This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: uw47TzVR7FZDrYXVPI0Vg7O4loFzDXoI+Oeb/YwPqZk= Subject key identifier: 01:0A:23:58:12:FB:0D:4C:3B:5F:8E:87:32:7D:52:22:36:85:62:B2 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 7C8BB94C191A942DEBDD2806611C3FC4E6750435 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 0221 Signing time: Sat 06 Dec 2025 08:42:21 +0000 Manifest this update: Sat 06 Dec 2025 08:37:21 +0000 Manifest next update: Tue 09 Dec 2025 09:13:21 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: 84o3UV8IHhQFDzzDC1t2/AoF+j9eW/9zsv1UkTq0r2k=) 2: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: AoisIKjFDgxSpQWcGSc9vDGFrlv1QcVF2IqB6ymlo5I=) 3: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) 4: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: tyRjVT4o1+Zqb2lXmYU24puBtoW9130P74bxXp7WFWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8b:b9:4c:19:1a:94:2d:eb:dd:28:06:61:1c:3f:c4:e6:75:04:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Dec 6 08:37:21 2025 GMT Not After : Dec 9 09:13:21 2025 GMT Subject: CN=010A235812FB0D4C3B5F8E87327D5222368562B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e6:d6:08:be:1e:6a:bc:92:7d:7a:5e:26:80: e3:a4:f0:27:dd:ef:71:17:3a:71:ac:38:ca:44:5c: 15:84:ba:29:02:e5:44:06:e5:e0:72:af:20:d8:ed: 9d:41:96:f6:bc:60:a0:39:bb:b3:25:c7:a2:ed:2f: 96:f9:ba:0a:50:5a:c8:aa:ac:33:ec:82:9d:18:ec: 84:3e:36:a1:a1:87:5d:eb:ef:c9:a7:80:9d:45:e5: d3:83:9a:28:0c:1c:0a:d1:c0:29:09:68:ea:fb:a1: 33:a7:5e:a1:f0:6e:fe:13:a3:4f:a7:c9:41:14:1a: 44:92:02:66:fb:c7:3d:e2:99:65:04:07:e3:2a:88: 8f:69:8d:32:a5:91:e0:9b:48:24:71:8b:c8:38:7c: a6:57:eb:03:aa:58:07:15:b9:fe:1c:64:04:60:45: d8:c8:ab:f2:bb:ac:fb:f5:5d:16:ad:13:d1:48:8e: 10:91:99:7c:54:36:c1:7a:cd:b0:a5:2b:0e:7f:6e: 40:17:5d:bb:43:16:72:47:d2:89:5a:40:1d:58:76: 40:44:db:39:1a:6a:e4:6e:80:c9:b6:ba:b6:61:2c: b0:ed:f5:e4:8b:ce:2e:da:3e:64:b9:14:0d:a0:e9: 32:90:15:93:25:bc:b9:ee:5d:00:70:e6:7f:16:da: 33:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:23:58:12:FB:0D:4C:3B:5F:8E:87:32:7D:52:22:36:85:62:B2 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:49:50:a3:bf:59:3b:d9:bd:dd:f6:ad:d8:ad:87:31:ca:63: 0f:f9:4e:61:67:d6:f4:0a:8d:8b:ac:fe:e0:c7:3e:bb:79:09: 55:71:b3:f2:52:62:66:aa:52:52:f5:6c:e3:8b:d7:c8:d5:f0: 43:07:ea:de:c3:ec:e2:3b:1f:5d:7a:1c:86:3b:3f:e2:cf:d2: ef:25:88:ae:4b:18:fc:cf:38:af:5b:b5:a2:35:5e:82:1f:6a: 6c:37:7b:42:d3:1f:89:ff:d6:0a:3b:86:18:d6:e8:de:b1:db: eb:ee:30:34:50:3b:0f:a1:92:c1:d2:30:d5:8b:9d:6f:20:78: af:fa:64:96:ca:e5:9c:d9:41:f0:e7:51:b4:ea:1f:6b:39:55: 7a:4d:89:ab:eb:ce:e0:c3:5a:fe:79:2c:d8:d1:c2:29:2b:0a: e7:f6:f0:14:91:3a:e6:6c:cf:97:91:cc:48:44:4c:b2:24:b9: 14:a1:32:a5:7c:03:ce:72:59:bc:6e:20:b1:04:00:2f:fe:a9: e1:33:04:04:55:83:5a:15:99:44:fe:1e:2c:69:81:4d:e9:e0: 57:1c:e4:73:4d:99:3f:07:7f:00:f0:da:95:06:74:7e:0e:de: 89:e0:43:af:95:c4:77:15:26:e1:54:85:ec:2b:c1:d6:ce:b9: c0:d7:c6:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIu5TBkalC3r3SgGYRw/xOZ1BDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTEyMDYwODM3MjFaFw0yNTEyMDkwOTEzMjFaMDMxMTAvBgNV BAMTKDAxMEEyMzU4MTJGQjBENEMzQjVGOEU4NzMyN0Q1MjIyMzY4NTYyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5tYIvh5qvJJ9el4mgOOk8Cfd 73EXOnGsOMpEXBWEuikC5UQG5eByryDY7Z1Blva8YKA5u7Mlx6LtL5b5ugpQWsiq rDPsgp0Y7IQ+NqGhh13r78mngJ1F5dODmigMHArRwCkJaOr7oTOnXqHwbv4To0+n yUEUGkSSAmb7xz3imWUEB+MqiI9pjTKlkeCbSCRxi8g4fKZX6wOqWAcVuf4cZARg RdjIq/K7rPv1XRatE9FIjhCRmXxUNsF6zbClKw5/bkAXXbtDFnJH0olaQB1YdkBE 2zkaauRugMm2urZhLLDt9eSLzi7aPmS5FA2g6TKQFZMlvLnuXQBw5n8W2jONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQojWBL7DUw7X46HMn1SIjaFYrIwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRJUKO/WTvZvd32rdithzHKYw/5TmFn1vQK jYus/uDHPrt5CVVxs/JSYmaqUlL1bOOL18jV8EMH6t7D7OI7H116HIY7P+LP0u8l iK5LGPzPOK9btaI1XoIfamw3e0LTH4n/1go7hhjW6N6x2+vuMDRQOw+hksHSMNWL nW8geK/6ZJbK5ZzZQfDnUbTqH2s5VXpNiavrzuDDWv55LNjRwikrCuf28BSROuZs z5eRzEhETLIkuRShMqV8A85yWbxuILEEAC/+qeEzBARVg1oVmUT+HixpgU3p4Fcc 5HNNmT8HfwDw2pUGdH4O3ongQ6+VxHcVJuFUhewrwdbOucDXxpQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:12:28 2025 by rpki-client