This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: vgiD3Q1UhxeyU7P0kusNe5WhX3G0VWCNkwe4++K44ME= Subject key identifier: D2:21:81:FC:B0:5B:D8:8B:2A:C6:C2:43:40:A0:5A:D8:E5:71:3B:D3 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 2BC71FD52AA514CF573328D414DD90A0A57A234A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: CA Signing time: Fri 05 Dec 2025 19:51:11 +0000 Manifest this update: Fri 05 Dec 2025 19:46:11 +0000 Manifest next update: Tue 09 Dec 2025 05:45:11 +0000 Files and hashes: 1: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: SIUg8B37AsWR4fFVz05BSSdRzuq05uscclAWNKCgTWM=) 2: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 4bpu+mggFbzvJDFJ5R6f3m5fTkhrxUM9zXGsoRvy4HQ=) 3: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: 7y8609J4YjMYC9wN+hYXRDhk/NJUcPM91RuRT+GB4pQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c7:1f:d5:2a:a5:14:cf:57:33:28:d4:14:dd:90:a0:a5:7a:23:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Dec 5 19:46:11 2025 GMT Not After : Dec 9 05:45:11 2025 GMT Subject: CN=D22181FCB05BD88B2AC6C24340A05AD8E5713BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:36:54:16:df:d6:82:da:be:f6:fd:cf:86:0d: 9a:0a:05:e1:5f:bf:29:e4:bf:13:ef:b0:0b:8c:97: 8f:e9:d9:af:e9:75:39:ca:52:9e:47:40:5d:7d:dd: 88:a3:93:53:d6:f4:8c:3b:26:0f:75:e7:c0:d2:dd: 9b:23:37:96:5d:02:a5:39:a6:14:6d:b4:00:85:d0: 47:72:0c:7b:d7:68:2a:88:29:fb:74:e9:0e:a4:9c: 17:23:98:75:a3:dc:91:8b:03:a7:ae:53:52:43:03: 0d:10:2e:a2:72:0d:a1:11:5f:b5:b0:48:6d:48:b5: e8:a8:1e:41:da:4f:d6:11:74:8d:dc:8b:e1:02:76: af:f8:70:e2:4b:87:0e:1e:ba:b6:5b:8d:2b:02:ce: e8:56:99:35:39:c7:4f:f8:f2:30:c5:09:69:b6:0a: 6b:c9:d3:0b:dd:17:3d:11:0e:1b:9f:77:bb:a6:36: 19:35:75:b4:6a:fb:9d:77:18:6c:97:54:02:5a:7c: e3:8f:4e:3c:8c:d9:43:9f:78:8c:71:46:85:fc:e2: 62:9b:58:72:49:4d:ca:75:69:69:3d:d0:68:5c:a9: 7c:45:99:72:1c:c0:12:a3:01:dc:6e:f4:83:82:cd: a9:f5:89:5e:7c:f9:0d:f5:65:e5:a8:d9:85:34:6b: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:21:81:FC:B0:5B:D8:8B:2A:C6:C2:43:40:A0:5A:D8:E5:71:3B:D3 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f3:b5:cb:f2:46:4f:35:c6:40:43:41:b9:7b:f7:90:77:ec: d5:a0:63:57:77:fd:19:f2:89:5a:ec:22:af:ca:e3:74:23:97: 3d:da:ab:ae:6e:2f:a0:06:99:b3:04:05:00:27:15:21:52:1f: e2:64:72:cb:1b:a0:b5:54:54:cf:1f:56:1d:d6:83:fa:51:d1: 91:61:99:a6:36:ba:c8:ca:d9:a8:4e:dc:de:ac:1f:20:89:cd: b6:db:64:d1:d3:93:44:ed:43:3e:85:f8:ae:9e:8b:1b:c0:dc: a6:d1:bf:f4:6e:6b:6f:40:d4:7c:ff:9b:54:20:7c:16:ce:df: bf:b6:fe:7a:3d:71:13:2f:61:12:30:42:70:c9:bb:0a:d8:83: c6:02:c9:15:0b:83:54:02:fb:b5:d7:a3:9c:d3:d1:98:62:d2: 5f:4d:70:b5:9d:f1:4d:aa:52:2b:30:76:8c:41:e7:97:62:5f: 7c:7e:dd:d5:1d:6e:98:9c:26:3a:51:45:f7:9e:3b:e0:70:72: 64:9a:2d:25:63:21:77:49:37:37:20:f1:e8:b0:1e:64:d2:a0: a8:ac:69:fe:d9:0b:0a:68:a3:13:33:a1:92:a1:83:08:00:5d: f7:de:a4:eb:3d:f8:e4:d2:e3:60:05:6c:83:f7:5d:36:77:b5: 4f:02:f1:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8cf1SqlFM9XMyjUFN2QoKV6I0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNTEyMDUxOTQ2MTFaFw0yNTEyMDkwNTQ1MTFaMDMxMTAvBgNV BAMTKEQyMjE4MUZDQjA1QkQ4OEIyQUM2QzI0MzQwQTA1QUQ4RTU3MTNCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkNlQW39aC2r72/c+GDZoKBeFf vynkvxPvsAuMl4/p2a/pdTnKUp5HQF193Yijk1PW9Iw7Jg9158DS3ZsjN5ZdAqU5 phRttACF0EdyDHvXaCqIKft06Q6knBcjmHWj3JGLA6euU1JDAw0QLqJyDaERX7Ww SG1IteioHkHaT9YRdI3ci+ECdq/4cOJLhw4eurZbjSsCzuhWmTU5x0/48jDFCWm2 CmvJ0wvdFz0RDhufd7umNhk1dbRq+513GGyXVAJafOOPTjyM2UOfeIxxRoX84mKb WHJJTcp1aWk90GhcqXxFmXIcwBKjAdxu9IOCzan1iV58+Q31ZeWo2YU0a1W5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0iGB/LBb2IsqxsJDQKBa2OVxO9MwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjztcvyRk81xkBDQbl795B37NWgY1d3/Rny iVrsIq/K43Qjlz3aq65uL6AGmbMEBQAnFSFSH+JkcssboLVUVM8fVh3Wg/pR0ZFh maY2usjK2ahO3N6sHyCJzbbbZNHTk0TtQz6F+K6eixvA3KbRv/Rua29A1Hz/m1Qg fBbO37+2/no9cRMvYRIwQnDJuwrYg8YCyRULg1QC+7XXo5zT0Zhi0l9NcLWd8U2q UiswdoxB55diX3x+3dUdbpicJjpRRfeeO+BwcmSaLSVjIXdJNzcg8eiwHmTSoKis af7ZCwpooxMzoZKhgwgAXffepOs9+OTS42AFbIP3XTZ3tU8C8cA= -----END CERTIFICATE-----Generated at Sat Dec 6 17:33:29 2025 by rpki-client