This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: XAYF9eJzkmnIZWlENB3QGFcZUF3QsrGjyYtCStR8SGo= Subject key identifier: 6E:D3:EC:3A:E0:1E:88:12:13:99:C4:F2:92:16:DF:E6:F0:1F:DC:67 Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 1EA54B3B68050CBE58FD0AB97AA926B637BABDBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: CA Signing time: Sat 06 Dec 2025 09:41:30 +0000 Manifest this update: Sat 06 Dec 2025 09:36:30 +0000 Manifest next update: Tue 09 Dec 2025 11:22:30 +0000 Files and hashes: 1: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: Jy6L+sGekPMyuMtdpky0D2jRd/OipqZg9C05WnpPS4Y=) 2: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: L0OHjTLAoKuTGX0pU6SpedvQBvVTanvlgQCeJn9jtow=) 3: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA=) 4: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: vaX/n6vc4K9mejYUu1eJI/tNjnfyjVyWN2o5zH8Hflc=) 5: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: pmak6xU4zcMrRpewDAUwu1U35qJi8xn/iUfAM5Urc1I=) 6: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: zKHXogUEbsyyC8ISVc+ANF+73aCbCi6els1lcd1hD1E=) 7: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: +SLAv/Ao5ipR0W/v6AgPtFrgrn+d0qK7qqbca2xo8WU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 11:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a5:4b:3b:68:05:0c:be:58:fd:0a:b9:7a:a9:26:b6:37:ba:bd:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Dec 6 09:36:30 2025 GMT Not After : Dec 9 11:22:30 2025 GMT Subject: CN=6ED3EC3AE01E88121399C4F29216DFE6F01FDC67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e5:9f:89:2f:b2:83:f6:57:81:96:cf:34:7e: c5:34:ba:5f:71:77:51:ad:55:33:77:ee:42:b7:9b: 2d:d4:02:c3:ff:99:5a:f0:19:39:74:c1:be:8a:52: d4:2c:8f:5f:b3:d6:12:d3:79:3f:21:64:d5:5e:81: d1:40:41:01:09:c2:6e:d3:94:67:de:df:ce:04:f5: ec:f8:dd:59:0f:91:64:d7:29:09:12:7c:0c:57:d9: 05:c7:27:51:91:76:99:c2:d8:b3:da:84:b4:4d:db: 81:ad:15:fc:7a:41:82:23:cf:12:61:f2:6f:98:a8: 92:30:b4:4d:97:fe:dc:95:7a:ea:d0:b8:78:fe:19: 45:0d:b5:1f:03:3a:f5:73:83:4c:d6:a9:80:b8:d4: 7a:0b:c8:17:ce:fe:10:a2:7c:e7:ad:a2:5c:68:f0: 42:a9:2e:83:85:3f:63:8f:81:cd:59:3c:78:25:7d: dc:22:e2:6e:24:9b:b2:c1:ce:d5:94:25:64:47:b1: 33:48:e3:26:72:9d:73:59:54:77:ec:65:e5:c1:7b: 33:f4:3f:01:70:e5:72:30:3f:0b:79:1f:0a:42:66: 83:b0:fb:57:58:e4:fd:d9:d5:14:17:5a:4a:e3:66: 89:53:e7:8e:52:51:ba:2b:fc:7a:88:50:90:50:b8: 6a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D3:EC:3A:E0:1E:88:12:13:99:C4:F2:92:16:DF:E6:F0:1F:DC:67 X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7f:5a:ec:e0:8e:8e:62:eb:5b:88:02:4e:7c:c0:d3:db:fc: 4a:7d:1e:98:c2:76:e0:b4:32:45:6e:dd:a5:70:55:a1:f2:cc: 74:1c:46:df:a9:8d:37:7f:a9:66:55:14:5a:5e:b0:80:f1:67: 30:7d:b2:44:08:57:25:88:04:68:86:3b:e7:fc:c0:e5:7e:e2: db:4c:f7:5b:f1:f7:cf:cf:6d:0c:94:75:e4:49:ac:a9:da:8c: 97:44:7a:94:12:a1:a0:2e:54:2f:3d:a6:9b:82:11:14:37:5c: 5a:2c:02:46:c5:fc:d1:5f:90:85:12:08:e1:78:91:80:43:a1: fe:ae:2c:2c:a3:63:fb:46:52:a7:6d:9a:3e:35:ff:ad:48:cd: f6:26:ea:e8:35:f4:c8:ac:cb:29:b6:1f:9e:88:ee:98:33:f1: e8:28:7c:c6:6c:b2:0a:7b:07:95:85:f3:df:65:3e:c0:49:c0: 6f:62:76:82:25:f5:40:8a:c9:5c:f0:01:e2:62:a2:b3:c7:c9: a5:1d:64:c5:58:4c:95:e2:f7:02:b7:b2:ff:f4:3b:8a:fa:0a: a6:5b:8d:80:a6:19:26:ac:39:b1:59:b9:1f:26:37:e8:d7:18: 2a:9b:4e:e8:be:2c:c1:43:34:a8:52:36:d9:64:6d:70:69:24: 1f:9c:ae:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqVLO2gFDL5Y/Qq5eqkmtje6vb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTEyMDYwOTM2MzBaFw0yNTEyMDkxMTIyMzBaMDMxMTAvBgNV BAMTKDZFRDNFQzNBRTAxRTg4MTIxMzk5QzRGMjkyMTZERkU2RjAxRkRDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg5Z+JL7KD9leBls80fsU0ul9x d1GtVTN37kK3my3UAsP/mVrwGTl0wb6KUtQsj1+z1hLTeT8hZNVegdFAQQEJwm7T lGfe384E9ez43VkPkWTXKQkSfAxX2QXHJ1GRdpnC2LPahLRN24GtFfx6QYIjzxJh 8m+YqJIwtE2X/tyVeurQuHj+GUUNtR8DOvVzg0zWqYC41HoLyBfO/hCifOetolxo 8EKpLoOFP2OPgc1ZPHglfdwi4m4km7LBztWUJWRHsTNI4yZynXNZVHfsZeXBezP0 PwFw5XIwPwt5HwpCZoOw+1dY5P3Z1RQXWkrjZolT545SUbor/HqIUJBQuGq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbtPsOuAeiBITmcTykhbf5vAf3GcwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHx/Wuzgjo5i61uIAk58wNPb/Ep9HpjCduC0 MkVu3aVwVaHyzHQcRt+pjTd/qWZVFFpesIDxZzB9skQIVyWIBGiGO+f8wOV+4ttM 91vx98/PbQyUdeRJrKnajJdEepQSoaAuVC89ppuCERQ3XFosAkbF/NFfkIUSCOF4 kYBDof6uLCyjY/tGUqdtmj41/61IzfYm6ug19Misyym2H56I7pgz8egofMZssgp7 B5WF899lPsBJwG9idoIl9UCKyVzwAeJiorPHyaUdZMVYTJXi9wK3sv/0O4r6CqZb jYCmGSasObFZuR8mN+jXGCqbTui+LMFDNKhSNtlkbXBpJB+crho= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:44 2025 by rpki-client