This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: RK07uGEwO/MtsdKjo6NuXwCr/sOSPTkA55/kMe1/Nq4= Subject key identifier: 43:DF:E8:90:72:E5:77:38:FE:8C:4B:F7:F0:07:3C:D5:90:FC:78:91 Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 059C6895B1ACE21CDD0674FE67BCCC37CB34D730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 0529 Signing time: Fri 05 Dec 2025 07:20:59 +0000 Manifest this update: Fri 05 Dec 2025 07:15:59 +0000 Manifest next update: Mon 08 Dec 2025 14:42:59 +0000 Files and hashes: 1: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: 9V43hWJhD106Qur+e/iXVkOrJHa3wYOoVgiuMpwP8PI=) 2: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: V0+izgb3kW/OtzIxZT6l6U4KDpKCH9ZjxQM8fPyZ410=) 3: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 3L/LuNQCHJ1QppGAGjYDYBbeNVsrf3Si2Cax6eMLnCM=) 4: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: Xo0u2TOKPXSYwqD931UC6AgxIj4YjModffS0kh88WfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9c:68:95:b1:ac:e2:1c:dd:06:74:fe:67:bc:cc:37:cb:34:d7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: Dec 5 07:15:59 2025 GMT Not After : Dec 8 14:42:59 2025 GMT Subject: CN=43DFE89072E57738FE8C4BF7F0073CD590FC7891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9d:b0:ee:8c:db:c1:9c:05:4e:07:35:74:b7: 3b:61:39:f0:c6:14:6d:dc:1e:53:2e:3d:d9:41:d1: 76:bc:4b:f6:f6:94:63:17:3c:f1:64:8a:35:00:6f: 98:93:55:dd:68:f8:0a:55:a2:86:ee:79:68:fa:e5: 42:6a:81:3b:1f:fc:90:d6:ed:27:d6:d6:44:6e:5a: af:32:92:1d:0f:7d:e5:c2:55:95:2e:32:c4:d6:0e: 78:d9:a9:16:42:63:b7:a0:e8:d4:b4:60:9e:55:e0: f4:80:0e:e9:0a:6f:91:b6:da:f8:fa:bd:f4:2f:2d: 61:f9:a3:d1:f8:e5:36:43:03:05:85:d8:60:d4:83: 35:53:3e:85:e1:98:c3:b4:bf:fa:3c:c0:9f:e0:fd: be:e1:24:dd:d1:97:90:e2:65:9c:ca:26:f8:c8:01: db:d6:b2:f8:06:9a:6a:11:98:f1:f3:b8:ce:7a:a7: 44:1a:80:63:f7:aa:4a:2b:31:32:88:57:44:48:d5: 03:9a:68:37:de:5d:01:c7:e0:28:40:6d:cc:89:93: c3:d2:b9:0d:52:ad:29:2a:ba:0b:01:2b:eb:dd:f1: ca:f9:d2:42:9e:86:a2:d7:56:07:af:b7:59:c6:90: a9:47:e6:22:8d:ce:95:35:e7:0c:a6:37:93:d5:a5: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DF:E8:90:72:E5:77:38:FE:8C:4B:F7:F0:07:3C:D5:90:FC:78:91 X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:66:b3:30:47:8e:14:e2:94:dc:89:95:71:c0:25:72:83:82: f0:74:ad:fa:49:8f:59:4f:83:3a:7c:58:0b:ae:f2:be:11:c5: 7a:2c:2e:36:a7:fa:0c:81:59:9c:0e:aa:71:db:12:4b:a2:6d: 73:4d:16:b5:95:2a:3c:b7:71:c5:85:cd:74:2b:59:eb:ed:73: c2:1e:6a:c4:e2:05:52:7d:9e:5e:c1:df:81:c2:2e:fb:bc:49: 13:05:44:30:11:a1:5a:e8:66:24:b8:5d:f2:50:62:03:2c:32: 1a:2f:90:0a:d0:f2:5c:ec:0d:3a:a3:2e:2b:df:8d:a2:f5:4e: 7b:57:f0:39:b5:24:8c:2a:99:61:44:ff:23:d2:18:a5:08:8b: 9c:7e:d4:0c:8f:1e:b6:6e:9e:c0:e0:b3:48:4f:d0:8a:97:02: e2:48:70:25:22:fe:c3:90:ec:d7:0a:99:1d:99:f6:dc:30:93: 8c:e8:e9:8b:77:92:4c:74:2c:ea:a8:2f:2a:7d:aa:53:c0:83: af:73:82:bb:e2:48:e8:c7:20:f8:8f:57:6f:5d:da:98:b9:6a: 9d:2e:85:e1:70:b1:d9:77:a3:98:5e:d8:cb:10:f3:a2:8c:45: 51:ba:d3:cb:5f:24:83:4f:07:a6:a0:2b:60:71:1e:1a:b8:19: 8a:63:44:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZxolbGs4hzdBnT+Z7zMN8s01zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNTEyMDUwNzE1NTlaFw0yNTEyMDgxNDQyNTlaMDMxMTAvBgNV BAMTKDQzREZFODkwNzJFNTc3MzhGRThDNEJGN0YwMDczQ0Q1OTBGQzc4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenbDujNvBnAVOBzV0tzthOfDG FG3cHlMuPdlB0Xa8S/b2lGMXPPFkijUAb5iTVd1o+ApVoobueWj65UJqgTsf/JDW 7SfW1kRuWq8ykh0PfeXCVZUuMsTWDnjZqRZCY7eg6NS0YJ5V4PSADukKb5G22vj6 vfQvLWH5o9H45TZDAwWF2GDUgzVTPoXhmMO0v/o8wJ/g/b7hJN3Rl5DiZZzKJvjI AdvWsvgGmmoRmPHzuM56p0QagGP3qkorMTKIV0RI1QOaaDfeXQHH4ChAbcyJk8PS uQ1SrSkqugsBK+vd8cr50kKehqLXVgevt1nGkKlH5iKNzpU15wymN5PVpeRjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ9/okHLldzj+jEv38Ac81ZD8eJEwHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlmszBHjhTilNyJlXHAJXKDgvB0rfpJj1lP gzp8WAuu8r4RxXosLjan+gyBWZwOqnHbEkuibXNNFrWVKjy3ccWFzXQrWevtc8Ie asTiBVJ9nl7B34HCLvu8SRMFRDARoVroZiS4XfJQYgMsMhovkArQ8lzsDTqjLivf jaL1TntX8Dm1JIwqmWFE/yPSGKUIi5x+1AyPHrZunsDgs0hP0IqXAuJIcCUi/sOQ 7NcKmR2Z9twwk4zo6Yt3kkx0LOqoLyp9qlPAg69zgrviSOjHIPiPV29d2pi5ap0u heFwsdl3o5he2MsQ86KMRVG608tfJINPB6agK2BxHhq4GYpjRLA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:08 2025 by rpki-client