This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: teOByWGLomLN+JJAlIIIaKL3sHVx4W5c55xNtaUgf5U= Subject key identifier: DE:CB:31:24:B4:D6:30:82:6B:E9:37:FF:08:3A:9C:08:F9:9D:43:F4 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 1AFF475E2810627C6DDF8BAF12358E7053C6D7B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 03BC Signing time: Sun 21 Dec 2025 03:13:03 +0000 Manifest this update: Sun 21 Dec 2025 03:08:03 +0000 Manifest next update: Wed 24 Dec 2025 09:17:03 +0000 Files and hashes: 1: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) 2: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) 3: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: jXFk7zGXIBXQ8lXEvuMGoXpi3S3lGuh0qq+j6jibKZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ff:47:5e:28:10:62:7c:6d:df:8b:af:12:35:8e:70:53:c6:d7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Dec 21 03:08:03 2025 GMT Not After : Dec 24 09:17:03 2025 GMT Subject: CN=DECB3124B4D630826BE937FF083A9C08F99D43F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:14:a4:e1:68:6f:13:21:ba:09:f6:43:87:d5: 9f:36:56:a2:13:71:32:cd:84:13:0f:61:12:7f:57: 0c:f6:4a:39:94:4a:ee:da:a6:68:46:b8:a2:35:6c: 05:c0:d0:f0:ef:b6:cf:19:77:ba:75:7f:7e:55:51: bc:c0:2e:c4:15:77:c2:e6:a6:b9:9a:79:4b:85:7b: c3:f3:30:3b:66:54:4a:18:05:67:f5:f2:c9:90:5f: e8:1b:84:86:60:87:b4:89:98:ca:2d:9b:ff:3d:61: 7c:1a:09:b1:a4:57:7c:23:8a:e1:f8:a1:c9:34:70: 8d:4f:63:44:15:22:66:98:d9:58:e6:b7:5b:b3:87: 16:40:76:0f:74:03:e4:ba:45:6f:da:c7:5f:de:3d: 42:78:c8:1f:33:1f:ec:d3:d2:d9:85:ed:ea:de:29: ec:43:48:13:ec:10:1d:68:56:c1:ab:35:85:c5:97: 11:7f:27:55:0b:11:4c:bd:3e:53:1c:7f:2c:93:b3: b4:96:28:66:85:6b:f2:df:19:0a:36:2f:4e:88:09: f6:13:fb:23:61:01:a9:61:4a:14:ea:06:a4:32:c9: a9:af:fa:bf:ca:36:f0:51:d5:e9:57:0d:80:a5:a4: 50:1d:f4:13:b3:a7:61:2c:9c:ec:30:38:ab:34:41: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:31:24:B4:D6:30:82:6B:E9:37:FF:08:3A:9C:08:F9:9D:43:F4 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e4:19:26:3a:18:c9:a4:59:f7:27:fe:46:7a:ea:16:f7:d3: 0f:37:e7:1e:a6:19:c1:58:6f:62:fd:44:ed:42:3f:3f:c8:fc: 48:50:90:c0:6f:98:5f:e5:b0:49:9b:6a:18:9f:6a:fc:62:da: ba:79:a8:cb:93:5f:22:4a:37:a5:bc:95:8c:84:4d:29:00:be: b6:48:83:25:8d:7d:63:d4:8d:0b:94:9b:f5:eb:7e:6f:ee:e4: 0e:46:84:e9:9e:e3:05:d5:16:cb:0b:66:28:a3:86:1d:22:29: e7:b3:31:a7:55:30:ce:24:71:b6:c8:4f:f3:21:62:7a:82:14: 20:79:35:ea:71:46:58:18:e3:06:e0:59:16:16:45:22:f6:8a: b3:84:a0:1e:7c:c1:98:07:fc:85:c2:f7:76:f0:18:02:6a:95: 07:54:40:4e:8c:4f:be:5e:21:dd:ce:d8:63:19:30:d0:96:dd: 44:ab:34:7f:2f:53:55:03:99:e0:4e:8d:62:32:d5:2f:f3:9e: 58:b3:d3:bc:26:b5:8d:f7:16:13:ed:d9:19:34:8a:ec:64:29: fb:f8:05:b2:b0:03:10:d4:bc:e8:d2:d0:12:bd:60:9d:f4:55: d9:c5:7c:04:cf:fd:9e:d2:05:ef:dd:91:ca:10:8b:b9:1f:6a: 4c:1c:f0:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGv9HXigQYnxt34uvEjWOcFPG17YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTEyMjEwMzA4MDNaFw0yNTEyMjQwOTE3MDNaMDMxMTAvBgNV BAMTKERFQ0IzMTI0QjRENjMwODI2QkU5MzdGRjA4M0E5QzA4Rjk5RDQzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfFKThaG8TIboJ9kOH1Z82VqIT cTLNhBMPYRJ/Vwz2SjmUSu7apmhGuKI1bAXA0PDvts8Zd7p1f35VUbzALsQVd8Lm prmaeUuFe8PzMDtmVEoYBWf18smQX+gbhIZgh7SJmMotm/89YXwaCbGkV3wjiuH4 ock0cI1PY0QVImaY2Vjmt1uzhxZAdg90A+S6RW/ax1/ePUJ4yB8zH+zT0tmF7ere KexDSBPsEB1oVsGrNYXFlxF/J1ULEUy9PlMcfyyTs7SWKGaFa/LfGQo2L06ICfYT +yNhAalhShTqBqQyyamv+r/KNvBR1elXDYClpFAd9BOzp2EsnOwwOKs0QVxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ssxJLTWMIJr6Tf/CDqcCPmdQ/QwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7kGSY6GMmkWfcn/kZ66hb30w835x6mGcFY b2L9RO1CPz/I/EhQkMBvmF/lsEmbahifavxi2rp5qMuTXyJKN6W8lYyETSkAvrZI gyWNfWPUjQuUm/Xrfm/u5A5GhOme4wXVFssLZiijhh0iKeezMadVMM4kcbbIT/Mh YnqCFCB5NepxRlgY4wbgWRYWRSL2irOEoB58wZgH/IXC93bwGAJqlQdUQE6MT75e Id3O2GMZMNCW3USrNH8vU1UDmeBOjWIy1S/znliz07wmtY33FhPt2Rk0iuxkKfv4 BbKwAxDUvOjS0BK9YJ30VdnFfATP/Z7SBe/dkcoQi7kfakwc8CU= -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:08 2025 by rpki-client