This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: 5PQbmOp6y4iq77p7WbGxUXBUZe7fgKM8eamUSeY3rMY= Subject key identifier: 2C:99:A3:EA:C4:F0:15:F0:70:82:DC:91:B1:08:9A:D9:67:9F:6E:5C Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 2CA1207CC4B01E223A0D06098FA17041CC38F48B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 052B Signing time: Sat 06 Dec 2025 12:41:11 +0000 Manifest this update: Sat 06 Dec 2025 12:36:11 +0000 Manifest next update: Tue 09 Dec 2025 16:00:11 +0000 Files and hashes: 1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) 2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) 3: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: 4RmWZZvQwRMV9TmuC5mMr/wDAT7UYmBZTUFOqi4e1+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a1:20:7c:c4:b0:1e:22:3a:0d:06:09:8f:a1:70:41:cc:38:f4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Dec 6 12:36:11 2025 GMT Not After : Dec 9 16:00:11 2025 GMT Subject: CN=2C99A3EAC4F015F07082DC91B1089AD9679F6E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:bc:91:a2:22:95:93:b0:7e:fa:89:b5:08: b0:2a:73:9a:68:53:6b:c6:ce:0d:b3:c3:c8:a6:1a: ae:a5:72:52:9e:58:99:f5:49:7c:de:38:d8:73:87: 15:2d:2b:73:6f:ba:82:e2:d7:81:9e:35:9b:1f:18: ab:03:9e:dc:85:06:c5:6b:e5:96:b6:65:b8:b1:4a: 17:f4:fb:fb:59:63:91:e1:6a:05:2c:59:b7:f3:92: 09:f4:48:8b:24:31:85:c4:b2:ca:a5:e1:19:f4:09: d6:84:d6:1d:36:d4:e6:26:f3:ce:89:2b:67:34:5b: 27:ad:be:24:17:de:7c:83:af:3d:b2:cd:7c:91:f1: c7:ec:16:34:c4:89:ff:8d:7b:4b:60:ac:e6:28:f0: e9:c5:52:84:02:1c:21:8c:40:a5:0a:1d:0a:f1:31: 14:82:00:40:ee:ea:8f:8e:0b:45:f6:98:ae:de:80: 0b:cb:42:5a:7e:41:17:58:24:5c:2c:74:3d:b0:24: a0:b3:75:30:e1:7f:64:25:1c:57:4a:dc:20:4b:14: 81:16:cf:ab:f0:28:aa:50:b4:d1:fa:0c:93:73:80: 36:65:c9:1f:37:fd:6a:eb:ea:06:22:72:45:08:f0: b0:15:08:76:70:b0:8f:f6:a6:50:8b:21:f9:fc:b3: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:99:A3:EA:C4:F0:15:F0:70:82:DC:91:B1:08:9A:D9:67:9F:6E:5C X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:32:17:4b:24:36:6d:2a:ae:63:74:56:b4:9d:2f:ab:32:63: b0:c9:b2:43:3e:dd:b9:28:36:dc:41:ab:4f:9c:fd:27:92:25: 26:40:23:03:ec:2b:e5:5b:35:47:29:3b:2b:81:a7:58:14:ed: 95:cf:4d:ad:a1:cc:b4:c0:87:76:1a:24:0f:65:d5:a2:3a:10: e1:6a:08:44:83:c5:a6:4e:60:46:75:85:d4:1f:94:8b:36:4b: 3d:12:e6:6c:66:a9:15:48:b9:85:6e:10:5a:ad:6a:cc:a1:7c: 97:0b:91:99:66:a3:ff:b1:ed:5b:3a:8a:f6:87:b1:9d:ee:32: 61:34:ed:e0:cc:7b:d5:44:50:c1:6d:1d:e1:16:cc:12:a5:b2: aa:0c:5b:c8:09:c9:f3:a3:35:b8:c3:ef:e7:81:76:fb:4f:69: 11:9c:f1:55:05:90:66:7b:b6:56:a7:5a:ed:08:c6:ad:85:94: 8c:f2:9d:d9:fa:c2:07:e7:72:26:62:b1:29:21:96:eb:5c:07: c2:73:d2:a5:8c:e8:af:e3:4f:2a:83:cf:21:a0:88:b7:e5:0d: a1:a3:8f:b1:91:c3:4e:48:d2:a8:02:ac:bd:e7:54:4a:3d:e6: 24:7d:af:39:88:47:2f:87:e4:88:5b:67:26:09:46:62:3a:02: 9c:33:e4:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKEgfMSwHiI6DQYJj6FwQcw49IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTEyMDYxMjM2MTFaFw0yNTEyMDkxNjAwMTFaMDMxMTAvBgNV BAMTKDJDOTlBM0VBQzRGMDE1RjA3MDgyREM5MUIxMDg5QUQ5Njc5RjZFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkLyRoiKVk7B++om1CLAqc5po U2vGzg2zw8imGq6lclKeWJn1SXzeONhzhxUtK3NvuoLi14GeNZsfGKsDntyFBsVr 5Za2ZbixShf0+/tZY5HhagUsWbfzkgn0SIskMYXEssql4Rn0CdaE1h021OYm886J K2c0WyetviQX3nyDrz2yzXyR8cfsFjTEif+Ne0tgrOYo8OnFUoQCHCGMQKUKHQrx MRSCAEDu6o+OC0X2mK7egAvLQlp+QRdYJFwsdD2wJKCzdTDhf2QlHFdK3CBLFIEW z6vwKKpQtNH6DJNzgDZlyR83/Wrr6gYickUI8LAVCHZwsI/2plCLIfn8s1DfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULJmj6sTwFfBwgtyRsQia2WefblwwHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoyF0skNm0qrmN0VrSdL6syY7DJskM+3bko NtxBq0+c/SeSJSZAIwPsK+VbNUcpOyuBp1gU7ZXPTa2hzLTAh3YaJA9l1aI6EOFq CESDxaZOYEZ1hdQflIs2Sz0S5mxmqRVIuYVuEFqtasyhfJcLkZlmo/+x7Vs6ivaH sZ3uMmE07eDMe9VEUMFtHeEWzBKlsqoMW8gJyfOjNbjD7+eBdvtPaRGc8VUFkGZ7 tlanWu0Ixq2FlIzyndn6wgfnciZisSkhlutcB8Jz0qWM6K/jTyqDzyGgiLflDaGj j7GRw05I0qgCrL3nVEo95iR9rzmIRy+H5IhbZyYJRmI6Apwz5KQ= -----END CERTIFICATE-----Generated at Sun Dec 7 07:48:17 2025 by rpki-client