This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: IZOFqPv0KdrbDbpRjhbNzwdmpbyc4AHpBuv0ajQ/iU4= Subject key identifier: FC:D1:0C:15:C8:32:9B:F1:0A:99:16:A2:5E:63:B2:2E:6A:83:AF:83 Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 7EFC9EE8DEB228BE78D3CBF74BA327F7DB2E3FA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 023A Signing time: Sat 06 Dec 2025 09:20:50 +0000 Manifest this update: Sat 06 Dec 2025 09:15:50 +0000 Manifest next update: Tue 09 Dec 2025 17:07:50 +0000 Files and hashes: 1: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) 2: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) 3: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: RFAH4eYUEHCT4y7a9qEAr0tk76JkjgoQ/uDNS89Tl0M=) 4: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) 5: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fc:9e:e8:de:b2:28:be:78:d3:cb:f7:4b:a3:27:f7:db:2e:3f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Dec 6 09:15:50 2025 GMT Not After : Dec 9 17:07:50 2025 GMT Subject: CN=FCD10C15C8329BF10A9916A25E63B22E6A83AF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:0d:0d:0c:31:78:7f:cf:3d:a3:d1:0b:81: 88:a9:15:3f:ce:56:7a:4e:14:fe:f1:39:42:dc:0d: 2a:93:4e:c0:17:74:f9:ad:b4:4d:57:b1:95:0f:13: ca:fc:98:80:e7:e3:7e:45:4e:45:17:f2:4f:01:ef: 5a:d7:28:ea:45:a9:d8:69:13:f3:c4:0c:ca:69:8e: 9f:f0:d7:bd:02:df:c4:e9:d6:01:29:44:c7:dc:2b: 47:c3:69:09:e6:53:40:4c:84:ca:eb:81:22:8e:5d: d0:a5:6a:be:a0:8f:fc:73:c3:80:12:83:8e:2a:76: 80:fd:c8:1a:54:e3:ba:18:0a:22:55:6b:60:ec:64: e0:7d:c5:de:90:9e:6a:93:ed:e1:82:70:b2:50:86: 4e:ca:56:4c:64:0b:f0:d7:ad:b2:c3:83:6d:b4:31: 34:a9:06:19:ed:71:8b:29:9d:4c:2a:e6:8f:a8:58: b1:b1:a8:cc:76:c9:4b:63:64:b4:8e:ce:c1:bf:68: cb:66:d3:99:2f:a5:8c:0f:37:db:1b:17:3f:cc:1c: fd:aa:c5:b0:5d:25:79:83:dd:91:c8:b5:ff:0e:35: d2:a7:16:87:ed:2a:b5:20:94:b7:a6:0b:5f:84:46: 12:1e:68:ce:88:63:2e:a6:7c:3f:41:af:10:38:ed: 40:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D1:0C:15:C8:32:9B:F1:0A:99:16:A2:5E:63:B2:2E:6A:83:AF:83 X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a1:b9:20:60:25:d2:7c:13:8e:78:1b:b9:50:89:f2:bf:1a: 47:75:42:fe:cd:3d:3f:88:04:73:fd:34:02:55:30:30:84:56: 34:13:3f:75:f3:04:04:a3:63:a5:dd:0c:4e:a2:ca:c5:2c:2d: 2f:e1:fc:cf:04:f2:67:bd:d4:67:91:cd:1a:bc:58:5d:76:68: b6:49:30:8f:b0:9c:31:60:92:cb:b9:7d:1f:aa:cf:33:78:71: e3:5f:27:68:c1:f9:72:ed:8e:53:af:8a:08:0e:56:b9:e1:52: de:bc:d8:3d:12:b0:66:fc:01:b7:19:5c:48:e3:57:be:ce:e4: ca:1e:76:d1:56:18:7a:88:1f:25:b9:71:23:44:3b:98:fc:14: 8b:f3:fd:63:a7:63:bc:86:73:b1:5d:69:59:4a:10:12:e2:9f: 4f:58:fd:18:34:67:3e:68:08:49:db:44:3a:6e:87:e4:98:d8: f8:f9:91:77:aa:35:dc:f0:62:ee:e4:11:6e:e5:5f:18:e7:62: 9c:ef:ba:43:de:16:14:16:29:b9:fa:af:17:8a:a4:68:fe:60: e2:39:d8:5c:f4:92:4b:b0:2b:31:90:b6:59:7d:b6:2c:71:9c: 5d:4c:e8:bd:8f:27:8b:b1:f4:8a:c9:ac:9f:3b:25:24:de:19: 82:65:c7:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvye6N6yKL5408v3S6Mn99suP6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTEyMDYwOTE1NTBaFw0yNTEyMDkxNzA3NTBaMDMxMTAvBgNV BAMTKEZDRDEwQzE1QzgzMjlCRjEwQTk5MTZBMjVFNjNCMjJFNkE4M0FGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYw0NDDF4f889o9ELgYipFT/O VnpOFP7xOULcDSqTTsAXdPmttE1XsZUPE8r8mIDn435FTkUX8k8B71rXKOpFqdhp E/PEDMppjp/w170C38Tp1gEpRMfcK0fDaQnmU0BMhMrrgSKOXdClar6gj/xzw4AS g44qdoD9yBpU47oYCiJVa2DsZOB9xd6QnmqT7eGCcLJQhk7KVkxkC/DXrbLDg220 MTSpBhntcYspnUwq5o+oWLGxqMx2yUtjZLSOzsG/aMtm05kvpYwPN9sbFz/MHP2q xbBdJXmD3ZHItf8ONdKnFoftKrUglLemC1+ERhIeaM6IYy6mfD9BrxA47UAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/NEMFcgym/EKmRaiXmOyLmqDr4MwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALChuSBgJdJ8E454G7lQifK/Gkd1Qv7NPT+I BHP9NAJVMDCEVjQTP3XzBASjY6XdDE6iysUsLS/h/M8E8me91GeRzRq8WF12aLZJ MI+wnDFgksu5fR+qzzN4ceNfJ2jB+XLtjlOviggOVrnhUt682D0SsGb8AbcZXEjj V77O5MoedtFWGHqIHyW5cSNEO5j8FIvz/WOnY7yGc7FdaVlKEBLin09Y/Rg0Zz5o CEnbRDpuh+SY2Pj5kXeqNdzwYu7kEW7lXxjnYpzvukPeFhQWKbn6rxeKpGj+YOI5 2Fz0kkuwKzGQtll9tixxnF1M6L2PJ4ux9IrJrJ87JSTeGYJlx/U= -----END CERTIFICATE-----Generated at Sun Dec 7 07:10:47 2025 by rpki-client