee:9e:df:da:51:d3:8d:73:bd:af:13:7f:31:7c:70: bf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8A:FA:0B:9E:6F:10:B7:7D:7F:8B:D0:11:03:00:B5:FE:56:6F:49 X509v3 Authority Key Identifier: keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3b:b1:2f:83:bc:10:9a:a4:3d:63:94:0e:4e:cb:61:2e:bd: 86:30:27:8f:a5:e2:fc:72:cc:5d:ca:d3:07:9e:25:14:9b:58: 8d:6e:0b:52:88:ef:cb:87:42:8d:b2:5d:ac:07:7f:1b:82:a3: ae:6f:9a:66:d7:dd:23:6d:88:98:3e:1a:95:ce:b2:c2:ee:c2: 86:b4:66:65:4b:4b:6f:82:1e:b6:5a:86:d7:da:c4:9a:1e:0d: f8:49:6a:b3:27:9c:ec:26:68:f2:a2:02:e2:25:9c:87:5c:57: 75:59:e9:09:a4:37:56:59:81:5d:0d:20:c4:2c:d6:a4:8d:02: 07:55:1d:f6:11:d6:e2:e3:c7:39:5d:b1:3a:87:1b:74:d8:00: 3a:04:d0:a5:db:a3:d9:53:33:a2:35:cb:c7:75:be:74:e9:b3: 83:60:62:cb:d0:1e:4b:75:7f:2f:30:d3:b2:6a:e1:24:54:a9: 5e:12:e5:f3:c2:5c:b8:4c:44:6d:e8:10:e0:66:f9:8f:a3:ac: 6a:bc:90:ae:b3:2f:fd:4d:80:3d:4f:fe:b0:a3:33:dd:fe:f3: 2c:d5:6e:d8:fc:4f:5a:b8:b9:f8:23:c9:75:e2:dc:4b:af:b4: 60:cc:42:ce:b8:b1:4c:27:25:54:a0:56:d0:61:60:38:5f:a5: f1:00:9f:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUNGdNW5ruHaF251wisaQaykcyacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJE MkYwRUI4NTAeFw0yNTEyMTkxODQ3MTNaFw0yNTEyMjIyMDUwMTNaMDMxMTAvBgNV BAMTKDk2OEFGQTBCOUU2RjEwQjc3RDdGOEJEMDExMDMwMEI1RkU1NjZGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBerah3c34DTO4J1eHs3dkDvIR 4lL+kSidvQ93f+dQyGZabwgcYJS2OqWVv9naaDR9yPwyx7PJIDXyebFKqmvCd9Ja BZKSkGnT4tEtTVjEYFiF31jIe0k5gVMEHvolzQOdXLaUwyPIUotn7x7jdiyUEA9Q 4Kt8xbZcUYlqRuzrlV/pLm7JPipMmSV0/mXuB/fV8g6qfDqs+e2KZy2XDzxrdtUM DD5bGSaW8TtdPcc0KJ6Q0OAf6nIy9twFkNv+rkkLzaHRjGDCo/Xcrb9RGmoOHumX qnWZVClp6yD8AL6PvDZat5eXAn6llMw9ZeO7L+6e39pR041zva8TfzF8cL//AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlor6C55vELd9f4vQEQMAtf5Wb0kwHwYDVR0j BBgwFoAUy5ZiczFTwC5MQRt9LyueItLw64UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMC9DQjk2NjI3MzMx NTNDMDJFNEM0MTFCN0QyRjJCOUUyMkQyRjBFQjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJEMkYw RUI4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRmMmZmZGEtMDVkMS00MDg1LWEx MzUtMDM5ODdhMDdmMzllLzAvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlF MjJEMkYwRUI4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKo7sS+DvBCapD1jlA5Oy2EuvYYwJ4+l4vxy zF3K0weeJRSbWI1uC1KI78uHQo2yXawHfxuCo65vmmbX3SNtiJg+GpXOssLuwoa0 ZmVLS2+CHrZahtfaxJoeDfhJarMnnOwmaPKiAuIlnIdcV3VZ6QmkN1ZZgV0NIMQs 1qSNAgdVHfYR1uLjxzldsTqHG3TYADoE0KXbo9lTM6I1y8d1vnTps4NgYsvQHkt1 fy8w07Jq4SRUqV4S5fPCXLhMRG3oEOBm+Y+jrGq8kK6zL/1NgD1P/rCjM93+8yzV btj8T1q4ufgjyXXi3EuvtGDMQs64sUwnJVSgVtBhYDhfpfEAn9o= -----END CERTIFICATE-----Generated at Mon Dec 22 01:24:49 2025 by rpki-client