This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: 7M2Q578dkwnOg8LbhHro/RraNinTik+Zz2MeGB1XYgQ= Subject key identifier: 50:9E:CE:88:92:5B:DA:CD:4A:FC:9B:9C:AB:BA:27:EC:B9:A2:59:8B Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 4FB6AEDE50E7DDC5D907983824D22FDB77937FA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: 0124 Signing time: Sat 06 Dec 2025 11:51:19 +0000 Manifest this update: Sat 06 Dec 2025 11:46:19 +0000 Manifest next update: Tue 09 Dec 2025 13:53:19 +0000 Files and hashes: 1: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: T56TwNuf3EVVKNZ4lQ8Ldgdic1XY2tNrYbscCPFk9Pg=) 2: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: z4zxy+nKSZK/Wwjj/4acFRlmoj6MGrbeSPVn8nu3l0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b6:ae:de:50:e7:dd:c5:d9:07:98:38:24:d2:2f:db:77:93:7f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Dec 6 11:46:19 2025 GMT Not After : Dec 9 13:53:19 2025 GMT Subject: CN=509ECE88925BDACD4AFC9B9CABBA27ECB9A2598B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:65:82:30:5d:17:7c:19:ae:d4:ee:43:aa: e7:37:ec:12:fe:0d:5e:60:a8:4e:77:ca:21:af:93: 4d:f1:ad:28:6e:f1:00:3f:64:b1:76:3f:f0:54:e2: e4:8a:1e:3b:13:f4:75:0e:4c:dc:21:c2:6a:33:06: 3e:9c:83:7c:15:19:46:c9:e2:d4:f1:0d:3f:87:59: 84:bc:9f:61:6e:2a:26:09:b9:7c:75:95:b7:90:25: 36:e1:85:65:c6:4a:4c:ba:8e:5a:6e:44:e1:9f:7d: c9:65:53:bb:4f:01:a9:73:bc:b1:e9:e4:32:9d:f4: ab:90:be:45:c6:0f:28:bd:30:4c:25:57:8b:7f:33: 61:00:d5:25:97:8d:23:9f:cd:cb:ac:a2:35:ad:27: e6:c7:93:a5:07:d2:bf:82:04:fc:23:3a:24:1b:da: 27:d8:8b:7f:1e:9f:58:8c:40:5c:ab:92:0d:7e:67: cd:bc:01:52:82:74:18:cd:55:54:d8:9f:e4:4c:12: 7f:fa:23:4b:0b:56:ee:26:6d:08:d8:03:ec:7d:00: 61:e6:5a:01:0b:ad:d8:ac:23:3f:43:ae:eb:a1:eb: 69:18:b3:2d:0a:67:04:ca:79:ad:50:e2:8c:4a:69: 08:42:01:55:2d:9e:d3:40:23:62:d0:0c:bb:2f:e6: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9E:CE:88:92:5B:DA:CD:4A:FC:9B:9C:AB:BA:27:EC:B9:A2:59:8B X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8a:4c:d2:95:a0:37:db:4b:15:2e:e0:27:27:26:a3:e1:fb: 14:34:56:9c:84:92:9c:7d:49:12:b7:8e:f0:48:6d:5e:70:92: c3:d5:40:ab:3b:25:9b:d8:47:dc:23:78:6e:f1:5d:12:ae:3e: a7:23:9b:26:aa:9e:aa:01:ee:e7:b7:83:4c:c6:26:17:b0:59: 36:32:59:a0:81:82:08:60:95:1f:23:eb:f0:fe:9c:f7:65:d1: 62:47:d2:8d:40:b8:ee:e3:a6:9c:4c:26:c0:0f:f5:f6:89:c5: be:67:6d:e0:37:5d:c3:31:42:3d:10:26:14:2d:56:1a:f2:21: 27:54:9c:2b:33:ac:64:d0:4d:db:b1:41:68:88:dd:5e:75:3d: 89:db:a0:c3:b0:6a:f8:77:fd:48:ea:73:8c:43:6e:a1:9f:3e: 0d:8b:7e:d6:83:ee:87:42:4c:ab:61:6f:4e:14:61:e2:a3:0b: 6b:01:26:6c:07:f2:f9:83:cc:4a:b8:7d:ea:63:2b:b9:c1:08: 79:0d:b6:0d:8a:d0:1e:35:06:46:e6:a0:56:28:3b:2c:42:71: a1:0b:2d:df:46:c7:04:76:7c:1a:e8:24:b5:0a:82:80:34:1d: da:5f:91:63:e3:be:3d:16:91:c7:47:2f:07:26:f7:90:4a:76: c4:83:67:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7au3lDn3cXZB5g4JNIv23eTf6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNTEyMDYxMTQ2MTlaFw0yNTEyMDkxMzUzMTlaMDMxMTAvBgNV BAMTKDUwOUVDRTg4OTI1QkRBQ0Q0QUZDOUI5Q0FCQkEyN0VDQjlBMjU5OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXWWCMF0XfBmu1O5Dquc37BL+ DV5gqE53yiGvk03xrShu8QA/ZLF2P/BU4uSKHjsT9HUOTNwhwmozBj6cg3wVGUbJ 4tTxDT+HWYS8n2FuKiYJuXx1lbeQJTbhhWXGSky6jlpuROGffcllU7tPAalzvLHp 5DKd9KuQvkXGDyi9MEwlV4t/M2EA1SWXjSOfzcusojWtJ+bHk6UH0r+CBPwjOiQb 2ifYi38en1iMQFyrkg1+Z828AVKCdBjNVVTYn+RMEn/6I0sLVu4mbQjYA+x9AGHm WgELrdisIz9Druuh62kYsy0KZwTKea1Q4oxKaQhCAVUtntNAI2LQDLsv5j4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUJ7OiJJb2s1K/Jucq7on7LmiWYswHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmKTNKVoDfbSxUu4CcnJqPh+xQ0VpyEkpx9 SRK3jvBIbV5wksPVQKs7JZvYR9wjeG7xXRKuPqcjmyaqnqoB7ue3g0zGJhewWTYy WaCBgghglR8j6/D+nPdl0WJH0o1AuO7jppxMJsAP9faJxb5nbeA3XcMxQj0QJhQt VhryISdUnCszrGTQTduxQWiI3V51PYnboMOwavh3/Ujqc4xDbqGfPg2LftaD7odC TKthb04UYeKjC2sBJmwH8vmDzEq4fepjK7nBCHkNtg2K0B41BkbmoFYoOyxCcaEL Ld9GxwR2fBroJLUKgoA0HdpfkWPjvj0WkcdHLwcm95BKdsSDZyM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:46:27 2025 by rpki-client