This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: QoDsom2vhvl8gJL0IIYrpLlMYPbQsgtGPFwrVq6SqT0= Subject key identifier: 5F:1D:F6:86:71:4F:B3:FE:9D:FD:F0:88:AD:97:FF:7B:99:A6:74:6C Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 6B204F73F43248FAECCA9A921B70E817D9BF000F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: 0101 Signing time: Sun 07 Dec 2025 06:02:02 +0000 Manifest this update: Sun 07 Dec 2025 05:57:02 +0000 Manifest next update: Wed 10 Dec 2025 13:45:02 +0000 Files and hashes: 1: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: n4SCQ//fnmBSRmk5n8+1Ptmkhc5BjWBxb2BwpAYLi3I=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) 3: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:20:4f:73:f4:32:48:fa:ec:ca:9a:92:1b:70:e8:17:d9:bf:00:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Dec 7 05:57:02 2025 GMT Not After : Dec 10 13:45:02 2025 GMT Subject: CN=5F1DF686714FB3FE9DFDF088AD97FF7B99A6746C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:00:81:e8:19:57:5e:f5:d9:65:7a:33:92: b8:b9:b3:62:8d:72:0c:88:e5:0c:d0:bd:e5:4c:a3: 2d:51:a3:1c:63:7e:5c:98:b1:72:c2:a6:bc:be:9d: 38:4f:4f:e5:4d:76:ba:58:27:89:06:1c:32:6f:84: 0f:35:de:e1:88:40:62:dc:50:b5:40:da:99:f8:58: a7:d9:ee:ed:03:9a:60:32:6c:b9:08:a2:5f:8d:7c: 54:6e:90:17:42:4d:ed:37:3c:18:48:9a:71:d3:27: 1e:f8:70:27:e1:be:39:01:5a:16:54:58:78:96:7c: 8d:36:ee:f2:b6:76:8b:74:18:2f:50:aa:b4:a3:48: 2a:01:cd:0b:13:62:46:5c:f5:2c:41:12:4f:a9:d7: 67:e1:87:2d:21:63:c4:fe:fe:5b:76:21:1c:b6:56: de:1e:bb:27:46:93:78:fd:62:2e:1d:4b:6e:5f:84: 9c:dd:51:71:7e:f0:55:ae:91:7e:3c:1d:58:48:9d: 2f:c6:d4:44:1b:18:8f:e0:40:f9:47:ad:a0:45:3b: 9e:6d:99:07:a4:a1:88:61:90:bf:10:43:fe:16:df: c2:b8:1a:2c:7b:b4:1b:22:59:1d:f8:54:7c:df:a8: 6c:90:0c:d5:0d:17:7c:44:ac:16:12:e2:33:47:e5: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:F6:86:71:4F:B3:FE:9D:FD:F0:88:AD:97:FF:7B:99:A6:74:6C X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:97:ef:15:a6:70:c3:f2:84:ef:ef:b1:d2:31:15:05:d1:69: 8d:52:74:cb:f9:de:6f:fe:d5:02:52:33:a8:80:a4:ce:09:01: c3:e2:c3:89:cf:0b:9b:b4:8f:9e:ae:e0:8f:c0:87:3e:bd:0f: 16:8a:e9:31:e9:f7:0a:29:19:fd:84:3a:47:e5:11:31:9e:87: e6:ac:81:d7:84:68:e8:30:d8:a3:a4:70:fd:af:30:19:42:e3: cc:5e:e4:e1:8d:e8:ee:3f:34:f4:29:dc:48:8a:00:01:f0:06: 55:5c:1c:2e:93:79:ab:16:c1:c9:6e:c5:bb:57:62:17:c1:db: 05:3f:af:88:bb:cd:ee:bd:77:15:16:6d:23:06:19:21:1e:b0: 8a:86:d1:7f:c0:0f:9d:1c:f8:34:81:29:8e:af:d1:95:3b:1b: 37:98:d8:14:54:b6:24:cd:8b:d8:b4:84:92:85:31:86:51:db: a6:eb:04:01:4e:b3:ac:27:b4:a6:de:45:1b:da:e7:64:d9:23: e6:69:74:24:a2:5b:15:99:68:ae:e5:85:b2:3c:47:4a:77:24: f5:68:94:a0:91:f1:12:e7:06:0e:17:ad:f7:2b:7a:51:51:c0: c1:67:a3:b0:63:41:9d:69:65:cf:a0:a0:27:cb:b7:85:df:25: e0:88:19:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayBPc/QySPrsypqSG3DoF9m/AA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTEyMDcwNTU3MDJaFw0yNTEyMTAxMzQ1MDJaMDMxMTAvBgNV BAMTKDVGMURGNjg2NzE0RkIzRkU5REZERjA4OEFEOTdGRjdCOTlBNjc0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjgCB6BlXXvXZZXozkri5s2KN cgyI5QzQveVMoy1RoxxjflyYsXLCpry+nThPT+VNdrpYJ4kGHDJvhA813uGIQGLc ULVA2pn4WKfZ7u0DmmAybLkIol+NfFRukBdCTe03PBhImnHTJx74cCfhvjkBWhZU WHiWfI027vK2dot0GC9QqrSjSCoBzQsTYkZc9SxBEk+p12fhhy0hY8T+/lt2IRy2 Vt4euydGk3j9Yi4dS25fhJzdUXF+8FWukX48HVhInS/G1EQbGI/gQPlHraBFO55t mQekoYhhkL8QQ/4W38K4Gix7tBsiWR34VHzfqGyQDNUNF3xErBYS4jNH5alTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXx32hnFPs/6d/fCIrZf/e5mmdGwwHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSX7xWmcMPyhO/vsdIxFQXRaY1SdMv53m/+ 1QJSM6iApM4JAcPiw4nPC5u0j56u4I/Ahz69DxaK6THp9wopGf2EOkflETGeh+as gdeEaOgw2KOkcP2vMBlC48xe5OGN6O4/NPQp3EiKAAHwBlVcHC6TeasWwcluxbtX YhfB2wU/r4i7ze69dxUWbSMGGSEesIqG0X/AD50c+DSBKY6v0ZU7GzeY2BRUtiTN i9i0hJKFMYZR26brBAFOs6wntKbeRRva52TZI+ZpdCSiWxWZaK7lhbI8R0p3JPVo lKCR8RLnBg4XrfcrelFRwMFno7BjQZ1pZc+goCfLt4XfJeCIGeA= -----END CERTIFICATE-----Generated at Sun Dec 7 12:43:27 2025 by rpki-client