This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: o/8x3o9S/NONnkK/missF4dX89zWM4pE7staS99oSDE= Subject key identifier: 23:8A:89:55:37:9C:47:BA:45:ED:F1:7E:F3:3B:74:0B:62:EC:21:88 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 73C2CD4977D625F3C9F76E8D15EB79521C4E6885 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 92 Signing time: Sun 21 Dec 2025 12:41:19 +0000 Manifest this update: Sun 21 Dec 2025 12:36:19 +0000 Manifest next update: Wed 24 Dec 2025 23:09:19 +0000 Files and hashes: 1: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: /OhYgGSUA3ROXZyYwIO02uHitgnnq+9Auw0O4clJ+20=) 2: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) 3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c2:cd:49:77:d6:25:f3:c9:f7:6e:8d:15:eb:79:52:1c:4e:68:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Dec 21 12:36:19 2025 GMT Not After : Dec 24 23:09:19 2025 GMT Subject: CN=238A8955379C47BA45EDF17EF33B740B62EC2188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:40:99:e4:71:a8:4d:8d:3b:8d:e1:1f:a1: ab:ab:37:b4:59:54:35:97:ea:a5:81:87:87:6a:d1: 21:88:8b:9b:b4:2b:f4:1d:f7:54:04:a3:df:53:70: 63:c5:fc:ec:70:bc:43:56:cf:3f:08:70:3e:96:4a: 98:f3:9d:50:34:69:97:7a:07:55:42:cb:cd:e7:76: c7:92:eb:92:49:30:1c:93:60:a6:62:24:6c:82:36: e3:6f:c1:ed:18:9e:03:df:66:f5:99:9f:4f:8d:05: 9d:92:a2:e7:e2:98:5b:a7:15:e9:32:5c:a6:93:1e: 13:08:0d:7e:2d:67:3d:2a:76:9e:93:51:c2:41:c6: 7f:ed:86:dc:93:3c:f2:26:1f:10:fd:a1:b1:4e:0b: e8:75:8f:93:60:61:7b:2d:41:45:d3:eb:88:45:5a: 78:aa:c1:84:38:09:2d:a6:96:a3:80:1f:50:c3:01: 92:7c:aa:6d:85:1b:f5:28:ee:c2:84:a8:6c:c5:42: d6:de:93:3b:bf:5a:a6:47:5b:83:6c:ed:0e:63:46: 2c:b4:40:77:d2:fa:49:21:35:f2:00:8e:ea:75:b8: d4:fa:53:b1:a4:52:e1:fb:5c:27:dc:b5:eb:01:6f: 94:cb:d4:32:1e:11:dd:94:0a:0a:f6:ac:d1:b5:b9: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8A:89:55:37:9C:47:BA:45:ED:F1:7E:F3:3B:74:0B:62:EC:21:88 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:aa:c0:f9:b0:0b:cc:fd:11:bc:72:48:fc:f8:05:13:27:40: d4:32:24:ad:c8:0b:ca:08:dd:28:0d:df:70:10:b7:17:f3:33: 15:73:47:2a:a6:0b:66:b2:1b:2d:cc:91:e7:ce:de:4e:82:a1: ee:bd:64:0f:a1:f0:7d:35:98:ef:4c:69:3a:a0:16:4e:3e:aa: 2f:96:d9:b0:98:e9:7f:12:d0:99:c5:85:2a:bb:3c:0f:9e:ea: 84:b0:60:6f:b7:f2:ed:df:88:a9:7c:6e:a8:ab:43:70:cb:3e: 86:d0:70:3f:35:79:80:ab:54:10:d3:16:5f:ba:7e:85:31:22: d2:ca:b6:90:7c:a9:ce:21:95:98:cf:a0:0f:7f:2e:87:20:dd: cd:cf:d1:59:1a:6e:d7:74:a7:71:2e:c1:a8:11:4f:0a:60:b6: 82:ed:eb:40:39:c7:6e:c3:4c:32:4f:92:17:fb:51:5a:bf:59: 7d:25:64:fc:a5:75:fe:0b:df:48:81:3d:4b:6e:d8:c9:66:26: d8:0c:79:52:71:62:1b:ff:c5:c7:ad:2a:39:61:c7:d0:60:77: 77:34:a3:18:8b:f6:46:26:c5:18:75:d8:d3:4b:9e:40:18:2b: 82:db:84:8e:bd:f3:8e:a4:f3:c5:47:ec:d3:40:38:be:c1:3d: 01:8c:ea:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8LNSXfWJfPJ926NFet5UhxOaIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTEyMjExMjM2MTlaFw0yNTEyMjQyMzA5MTlaMDMxMTAvBgNV BAMTKDIzOEE4OTU1Mzc5QzQ3QkE0NUVERjE3RUYzM0I3NDBCNjJFQzIxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GUCZ5HGoTY07jeEfoaurN7RZ VDWX6qWBh4dq0SGIi5u0K/Qd91QEo99TcGPF/OxwvENWzz8IcD6WSpjznVA0aZd6 B1VCy83ndseS65JJMByTYKZiJGyCNuNvwe0YngPfZvWZn0+NBZ2SoufimFunFeky XKaTHhMIDX4tZz0qdp6TUcJBxn/thtyTPPImHxD9obFOC+h1j5NgYXstQUXT64hF WniqwYQ4CS2mlqOAH1DDAZJ8qm2FG/Uo7sKEqGzFQtbekzu/WqZHW4Ns7Q5jRiy0 QHfS+kkhNfIAjup1uNT6U7GkUuH7XCfctesBb5TL1DIeEd2UCgr2rNG1ubzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI4qJVTecR7pF7fF+8zt0C2LsIYgwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmqwPmwC8z9EbxySPz4BRMnQNQyJK3IC8oI 3SgN33AQtxfzMxVzRyqmC2ayGy3MkefO3k6Coe69ZA+h8H01mO9MaTqgFk4+qi+W 2bCY6X8S0JnFhSq7PA+e6oSwYG+38u3fiKl8bqirQ3DLPobQcD81eYCrVBDTFl+6 foUxItLKtpB8qc4hlZjPoA9/Locg3c3P0Vkabtd0p3EuwagRTwpgtoLt60A5x27D TDJPkhf7UVq/WX0lZPyldf4L30iBPUtu2MlmJtgMeVJxYhv/xcetKjlhx9Bgd3c0 oxiL9kYmxRh12NNLnkAYK4LbhI69846k88VH7NNAOL7BPQGM6sM= -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:44 2025 by rpki-client