This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: pcJKi8X4gVDRAveFsLFpVUwio0uNJcpkXaDRJK1uNQw= Subject key identifier: 2F:8B:7E:4E:61:9D:C0:DE:BE:27:36:8A:95:15:E4:5D:A5:10:BF:E1 Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 526BB16ABEDAFC38983D1115DE23067957BCCDAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 01E0 Signing time: Fri 05 Dec 2025 15:21:46 +0000 Manifest this update: Fri 05 Dec 2025 15:16:46 +0000 Manifest next update: Mon 08 Dec 2025 21:26:46 +0000 Files and hashes: 1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: U/Z+dJlRU0oBRzWdznwOvdVw0TOtdmlCUExq/aO5sJs=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: 6g8PbhkbZbLbnKoZLBgTfyMpeWvcwwbeUmAnxaDznuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6b:b1:6a:be:da:fc:38:98:3d:11:15:de:23:06:79:57:bc:cd:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Dec 5 15:16:46 2025 GMT Not After : Dec 8 21:26:46 2025 GMT Subject: CN=2F8B7E4E619DC0DEBE27368A9515E45DA510BFE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:0b:f5:11:36:f1:d3:88:a4:59:af:25:33: ac:e4:3f:57:f6:80:d1:06:ca:51:ee:13:f0:05:a9: 64:f9:2e:60:f7:44:df:c3:9d:16:8e:d0:43:86:95: 01:78:41:45:1f:b1:13:68:2a:0c:4f:b5:5e:07:fc: 9e:b7:e0:d6:16:53:6e:bc:dd:84:12:7c:0c:37:51: 58:6e:00:23:5a:f1:75:b4:c1:c5:d6:d4:ca:4b:8a: 53:b8:32:a2:06:ff:a9:4f:21:41:b9:7c:30:39:9a: de:18:c9:e6:36:99:aa:ce:12:ad:c5:d8:7a:d4:cc: 6f:bd:f6:2b:6e:af:67:7e:87:72:e9:d3:5b:b8:84: 74:2e:b9:4c:3e:f9:12:14:b7:f2:6d:91:40:32:04: 77:c6:f5:92:94:a1:85:77:a1:fc:d7:23:eb:9e:48: 58:07:46:eb:b7:4f:50:43:d7:b1:27:ac:47:5b:61: e7:01:5d:dd:4d:73:f8:10:fb:bc:51:80:7a:48:66: 83:05:2b:65:cb:78:5b:f5:cb:33:d5:fb:a3:48:de: eb:db:52:e5:76:19:db:a3:e6:08:90:5c:73:15:90: 4d:0f:12:9e:6d:62:b8:08:ae:d1:92:7b:30:26:35: b1:8e:2d:ac:43:7d:a3:0a:74:24:57:58:49:ca:c3: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8B:7E:4E:61:9D:C0:DE:BE:27:36:8A:95:15:E4:5D:A5:10:BF:E1 X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4a:ae:0f:05:13:68:f6:df:0b:1a:f1:a5:4e:6f:40:ba:f1: 56:c2:cf:ce:fe:7e:69:ef:91:a5:68:24:1e:9a:63:1e:a0:a4: 00:1c:4d:91:75:09:af:78:bc:8a:ba:ac:ed:1a:30:04:90:d8: c4:9b:2d:7a:ea:bc:9f:4d:bc:d8:54:c0:7e:0e:89:fc:64:62: e4:0b:9c:c3:35:b3:42:78:f6:75:66:fd:88:01:58:1b:4f:90: 68:35:b2:f6:86:24:5c:21:2a:85:bf:59:93:e5:b6:d3:eb:4a: b2:aa:7d:4a:3c:24:97:96:18:d8:91:16:b2:94:b0:d0:ae:f6: 0a:ef:17:ee:3d:61:4d:23:97:31:01:80:4c:c4:51:df:40:2e: 49:fc:8b:33:31:be:d2:53:25:d6:27:62:26:58:d1:a2:ee:8c: 6c:7d:91:7d:cf:86:5b:c0:c4:c2:ae:db:c4:33:cb:02:3a:df: 99:ac:c1:b1:c6:81:d1:62:47:47:da:85:3d:99:5e:0d:03:40: cb:fb:ad:51:f1:c6:91:5d:93:eb:60:7f:ac:44:6e:07:87:b3: d2:74:f9:6c:b8:44:f8:e1:1f:c5:c3:64:82:80:7e:7d:74:ac: 35:1d:c1:db:45:4c:c8:52:b0:08:95:c5:61:2a:79:dd:2d:13: 5a:06:09:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmuxar7a/DiYPREV3iMGeVe8za0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTEyMDUxNTE2NDZaFw0yNTEyMDgyMTI2NDZaMDMxMTAvBgNV BAMTKDJGOEI3RTRFNjE5REMwREVCRTI3MzY4QTk1MTVFNDVEQTUxMEJGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YQv1ETbx04ikWa8lM6zkP1f2 gNEGylHuE/AFqWT5LmD3RN/DnRaO0EOGlQF4QUUfsRNoKgxPtV4H/J634NYWU268 3YQSfAw3UVhuACNa8XW0wcXW1MpLilO4MqIG/6lPIUG5fDA5mt4YyeY2marOEq3F 2HrUzG+99itur2d+h3Lp01u4hHQuuUw++RIUt/JtkUAyBHfG9ZKUoYV3ofzXI+ue SFgHRuu3T1BD17EnrEdbYecBXd1Nc/gQ+7xRgHpIZoMFK2XLeFv1yzPV+6NI3uvb UuV2Gduj5giQXHMVkE0PEp5tYrgIrtGSezAmNbGOLaxDfaMKdCRXWEnKwyTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4t+TmGdwN6+JzaKlRXkXaUQv+EwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBKrg8FE2j23wsa8aVOb0C68VbCz87+fmnv kaVoJB6aYx6gpAAcTZF1Ca94vIq6rO0aMASQ2MSbLXrqvJ9NvNhUwH4OifxkYuQL nMM1s0J49nVm/YgBWBtPkGg1svaGJFwhKoW/WZPlttPrSrKqfUo8JJeWGNiRFrKU sNCu9grvF+49YU0jlzEBgEzEUd9ALkn8izMxvtJTJdYnYiZY0aLujGx9kX3PhlvA xMKu28QzywI635mswbHGgdFiR0fahT2ZXg0DQMv7rVHxxpFdk+tgf6xEbgeHs9J0 +Wy4RPjhH8XDZIKAfn10rDUdwdtFTMhSsAiVxWEqed0tE1oGCYc= -----END CERTIFICATE-----Generated at Sun Dec 7 05:50:13 2025 by rpki-client