This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft File: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft (raw, json) Hash identifier: PjCyRtK11AcK9E1s0GlpHa/kjs8RYWTBQ2zGxyCA5qU= Subject key identifier: E3:B2:CE:34:1A:1B:B7:63:8A:8C:36:6D:6B:9C:0A:F6:40:47:87:A4 Authority key identifier: C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 Certificate issuer: /CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Certificate serial: 30D7B1DA2B422B8255DB0AC53CF4007A9B95CAF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft Manifest number: 45 Signing time: Fri 05 Dec 2025 11:52:09 +0000 Manifest this update: Fri 05 Dec 2025 11:47:09 +0000 Manifest next update: Mon 08 Dec 2025 16:21:09 +0000 Files and hashes: 1: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl (hash: eC9TOnLNzGyYhchmNPA7V1hFT5vcJaUAc59P4dpsen0=) 2: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: gE+l6BtwnE696koy6eWA+mSXnnRQKbYtsxfkWucx8c8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d7:b1:da:2b:42:2b:82:55:db:0a:c5:3c:f4:00:7a:9b:95:ca:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Validity Not Before: Dec 5 11:47:09 2025 GMT Not After : Dec 8 16:21:09 2025 GMT Subject: CN=E3B2CE341A1BB7638A8C366D6B9C0AF6404787A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:aa:64:47:5b:f3:c0:e6:64:f9:29:2e:e7: 19:e6:4c:b4:c3:0d:c7:a7:3f:8c:32:89:51:9f:1b: 43:04:2d:9a:b5:2b:b6:8c:86:31:90:c6:33:59:a8: 2e:30:bc:ce:8c:ae:4a:e6:bd:14:d1:cb:92:8b:cc: f1:f1:09:86:3c:3b:39:19:53:94:14:17:13:d2:3f: ee:44:9b:47:42:6f:ed:bb:d5:10:c6:3e:a1:d3:f4: 17:39:a7:b3:49:90:94:6b:4a:27:10:95:72:57:02: 87:94:5a:3a:d2:c4:70:e3:e1:1e:e4:c0:16:0d:ce: 5a:a3:ac:94:44:d8:8b:96:47:63:04:8a:49:6b:89: 3e:ea:1e:4c:c2:0d:d1:2f:e8:e4:f2:de:47:e5:34: 42:92:eb:46:43:f5:f9:b6:1c:88:eb:18:3e:80:b7: c3:f4:7a:a5:2d:75:8d:0e:c4:25:84:ea:be:13:56: 8c:6d:f3:3f:7b:0d:55:e3:0c:a7:cd:c3:07:03:cc: 18:12:2b:16:ad:66:27:e2:93:13:7f:89:9a:bc:a2: 00:9b:1c:d1:1c:1c:6a:20:2d:5d:af:3f:7b:cd:bc: ba:bc:5b:87:91:59:5b:8b:69:c2:b2:1c:64:e2:18: 8c:a9:09:10:ad:77:bb:17:37:a6:22:61:62:8c:6d: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B2:CE:34:1A:1B:B7:63:8A:8C:36:6D:6B:9C:0A:F6:40:47:87:A4 X509v3 Authority Key Identifier: keyid:C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:3e:8c:de:04:af:77:39:86:c3:80:cd:dd:20:2c:ab:b6:dd: 27:5b:d0:93:94:68:e8:f1:ca:37:4c:9e:1f:8d:41:89:84:f9: 0b:4a:43:5f:74:5a:dd:66:0a:75:52:61:dd:04:56:a0:18:7a: 9d:a4:9f:fa:53:57:8e:d5:23:18:12:2c:04:25:31:81:a4:4f: ae:88:f4:0c:23:ac:f2:ba:30:f2:6d:66:da:63:df:ee:30:f9: 3e:04:5b:59:8c:a2:72:ae:cb:26:6f:b1:c4:71:95:86:c1:01: 4f:0b:b1:07:ac:1d:b4:32:3e:ee:ee:e1:70:e0:38:cf:62:92: 2f:db:8f:22:fc:7a:52:62:56:b1:51:f9:94:95:bb:bb:8f:2a: ed:da:d2:f8:d5:22:65:5c:2a:e1:d2:ff:35:34:5c:b8:86:0b: 5e:c1:45:70:c2:a5:41:7c:ed:3c:2c:9b:6b:a8:08:b1:8b:ca: ff:96:40:d8:3f:c7:18:8f:44:41:51:fb:b7:0f:ce:4a:78:8f: f1:4b:26:65:ae:73:bc:21:c4:99:28:8a:17:54:95:26:75:f5: a4:a5:80:14:d1:ed:e7:57:36:a0:95:00:70:96:d5:45:3e:f6: b1:1b:7c:85:69:7d:14:0b:07:16:d3:36:d9:cc:8d:0b:1d:1b: 15:be:d9:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNex2itCK4JV2wrFPPQAepuVyvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3 NUU0RjU4NTAeFw0yNTEyMDUxMTQ3MDlaFw0yNTEyMDgxNjIxMDlaMDMxMTAvBgNV BAMTKEUzQjJDRTM0MUExQkI3NjM4QThDMzY2RDZCOUMwQUY2NDA0Nzg3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3aqpkR1vzwOZk+Sku5xnmTLTD DcenP4wyiVGfG0MELZq1K7aMhjGQxjNZqC4wvM6MrkrmvRTRy5KLzPHxCYY8OzkZ U5QUFxPSP+5Em0dCb+271RDGPqHT9Bc5p7NJkJRrSicQlXJXAoeUWjrSxHDj4R7k wBYNzlqjrJRE2IuWR2MEiklriT7qHkzCDdEv6OTy3kflNEKS60ZD9fm2HIjrGD6A t8P0eqUtdY0OxCWE6r4TVoxt8z97DVXjDKfNwwcDzBgSKxatZifikxN/iZq8ogCb HNEcHGogLV2vP3vNvLq8W4eRWVuLacKyHGTiGIypCRCtd7sXN6YiYWKMbVGfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU47LONBobt2OKjDZta5wK9kBHh6QwHwYDVR0j BBgwFoAUwffMDI1eMVWWrxD27PRvLHXk9YUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjYyNDdmOS0xZWVjLTQ5MDEtYmE0Mi05ZGYyNjQyNGY1YjgvMC9DMUY3Q0MwQzhE NUUzMTU1OTZBRjEwRjZFQ0Y0NkYyQzc1RTRGNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3NUU0 RjU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY2MjQ3ZjktMWVlYy00OTAxLWJh NDItOWRmMjY0MjRmNWI4LzAvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZG MkM3NUU0RjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOw+jN4Er3c5hsOAzd0gLKu23Sdb0JOUaOjx yjdMnh+NQYmE+QtKQ190Wt1mCnVSYd0EVqAYep2kn/pTV47VIxgSLAQlMYGkT66I 9AwjrPK6MPJtZtpj3+4w+T4EW1mMonKuyyZvscRxlYbBAU8LsQesHbQyPu7u4XDg OM9iki/bjyL8elJiVrFR+ZSVu7uPKu3a0vjVImVcKuHS/zU0XLiGC17BRXDCpUF8 7Twsm2uoCLGLyv+WQNg/xxiPREFR+7cPzkp4j/FLJmWuc7whxJkoihdUlSZ19aSl gBTR7edXNqCVAHCW1UU+9rEbfIVpfRQLBxbTNtnMjQsdGxW+2ZM= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:38 2025 by rpki-client