This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: 8cIiJbpru6qJk2nFZK/XedkKXapUC43gMUQB3yu1kFk= Subject key identifier: BD:A3:3F:EC:2C:47:55:E8:37:CA:89:59:C9:A5:6B:59:43:28:9D:5E Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 544286C8FA15326F5402C3EB7C6BBC8F8D5F5925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: D0 Signing time: Sat 20 Dec 2025 02:32:25 +0000 Manifest this update: Sat 20 Dec 2025 02:27:25 +0000 Manifest next update: Tue 23 Dec 2025 06:34:25 +0000 Files and hashes: 1: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: Jy6L+sGekPMyuMtdpky0D2jRd/OipqZg9C05WnpPS4Y=) 2: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: +SLAv/Ao5ipR0W/v6AgPtFrgrn+d0qK7qqbca2xo8WU=) 3: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA=) 4: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: zKHXogUEbsyyC8ISVc+ANF+73aCbCi6els1lcd1hD1E=) 5: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: j6NNKjwAhCt+1dQQ59Z98fWKrSjJSMgyZGkXDkA9eMI=) 6: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: L0OHjTLAoKuTGX0pU6SpedvQBvVTanvlgQCeJn9jtow=) 7: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: vaX/n6vc4K9mejYUu1eJI/tNjnfyjVyWN2o5zH8Hflc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 06:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:42:86:c8:fa:15:32:6f:54:02:c3:eb:7c:6b:bc:8f:8d:5f:59:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Dec 20 02:27:25 2025 GMT Not After : Dec 23 06:34:25 2025 GMT Subject: CN=BDA33FEC2C4755E837CA8959C9A56B5943289D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:8e:63:bd:6b:43:03:de:60:58:8e:18:8e: 2d:a0:8f:64:28:45:57:18:6a:7a:06:3a:69:34:45: f8:8a:60:42:b9:9b:2b:c9:50:25:26:d3:db:d0:f8: d1:ba:7b:5a:cc:cb:8f:b7:d6:a6:b4:a1:1b:52:e5: c6:cb:36:b7:be:dc:dd:e5:8c:95:62:16:f4:d8:ba: a7:7a:b5:97:34:65:80:e4:65:32:f2:15:75:f4:9f: b3:bc:73:b0:d2:71:72:1a:8e:f1:6d:f8:02:18:dc: d4:3b:72:e2:b0:dd:33:7f:58:be:c9:05:28:a9:02: fe:60:f4:51:d5:ae:79:b8:69:1b:6c:f5:b1:b5:ac: 41:e1:97:47:f2:97:bd:b2:b3:8e:81:85:e3:fc:51: e9:5b:fb:9c:3c:db:9d:88:8c:e8:77:19:e1:3a:a2: e4:c0:5a:c8:28:20:e7:55:7e:9d:e6:75:41:b9:9c: c3:ad:c5:7d:2a:0c:cc:b3:6f:c5:e0:a3:84:94:43: 3a:01:4f:96:fe:84:a5:80:9e:ea:dc:23:37:75:16: 78:c0:9e:8b:d5:4f:b7:f1:7d:5b:c7:b3:94:78:d5: 6d:88:ef:07:f0:75:c1:77:d5:30:4b:48:5c:2f:28: cb:fa:cf:c9:eb:80:17:d7:bd:67:a1:a6:59:b8:78: c4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A3:3F:EC:2C:47:55:E8:37:CA:89:59:C9:A5:6B:59:43:28:9D:5E X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:3c:c2:92:4d:62:23:47:7e:25:32:3c:fd:a2:82:6c:88:96: eb:c5:b6:bb:ab:9f:5d:ee:57:11:91:82:28:c2:58:f2:64:d1: 9a:c8:cb:ba:23:05:dd:ec:35:51:c9:44:0a:0a:4d:94:77:d2: 63:de:d1:27:e4:f4:d9:67:b1:fa:89:7e:85:10:d2:a2:25:b5: f0:ce:3e:f0:ee:e5:a2:77:95:c2:9a:a9:0e:ee:5d:b0:b3:2c: 6c:d4:38:5c:fd:8d:33:5e:48:bb:ba:af:29:23:ac:00:f6:3f: ec:15:eb:95:43:52:c3:86:92:27:ae:6b:fe:28:92:31:f3:e6: 80:d3:d4:b7:e9:2b:7f:a8:9d:06:b0:d8:5c:79:5a:9e:bf:27: 97:59:67:3f:cd:36:68:ff:b6:e9:0a:43:0e:9c:cb:f9:30:8f: 7a:54:e1:7c:94:d4:dd:52:33:93:4d:4f:cd:bf:85:0a:df:00: 00:fd:1d:40:02:05:45:2c:16:f5:ae:56:95:ff:a9:32:98:0a: 2b:e4:2d:2f:52:26:39:37:a2:26:48:a2:a6:60:4d:d1:1c:83: 14:a6:ea:c5:ad:3a:2c:6f:84:3c:d0:ed:99:28:43:39:3e:a1: fa:40:b9:44:c2:1f:fa:1d:6f:f7:29:ab:28:36:a2:9d:ba:f0: 07:ff:32:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVEKGyPoVMm9UAsPrfGu8j41fWSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTEyMjAwMjI3MjVaFw0yNTEyMjMwNjM0MjVaMDMxMTAvBgNV BAMTKEJEQTMzRkVDMkM0NzU1RTgzN0NBODk1OUM5QTU2QjU5NDMyODlENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8o5jvWtDA95gWI4Yji2gj2Qo RVcYanoGOmk0RfiKYEK5myvJUCUm09vQ+NG6e1rMy4+31qa0oRtS5cbLNre+3N3l jJViFvTYuqd6tZc0ZYDkZTLyFXX0n7O8c7DScXIajvFt+AIY3NQ7cuKw3TN/WL7J BSipAv5g9FHVrnm4aRts9bG1rEHhl0fyl72ys46BheP8Uelb+5w8252IjOh3GeE6 ouTAWsgoIOdVfp3mdUG5nMOtxX0qDMyzb8Xgo4SUQzoBT5b+hKWAnurcIzd1FnjA novVT7fxfVvHs5R41W2I7wfwdcF31TBLSFwvKMv6z8nrgBfXvWehplm4eMS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvaM/7CxHVeg3yolZyaVrWUMonV4wHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGY8wpJNYiNHfiUyPP2igmyIluvFtrurn13u VxGRgijCWPJk0ZrIy7ojBd3sNVHJRAoKTZR30mPe0Sfk9NlnsfqJfoUQ0qIltfDO PvDu5aJ3lcKaqQ7uXbCzLGzUOFz9jTNeSLu6rykjrAD2P+wV65VDUsOGkieua/4o kjHz5oDT1LfpK3+onQaw2Fx5Wp6/J5dZZz/NNmj/tukKQw6cy/kwj3pU4XyU1N1S M5NNT82/hQrfAAD9HUACBUUsFvWuVpX/qTKYCivkLS9SJjk3oiZIoqZgTdEcgxSm 6sWtOixvhDzQ7ZkoQzk+ofpAuUTCH/odb/cpqyg2op268Af/Mt0= -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:26 2025 by rpki-client