This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: NNzzmwyJ559OwCH7JcGKsdUNcWZpbm3YQ4OyDA7zdbU= Subject key identifier: 14:DF:3C:59:56:5C:56:45:BF:E1:62:BB:3E:74:11:B3:9D:0F:95:A1 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 2B1E35603C1AF7482020C0069BEC5583C7A5F1E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 0252 Signing time: Sat 06 Dec 2025 06:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:56:11 +0000 Manifest next update: Tue 09 Dec 2025 06:32:11 +0000 Files and hashes: 1: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A=) 2: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: h0NMf6vQp25oWTdV81eLrkJXyJ4nZvAFuTgaZyckTQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1e:35:60:3c:1a:f7:48:20:20:c0:06:9b:ec:55:83:c7:a5:f1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Dec 6 05:56:11 2025 GMT Not After : Dec 9 06:32:11 2025 GMT Subject: CN=14DF3C59565C5645BFE162BB3E7411B39D0F95A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:74:90:ad:0b:b5:34:db:61:5b:2c:27:b2: a6:35:d9:fd:1b:34:99:43:24:9c:4e:aa:6d:cf:95: 66:cd:96:7b:ac:2b:04:d5:b9:1a:5f:54:f8:5e:e8: 06:10:98:bc:a4:63:7e:1b:46:4c:1e:4b:52:a1:47: 2c:1c:93:65:e6:85:9a:6b:10:b0:95:14:e2:d1:b0: 2f:5f:5d:f7:5a:c9:55:c9:7e:a5:18:b6:6f:42:ad: 2d:61:ea:fb:18:77:bb:4c:92:ec:69:c1:af:b6:46: 39:53:46:35:3e:96:19:aa:a5:3b:b3:3b:de:62:bd: 2c:c9:95:6e:58:1f:13:ac:38:94:fd:10:65:2b:28: da:10:6e:6a:d5:62:49:c2:c9:27:12:fc:a8:8f:42: ab:a0:69:62:8a:f0:cd:69:af:31:16:34:53:4c:03: 02:01:de:2d:3e:f5:25:31:bd:d1:90:0d:b5:ba:52: 6a:5a:f9:bf:49:e5:f3:e1:b1:1a:9e:eb:ed:ad:51: 33:1c:32:75:43:42:3f:6a:75:54:7e:75:bc:35:42: 02:6c:dc:28:29:c4:3e:43:f3:ee:69:41:0d:fb:83: 42:76:52:a3:e5:b3:5d:45:c1:50:98:41:cf:57:82: 8f:42:9a:cd:c6:ad:e2:cc:20:a3:f5:fb:b7:ed:1b: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DF:3C:59:56:5C:56:45:BF:E1:62:BB:3E:74:11:B3:9D:0F:95:A1 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:72:81:57:d5:0b:75:30:18:67:4a:2b:df:b5:6e:6e:45:cf: e6:2e:42:df:92:82:b4:97:5c:f6:a6:6d:dc:f0:01:42:de:e8: 50:e0:45:0e:7d:7d:a3:44:ea:1a:81:6b:80:47:58:75:68:c3: f3:2e:0a:77:7f:b7:8e:70:0e:1b:76:2f:51:46:cd:b8:2d:4b: 7b:a0:ce:16:8e:60:5d:bc:80:4e:c5:8f:8b:08:81:58:a2:32: 58:9c:9f:13:2b:2e:a2:88:00:bd:98:94:4b:6c:04:a2:13:4f: ad:bb:ea:e4:80:08:dc:42:f4:10:ec:d3:2e:a5:49:e8:7e:20: 86:fb:bd:43:72:50:78:2d:70:6c:c6:4b:7e:f5:d7:53:73:78: 18:82:ec:28:29:1d:f4:d7:7a:fb:3c:a7:8d:f7:18:f3:ee:7c: ed:76:aa:f0:74:40:84:f3:a2:49:4f:ae:bb:ab:c7:0e:41:bc: 6c:d6:df:8d:8f:d3:81:91:80:d3:b0:db:1e:89:4e:35:3f:91: d0:c9:b1:8c:f9:51:3c:73:85:21:15:b5:01:cd:3a:b0:48:22: da:5b:0d:fd:81:43:8b:c2:23:ca:8e:2a:b4:83:75:43:af:f3: 48:ce:42:6f:66:9a:5f:8b:40:03:f9:6f:67:07:65:b4:f1:a5: ae:d8:67:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKx41YDwa90ggIMAGm+xVg8el8egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTEyMDYwNTU2MTFaFw0yNTEyMDkwNjMyMTFaMDMxMTAvBgNV BAMTKDE0REYzQzU5NTY1QzU2NDVCRkUxNjJCQjNFNzQxMUIzOUQwRjk1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJXSQrQu1NNthWywnsqY12f0b NJlDJJxOqm3PlWbNlnusKwTVuRpfVPhe6AYQmLykY34bRkweS1KhRywck2XmhZpr ELCVFOLRsC9fXfdayVXJfqUYtm9CrS1h6vsYd7tMkuxpwa+2RjlTRjU+lhmqpTuz O95ivSzJlW5YHxOsOJT9EGUrKNoQbmrVYknCyScS/KiPQqugaWKK8M1przEWNFNM AwIB3i0+9SUxvdGQDbW6Umpa+b9J5fPhsRqe6+2tUTMcMnVDQj9qdVR+dbw1QgJs 3CgpxD5D8+5pQQ37g0J2UqPls11FwVCYQc9Xgo9Cms3GreLMIKP1+7ftGzMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFN88WVZcVkW/4WK7PnQRs50PlaEwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERygVfVC3UwGGdKK9+1bm5Fz+YuQt+SgrSX XPambdzwAULe6FDgRQ59faNE6hqBa4BHWHVow/MuCnd/t45wDht2L1FGzbgtS3ug zhaOYF28gE7Fj4sIgViiMlicnxMrLqKIAL2YlEtsBKITT6276uSACNxC9BDs0y6l Seh+IIb7vUNyUHgtcGzGS37111NzeBiC7CgpHfTXevs8p433GPPufO12qvB0QITz oklPrrurxw5BvGzW342P04GRgNOw2x6JTjU/kdDJsYz5UTxzhSEVtQHNOrBIItpb Df2BQ4vCI8qOKrSDdUOv80jOQm9mml+LQAP5b2cHZbTxpa7YZ2g= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:38 2025 by rpki-client