This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft File: C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json) Hash identifier: Hwqoei4gNkBZhad/6F0GFxjwUxVWg5oWJ4LjVqdX9qg= Subject key identifier: CD:30:49:BF:60:C9:F3:CB:64:8C:9F:16:92:80:06:60:50:D7:91:2D Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB Certificate issuer: /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Certificate serial: 672A81D01A3294AE2142069B7BD978E04E94898C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft Manifest number: 0541 Signing time: Wed 10 Dec 2025 07:11:12 +0000 Manifest this update: Wed 10 Dec 2025 07:06:12 +0000 Manifest next update: Sat 13 Dec 2025 10:11:12 +0000 Files and hashes: 1: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: BDx4i2a4BYM3v0dGczfBklRepdAm0ptx8LXvALg8yN4=) 2: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: Q1wQYF2XtInj2d/t3tW21h1V//UQoT/xphWVYkOXt/o=) 3: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: zLiivndeuuRmiqPurXuqSo8rmLZskUTJQAWFfVjjmnQ=) 4: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: N1MXVORdbt5FpdZaRMnKXk8HUDVu1M5FZBwZhaokx8M=) 5: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: fLwaxSiPiMGYGYjTwweBcQlSgL4S11+kugIMQEQ/4F8=) 6: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: 6GuT0WNGNAuW+mMwzOZfOwnrZJiyz2WtE/5vgADo9MY=) 7: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: 1buHOMlubpPb1vK9bmP2byXKlPQ3RocJRoJnWCufqIM=) 8: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: uvhqtV8uEEbNsOu59i23Z8TX0H5FC1mXzQyMK7bnWDk=) 9: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: PZwOUUZx2EQHdYrYeYouuZVw5NeiiX9go4HwzvpQyZo=) 10: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: IxoIU9qeskgyNiyRBaWp27OvX1vOQmtVbnmjBXacBdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2a:81:d0:1a:32:94:ae:21:42:06:9b:7b:d9:78:e0:4e:94:89:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Validity Not Before: Dec 10 07:06:12 2025 GMT Not After : Dec 13 10:11:12 2025 GMT Subject: CN=CD3049BF60C9F3CB648C9F169280066050D7912D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:1b:47:c8:64:1f:14:32:2a:d8:32:5f:22: 92:50:d9:7d:00:23:66:24:d8:30:a7:6b:c4:77:2a: c4:5e:3a:d7:1b:23:0a:24:69:4c:f0:8b:20:92:5e: 75:17:66:d8:a0:c1:70:71:a6:84:10:23:c0:ad:11: 51:c5:42:a1:79:50:68:39:80:0a:fe:d9:21:3d:80: 5e:0e:85:be:d5:bd:16:03:84:23:88:f4:b3:36:18: 30:9a:7e:af:6b:f6:2b:82:22:b9:9b:d3:a4:ea:14: 46:10:42:ad:e7:70:a2:c6:16:12:1e:f0:ff:75:11: d4:f1:af:01:6d:4b:54:28:00:48:96:ad:26:7a:39: 73:f2:01:21:aa:25:58:be:70:48:89:04:77:5c:1c: ed:43:eb:62:d9:ec:50:4e:9c:f7:19:4f:da:32:9a: bb:a0:18:73:db:db:f4:4c:f0:6c:96:4e:cf:47:49: 49:cc:1f:5d:cc:71:db:88:c0:26:07:cf:55:0d:63: 00:14:d1:90:04:ec:fb:80:c7:f8:24:a1:c1:ed:79: 0c:8c:19:8f:f2:51:d2:50:a8:99:26:fc:8e:11:57: 3e:67:d8:31:73:e6:0f:c4:fd:5f:6a:c0:b3:36:9b: 2f:82:74:c2:e4:77:70:54:cb:26:ce:16:c6:9f:88: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:30:49:BF:60:C9:F3:CB:64:8C:9F:16:92:80:06:60:50:D7:91:2D X509v3 Authority Key Identifier: keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7b:4e:dd:b5:f8:18:98:df:bc:e0:a5:cf:47:c0:9f:97:bb: 25:f2:32:ea:f5:17:ce:f0:4c:85:7c:3e:cb:1c:3c:9f:9a:df: f8:77:c9:f6:ab:1e:6b:cc:b2:bb:03:ae:84:95:f6:05:9f:7e: 66:6f:3c:2d:56:f6:83:c2:1a:73:ac:32:01:c6:11:e5:28:5c: 20:8a:76:f2:2c:b1:3d:89:93:7c:4a:c9:3b:fe:f1:09:37:c6: f2:3e:14:51:99:8c:df:fc:1c:9a:08:34:5d:53:17:43:13:fc: 58:ab:cd:eb:56:08:91:b3:a8:bd:d5:d9:77:de:0b:93:0b:0a: 7e:e5:19:6f:cf:58:cd:a3:07:b0:56:27:7d:53:d6:5f:f2:0f: 45:4d:1c:a0:57:2e:b7:ca:1a:13:51:11:62:9c:5a:a9:5e:0e: b9:96:94:6b:b6:e3:be:55:93:c3:55:98:ec:6c:a8:2d:1d:76: 05:ab:b3:7b:7a:57:d3:dc:4c:51:db:95:8c:0a:46:fd:e7:4d: 76:ed:9d:56:89:51:3d:33:de:15:d8:e6:78:f7:5d:78:f2:8f: 77:12:53:21:12:02:dc:e9:80:e5:65:82:12:1c:87:8f:3f:d7: 82:f6:ec:be:5b:75:c2:e5:a4:12:a3:87:58:2b:11:33:5a:3d: a6:50:17:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyqB0BoylK4hQgabe9l44E6UiYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZC RUZCM0FCQjAeFw0yNTEyMTAwNzA2MTJaFw0yNTEyMTMxMDExMTJaMDMxMTAvBgNV BAMTKENEMzA0OUJGNjBDOUYzQ0I2NDhDOUYxNjkyODAwNjYwNTBENzkxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uxtHyGQfFDIq2DJfIpJQ2X0A I2Yk2DCna8R3KsReOtcbIwokaUzwiyCSXnUXZtigwXBxpoQQI8CtEVHFQqF5UGg5 gAr+2SE9gF4Ohb7VvRYDhCOI9LM2GDCafq9r9iuCIrmb06TqFEYQQq3ncKLGFhIe 8P91EdTxrwFtS1QoAEiWrSZ6OXPyASGqJVi+cEiJBHdcHO1D62LZ7FBOnPcZT9oy mrugGHPb2/RM8GyWTs9HSUnMH13McduIwCYHz1UNYwAU0ZAE7PuAx/gkocHteQyM GY/yUdJQqJkm/I4RVz5n2DFz5g/E/V9qwLM2my+CdMLkd3BUyybOFsafiA/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzTBJv2DJ88tkjJ8WkoAGYFDXkS0wHwYDVR0j BBgwFoAUyOwY4CdjmwW8WKIijRJkhr77OrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzI4OTcwNi1hNGY0LTRlMWYtOWE2ZS0wMWM5YzUzY2Q4ZjkvMC9DOEVDMThFMDI3 NjM5QjA1QkM1OEEyMjI4RDEyNjQ4NkJFRkIzQUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZCRUZC M0FCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMyODk3MDYtYTRmNC00ZTFmLTlh NmUtMDFjOWM1M2NkOGY5LzAvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0 ODZCRUZCM0FCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHl7Tt21+BiY37zgpc9HwJ+XuyXyMur1F87w TIV8PsscPJ+a3/h3yfarHmvMsrsDroSV9gWffmZvPC1W9oPCGnOsMgHGEeUoXCCK dvIssT2Jk3xKyTv+8Qk3xvI+FFGZjN/8HJoINF1TF0MT/FirzetWCJGzqL3V2Xfe C5MLCn7lGW/PWM2jB7BWJ31T1l/yD0VNHKBXLrfKGhNREWKcWqleDrmWlGu2475V k8NVmOxsqC0ddgWrs3t6V9PcTFHblYwKRv3nTXbtnVaJUT0z3hXY5nj3XXjyj3cS UyESAtzpgOVlghIch48/14L27L5bdcLlpBKjh1grETNaPaZQF2k= -----END CERTIFICATE-----Generated at Thu Dec 11 18:24:40 2025 by rpki-client