This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json) Hash identifier: Wr7WlzppWsXf6uqEZLvWxFaulRRK9tkGIExOVKaFP5Q= Subject key identifier: 7B:AE:70:D0:08:B1:48:80:5A:8D:E0:AF:96:92:15:0E:BE:D8:30:8B Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Certificate serial: 7A8184DDE86640ACB8EA53C074C775824AD67D5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft Manifest number: CA Signing time: Thu 04 Dec 2025 23:01:10 +0000 Manifest this update: Thu 04 Dec 2025 22:56:10 +0000 Manifest next update: Mon 08 Dec 2025 03:24:10 +0000 Files and hashes: 1: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: mANX36N0iKwsaM7hfrnX59wZFK/mktak/KaHGQXDkJY=) 2: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 03:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:81:84:dd:e8:66:40:ac:b8:ea:53:c0:74:c7:75:82:4a:d6:7d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Validity Not Before: Dec 4 22:56:10 2025 GMT Not After : Dec 8 03:24:10 2025 GMT Subject: CN=7BAE70D008B148805A8DE0AF9692150EBED8308B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:97:39:3d:7f:ec:60:93:83:1d:5c:27:bb: 32:bf:cb:ed:d5:0b:1e:c2:88:16:3f:a9:3b:28:39: a0:0d:2e:d2:3a:dc:25:dd:be:3a:23:f5:be:38:a0: 9d:af:3b:61:57:80:fa:15:24:b8:11:13:85:00:87: d0:e0:6a:76:98:46:03:38:06:ea:10:13:6b:3a:23: 29:fd:eb:34:47:a6:52:34:0a:73:a8:e6:b0:c8:66: a8:f0:4b:9c:43:5b:0a:ab:03:b4:67:d7:a9:a8:a7: a2:09:83:ca:37:78:d5:79:57:f6:b8:1b:f3:34:ef: 1a:0d:1b:38:19:d2:fa:c6:a1:c8:72:69:5a:f2:d1: 58:65:ed:7e:f3:63:38:be:a1:b4:1c:c5:5d:18:bf: 19:10:7d:f7:bc:26:bd:0a:6d:95:9b:53:45:0e:4a: 89:a5:08:85:42:75:35:39:91:00:30:c9:c0:9b:c1: db:7a:5c:81:46:24:d3:b9:17:51:18:db:02:3a:6b: 8f:7e:39:ac:38:95:4c:5e:8a:10:fe:50:b1:4e:ab: f3:27:55:a3:15:ff:1b:cd:03:45:00:42:83:82:fd: 10:cd:4b:07:e7:20:e6:9c:f7:93:ff:3a:dd:cf:2b: 92:28:d2:4f:a4:a3:60:65:a2:96:8b:51:8f:a8:45: 8e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AE:70:D0:08:B1:48:80:5A:8D:E0:AF:96:92:15:0E:BE:D8:30:8B X509v3 Authority Key Identifier: keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:59:d7:b4:b1:bd:7f:b7:35:cc:02:98:c0:c0:cc:41:e5:47: 7d:09:5f:e2:b0:1b:35:25:4d:d7:01:48:6d:a6:e9:cf:dd:1e: db:0f:68:62:2b:16:3f:25:7a:5c:2e:51:eb:34:75:1c:72:ae: ca:28:40:fe:f8:ff:51:e6:3d:07:0f:00:a2:4d:ab:7d:cc:ec: 86:a0:5c:98:6b:95:c8:72:17:73:39:53:0b:af:62:d8:aa:d9: 1f:7a:9d:20:4c:1a:df:2e:5a:e2:1d:5a:88:31:26:94:ef:9f: 84:bb:49:c5:a9:87:f0:6b:e1:7f:a4:2f:08:e5:81:18:30:9a: c4:6a:d5:86:4f:55:39:36:3c:f5:13:c5:2b:44:47:a4:d7:e1: 83:30:5e:04:8c:f1:34:a3:c1:f6:70:83:3e:31:3c:94:67:e2: 47:43:f7:7e:58:72:ba:9c:ae:94:b8:3d:59:8e:d7:45:b3:fb: 91:ff:3d:97:63:2d:07:cd:39:30:e4:ce:5a:84:0a:34:08:81: 09:c2:51:a7:d1:b9:d3:b2:88:50:b0:c1:a2:82:b8:cd:00:73: c9:f7:cd:e1:df:3d:a9:cd:38:80:1b:ef:5d:e1:6c:c7:cf:bf: 80:2b:7b:6f:6a:b4:b2:30:fd:bd:33:71:9b:64:5c:c1:3b:5b: 05:37:ef:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoGE3ehmQKy46lPAdMd1gkrWfV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4 M0ZCN0RDRDAeFw0yNTEyMDQyMjU2MTBaFw0yNTEyMDgwMzI0MTBaMDMxMTAvBgNV BAMTKDdCQUU3MEQwMDhCMTQ4ODA1QThERTBBRjk2OTIxNTBFQkVEODMwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCft5c5PX/sYJODHVwnuzK/y+3V Cx7CiBY/qTsoOaANLtI63CXdvjoj9b44oJ2vO2FXgPoVJLgRE4UAh9DganaYRgM4 BuoQE2s6Iyn96zRHplI0CnOo5rDIZqjwS5xDWwqrA7Rn16mop6IJg8o3eNV5V/a4 G/M07xoNGzgZ0vrGochyaVry0Vhl7X7zYzi+obQcxV0YvxkQffe8Jr0KbZWbU0UO SomlCIVCdTU5kQAwycCbwdt6XIFGJNO5F1EY2wI6a49+Oaw4lUxeihD+ULFOq/Mn VaMV/xvNA0UAQoOC/RDNSwfnIOac95P/Ot3PK5Io0k+ko2BlopaLUY+oRY4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe65w0AixSIBajeCvlpIVDr7YMIswHwYDVR0j BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1 QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpZ17SxvX+3NcwCmMDAzEHlR30JX+KwGzUl TdcBSG2m6c/dHtsPaGIrFj8lelwuUes0dRxyrsooQP74/1HmPQcPAKJNq33M7Iag XJhrlchyF3M5UwuvYtiq2R96nSBMGt8uWuIdWogxJpTvn4S7ScWph/Br4X+kLwjl gRgwmsRq1YZPVTk2PPUTxStER6TX4YMwXgSM8TSjwfZwgz4xPJRn4kdD935Ycrqc rpS4PVmO10Wz+5H/PZdjLQfNOTDkzlqECjQIgQnCUafRudOyiFCwwaKCuM0Ac8n3 zeHfPanNOIAb713hbMfPv4Are29qtLIw/b0zcZtkXME7WwU374A= -----END CERTIFICATE-----Generated at Sat Dec 6 19:48:16 2025 by rpki-client