This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: ubtB81J1hqdnFk2gGoUMJwnFv96JvwtPXdFcR/AHAlU= Subject key identifier: 2F:EB:1D:46:7A:C2:ED:76:A5:44:AB:71:07:AA:99:45:FE:07:08:E7 Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 245E53935DCD1D87427D13D4305E3D2734FDA3E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 0530 Signing time: Wed 17 Dec 2025 12:31:12 +0000 Manifest this update: Wed 17 Dec 2025 12:26:12 +0000 Manifest next update: Sat 20 Dec 2025 21:00:12 +0000 Files and hashes: 1: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: BAV3icSSB5gdHihAVUALA0gb3XQQ+I1KYnTjACl3C/c=) 2: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) 3: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 21:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5e:53:93:5d:cd:1d:87:42:7d:13:d4:30:5e:3d:27:34:fd:a3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Dec 17 12:26:12 2025 GMT Not After : Dec 20 21:00:12 2025 GMT Subject: CN=2FEB1D467AC2ED76A544AB7107AA9945FE0708E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:9e:a9:c3:c9:ee:6a:a5:91:fa:76:70:cc: 59:65:2f:af:f4:fe:10:d9:d6:4a:18:f6:b2:ae:13: bd:9e:df:42:2c:0d:7f:19:55:87:b2:09:3b:07:7f: d1:bb:87:8c:9b:5a:5d:ab:14:f1:62:2a:a0:9a:11: 66:27:14:4f:c8:63:34:23:fb:87:8d:0a:c6:e2:8a: 3c:6c:a8:77:0d:03:8a:a9:c8:19:4c:5f:54:d2:66: fa:89:e7:71:5d:28:4e:be:ca:31:5b:74:d6:3c:84: ac:e1:e9:e5:a6:03:3a:a5:76:e8:2f:6d:f9:fd:9a: 3e:54:16:26:86:de:5a:e5:07:a5:82:17:3a:79:2b: e5:ba:38:9e:3d:9d:29:68:ef:9d:1c:f0:c8:0e:91: d0:ea:b8:f3:2a:fa:ef:3f:2c:c3:db:81:6c:50:1f: cb:c6:a4:7a:f0:51:c6:37:fb:e0:45:2c:3b:56:a5: f3:97:c9:ac:77:99:cf:f1:68:f1:31:32:bb:5e:16: 3f:27:cd:4b:5d:d4:24:19:5f:76:39:35:28:27:9a: a9:61:eb:9a:52:98:e4:d5:ef:69:a1:ac:52:af:a4: 20:bb:4c:f8:6d:ad:7d:d8:dc:21:78:07:56:dc:46: 1c:04:8c:73:b4:ae:2e:d4:2f:60:5d:2a:51:31:db: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EB:1D:46:7A:C2:ED:76:A5:44:AB:71:07:AA:99:45:FE:07:08:E7 X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:03:75:dc:53:63:3d:79:e5:cb:3c:1c:5b:c6:42:c5:e5:b8: bb:02:87:09:f2:9c:16:06:ef:65:be:65:d8:83:13:6a:09:5b: 58:6c:bf:7f:67:83:14:d2:8f:4c:6f:3a:78:78:02:74:ec:5f: 0d:f0:2b:c7:d2:ca:be:b1:a3:8e:80:53:1c:89:a0:06:81:91: 88:93:85:89:0b:1f:77:d7:00:db:7e:e3:d4:da:e2:d9:4d:d8: 5d:c4:21:90:70:e7:5a:48:0c:f0:21:0d:4e:a3:15:ca:31:4b: 5d:ca:f7:c9:aa:a2:b9:28:1b:71:18:8c:b7:20:33:20:c9:54: c6:43:02:53:1a:e1:c7:b4:bf:bb:f6:28:a8:15:28:22:56:9c: 54:21:4c:26:d8:f2:ac:1c:34:49:f9:f1:d5:e5:14:24:88:d6: 93:cb:11:7b:0b:49:e1:ad:d4:d4:b0:70:bb:64:12:86:bd:ee: b8:c2:ab:30:03:f6:df:7b:44:83:0a:28:93:d4:86:fe:85:6f: d4:87:8b:0e:78:0f:ba:50:80:3c:e7:dd:b7:5f:64:d4:ad:ac: 9d:db:8d:94:fc:f0:ba:1e:96:16:f7:3c:dd:0a:4c:f1:8f:24: 64:b3:2e:e5:ee:21:fc:57:2e:36:de:47:da:6c:6a:1f:ce:49: 3a:6c:72:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJF5Tk13NHYdCfRPUMF49JzT9o+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTEyMTcxMjI2MTJaFw0yNTEyMjAyMTAwMTJaMDMxMTAvBgNV BAMTKDJGRUIxRDQ2N0FDMkVENzZBNTQ0QUI3MTA3QUE5OTQ1RkUwNzA4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDS56pw8nuaqWR+nZwzFllL6/0 /hDZ1koY9rKuE72e30IsDX8ZVYeyCTsHf9G7h4ybWl2rFPFiKqCaEWYnFE/IYzQj +4eNCsbiijxsqHcNA4qpyBlMX1TSZvqJ53FdKE6+yjFbdNY8hKzh6eWmAzqldugv bfn9mj5UFiaG3lrlB6WCFzp5K+W6OJ49nSlo750c8MgOkdDquPMq+u8/LMPbgWxQ H8vGpHrwUcY3++BFLDtWpfOXyax3mc/xaPExMrteFj8nzUtd1CQZX3Y5NSgnmqlh 65pSmOTV72mhrFKvpCC7TPhtrX3Y3CF4B1bcRhwEjHO0ri7UL2BdKlEx2+mLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL+sdRnrC7XalRKtxB6qZRf4HCOcwHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYDddxTYz155cs8HFvGQsXluLsChwnynBYG 72W+ZdiDE2oJW1hsv39ngxTSj0xvOnh4AnTsXw3wK8fSyr6xo46AUxyJoAaBkYiT hYkLH3fXANt+49Ta4tlN2F3EIZBw51pIDPAhDU6jFcoxS13K98mqorkoG3EYjLcg MyDJVMZDAlMa4ce0v7v2KKgVKCJWnFQhTCbY8qwcNEn58dXlFCSI1pPLEXsLSeGt 1NSwcLtkEoa97rjCqzAD9t97RIMKKJPUhv6Fb9SHiw54D7pQgDzn3bdfZNStrJ3b jZT88Loelhb3PN0KTPGPJGSzLuXuIfxXLjbeR9psah/OSTpsct8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:50 2025 by rpki-client