This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: q3UAc9s9JHjHkXUVBx67pEmPIN340zdjyTG1JW0huMg= Subject key identifier: 67:B3:56:D5:D1:B6:9B:09:C3:6E:11:8F:B9:93:12:7A:80:0C:FF:37 Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 1F0F366723C9A1DA0236ED7D9EA3D0449E42560F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 0208 Signing time: Fri 05 Dec 2025 15:12:13 +0000 Manifest this update: Fri 05 Dec 2025 15:07:13 +0000 Manifest next update: Mon 08 Dec 2025 20:41:13 +0000 Files and hashes: 1: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: 6g4qwCn18UC2iemuBAoNIDriHalGQnR4m0+O9V6Hk2Q=) 2: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0f:36:67:23:c9:a1:da:02:36:ed:7d:9e:a3:d0:44:9e:42:56:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Dec 5 15:07:13 2025 GMT Not After : Dec 8 20:41:13 2025 GMT Subject: CN=67B356D5D1B69B09C36E118FB993127A800CFF37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:81:9b:90:f4:f0:10:f6:97:14:f8:8b:bf:0f: e9:fc:6b:00:3c:12:a1:eb:b8:4c:f5:ca:61:e0:f8: 5d:d1:ac:8f:6e:70:e0:5f:8d:9b:01:a4:e7:41:f1: 8b:1a:ef:2c:11:a2:56:20:94:99:f0:87:5d:27:46: 4f:1a:c4:46:ab:0c:74:8c:02:1d:c7:d6:22:8c:c5: 77:79:6a:48:e4:b6:63:c5:bb:20:ea:62:87:14:fa: 36:6e:7b:67:3a:1d:8e:43:89:3f:43:18:44:6e:d1: 44:c5:41:c2:df:54:e6:7d:fe:fe:34:98:57:65:b6: e6:5e:4c:cb:c7:70:f7:62:e4:9d:22:fd:7d:b2:9c: 7b:84:7a:7b:13:7b:93:c2:36:b9:32:5f:9e:89:e2: 21:69:e9:b4:5f:ea:21:20:84:e8:25:84:84:d2:97: c1:ac:81:04:48:33:98:31:1c:a8:c4:f0:5e:d8:fe: a5:92:bd:28:4c:21:71:6a:69:80:f3:b7:d3:ef:f2: 60:00:02:e6:de:9b:e5:e4:21:4f:d9:3c:cb:b9:d0: b3:bb:b8:62:60:f9:63:8b:fb:4b:ee:06:21:12:49: f3:d7:8e:22:23:51:a3:89:26:25:df:79:e4:61:1a: 4f:93:28:c0:bc:c2:72:86:71:85:73:2a:f1:9c:99: 78:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:56:D5:D1:B6:9B:09:C3:6E:11:8F:B9:93:12:7A:80:0C:FF:37 X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:48:e4:7e:23:79:ec:0e:c0:97:2c:1e:01:66:67:16:c7:13: e7:23:e8:f6:ae:2e:3d:fb:c0:53:2f:ae:df:18:92:af:12:ed: e2:05:c4:a8:00:d1:cb:ee:53:50:2a:e3:77:2d:e2:ee:9a:2b: df:0e:1a:be:c9:c3:05:75:a7:54:25:7f:31:b3:4f:bd:76:35: b6:4e:0b:e2:4d:64:56:0a:fc:57:fe:05:92:52:cf:0f:5b:08: a6:54:19:51:11:36:12:64:5b:c3:fc:5b:3d:22:e9:08:52:bc: 87:83:3e:98:e9:33:7d:af:af:2c:e3:fb:2e:a9:26:5b:3a:dd: c3:23:9f:c8:f7:2b:5d:24:ae:60:4f:59:f1:a6:ab:16:c5:39: fb:a4:79:12:3d:f6:5d:5f:08:0c:f9:15:be:52:1d:61:52:f1: 77:00:ae:19:15:20:4a:d7:cd:c0:0c:4f:da:22:02:4f:e3:2a: 71:be:19:fc:11:10:7a:35:33:dd:8c:42:d4:a9:55:f4:73:22: ca:72:23:ef:52:3e:69:d9:f9:03:09:7c:e5:df:e7:81:f7:51: e2:ce:3b:ea:5a:5d:61:16:83:7a:a8:e9:15:af:ff:15:b4:d8: 52:b7:35:bb:8c:5c:07:ac:07:9b:90:24:71:e1:38:85:1d:df: 08:f6:1a:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHw82ZyPJodoCNu19nqPQRJ5CVg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNTEyMDUxNTA3MTNaFw0yNTEyMDgyMDQxMTNaMDMxMTAvBgNV BAMTKDY3QjM1NkQ1RDFCNjlCMDlDMzZFMTE4RkI5OTMxMjdBODAwQ0ZGMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDagZuQ9PAQ9pcU+Iu/D+n8awA8 EqHruEz1ymHg+F3RrI9ucOBfjZsBpOdB8Ysa7ywRolYglJnwh10nRk8axEarDHSM Ah3H1iKMxXd5akjktmPFuyDqYocU+jZue2c6HY5DiT9DGERu0UTFQcLfVOZ9/v40 mFdltuZeTMvHcPdi5J0i/X2ynHuEensTe5PCNrkyX56J4iFp6bRf6iEghOglhITS l8GsgQRIM5gxHKjE8F7Y/qWSvShMIXFqaYDzt9Pv8mAAAubem+XkIU/ZPMu50LO7 uGJg+WOL+0vuBiESSfPXjiIjUaOJJiXfeeRhGk+TKMC8wnKGcYVzKvGcmXhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ7NW1dG2mwnDbhGPuZMSeoAM/zcwHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhI5H4jeewOwJcsHgFmZxbHE+cj6PauLj37 wFMvrt8Ykq8S7eIFxKgA0cvuU1Aq43ct4u6aK98OGr7JwwV1p1QlfzGzT712NbZO C+JNZFYK/Ff+BZJSzw9bCKZUGVERNhJkW8P8Wz0i6QhSvIeDPpjpM32vryzj+y6p Jls63cMjn8j3K10krmBPWfGmqxbFOfukeRI99l1fCAz5Fb5SHWFS8XcArhkVIErX zcAMT9oiAk/jKnG+GfwREHo1M92MQtSpVfRzIspyI+9SPmnZ+QMJfOXf54H3UeLO O+paXWEWg3qo6RWv/xW02FK3NbuMXAesB5uQJHHhOIUd3wj2GkM= -----END CERTIFICATE-----Generated at Sun Dec 7 02:04:16 2025 by rpki-client