This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft File: 00C1EB3BEE971CEAB531D756361F934BE0179628.mft (raw, json) Hash identifier: 1nMrYSLYEdvTviISBMiCoKg924cQDgsjWPbM4RAS0uM= Subject key identifier: 46:29:A7:1A:09:C8:98:AB:57:D5:E5:5F:F2:23:A5:22:AB:2B:66:B0 Authority key identifier: 00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 Certificate issuer: /CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Certificate serial: 7A34AF06866F72CB22F32A6E6EAA25A98F0023B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft Manifest number: D3 Signing time: Sat 06 Dec 2025 22:11:49 +0000 Manifest this update: Sat 06 Dec 2025 22:06:49 +0000 Manifest next update: Wed 10 Dec 2025 07:49:49 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 2PH25lGx4aoDxJSQ/LOSozIUBGDxDVOVLodCc7y15nU=) 2: 00C1EB3BEE971CEAB531D756361F934BE0179628.crl (hash: PxNv8IsyKcpLb5/s6oTRefLg4yKYcyKdcEc71Ip5PZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:34:af:06:86:6f:72:cb:22:f3:2a:6e:6e:aa:25:a9:8f:00:23:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Validity Not Before: Dec 6 22:06:49 2025 GMT Not After : Dec 10 07:49:49 2025 GMT Subject: CN=4629A71A09C898AB57D5E55FF223A522AB2B66B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:ac:87:c2:7d:e2:af:01:7d:08:6f:9a:a8: df:b6:fe:f9:85:75:c4:32:cf:25:7f:49:b3:31:7a: c7:1f:0b:af:8c:aa:6d:ff:e3:c1:c8:77:77:3d:fc: f6:40:74:38:d3:05:a3:b6:bd:cb:a6:94:a2:0f:32: 82:71:8c:99:91:f8:d7:b9:12:05:3f:99:38:40:11: 43:82:ce:b7:09:9b:40:d4:93:d1:b0:a5:ce:fa:78: dd:32:00:5e:67:1e:62:dc:d1:64:71:93:3f:d3:2c: e0:6c:4e:35:3d:f2:7a:cf:9d:1e:dd:94:66:b6:9d: 8a:27:82:4c:50:27:ca:96:c4:57:ea:78:f0:0c:64: f0:27:8d:b3:c3:a6:4f:15:e6:8f:39:a7:cf:f8:d0: 9a:c5:e0:97:b0:13:bd:e2:5e:0a:5f:87:2a:91:79: 67:ef:a4:cc:0e:e4:1c:69:1f:3b:b3:c5:32:5d:a7: 03:40:23:68:a3:bc:bf:c4:7e:f9:ef:2a:97:af:4b: e8:02:c5:6d:be:d6:45:55:9f:99:4c:44:64:9a:eb: 6c:37:6b:b1:5c:cd:45:6b:07:d7:8e:22:f1:73:65: 31:13:86:f8:a6:29:b2:9b:54:22:08:42:38:b2:ee: 55:a8:58:95:a6:bd:a9:27:ef:31:fc:f1:b6:7d:bd: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:29:A7:1A:09:C8:98:AB:57:D5:E5:5F:F2:23:A5:22:AB:2B:66:B0 X509v3 Authority Key Identifier: keyid:00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:31:a6:f4:35:6c:e0:ad:2c:9d:57:23:49:15:20:7f:f0:9a: 79:ac:21:a1:45:60:84:0f:91:0b:4b:35:2e:8c:f9:a5:4c:3f: 5f:a7:16:91:f7:65:eb:58:93:4d:15:58:93:ff:7a:20:ad:0b: bf:2c:52:40:e6:58:98:99:ea:92:96:ea:4c:20:7f:f4:e9:e5: 68:f8:1c:12:94:7f:e0:12:58:79:ba:d7:84:fa:d4:4e:cd:73: e4:64:7a:eb:09:4d:b6:5b:18:b0:3e:45:a6:09:1b:bf:b2:f7: fd:cf:13:f0:8f:4b:27:29:8a:90:54:5b:33:f6:e8:5e:40:39: 42:23:ed:1d:ca:66:95:b2:71:33:7f:d5:7d:eb:6a:66:b0:92: a6:9f:d1:0a:bd:b7:3b:aa:96:e0:be:e2:6c:a1:3d:ee:6c:6d: 7c:95:19:6d:68:d9:05:ea:e4:fe:f1:4d:e3:6e:55:8d:80:df: f4:45:5d:a6:0a:2b:4d:41:2c:b1:89:9d:66:46:7a:8d:71:2f: ab:d0:47:f8:e5:33:88:64:81:60:bf:1d:5c:87:49:59:bd:01: 25:d7:21:43:1f:d6:e5:dc:49:79:7d:c6:39:81:76:82:0a:f5: 2d:f4:0e:3b:72:9d:80:85:64:82:c3:b5:06:46:7e:c6:69:e1: dd:49:0a:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejSvBoZvcssi8ypubqolqY8AI7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkzNEJF MDE3OTYyODAeFw0yNTEyMDYyMjA2NDlaFw0yNTEyMTAwNzQ5NDlaMDMxMTAvBgNV BAMTKDQ2MjlBNzFBMDlDODk4QUI1N0Q1RTU1RkYyMjNBNTIyQUIyQjY2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6ayHwn3irwF9CG+aqN+2/vmF dcQyzyV/SbMxescfC6+Mqm3/48HId3c9/PZAdDjTBaO2vcumlKIPMoJxjJmR+Ne5 EgU/mThAEUOCzrcJm0DUk9Gwpc76eN0yAF5nHmLc0WRxkz/TLOBsTjU98nrPnR7d lGa2nYongkxQJ8qWxFfqePAMZPAnjbPDpk8V5o85p8/40JrF4JewE73iXgpfhyqR eWfvpMwO5BxpHzuzxTJdpwNAI2ijvL/EfvnvKpevS+gCxW2+1kVVn5lMRGSa62w3 a7FczUVrB9eOIvFzZTEThvimKbKbVCIIQjiy7lWoWJWmvakn7zH88bZ9vdbRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURimnGgnImKtX1eVf8iOlIqsrZrAwHwYDVR0j BBgwFoAUAMHrO+6XHOq1MddWNh+TS+AXligwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIwY2U3Ni1kYjc1LTQ2NTEtODViMC0wYmZiMThlMGIxNzUvMC8wMEMxRUIzQkVF OTcxQ0VBQjUzMUQ3NTYzNjFGOTM0QkUwMTc5NjI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkzNEJFMDE3 OTYyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMGNlNzYtZGI3NS00NjUxLTg1 YjAtMGJmYjE4ZTBiMTc1LzAvMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkz NEJFMDE3OTYyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsxpvQ1bOCtLJ1XI0kVIH/wmnmsIaFFYIQP kQtLNS6M+aVMP1+nFpH3ZetYk00VWJP/eiCtC78sUkDmWJiZ6pKW6kwgf/Tp5Wj4 HBKUf+ASWHm614T61E7Nc+RkeusJTbZbGLA+RaYJG7+y9/3PE/CPSycpipBUWzP2 6F5AOUIj7R3KZpWycTN/1X3ramawkqaf0Qq9tzuqluC+4myhPe5sbXyVGW1o2QXq 5P7xTeNuVY2A3/RFXaYKK01BLLGJnWZGeo1xL6vQR/jlM4hkgWC/HVyHSVm9ASXX IUMf1uXcSXl9xjmBdoIK9S30DjtynYCFZILDtQZGfsZp4d1JCoo= -----END CERTIFICATE-----Generated at Sun Dec 7 01:45:03 2025 by rpki-client