This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: 4ZOpWRTu2pmderTgIlH7s2sn3K0iCAXaYzMlwQVGysU= Subject key identifier: 86:52:B0:FA:06:74:21:AF:C0:71:58:77:E2:18:75:33:60:3C:DC:9C Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 450BBDDCD3F1301B4D884B5F685F1F039CA1920C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 95 Signing time: Sat 27 Dec 2025 23:41:17 +0000 Manifest this update: Sat 27 Dec 2025 23:36:17 +0000 Manifest next update: Wed 31 Dec 2025 05:10:17 +0000 Files and hashes: 1: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: xvUYzn6lq/E/WOoTTIRrh31B7w3NzMkLR23U+h02bHo=) 2: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) 3: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 05:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:0b:bd:dc:d3:f1:30:1b:4d:88:4b:5f:68:5f:1f:03:9c:a1:92:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Dec 27 23:36:17 2025 GMT Not After : Dec 31 05:10:17 2025 GMT Subject: CN=8652B0FA067421AFC0715877E2187533603CDC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:e9:2d:11:81:68:a8:47:4e:8e:e4:22:68: ed:57:ca:cb:d7:32:e4:5f:41:1e:92:a2:16:98:f1: 6a:6b:44:c3:6f:1a:23:c3:e9:e0:04:40:50:d5:a5: 75:80:ad:1b:34:78:42:4b:74:3a:79:3c:7c:3e:f7: 68:fc:fe:01:1d:79:2e:20:d2:43:72:35:a9:08:ef: 93:41:b0:cb:85:16:20:75:6d:5d:44:e1:2f:aa:8c: 7b:e2:72:b7:ce:3f:7e:43:05:fb:85:62:89:6a:69: c6:32:38:fd:bb:26:92:f4:55:64:b1:bd:89:93:5a: dc:17:b9:ae:7d:b9:fa:fa:0e:1b:25:9d:e3:70:b5: fe:cd:3f:59:fb:8e:bf:10:ed:20:eb:a2:57:dc:e5: 90:3f:c5:0c:96:c8:3d:bb:c2:2f:4f:28:ed:1c:07: 38:65:91:23:eb:a2:1a:ad:4a:cc:68:1f:f4:23:c5: 36:d9:07:e2:b0:7e:78:b4:a9:00:66:7c:fb:9e:1e: 4b:dd:22:b2:cb:f0:d9:e9:5d:75:ca:7a:15:14:22: f7:52:95:a0:c0:f1:3e:76:01:fa:c5:31:c9:10:6c: a4:b6:4f:37:5e:b2:84:dd:2b:ab:70:90:81:3f:a6: 5d:f3:bf:27:45:5b:f6:16:0c:87:b1:95:ec:27:07: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:52:B0:FA:06:74:21:AF:C0:71:58:77:E2:18:75:33:60:3C:DC:9C X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:72:25:64:4c:aa:53:f5:b9:09:24:2c:4f:07:b3:d3:86:ef: bf:4c:71:f6:84:11:96:1b:dd:f9:44:31:64:ce:4e:24:d5:d1: 58:7d:f5:3c:b3:dc:eb:f3:4f:03:2c:b6:cf:5b:4a:13:13:03: 0d:72:d2:77:6d:ee:07:9a:dc:0f:52:9b:e6:77:2e:ee:78:75: 1f:e2:98:8a:72:e5:9f:03:ab:e1:c3:2a:9f:a0:17:f8:ef:3d: a5:53:f2:f6:ab:b1:f5:45:fb:70:8b:33:a4:26:c8:9e:1a:23: e5:f5:60:4e:78:88:71:e4:c4:dc:d3:b1:3e:0b:3b:56:9e:56: 85:68:1e:71:80:b9:6b:e4:75:9a:50:e6:6a:43:9a:0d:ec:26: 57:48:0b:e5:7e:d0:17:df:50:2d:59:b5:93:22:1e:e5:b5:8a: 84:14:a0:cf:91:e4:25:bd:fc:f3:84:cc:57:02:3b:48:28:0a: f3:a8:df:7a:24:81:ef:0e:ed:22:46:5c:e7:6c:7b:2b:6d:8e: 66:d2:cf:fd:62:bb:46:59:e8:47:cf:ef:30:8a:f3:b3:4d:b9: fb:6a:29:3e:49:0e:ad:dc:67:10:b5:18:03:de:8b:93:08:c9: c3:0f:61:52:a2:29:e8:9c:bc:a4:f4:bb:b0:9a:c3:b9:ee:3b: c3:89:c9:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURQu93NPxMBtNiEtfaF8fA5yhkgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTEyMjcyMzM2MTdaFw0yNTEyMzEwNTEwMTdaMDMxMTAvBgNV BAMTKDg2NTJCMEZBMDY3NDIxQUZDMDcxNTg3N0UyMTg3NTMzNjAzQ0RDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzuktEYFoqEdOjuQiaO1XysvX MuRfQR6SohaY8WprRMNvGiPD6eAEQFDVpXWArRs0eEJLdDp5PHw+92j8/gEdeS4g 0kNyNakI75NBsMuFFiB1bV1E4S+qjHvicrfOP35DBfuFYolqacYyOP27JpL0VWSx vYmTWtwXua59ufr6DhslneNwtf7NP1n7jr8Q7SDrolfc5ZA/xQyWyD27wi9PKO0c BzhlkSProhqtSsxoH/QjxTbZB+Kwfni0qQBmfPueHkvdIrLL8NnpXXXKehUUIvdS laDA8T52AfrFMckQbKS2TzdesoTdK6twkIE/pl3zvydFW/YWDIexlewnB1VpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhlKw+gZ0Ia/AcVh34hh1M2A83JwwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABByJWRMqlP1uQkkLE8Hs9OG779McfaEEZYb 3flEMWTOTiTV0Vh99Tyz3OvzTwMsts9bShMTAw1y0ndt7gea3A9Sm+Z3Lu54dR/i mIpy5Z8Dq+HDKp+gF/jvPaVT8varsfVF+3CLM6QmyJ4aI+X1YE54iHHkxNzTsT4L O1aeVoVoHnGAuWvkdZpQ5mpDmg3sJldIC+V+0BffUC1ZtZMiHuW1ioQUoM+R5CW9 /POEzFcCO0goCvOo33okge8O7SJGXOdseyttjmbSz/1iu0ZZ6EfP7zCK87NNuftq KT5JDq3cZxC1GAPei5MIycMPYVKiKeicvKT0u7Caw7nuO8OJySM= -----END CERTIFICATE-----Generated at Mon Dec 29 22:46:56 2025 by rpki-client