This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: 3fkS5fLuhhUTD+Kvp/W5h6SkXLnm06Xfeyph9W4d5Ns= Subject key identifier: B3:9C:5D:83:CD:39:22:8C:B3:DD:32:F0:A7:52:A0:E5:96:60:A8:58 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 2F0BF54D84072586240D2FC3488D621F8E38028C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 8B Signing time: Fri 05 Dec 2025 17:01:17 +0000 Manifest this update: Fri 05 Dec 2025 16:56:17 +0000 Manifest next update: Mon 08 Dec 2025 23:58:17 +0000 Files and hashes: 1: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: SV7hWBjz1ZVWUal/2nO3ZzNptOxxvImLtg4Vk7UV4TQ=) 2: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) 3: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0b:f5:4d:84:07:25:86:24:0d:2f:c3:48:8d:62:1f:8e:38:02:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Dec 5 16:56:17 2025 GMT Not After : Dec 8 23:58:17 2025 GMT Subject: CN=B39C5D83CD39228CB3DD32F0A752A0E59660A858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:85:cf:a8:3a:ca:81:4e:11:c2:ec:7b:b4:e4: 1b:3a:34:45:84:04:63:33:23:2d:9c:46:1c:7b:5a: 28:96:bd:2f:fb:15:04:8b:94:55:c9:03:d3:44:16: 7a:9d:a6:0b:51:12:0c:a0:29:8c:a7:24:47:92:4f: c8:58:03:d1:f6:00:d5:c6:54:33:25:90:34:24:6d: bb:f9:fa:f6:e8:cb:d1:55:ba:5d:2e:d1:2f:59:e0: 46:cd:52:f0:13:78:6e:09:78:c3:bd:11:26:b9:a3: db:9e:39:8b:05:e5:4e:d3:26:a8:49:da:67:da:4a: 96:d5:ef:7c:e4:45:b8:15:47:dc:63:00:19:77:61: 09:81:4d:24:86:7b:57:10:b4:86:72:a9:5e:68:f7: b9:58:4b:d7:52:d1:b0:ea:b7:e4:b4:a1:52:5a:42: ed:20:2e:66:53:68:96:90:ae:76:d9:3e:8b:6b:fb: 93:40:0d:42:a7:8d:04:23:cc:d8:be:eb:36:a6:63: bb:66:a5:3e:e9:49:98:c4:d5:1c:c3:56:86:15:1f: a8:98:fa:bb:96:b7:3d:9c:17:ad:7f:a2:17:50:ef: ff:4d:3d:fd:72:87:39:67:ad:94:b3:9c:7d:16:94: 3f:b5:56:2b:aa:b9:f8:b5:97:f1:03:3b:b7:8d:b6: 78:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9C:5D:83:CD:39:22:8C:B3:DD:32:F0:A7:52:A0:E5:96:60:A8:58 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:54:a4:dd:7f:18:a9:14:7e:cf:c8:64:4a:b0:29:95:74:86: 96:2b:d4:4c:ce:eb:99:08:30:b9:b6:73:5f:6c:cb:35:9c:91: 99:57:97:70:9c:1c:4b:76:42:10:29:de:78:46:48:e3:61:16: 32:ff:ef:dc:15:c6:c4:34:75:56:22:e4:7f:20:d1:59:50:94: ac:ae:36:8e:16:fb:1d:64:29:73:c7:77:b0:8f:c9:72:52:68: 04:47:e2:ea:98:ff:73:ca:38:6a:94:4b:34:ad:54:32:eb:69: b6:b2:8d:8e:35:53:97:14:b7:c5:70:ff:a2:81:96:28:75:a6: a7:0e:8e:98:23:3f:7f:56:59:01:3d:42:f2:b3:18:6b:fe:1a: 6e:fd:2e:f8:f7:9a:a5:f1:3b:0b:8d:95:79:e5:95:f7:d2:73: d2:4b:e7:74:b1:05:7f:d9:db:c0:a4:82:50:aa:ae:ef:8c:5b: 0c:ad:34:41:a8:11:b3:b4:2b:6a:3e:af:ba:20:9f:2a:2c:a5: 77:12:93:ca:db:66:ae:63:cc:ce:e4:ee:36:ba:31:14:ea:6e: 5d:ad:3e:54:64:ed:3c:c0:dc:b9:30:69:6c:45:f5:c8:a8:bb: fc:2f:13:9c:d6:0e:8d:74:0a:46:1a:b3:b7:62:71:97:62:18: 33:12:ab:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwv1TYQHJYYkDS/DSI1iH444AowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTEyMDUxNjU2MTdaFw0yNTEyMDgyMzU4MTdaMDMxMTAvBgNV BAMTKEIzOUM1RDgzQ0QzOTIyOENCM0REMzJGMEE3NTJBMEU1OTY2MEE4NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhc+oOsqBThHC7Hu05Bs6NEWE BGMzIy2cRhx7WiiWvS/7FQSLlFXJA9NEFnqdpgtREgygKYynJEeST8hYA9H2ANXG VDMlkDQkbbv5+vboy9FVul0u0S9Z4EbNUvATeG4JeMO9ESa5o9ueOYsF5U7TJqhJ 2mfaSpbV73zkRbgVR9xjABl3YQmBTSSGe1cQtIZyqV5o97lYS9dS0bDqt+S0oVJa Qu0gLmZTaJaQrnbZPotr+5NADUKnjQQjzNi+6zamY7tmpT7pSZjE1RzDVoYVH6iY +ruWtz2cF61/ohdQ7/9NPf1yhzlnrZSznH0WlD+1Viuqufi1l/EDO7eNtngXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs5xdg805Ioyz3TLwp1Kg5ZZgqFgwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVUpN1/GKkUfs/IZEqwKZV0hpYr1EzO65kI MLm2c19syzWckZlXl3CcHEt2QhAp3nhGSONhFjL/79wVxsQ0dVYi5H8g0VlQlKyu No4W+x1kKXPHd7CPyXJSaARH4uqY/3PKOGqUSzStVDLrabayjY41U5cUt8Vw/6KB lih1pqcOjpgjP39WWQE9QvKzGGv+Gm79Lvj3mqXxOwuNlXnllffSc9JL53SxBX/Z 28CkglCqru+MWwytNEGoEbO0K2o+r7ognyospXcSk8rbZq5jzM7k7ja6MRTqbl2t PlRk7TzA3LkwaWxF9ciou/wvE5zWDo10CkYas7dicZdiGDMSq9Y= -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:01 2025 by rpki-client