This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft File: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft (raw, json) Hash identifier: uF5uH7ZJN/8U9AKFKWX6XAv+kfdxO8oWKoumRCxWoks= Subject key identifier: 32:CB:E7:A8:F3:92:13:D7:89:A4:5A:01:2D:E0:B4:25:38:E2:CA:62 Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 6CDEC0716866414CC39704C73309430F01DBC962 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft Manifest number: 0128 Signing time: Wed 17 Dec 2025 01:40:53 +0000 Manifest this update: Wed 17 Dec 2025 01:35:53 +0000 Manifest next update: Sat 20 Dec 2025 11:48:53 +0000 Files and hashes: 1: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: bBnfqhprKZxO7GNHi6JFSi7ubIWOVMTy7/ydlUAr+qE=) 2: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl (hash: KSj1MuVve4rAOU/v24RnrFF4KCe+FDPmSv0bl+QfCIA=) 3: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: lPAaUMCnmORN0lcIkL1SdTQ//TRobbXWIgBrv9ai9Yc=) 4: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: XQ5YOO3QMAmUiXXyDyAvfXAeHqliwoa7oF/Rg8qefuw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:de:c0:71:68:66:41:4c:c3:97:04:c7:33:09:43:0f:01:db:c9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Dec 17 01:35:53 2025 GMT Not After : Dec 20 11:48:53 2025 GMT Subject: CN=32CBE7A8F39213D789A45A012DE0B42538E2CA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:2d:75:de:63:45:c6:b5:66:b8:89:c0:00: 79:e4:65:e2:72:f3:6d:4f:6a:a6:31:73:83:35:8c: 94:fd:27:2f:0f:21:53:be:6c:1e:43:ce:29:87:43: 88:05:c4:8b:fa:55:76:86:52:16:c6:77:8f:e8:be: 68:8b:00:b0:47:ee:55:1c:76:73:bd:36:fe:7f:d1: e6:c0:3d:c9:db:29:af:c5:57:e2:65:2f:55:db:eb: 67:fe:75:b1:3c:b7:f4:94:f3:5b:6c:b7:7a:fc:0a: d8:7f:01:06:35:99:7c:42:0b:29:16:64:38:c3:33: 55:1c:d0:77:40:2c:e3:36:3b:e2:e7:42:4e:03:84: f8:6f:a5:59:a9:b5:b4:8a:e9:75:b5:c4:0e:8d:2a: 7c:ca:35:89:4d:b6:42:d6:de:b2:4a:ee:69:b9:15: 32:55:05:6c:d5:ad:44:15:8b:c4:86:ef:92:a9:df: 3f:34:2a:dc:41:b9:60:74:04:aa:20:b5:ee:92:9e: 88:02:32:24:3d:c0:68:09:31:ae:6c:96:04:69:35: b1:76:1b:28:d8:61:7b:3a:6d:3c:e5:72:aa:4f:fe: 13:84:78:cb:b7:18:14:5d:76:dc:b5:4a:8d:f8:4c: 92:ac:73:3e:76:1d:14:c0:ac:79:83:fe:b7:45:25: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:E7:A8:F3:92:13:D7:89:A4:5A:01:2D:E0:B4:25:38:E2:CA:62 X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:6b:de:05:97:88:2f:67:3c:4f:c1:50:ed:4c:bf:3a:28:e1: 9a:4e:9a:75:bc:12:a4:b2:d6:f7:1a:97:be:1f:57:3a:f0:af: 6f:dd:bc:f5:53:5e:c2:b9:ad:cd:5d:72:af:f3:06:a1:05:b0: ab:88:db:83:04:a6:f3:86:10:c9:87:fe:e3:2e:e6:f4:0f:7b: 42:94:22:8c:95:6d:ac:cd:65:19:30:83:52:90:5a:86:32:79: 04:11:52:91:7e:2d:b3:55:eb:c4:b7:e5:cc:1b:20:ea:fe:c9: 8a:17:db:3e:63:8d:c6:c7:e0:f6:cc:15:31:c4:70:aa:59:0d: 1f:82:b0:16:10:56:67:24:bb:18:1e:14:0c:9a:e3:d8:55:a4: ae:67:12:7f:4c:e8:fa:80:57:5f:2b:89:c8:a8:09:be:aa:d2: 1c:94:82:3a:1b:88:07:3e:23:73:da:f7:b4:67:92:c0:41:18: b7:57:48:0c:f2:5b:43:c1:1b:87:cd:df:46:69:e9:5a:8c:32: 3b:ac:3b:de:5c:73:66:66:a9:0e:ef:26:d2:e1:f5:dd:de:a6: 68:21:fc:ba:38:00:39:93:3f:a4:e2:a3:36:48:e2:e7:1f:17: 68:14:7b:bb:d7:3b:a5:5e:a8:93:87:97:42:19:8c:90:cb:7e: 69:ae:fd:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbN7AcWhmQUzDlwTHMwlDDwHbyWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNTEyMTcwMTM1NTNaFw0yNTEyMjAxMTQ4NTNaMDMxMTAvBgNV BAMTKDMyQ0JFN0E4RjM5MjEzRDc4OUE0NUEwMTJERTBCNDI1MzhFMkNBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAi113mNFxrVmuInAAHnkZeJy 821PaqYxc4M1jJT9Jy8PIVO+bB5DzimHQ4gFxIv6VXaGUhbGd4/ovmiLALBH7lUc dnO9Nv5/0ebAPcnbKa/FV+JlL1Xb62f+dbE8t/SU81tst3r8Cth/AQY1mXxCCykW ZDjDM1Uc0HdALOM2O+LnQk4DhPhvpVmptbSK6XW1xA6NKnzKNYlNtkLW3rJK7mm5 FTJVBWzVrUQVi8SG75Kp3z80KtxBuWB0BKogte6SnogCMiQ9wGgJMa5slgRpNbF2 GyjYYXs6bTzlcqpP/hOEeMu3GBRddty1So34TJKscz52HRTArHmD/rdFJeRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMsvnqPOSE9eJpFoBLeC0JTjiymIwHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMz RTFCNTMwNjMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtr3gWXiC9nPE/BUO1Mvzoo4ZpOmnW8EqSy 1vcal74fVzrwr2/dvPVTXsK5rc1dcq/zBqEFsKuI24MEpvOGEMmH/uMu5vQPe0KU IoyVbazNZRkwg1KQWoYyeQQRUpF+LbNV68S35cwbIOr+yYoX2z5jjcbH4PbMFTHE cKpZDR+CsBYQVmckuxgeFAya49hVpK5nEn9M6PqAV18ricioCb6q0hyUgjobiAc+ I3Pa97RnksBBGLdXSAzyW0PBG4fN30Zp6VqMMjusO95cc2ZmqQ7vJtLh9d3epmgh /Lo4ADmTP6TiozZI4ucfF2gUe7vXO6VeqJOHl0IZjJDLfmmu/dc= -----END CERTIFICATE-----Generated at Fri Dec 19 01:22:34 2025 by rpki-client