This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json) Hash identifier: GFu3rdqhE2HUTs2ivhSegM5nFwWs9FC8dA4hGYGk8CU= Subject key identifier: AD:F3:A1:16:04:61:47:37:5A:B6:F0:AE:6F:D7:0A:BA:41:AC:56:70 Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 2F210F27E4D066B49B1EAF8C06A986D951160E8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft Manifest number: 0250 Signing time: Thu 04 Dec 2025 20:31:23 +0000 Manifest this update: Thu 04 Dec 2025 20:26:23 +0000 Manifest next update: Mon 08 Dec 2025 05:46:23 +0000 Files and hashes: 1: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: la5/jZbtqqe56xlkJoZTXGudJY5MGVZ06G8ltF+D5XE=) 2: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: kHBDyPefqsguh5TCEwR1/CilgDV5vN4olgvGsk/91XM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:21:0f:27:e4:d0:66:b4:9b:1e:af:8c:06:a9:86:d9:51:16:0e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: Dec 4 20:26:23 2025 GMT Not After : Dec 8 05:46:23 2025 GMT Subject: CN=ADF3A116046147375AB6F0AE6FD70ABA41AC5670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7c:e8:d1:b8:d0:d4:b9:2e:f0:57:1a:bb:7d: 1a:a3:a5:74:a8:d2:79:9c:90:70:7d:1c:15:01:f6: 85:a4:1c:33:d0:70:4d:f4:9f:a5:4c:f5:12:b7:a9: ef:a7:00:3d:eb:e3:ad:e5:e4:8d:09:61:19:46:19: d3:ab:69:f4:64:93:da:a3:18:d9:84:1f:32:0c:a0: 36:d9:7c:2c:b1:59:fe:e8:87:70:16:bf:90:82:22: a9:76:ff:1b:5d:3e:25:b0:47:e4:7f:4c:3f:d9:61: 35:5d:8e:97:b0:4f:48:ed:76:11:00:33:54:4c:07: 6d:09:21:86:3d:39:da:71:9d:08:15:a2:de:c8:fb: 78:3a:e6:2a:91:6e:d0:0a:86:a1:59:e4:c4:f0:55: 50:30:58:f1:3b:cd:4e:f0:b1:47:4d:4f:d8:a2:bb: 93:5c:f2:5e:35:3c:e7:bc:10:98:fa:92:89:28:16: 9c:fc:bb:61:52:06:c2:d5:76:0a:bd:58:fd:2d:0a: cb:e6:53:28:e4:a7:8d:0a:ee:ee:94:bc:95:2c:55: 65:48:12:90:d0:93:ca:b5:54:b4:29:7c:c5:96:d0: d5:52:80:7e:2d:b2:0b:0d:f3:61:be:97:4f:2a:d9: 4d:2f:2f:0f:e6:17:60:38:00:8f:4a:0c:ef:10:4c: a2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F3:A1:16:04:61:47:37:5A:B6:F0:AE:6F:D7:0A:BA:41:AC:56:70 X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d0:1c:ab:20:5e:2d:d2:9f:37:e9:0b:24:a8:93:3d:5c:f0: d4:b5:d6:d1:5b:5a:82:53:54:fd:df:3a:78:26:8c:f7:94:ae: ef:af:af:3a:10:22:ed:63:c9:c7:8a:c6:46:23:11:97:a2:fe: 4d:fe:9a:a1:01:ab:50:f2:7a:32:fa:90:e7:3c:61:0d:3c:dd: 2a:fa:03:60:c1:d4:5d:3a:94:2d:02:0b:9c:5d:10:34:97:4f: a0:b8:93:59:2b:35:3c:d7:ab:bf:fe:50:4b:c2:f3:02:2d:26: c1:2c:f9:3c:d1:43:11:33:43:fc:f0:7b:72:f6:92:be:7c:7c: 8d:f1:6f:e4:25:50:79:fe:4b:a8:ea:34:e3:ed:fd:63:bc:ef: 75:94:c6:ef:ea:c1:e9:d5:08:af:f4:27:c2:69:6b:22:19:bc: 0d:d8:55:8f:08:b4:9b:d4:72:e2:e1:ff:cd:6d:fa:f2:6c:6c: d2:81:42:9c:10:f7:60:55:6d:69:a7:c0:aa:19:fd:1d:26:13: ee:4c:31:3f:a3:2d:5d:95:0e:32:ac:40:17:14:88:d7:bb:b4: cf:2f:1c:bb:7f:ae:f1:96:c0:58:33:20:65:91:77:a9:9a:38: b9:dd:7a:f5:be:4a:73:6a:8f:d9:bf:fe:01:cf:fe:80:7f:ae: 6a:cc:4f:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyEPJ+TQZrSbHq+MBqmG2VEWDoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNTEyMDQyMDI2MjNaFw0yNTEyMDgwNTQ2MjNaMDMxMTAvBgNV BAMTKEFERjNBMTE2MDQ2MTQ3Mzc1QUI2RjBBRTZGRDcwQUJBNDFBQzU2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtfOjRuNDUuS7wVxq7fRqjpXSo 0nmckHB9HBUB9oWkHDPQcE30n6VM9RK3qe+nAD3r463l5I0JYRlGGdOrafRkk9qj GNmEHzIMoDbZfCyxWf7oh3AWv5CCIql2/xtdPiWwR+R/TD/ZYTVdjpewT0jtdhEA M1RMB20JIYY9OdpxnQgVot7I+3g65iqRbtAKhqFZ5MTwVVAwWPE7zU7wsUdNT9ii u5Nc8l41POe8EJj6kokoFpz8u2FSBsLVdgq9WP0tCsvmUyjkp40K7u6UvJUsVWVI EpDQk8q1VLQpfMWW0NVSgH4tsgsN82G+l08q2U0vLw/mF2A4AI9KDO8QTKLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrfOhFgRhRzdatvCub9cKukGsVnAwHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHQHKsgXi3SnzfpCySokz1c8NS11tFbWoJT VP3fOngmjPeUru+vrzoQIu1jyceKxkYjEZei/k3+mqEBq1DyejL6kOc8YQ083Sr6 A2DB1F06lC0CC5xdEDSXT6C4k1krNTzXq7/+UEvC8wItJsEs+TzRQxEzQ/zwe3L2 kr58fI3xb+QlUHn+S6jqNOPt/WO873WUxu/qwenVCK/0J8JpayIZvA3YVY8ItJvU cuLh/81t+vJsbNKBQpwQ92BVbWmnwKoZ/R0mE+5MMT+jLV2VDjKsQBcUiNe7tM8v HLt/rvGWwFgzIGWRd6maOLndevW+SnNqj9m//gHP/oB/rmrMT+8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:04 2025 by rpki-client