This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: pJEun5NEKJZZ7OhduCB9x01UOFVRWAGkaETHvFCDTic= Subject key identifier: C2:44:A6:58:0B:B3:FB:52:46:E6:BA:79:D4:00:E8:8D:E3:65:48:09 Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 3B44D48BD3DA32E8F2EB064B801EB56BF70B28A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 01D1 Signing time: Fri 05 Dec 2025 03:01:51 +0000 Manifest this update: Fri 05 Dec 2025 02:56:51 +0000 Manifest next update: Mon 08 Dec 2025 09:33:51 +0000 Files and hashes: 1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: QJsx8t/jy2szp1HmLXfAbg7UbUXdGC8z/gTpNC266lo=) 2: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: g7r/RVB4oSYAg9bJf585oALndM8Pi1RvbkwVKzFMHo8=) 3: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: ZHcNwWXcsGGWRFPj6T6E7qQb99eVfl1++vT+I1xBmu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:44:d4:8b:d3:da:32:e8:f2:eb:06:4b:80:1e:b5:6b:f7:0b:28:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Dec 5 02:56:51 2025 GMT Not After : Dec 8 09:33:51 2025 GMT Subject: CN=C244A6580BB3FB5246E6BA79D400E88DE3654809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:dc:e4:16:54:93:71:ec:dd:4e:08:eb:9c: f9:b6:02:3e:c8:86:70:d5:12:00:e0:a2:50:72:68: a1:0c:6b:b9:2a:f2:0f:d1:ec:47:61:0e:3d:ba:a8: f0:00:c6:0f:b6:91:8b:de:d1:13:6a:25:2e:e5:bf: ff:cd:be:99:79:55:84:18:34:58:84:5a:f2:db:52: ea:12:7d:b2:9e:9e:a3:41:b7:35:cc:c4:05:08:94: 02:1e:73:a1:5f:aa:16:a9:e4:6e:45:d2:fe:d7:54: 21:83:5d:4e:39:54:43:8a:8a:c6:9a:44:0f:d4:fc: 43:1a:10:40:5a:07:de:59:2e:47:34:1d:7b:3f:f4: af:c8:0e:8b:a6:21:4c:38:86:99:01:e8:40:1d:f0: 43:e7:cc:cd:2c:44:ff:35:7f:4f:79:8d:e3:e1:1c: 9c:10:11:d9:bd:ba:fb:66:c3:b8:b0:bc:32:f8:69: a2:79:59:20:3d:62:8e:d3:92:fb:60:0e:54:ab:00: ed:2c:2c:c5:2e:db:4d:19:e5:ef:5d:c9:b2:34:b3: 97:1c:ee:7d:f4:75:7d:b4:7d:0c:f9:f7:cc:e3:46: 2a:b2:14:12:9c:a2:e1:20:99:13:d7:c2:f5:ba:58: 7c:c7:e8:e6:03:e9:ab:2e:e8:5f:3c:f0:64:5b:ab: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:44:A6:58:0B:B3:FB:52:46:E6:BA:79:D4:00:E8:8D:E3:65:48:09 X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ad:f1:a0:91:f3:f1:01:76:65:92:91:56:9d:65:03:1d:96: 0c:f3:2f:0d:15:c2:7a:51:80:34:77:1e:26:26:d1:7d:cd:69: 30:62:16:36:83:7a:92:79:5c:97:40:70:34:2d:e1:f8:96:d7: d9:ac:c7:93:ec:88:c3:66:4c:b0:0f:b1:d5:31:3d:65:dd:69: 2c:9c:0d:98:cc:1f:00:b8:70:27:52:37:b0:c7:76:77:c9:9f: 6d:c6:8c:79:41:93:ec:cd:5e:fb:16:31:f3:77:f9:bc:df:63: 47:37:28:6d:19:30:ee:73:b5:91:8a:39:de:70:f9:8d:62:8c: 1c:83:b6:a8:b0:ad:33:c6:d3:d1:06:e5:a9:ae:9d:8a:52:12: 93:5f:55:17:46:e9:ac:57:ff:0b:21:ec:08:47:31:82:b9:9a: d3:7e:35:1a:24:d5:47:90:99:d9:ed:a4:2f:58:f9:b9:40:c6: ff:4e:e5:d0:1e:28:c5:ce:2c:43:c4:d6:a8:e4:16:79:9a:5d: 7b:10:a2:f6:2e:76:11:b2:e1:a7:20:f3:69:2c:92:5c:ae:ad: f0:d9:e5:6c:22:9e:09:d7:42:d6:ff:2f:ef:57:78:9f:95:9d: 74:b4:43:9e:fd:e5:34:66:b4:b8:c1:9b:cf:6a:c0:85:96:ac: 4f:46:b7:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0TUi9PaMujy6wZLgB61a/cLKKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNTEyMDUwMjU2NTFaFw0yNTEyMDgwOTMzNTFaMDMxMTAvBgNV BAMTKEMyNDRBNjU4MEJCM0ZCNTI0NkU2QkE3OUQ0MDBFODhERTM2NTQ4MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJtzkFlSTcezdTgjrnPm2Aj7I hnDVEgDgolByaKEMa7kq8g/R7EdhDj26qPAAxg+2kYve0RNqJS7lv//Nvpl5VYQY NFiEWvLbUuoSfbKenqNBtzXMxAUIlAIec6Ffqhap5G5F0v7XVCGDXU45VEOKisaa RA/U/EMaEEBaB95ZLkc0HXs/9K/IDoumIUw4hpkB6EAd8EPnzM0sRP81f095jePh HJwQEdm9uvtmw7iwvDL4aaJ5WSA9Yo7TkvtgDlSrAO0sLMUu200Z5e9dybI0s5cc 7n30dX20fQz598zjRiqyFBKcouEgmRPXwvW6WHzH6OYD6asu6F888GRbq7SjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwkSmWAuz+1JG5rp51ADojeNlSAkwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWt8aCR8/EBdmWSkVadZQMdlgzzLw0VwnpR gDR3HiYm0X3NaTBiFjaDepJ5XJdAcDQt4fiW19msx5PsiMNmTLAPsdUxPWXdaSyc DZjMHwC4cCdSN7DHdnfJn23GjHlBk+zNXvsWMfN3+bzfY0c3KG0ZMO5ztZGKOd5w +Y1ijByDtqiwrTPG09EG5amunYpSEpNfVRdG6axX/wsh7AhHMYK5mtN+NRok1UeQ mdntpC9Y+blAxv9O5dAeKMXOLEPE1qjkFnmaXXsQovYudhGy4acg82ksklyurfDZ 5WwingnXQtb/L+9XeJ+VnXS0Q5795TRmtLjBm89qwIWWrE9Gty0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:00:31 2025 by rpki-client