This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: Wv5ozqB8h/PmhQIpaF7dFN3hQf23zm9LbBrLPdurosk= Subject key identifier: 75:EA:06:FA:C6:D2:2E:61:F6:9F:53:D8:F9:C3:3F:B8:9F:78:A0:C9 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 7670B3DE8FAD62B69A8CEE24C882A383EC30B5F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 0213 Signing time: Sat 06 Dec 2025 11:11:53 +0000 Manifest this update: Sat 06 Dec 2025 11:06:53 +0000 Manifest next update: Tue 09 Dec 2025 13:24:53 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) 2: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 3: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: wAkIy9uUawIdRe3atOjjsm0d4Qnp4sAtrLTS0qO3FM8=) 4: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:70:b3:de:8f:ad:62:b6:9a:8c:ee:24:c8:82:a3:83:ec:30:b5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Dec 6 11:06:53 2025 GMT Not After : Dec 9 13:24:53 2025 GMT Subject: CN=75EA06FAC6D22E61F69F53D8F9C33FB89F78A0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:23:5c:22:41:c9:51:de:3c:f8:08:5e:0b: 6c:55:bf:9b:0e:65:75:3b:07:d5:d5:21:12:63:a3: de:2a:cd:44:ea:07:79:a5:f3:82:30:d6:b2:f4:25: 65:6b:2d:e1:a5:cd:f5:d4:ef:24:26:01:8f:c8:12: 72:80:2a:27:1c:08:db:8b:6c:b6:f5:3c:09:74:1e: b5:b3:df:b2:1f:00:63:ec:17:74:53:1f:3c:d0:c3: 62:be:b9:6a:bb:d8:87:fc:a1:45:d9:ad:80:49:2a: 2a:b8:20:a9:42:e4:e9:e4:09:67:a4:55:f6:b6:61: 23:32:97:fe:71:6f:69:e1:3a:bd:31:d8:a9:ac:e4: e6:86:6c:04:81:5e:af:6e:20:3e:47:9d:4d:b3:25: fc:67:9f:96:b5:f2:e5:79:19:d6:94:da:0b:9e:c5: 27:4f:f1:23:ce:fd:71:0b:da:85:c7:99:a1:5d:23: dd:50:44:d2:9f:3c:de:bc:48:5a:13:2a:25:d0:6b: aa:9d:41:76:49:8a:13:58:f4:9c:dc:32:88:81:8c: 44:14:c9:6a:9c:5c:26:1d:6b:0f:96:ad:d2:60:62: 65:f1:3b:e0:f5:04:36:b7:51:e5:3c:58:7a:40:e9: fc:ac:fb:19:47:1a:a3:83:b8:fa:7a:1c:15:82:7a: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EA:06:FA:C6:D2:2E:61:F6:9F:53:D8:F9:C3:3F:B8:9F:78:A0:C9 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f8:a4:1b:9e:9a:12:96:02:64:2c:a4:d5:8b:c0:aa:2d:9a: a4:e5:55:a9:ac:e4:7b:74:5d:27:5f:a5:19:f1:bd:e3:fb:24: ca:2c:b5:2a:fc:71:7b:f4:ca:05:53:b7:df:7a:0b:17:9b:dc: eb:83:78:9b:c3:6f:ec:e4:89:7d:ea:89:5d:dd:ef:4e:07:66: f4:74:24:0a:3a:75:5a:1f:64:4b:2c:d8:f4:e1:11:e4:d7:77: 75:4c:df:71:d8:90:d3:13:ff:3b:25:0d:37:6c:8d:bc:30:fd: fd:a8:2c:1a:fb:24:cc:6d:36:ee:62:7a:92:cb:b2:15:4a:31: c8:00:8b:58:a8:e9:54:db:db:bc:0a:63:36:b2:cb:fc:19:3a: 64:37:e2:9c:20:ea:5f:30:94:55:b9:f3:8f:ae:76:86:c3:1f: 5b:29:30:16:3d:6c:fe:e6:55:d7:de:33:ba:34:af:dc:db:f0: 98:83:d2:ea:c3:6b:89:18:55:3b:1c:e3:93:16:4b:74:0f:8e: 6d:dc:8d:da:39:bc:aa:23:4e:2c:0c:1a:fc:71:d5:3b:86:b6: 07:af:be:aa:d1:9a:98:1f:60:23:41:ea:b6:ea:8a:19:0e:08: 9c:33:8d:d9:7a:ee:56:af:9e:d6:7e:e1:5a:4a:aa:2b:e4:6e: ce:3b:45:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnCz3o+tYraajO4kyIKjg+wwtfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTEyMDYxMTA2NTNaFw0yNTEyMDkxMzI0NTNaMDMxMTAvBgNV BAMTKDc1RUEwNkZBQzZEMjJFNjFGNjlGNTNEOEY5QzMzRkI4OUY3OEEwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkICNcIkHJUd48+AheC2xVv5sO ZXU7B9XVIRJjo94qzUTqB3ml84Iw1rL0JWVrLeGlzfXU7yQmAY/IEnKAKiccCNuL bLb1PAl0HrWz37IfAGPsF3RTHzzQw2K+uWq72If8oUXZrYBJKiq4IKlC5OnkCWek Vfa2YSMyl/5xb2nhOr0x2Kms5OaGbASBXq9uID5HnU2zJfxnn5a18uV5GdaU2gue xSdP8SPO/XEL2oXHmaFdI91QRNKfPN68SFoTKiXQa6qdQXZJihNY9JzcMoiBjEQU yWqcXCYdaw+WrdJgYmXxO+D1BDa3UeU8WHpA6fys+xlHGqODuPp6HBWCekTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdeoG+sbSLmH2n1PY+cM/uJ94oMkwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD34pBuemhKWAmQspNWLwKotmqTlVams5Ht0 XSdfpRnxveP7JMostSr8cXv0ygVTt996Cxeb3OuDeJvDb+zkiX3qiV3d704HZvR0 JAo6dVofZEss2PThEeTXd3VM33HYkNMT/zslDTdsjbww/f2oLBr7JMxtNu5iepLL shVKMcgAi1io6VTb27wKYzayy/wZOmQ34pwg6l8wlFW584+udobDH1spMBY9bP7m VdfeM7o0r9zb8JiD0urDa4kYVTsc45MWS3QPjm3cjdo5vKojTiwMGvxx1TuGtgev vqrRmpgfYCNB6rbqihkOCJwzjdl67lavntZ+4VpKqivkbs47RTc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:25 2025 by rpki-client