This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: 2XRmoYLrEwEc1wB2DR+kraF8soqogsAadgFnM48j+Jk= Subject key identifier: 6B:8D:AB:ED:68:82:EA:6B:5C:82:F3:CB:7C:24:C3:BC:CE:80:8F:3E Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 70C1DCB4DDEF71D8ECAF0E07DDDF70999C3C325E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 020C Signing time: Sat 06 Dec 2025 12:42:22 +0000 Manifest this update: Sat 06 Dec 2025 12:37:22 +0000 Manifest next update: Tue 09 Dec 2025 18:47:22 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: d7qRdadUYrTUybNMl727FGtvUIBe1wdyXqB1qbYXg+A=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c1:dc:b4:dd:ef:71:d8:ec:af:0e:07:dd:df:70:99:9c:3c:32:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Dec 6 12:37:22 2025 GMT Not After : Dec 9 18:47:22 2025 GMT Subject: CN=6B8DABED6882EA6B5C82F3CB7C24C3BCCE808F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:3f:bd:de:33:7f:73:ec:37:d0:25:b9:37: ca:5d:39:c6:23:c8:df:13:4c:31:b8:de:66:f4:89: bc:67:3e:14:47:9f:29:b6:59:60:e0:bd:42:e8:f5: f6:2d:50:cd:ff:3b:5e:84:65:cd:56:51:f8:d0:3b: 4b:89:4f:da:50:9f:b5:5c:f0:bc:8f:02:e7:75:4a: 27:81:7b:52:06:c5:cc:fa:a0:49:38:ef:d8:c7:65: 16:d8:87:9e:f4:36:05:9c:a7:45:33:20:67:46:3a: 4a:02:29:8b:c5:d7:e2:28:ee:99:51:ea:b7:89:6d: 78:77:a1:97:06:65:46:16:f1:26:d5:20:7a:03:4f: f3:80:99:46:54:fb:d8:fb:66:b3:35:89:1e:12:25: 56:b0:7f:4d:2e:c2:7c:c9:49:5e:c4:f3:eb:d9:be: 69:46:d6:66:ad:7f:0f:c2:8e:d7:7b:c6:a3:67:d5: 05:cc:66:62:ff:41:b1:b4:41:9f:15:22:46:ca:c1: e5:87:a1:ed:6a:4e:33:20:94:49:81:09:42:33:9c: 74:30:0c:94:fc:06:7b:26:44:42:15:50:fc:90:ea: 98:95:5b:13:d2:20:df:f1:67:f2:7f:ea:27:08:3e: 2d:c3:0e:cb:e9:8c:da:f5:f5:6b:e7:23:05:9d:57: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8D:AB:ED:68:82:EA:6B:5C:82:F3:CB:7C:24:C3:BC:CE:80:8F:3E X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a5:40:ed:f0:bc:42:b9:e9:68:7b:a4:bc:e7:4a:09:46:f2: 29:85:e0:74:dc:bd:26:53:a3:48:93:0f:9e:72:0d:fc:d0:d4: 17:c2:93:7d:f5:de:9e:ac:60:b8:a4:4d:d6:3a:8e:76:70:0e: 97:0f:7c:e8:ce:ea:7d:58:95:47:3c:20:09:ff:5c:b9:39:2e: 84:e8:5a:a9:3e:fc:49:a2:0e:84:63:1c:07:7a:9e:88:10:f9: f9:32:57:9e:c8:5d:1a:4d:9c:24:6b:7b:49:32:f6:96:c5:bd: fd:5f:49:cb:b9:17:3e:2d:81:a7:a0:39:4f:00:b6:63:77:5c: 5c:a6:a5:12:27:b6:24:52:97:ec:7d:5a:33:cd:ce:74:fa:72: 2f:de:59:f4:d7:b2:99:b9:86:51:da:19:7d:a5:69:94:b9:87: 75:17:23:a0:32:9d:e2:67:d0:e9:89:bd:c9:86:bd:c8:4f:c8: 1c:ca:fb:f9:56:bf:ca:7e:8c:79:63:5d:93:08:a8:4a:a4:c0: 0f:df:23:a1:86:ff:96:5c:3b:c0:48:77:b2:6a:15:bd:4e:b6: ee:5d:e4:6a:51:38:e9:0a:52:4b:b6:c9:a5:9f:8c:7a:ed:60: 2a:e9:db:d9:2d:ec:08:c7:84:42:42:32:41:44:9f:55:08:ad: ba:43:7b:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMHctN3vcdjsrw4H3d9wmZw8Ml4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTEyMDYxMjM3MjJaFw0yNTEyMDkxODQ3MjJaMDMxMTAvBgNV BAMTKDZCOERBQkVENjg4MkVBNkI1QzgyRjNDQjdDMjRDM0JDQ0U4MDhGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lD+93jN/c+w30CW5N8pdOcYj yN8TTDG43mb0ibxnPhRHnym2WWDgvULo9fYtUM3/O16EZc1WUfjQO0uJT9pQn7Vc 8LyPAud1SieBe1IGxcz6oEk479jHZRbYh570NgWcp0UzIGdGOkoCKYvF1+Io7plR 6reJbXh3oZcGZUYW8SbVIHoDT/OAmUZU+9j7ZrM1iR4SJVawf00uwnzJSV7E8+vZ vmlG1matfw/Cjtd7xqNn1QXMZmL/QbG0QZ8VIkbKweWHoe1qTjMglEmBCUIznHQw DJT8BnsmREIVUPyQ6piVWxPSIN/xZ/J/6icIPi3DDsvpjNr19WvnIwWdVwkpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa42r7WiC6mtcgvPLfCTDvM6Ajz4wHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWlQO3wvEK56Wh7pLznSglG8imF4HTcvSZT o0iTD55yDfzQ1BfCk3313p6sYLikTdY6jnZwDpcPfOjO6n1YlUc8IAn/XLk5LoTo Wqk+/EmiDoRjHAd6nogQ+fkyV57IXRpNnCRre0ky9pbFvf1fScu5Fz4tgaegOU8A tmN3XFympRIntiRSl+x9WjPNznT6ci/eWfTXspm5hlHaGX2laZS5h3UXI6AyneJn 0OmJvcmGvchPyBzK+/lWv8p+jHljXZMIqEqkwA/fI6GG/5ZcO8BId7JqFb1Otu5d 5GpROOkKUku2yaWfjHrtYCrp29kt7AjHhEJCMkFEn1UIrbpDe+c= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:57 2025 by rpki-client