This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: SeBzp7vRJ/vOSIKCzzMSInqms8JhsUvjSePIB8tYKFg= Subject key identifier: EF:FA:8D:74:B2:14:AE:C4:37:43:43:B1:39:1C:1D:B9:69:2C:1C:4C Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 15C6D8108345B9173D19171C0CA1A477D85C615F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: 011C Signing time: Fri 05 Dec 2025 08:10:43 +0000 Manifest this update: Fri 05 Dec 2025 08:05:43 +0000 Manifest next update: Mon 08 Dec 2025 18:21:43 +0000 Files and hashes: 1: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) 2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) 3: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) 4: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: EfaYalYkscmQ1ztO0CV60PSAD2g+cHZwu8C+dOG+2/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c6:d8:10:83:45:b9:17:3d:19:17:1c:0c:a1:a4:77:d8:5c:61:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Dec 5 08:05:43 2025 GMT Not After : Dec 8 18:21:43 2025 GMT Subject: CN=EFFA8D74B214AEC4374343B1391C1DB9692C1C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:c5:dd:75:8c:5d:be:b5:52:a3:f5:45:8c: af:cf:4f:34:8a:4a:05:10:87:d9:0a:82:64:b6:00: 73:72:4e:ca:9b:7c:ea:db:fe:b2:06:07:ab:10:d3: 15:6a:b6:fc:2f:52:78:50:b8:d5:28:00:c1:ea:b1: 29:4a:e9:7f:9d:89:fb:b7:10:cf:61:54:10:2b:19: 21:23:2f:63:f2:b2:3b:07:e3:1e:6b:a5:55:01:c3: cd:76:35:b3:a9:b2:11:5d:1a:39:33:d2:45:b5:00: 8a:21:bf:ec:62:c6:ab:50:96:92:b7:e1:ee:fb:1c: aa:94:cc:4a:ee:19:1b:46:32:29:90:9a:6a:55:8a: eb:19:f8:73:73:f3:9a:93:5d:bd:07:14:06:92:2a: e4:2c:90:ee:10:43:c8:75:0e:c5:df:ba:e8:34:c9: 62:b8:bf:6e:5e:92:f1:96:9b:d3:45:d0:e2:b9:33: b8:19:39:25:31:40:15:54:4f:1c:0a:bd:57:1a:63: 42:d0:32:0e:17:3e:20:29:29:7c:e7:86:5f:74:b2: e5:34:c6:73:fc:d3:12:17:ca:75:7e:3e:c8:3d:b8: 6f:fb:79:37:b0:20:1b:8b:f0:89:29:1d:db:02:63: f3:32:dd:f2:1c:11:27:92:3d:e6:5a:22:7a:d2:20: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FA:8D:74:B2:14:AE:C4:37:43:43:B1:39:1C:1D:B9:69:2C:1C:4C X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3b:d7:0c:cd:07:c3:48:8b:4e:1c:a8:5f:df:24:8c:1e:63: ac:33:8f:ad:ab:1a:28:08:7b:2a:92:10:06:dd:58:86:77:37: 15:3b:f6:da:3a:ea:6f:88:00:8d:1c:ef:59:1d:2a:7a:c8:a8: 76:40:1a:8a:31:0a:6c:33:fa:b5:3b:87:7b:09:6d:43:54:11: 99:92:bb:13:a9:fc:15:24:c6:88:83:63:ba:04:de:08:b7:0a: 37:de:c1:4b:5c:45:91:cf:aa:01:48:e7:1f:f4:48:13:a1:4c: 9a:98:14:8d:47:61:7a:9c:bb:df:bb:46:de:e6:08:8d:f7:4f: 4c:c7:b5:4d:8b:d1:5f:7b:b7:0d:2f:70:02:ea:70:7b:30:5e: 4a:60:c3:37:2c:f9:47:1f:bf:14:b8:05:32:6c:34:19:ae:8e: 36:09:a4:2e:74:db:8b:76:02:f7:88:96:7a:07:32:b2:8b:d8: 75:9e:67:d4:d0:51:d2:26:c1:df:b4:65:f2:d1:89:03:16:f4: f6:e0:51:7c:cc:4b:da:da:20:47:dd:c9:a8:a2:de:16:d9:46: 0c:d4:df:7c:07:30:d8:d5:e5:c2:2a:2a:a4:55:5a:88:07:98: 3c:a5:d6:d5:03:a9:b2:67:3c:d7:a9:1f:d0:27:42:3f:15:bc: c3:58:04:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcbYEINFuRc9GRccDKGkd9hcYV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTEyMDUwODA1NDNaFw0yNTEyMDgxODIxNDNaMDMxMTAvBgNV BAMTKEVGRkE4RDc0QjIxNEFFQzQzNzQzNDNCMTM5MUMxREI5NjkyQzFDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDeMXddYxdvrVSo/VFjK/PTzSK SgUQh9kKgmS2AHNyTsqbfOrb/rIGB6sQ0xVqtvwvUnhQuNUoAMHqsSlK6X+difu3 EM9hVBArGSEjL2PysjsH4x5rpVUBw812NbOpshFdGjkz0kW1AIohv+xixqtQlpK3 4e77HKqUzEruGRtGMimQmmpViusZ+HNz85qTXb0HFAaSKuQskO4QQ8h1DsXfuug0 yWK4v25ekvGWm9NF0OK5M7gZOSUxQBVUTxwKvVcaY0LQMg4XPiApKXznhl90suU0 xnP80xIXynV+Psg9uG/7eTewIBuL8IkpHdsCY/My3fIcESeSPeZaInrSIIXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7/qNdLIUrsQ3Q0OxORwduWksHEwwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU71wzNB8NIi04cqF/fJIweY6wzj62rGigI eyqSEAbdWIZ3NxU79to66m+IAI0c71kdKnrIqHZAGooxCmwz+rU7h3sJbUNUEZmS uxOp/BUkxoiDY7oE3gi3CjfewUtcRZHPqgFI5x/0SBOhTJqYFI1HYXqcu9+7Rt7m CI33T0zHtU2L0V97tw0vcALqcHswXkpgwzcs+UcfvxS4BTJsNBmujjYJpC5024t2 AveIlnoHMrKL2HWeZ9TQUdImwd+0ZfLRiQMW9PbgUXzMS9raIEfdyaii3hbZRgzU 33wHMNjV5cIqKqRVWogHmDyl1tUDqbJnPNepH9AnQj8VvMNYBNs= -----END CERTIFICATE-----Generated at Sun Dec 7 02:32:06 2025 by rpki-client