This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: zV/CgUgNa8u/QQBlhv6er84WqmopkjgMGOWdY5QVS5k= Subject key identifier: 40:CB:18:20:CF:70:0E:C9:B6:FD:A2:68:65:15:9C:20:A0:99:DA:AB Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 0E361EE8855F84E2E8B80C14E121CF1666BFFF83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: A8 Signing time: Sat 06 Dec 2025 06:22:30 +0000 Manifest this update: Sat 06 Dec 2025 06:17:30 +0000 Manifest next update: Tue 09 Dec 2025 08:35:30 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: OKtTvP2S7uIubVFeaUmtiqJgvxrxSLisQ3N1CKgDyWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:36:1e:e8:85:5f:84:e2:e8:b8:0c:14:e1:21:cf:16:66:bf:ff:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Dec 6 06:17:30 2025 GMT Not After : Dec 9 08:35:30 2025 GMT Subject: CN=40CB1820CF700EC9B6FDA26865159C20A099DAAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:76:a5:fb:8d:0c:3d:35:87:42:d0:54:ed: c2:22:3a:c1:7f:0a:6c:4d:13:c8:56:9e:19:08:23: 0e:7d:99:d7:2b:96:17:f6:e1:fc:8e:e8:e8:2a:40: f6:32:e7:78:e8:42:2b:ce:47:02:81:2d:ec:fd:b0: 4e:7d:89:9c:f7:3c:8c:7b:62:7e:b8:0a:87:9b:fd: 50:1e:a3:8c:f9:2c:5c:14:be:6a:fe:56:d6:61:68: 45:c4:a7:b6:e6:ab:78:49:f9:d8:d8:5e:13:3d:d8: e3:20:08:03:1d:42:fc:f8:b2:ee:e1:a3:dd:89:90: 00:f8:03:8b:b0:8d:78:f0:04:a4:fb:ac:7c:bc:7d: 77:c5:b8:21:78:e4:18:f1:86:ef:e3:fa:3b:fe:e1: 0d:74:47:6b:b7:fe:7b:06:e4:e0:60:8c:4f:58:e2: ba:64:bd:5d:ff:6a:a1:6f:4b:a9:e6:23:93:26:2d: 93:43:ed:a4:2e:7e:24:5d:27:ce:6d:44:ed:df:1e: 6f:d2:ab:3b:66:be:2e:dd:fc:1c:a1:b6:44:20:39: 6a:29:fd:2f:cb:86:85:16:3f:f8:c3:d0:4d:85:cd: 3d:5e:5a:0d:11:fe:0b:0b:6d:53:85:42:81:ce:03: 6b:1c:47:91:71:13:9c:20:0b:77:6d:d8:d3:a6:c3: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CB:18:20:CF:70:0E:C9:B6:FD:A2:68:65:15:9C:20:A0:99:DA:AB X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:29:74:d2:a0:eb:5d:2b:46:c6:d6:29:6c:a3:44:ee:65:5f: 27:36:df:66:77:9a:24:15:8b:6c:33:f1:75:c4:5d:e3:e5:35: ab:e3:42:95:9e:04:67:b0:94:6c:17:3d:91:02:b6:c3:6a:84: 0a:d0:a0:28:81:42:1d:93:21:4f:a1:c3:14:20:7b:96:2d:ec: b7:56:62:72:29:be:95:2e:84:2e:dd:53:37:60:10:27:52:68: 51:48:8d:a8:d6:36:a3:b0:0c:25:b2:bf:de:85:f5:65:79:20: 63:9b:c7:1b:cb:89:b0:a7:5e:0b:6d:51:53:7b:6b:08:eb:38: 7c:25:94:a7:52:d6:13:86:39:bb:4d:2a:09:ab:11:d7:4d:27: a4:47:78:56:f2:df:6d:d8:c4:89:c8:03:87:37:c9:bf:ab:18: a1:92:5d:1f:ec:44:f4:5d:67:f1:54:38:c1:0d:62:78:f5:36: d7:e4:d8:ad:b7:ca:4c:2e:a1:cd:c2:38:f6:ac:3d:ab:a3:6d: 5b:48:e5:d1:3e:48:5a:cc:1e:24:99:b2:29:63:a3:86:74:b9: 73:d6:61:a6:50:2d:a7:e9:db:2f:71:a5:05:17:c6:3b:a5:16: 3d:ab:a1:b7:0f:2e:ef:a1:6f:71:dd:3d:43:38:84:e2:fc:d5: 7a:f7:44:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjYe6IVfhOLouAwU4SHPFma//4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTEyMDYwNjE3MzBaFw0yNTEyMDkwODM1MzBaMDMxMTAvBgNV BAMTKDQwQ0IxODIwQ0Y3MDBFQzlCNkZEQTI2ODY1MTU5QzIwQTA5OURBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv23al+40MPTWHQtBU7cIiOsF/ CmxNE8hWnhkIIw59mdcrlhf24fyO6OgqQPYy53joQivORwKBLez9sE59iZz3PIx7 Yn64Coeb/VAeo4z5LFwUvmr+VtZhaEXEp7bmq3hJ+djYXhM92OMgCAMdQvz4su7h o92JkAD4A4uwjXjwBKT7rHy8fXfFuCF45Bjxhu/j+jv+4Q10R2u3/nsG5OBgjE9Y 4rpkvV3/aqFvS6nmI5MmLZND7aQufiRdJ85tRO3fHm/Sqztmvi7d/ByhtkQgOWop /S/LhoUWP/jD0E2FzT1eWg0R/gsLbVOFQoHOA2scR5FxE5wgC3dt2NOmw0nXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQMsYIM9wDsm2/aJoZRWcIKCZ2qswHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUpdNKg610rRsbWKWyjRO5lXyc232Z3miQV i2wz8XXEXePlNavjQpWeBGewlGwXPZECtsNqhArQoCiBQh2TIU+hwxQge5Yt7LdW YnIpvpUuhC7dUzdgECdSaFFIjajWNqOwDCWyv96F9WV5IGObxxvLibCnXgttUVN7 awjrOHwllKdS1hOGObtNKgmrEddNJ6RHeFby323YxInIA4c3yb+rGKGSXR/sRPRd Z/FUOMENYnj1Ntfk2K23ykwuoc3COPasPaujbVtI5dE+SFrMHiSZsiljo4Z0uXPW YaZQLafp2y9xpQUXxjulFj2robcPLu+hb3HdPUM4hOL81Xr3RG8= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:14 2025 by rpki-client