This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft File: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft (raw, json) Hash identifier: Rh88O++TvnxuiWKMDaO5bjUKvF3CrQc6pOP8c9X2gN8= Subject key identifier: 4A:8A:99:69:78:D9:26:D0:9A:4C:CF:8D:5B:1F:9C:DE:75:DC:9A:CB Authority key identifier: C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 Certificate issuer: /CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Certificate serial: 28B0A09B374BA4D1F3334784C377C2A951F029B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft Manifest number: 50 Signing time: Mon 29 Dec 2025 15:12:12 +0000 Manifest this update: Mon 29 Dec 2025 15:07:12 +0000 Manifest next update: Thu 01 Jan 2026 23:21:12 +0000 Files and hashes: 1: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl (hash: RrPpCnegb/0tigPC2Ieg3CPG6HfXn7KZUCSLSD7o20s=) 2: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: gE+l6BtwnE696koy6eWA+mSXnnRQKbYtsxfkWucx8c8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 23:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b0:a0:9b:37:4b:a4:d1:f3:33:47:84:c3:77:c2:a9:51:f0:29:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Validity Not Before: Dec 29 15:07:12 2025 GMT Not After : Jan 1 23:21:12 2026 GMT Subject: CN=4A8A996978D926D09A4CCF8D5B1F9CDE75DC9ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:8f:a8:d4:3b:56:1f:92:38:a0:34:5e:95: 6d:3d:d6:0e:ff:63:31:f0:f1:fc:cc:dc:d8:65:9a: 2f:05:a2:d5:bf:39:94:a1:be:5f:76:02:13:f4:b1: bb:38:e0:62:26:08:e3:90:31:19:fa:62:57:9a:46: f5:54:63:d5:6d:a3:ba:e0:94:e8:79:74:ed:e4:96: 6d:cd:fb:c1:b5:a2:ab:b4:6e:b0:5d:ef:9b:31:79: 36:70:68:b1:c2:7b:ef:e3:70:d0:55:a5:77:4a:21: 38:a0:5c:c6:92:63:b3:20:4a:49:46:0f:3b:1b:e7: 3f:29:6f:9b:53:1d:c3:8d:dd:50:96:c7:99:d0:fe: 2f:57:6b:04:6c:e3:2a:f7:7b:b5:4c:ee:c9:98:e1: e2:7f:5c:83:d9:df:ed:fb:86:07:0c:c3:9f:77:36: e4:9a:1b:24:a9:5a:35:7e:50:4f:9e:e7:58:46:7e: a3:a7:19:39:c5:51:a3:21:72:02:cc:99:38:ce:bb: 2d:a1:30:36:32:80:42:6c:cd:0f:83:a4:b2:81:10: 89:2e:a2:cf:af:ba:97:23:17:5f:fa:66:67:61:05: 69:f5:ef:32:31:03:41:9a:3f:cf:d1:c7:4b:50:9c: 6a:ee:91:82:1e:eb:81:f1:5b:19:42:55:6a:15:c0: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8A:99:69:78:D9:26:D0:9A:4C:CF:8D:5B:1F:9C:DE:75:DC:9A:CB X509v3 Authority Key Identifier: keyid:C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c5:69:ee:62:f7:e3:82:43:21:65:e6:68:45:62:05:59:71: 36:4b:8e:c8:e7:b5:4a:dd:c2:62:b5:e9:e1:9c:1b:aa:f5:4b: 54:d9:35:6e:68:ed:f7:ad:c6:54:06:e0:ec:2c:7e:ca:a0:97: b2:d8:fd:84:21:46:fd:1e:eb:a0:db:44:1e:67:80:11:74:40: 73:89:01:e2:77:8a:31:0c:31:18:ec:b2:43:ff:71:87:8b:fb: 4f:47:dd:81:30:c9:70:97:2f:d2:d6:e3:01:96:6a:06:dd:68: f1:09:86:6c:e7:b7:89:82:19:f9:31:6f:f1:6a:1e:b6:76:67: ae:95:cf:01:03:d4:78:4b:dd:bf:a1:43:19:84:5a:0e:23:24: dc:a0:10:6b:39:2d:59:6a:17:84:d9:50:3a:2c:78:4a:18:74: ff:d5:16:0e:05:6b:c9:cd:a4:2a:9d:47:05:44:90:56:93:3d: 07:99:cc:b3:a8:92:e8:e1:7a:46:62:4a:a1:58:ae:80:55:c1: 93:f1:cb:12:ae:99:b4:02:40:85:6a:b7:e7:ef:0f:0b:b4:c3: 28:e2:aa:99:30:35:35:84:33:eb:7a:9d:40:af:a3:45:d9:05: 09:cf:1d:56:06:c8:9e:1e:b6:73:75:6c:6a:1d:71:a2:d7:d6: 5f:64:4d:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLCgmzdLpNHzM0eEw3fCqVHwKbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3 NUU0RjU4NTAeFw0yNTEyMjkxNTA3MTJaFw0yNjAxMDEyMzIxMTJaMDMxMTAvBgNV BAMTKDRBOEE5OTY5NzhEOTI2RDA5QTRDQ0Y4RDVCMUY5Q0RFNzVEQzlBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRo+o1DtWH5I4oDRelW091g7/ YzHw8fzM3Nhlmi8FotW/OZShvl92AhP0sbs44GImCOOQMRn6YleaRvVUY9Vto7rg lOh5dO3klm3N+8G1oqu0brBd75sxeTZwaLHCe+/jcNBVpXdKITigXMaSY7MgSklG Dzsb5z8pb5tTHcON3VCWx5nQ/i9XawRs4yr3e7VM7smY4eJ/XIPZ3+37hgcMw593 NuSaGySpWjV+UE+e51hGfqOnGTnFUaMhcgLMmTjOuy2hMDYygEJszQ+DpLKBEIku os+vupcjF1/6ZmdhBWn17zIxA0GaP8/Rx0tQnGrukYIe64HxWxlCVWoVwPOJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSoqZaXjZJtCaTM+NWx+c3nXcmsswHwYDVR0j BBgwFoAUwffMDI1eMVWWrxD27PRvLHXk9YUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjYyNDdmOS0xZWVjLTQ5MDEtYmE0Mi05ZGYyNjQyNGY1YjgvMC9DMUY3Q0MwQzhE NUUzMTU1OTZBRjEwRjZFQ0Y0NkYyQzc1RTRGNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3NUU0 RjU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY2MjQ3ZjktMWVlYy00OTAxLWJh NDItOWRmMjY0MjRmNWI4LzAvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZG MkM3NUU0RjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/Fae5i9+OCQyFl5mhFYgVZcTZLjsjntUrd wmK16eGcG6r1S1TZNW5o7fetxlQG4Owsfsqgl7LY/YQhRv0e66DbRB5ngBF0QHOJ AeJ3ijEMMRjsskP/cYeL+09H3YEwyXCXL9LW4wGWagbdaPEJhmznt4mCGfkxb/Fq HrZ2Z66VzwED1HhL3b+hQxmEWg4jJNygEGs5LVlqF4TZUDoseEoYdP/VFg4Fa8nN pCqdRwVEkFaTPQeZzLOokujhekZiSqFYroBVwZPxyxKumbQCQIVqt+fvDwu0wyji qpkwNTWEM+t6nUCvo0XZBQnPHVYGyJ4etnN1bGodcaLX1l9kTb8= -----END CERTIFICATE-----Generated at Wed Dec 31 20:13:22 2025 by rpki-client