This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: 0N+f/UXnVZ4BNYfPC9HS2MqkGHFIChdAxqm5Vm5CfwQ= Subject key identifier: BD:3E:6C:07:58:15:A2:BC:5E:73:A4:6A:84:D9:67:78:8A:3B:22:0E Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 4D85F6530E8C4C52C36EEB39697D8E58D19615F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: 012A Signing time: Sat 20 Dec 2025 08:41:54 +0000 Manifest this update: Sat 20 Dec 2025 08:36:54 +0000 Manifest next update: Tue 23 Dec 2025 17:47:54 +0000 Files and hashes: 1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: WOkj2Mf6M1r6rw/PL6Y8jYiL6/D1A9BNZeEMmJPxZp0=) 2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: T56TwNuf3EVVKNZ4lQ8Ldgdic1XY2tNrYbscCPFk9Pg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:85:f6:53:0e:8c:4c:52:c3:6e:eb:39:69:7d:8e:58:d1:96:15:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Dec 20 08:36:54 2025 GMT Not After : Dec 23 17:47:54 2025 GMT Subject: CN=BD3E6C075815A2BC5E73A46A84D967788A3B220E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:bf:b6:3a:6c:65:f4:1c:f8:1b:54:b5:18: 36:86:c8:69:bf:c7:0f:be:66:25:a5:e5:5a:92:f2: a5:e7:a1:74:7d:e2:fd:56:3e:81:cb:09:60:80:0a: 1c:8f:5f:f2:74:93:51:5c:56:b5:ad:8d:07:cf:9b: 19:bb:8a:b2:4b:51:b5:22:d2:04:c3:b0:06:7b:6c: 8a:d1:7b:06:e5:69:54:8c:da:fe:49:ef:24:8f:9e: 55:b0:36:a3:bd:72:a3:9d:14:52:0c:ff:5a:fc:af: 02:21:d9:d4:06:48:c4:ac:23:94:ed:a1:d0:3a:a1: 32:ac:69:47:b8:c6:bc:1a:19:76:3d:0a:92:cd:45: cd:6a:9f:3e:0f:33:ef:3b:99:81:6c:10:52:06:05: 3c:ed:f2:ee:c3:06:96:3b:33:dc:95:92:8e:ac:f3: 14:c0:41:6f:c5:69:a6:57:17:a1:97:92:fc:ee:20: ee:c2:39:8b:e5:7e:c9:98:fb:22:1f:3d:dc:8f:3b: da:ea:d7:d7:b4:b1:de:81:2f:5e:1d:f7:46:ce:71: bb:9e:2c:8a:5a:78:8b:07:85:28:04:93:21:28:76: 9a:40:2e:e5:06:17:7b:37:9b:1d:39:14:70:45:74: 57:b9:09:6f:d9:2e:78:31:58:ee:c7:05:1e:bf:71: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3E:6C:07:58:15:A2:BC:5E:73:A4:6A:84:D9:67:78:8A:3B:22:0E X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4e:0b:86:31:04:4b:09:d2:d2:9f:af:4a:3b:a2:90:59:e2: d1:32:d0:52:30:3b:28:b7:94:b1:90:e1:e0:de:c9:dd:78:59: 3f:89:4c:50:48:67:a1:52:8b:e3:f2:5e:9a:f0:de:01:c6:52: 7c:00:ee:4b:65:c8:e2:a9:00:2a:fa:af:0e:c0:d1:90:d4:07: 7d:b0:5e:61:5d:d7:3c:6a:ce:01:b2:4e:77:13:c4:15:61:03: cb:26:64:72:e4:e9:5b:75:28:27:87:c7:d8:6d:dd:3e:09:4b: 98:7d:5c:25:03:a2:3b:00:68:ca:45:00:ab:a8:00:60:d6:9e: 9c:28:26:a8:77:37:c0:e9:4f:4d:ef:44:21:26:a1:6f:d5:e5: 63:b5:be:94:e5:17:d5:ec:a7:e9:1f:5a:0d:4b:73:4c:78:54: 2c:40:f9:60:15:19:b5:5e:d9:05:20:10:90:14:f1:4b:69:b2: d7:0e:d6:e8:61:ce:b7:52:06:5b:98:48:e5:97:0b:f5:a4:36: 8e:d5:39:dd:9f:3a:c0:ac:b4:b3:01:0a:60:67:1b:d0:7c:9f: 03:b3:3a:88:a5:68:4d:56:af:61:d4:31:bf:ea:94:bd:18:e4: 82:b9:0c:b8:d9:08:7d:40:ee:47:6d:9c:69:43:7f:19:12:24: 98:d8:2d:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYX2Uw6MTFLDbus5aX2OWNGWFfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNTEyMjAwODM2NTRaFw0yNTEyMjMxNzQ3NTRaMDMxMTAvBgNV BAMTKEJEM0U2QzA3NTgxNUEyQkM1RTczQTQ2QTg0RDk2Nzc4OEEzQjIyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wb+2Omxl9Bz4G1S1GDaGyGm/ xw++ZiWl5VqS8qXnoXR94v1WPoHLCWCAChyPX/J0k1FcVrWtjQfPmxm7irJLUbUi 0gTDsAZ7bIrRewblaVSM2v5J7ySPnlWwNqO9cqOdFFIM/1r8rwIh2dQGSMSsI5Tt odA6oTKsaUe4xrwaGXY9CpLNRc1qnz4PM+87mYFsEFIGBTzt8u7DBpY7M9yVko6s 8xTAQW/FaaZXF6GXkvzuIO7COYvlfsmY+yIfPdyPO9rq19e0sd6BL14d90bOcbue LIpaeIsHhSgEkyEodppALuUGF3s3mx05FHBFdFe5CW/ZLngxWO7HBR6/cd/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvT5sB1gVorxec6RqhNlneIo7Ig4wHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANOC4YxBEsJ0tKfr0o7opBZ4tEy0FIwOyi3 lLGQ4eDeyd14WT+JTFBIZ6FSi+PyXprw3gHGUnwA7ktlyOKpACr6rw7A0ZDUB32w XmFd1zxqzgGyTncTxBVhA8smZHLk6Vt1KCeHx9ht3T4JS5h9XCUDojsAaMpFAKuo AGDWnpwoJqh3N8DpT03vRCEmoW/V5WO1vpTlF9Xsp+kfWg1Lc0x4VCxA+WAVGbVe 2QUgEJAU8UtpstcO1uhhzrdSBluYSOWXC/WkNo7VOd2fOsCstLMBCmBnG9B8nwOz OoilaE1Wr2HUMb/qlL0Y5IK5DLjZCH1A7kdtnGlDfxkSJJjYLb8= -----END CERTIFICATE-----Generated at Mon Dec 22 00:11:46 2025 by rpki-client