This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json) Hash identifier: 5mBl/PwmHRO49A3PYbo/wjO23eCY8iyYLUzk6inDaKY= Subject key identifier: 3B:25:A0:EE:4A:17:BA:D6:EF:FC:15:C4:4F:09:97:66:88:45:A8:B6 Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Certificate serial: 0430FD6ED7BDD54BA3050D84DFFB94DD82E4EF59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft Manifest number: CB Signing time: Sun 07 Dec 2025 03:31:09 +0000 Manifest this update: Sun 07 Dec 2025 03:26:09 +0000 Manifest next update: Wed 10 Dec 2025 06:57:09 +0000 Files and hashes: 1: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: 1rujgp3ER90AW8qlBK0+L7VERt4xLgN/y2lwTaGRS3I=) 2: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:30:fd:6e:d7:bd:d5:4b:a3:05:0d:84:df:fb:94:dd:82:e4:ef:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Validity Not Before: Dec 7 03:26:09 2025 GMT Not After : Dec 10 06:57:09 2025 GMT Subject: CN=3B25A0EE4A17BAD6EFFC15C44F0997668845A8B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:56:22:08:04:52:5f:56:9b:12:db:e5:63: 0f:ef:fd:0f:7a:ee:8b:85:3b:66:7f:bb:4a:a5:f2: cd:d0:2f:8a:f9:04:cd:52:bd:f9:3c:65:56:6c:2a: 26:79:3e:a4:84:96:d6:80:58:e6:85:57:ae:a1:eb: dd:5d:db:0d:dd:5d:9b:96:6c:bb:99:b4:87:94:58: db:5d:80:db:87:6b:0e:bb:45:87:b7:af:b3:ca:5a: e1:58:12:2b:88:d1:3f:78:99:7c:de:d6:f3:7e:9a: fd:a6:12:5e:02:53:d9:77:7e:28:45:02:96:03:b1: fe:ee:b2:f8:84:43:c8:81:fb:0f:fd:76:8e:c7:19: 52:de:f1:68:a7:cb:11:09:ae:93:64:14:48:03:f3: df:ec:dd:3f:6b:50:9d:55:0a:be:4a:5b:2f:b3:5d: a7:6e:1a:39:b6:85:80:48:33:7c:b1:47:1b:95:f2: 89:a4:b6:95:57:90:1b:57:91:40:6d:25:ed:c6:2e: 15:02:6a:6a:2d:62:af:6e:09:20:a4:c7:a4:ca:ad: 24:c3:5f:24:e4:06:f8:f9:15:3b:ff:86:b2:0f:32: de:88:f5:77:9e:53:aa:ac:2b:7e:be:7d:22:9c:b4: f0:13:49:e5:b2:59:3f:f4:bd:be:e2:ca:98:9c:c8: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:25:A0:EE:4A:17:BA:D6:EF:FC:15:C4:4F:09:97:66:88:45:A8:B6 X509v3 Authority Key Identifier: keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:20:d3:b9:30:bf:60:25:28:2f:c8:ba:d6:08:66:ea:b3:55: 57:0d:bd:29:45:bf:2a:e2:92:22:01:8d:a5:d4:4d:0f:59:fe: 5b:05:44:bf:b8:2c:01:28:41:7b:ea:09:47:32:89:95:97:3a: c1:65:03:19:f8:c3:e1:d0:70:c9:c6:a5:dd:c0:3b:e8:ee:54: 5d:61:09:0d:1a:41:c3:06:ed:d3:91:98:5a:63:61:cf:21:b7: a6:ba:86:00:1f:31:43:f3:89:ad:8f:58:bb:c2:b8:10:8b:82: 07:a9:60:da:0f:f6:f5:b5:50:97:45:f9:28:92:30:93:6c:b8: 33:bc:36:54:20:a3:4d:91:eb:6e:a0:de:47:39:8f:ca:12:9a: 7f:50:3c:61:4f:c5:8b:29:73:e0:40:b2:ab:15:12:52:8d:45: 65:21:36:2e:9c:a3:de:b5:be:b0:f9:2b:cd:32:d5:b2:27:f8: 87:fe:ff:25:ca:3a:e4:51:4c:1d:79:3e:e3:c9:42:3d:73:f7: 97:69:3b:cb:f9:22:a2:d3:bd:0b:63:39:11:66:b5:aa:c9:9d: ef:14:63:87:99:ce:b2:d3:c7:bb:17:c1:4f:10:a5:3e:c5:74: fb:92:6e:4f:da:93:db:d3:65:ac:91:d4:26:42:14:23:84:d0: b5:6e:2e:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDD9bte91UujBQ2E3/uU3YLk71kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4 M0ZCN0RDRDAeFw0yNTEyMDcwMzI2MDlaFw0yNTEyMTAwNjU3MDlaMDMxMTAvBgNV BAMTKDNCMjVBMEVFNEExN0JBRDZFRkZDMTVDNDRGMDk5NzY2ODg0NUE4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3VYiCARSX1abEtvlYw/v/Q96 7ouFO2Z/u0ql8s3QL4r5BM1Svfk8ZVZsKiZ5PqSEltaAWOaFV66h691d2w3dXZuW bLuZtIeUWNtdgNuHaw67RYe3r7PKWuFYEiuI0T94mXze1vN+mv2mEl4CU9l3fihF ApYDsf7usviEQ8iB+w/9do7HGVLe8WinyxEJrpNkFEgD89/s3T9rUJ1VCr5KWy+z XaduGjm2hYBIM3yxRxuV8omktpVXkBtXkUBtJe3GLhUCamotYq9uCSCkx6TKrSTD XyTkBvj5FTv/hrIPMt6I9XeeU6qsK36+fSKctPATSeWyWT/0vb7iypicyC+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOyWg7koXutbv/BXETwmXZohFqLYwHwYDVR0j BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1 QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0g07kwv2AlKC/IutYIZuqzVVcNvSlFvyri kiIBjaXUTQ9Z/lsFRL+4LAEoQXvqCUcyiZWXOsFlAxn4w+HQcMnGpd3AO+juVF1h CQ0aQcMG7dORmFpjYc8ht6a6hgAfMUPzia2PWLvCuBCLggepYNoP9vW1UJdF+SiS MJNsuDO8NlQgo02R626g3kc5j8oSmn9QPGFPxYspc+BAsqsVElKNRWUhNi6co961 vrD5K80y1bIn+If+/yXKOuRRTB15PuPJQj1z95dpO8v5IqLTvQtjORFmtarJne8U Y4eZzrLTx7sXwU8QpT7FdPuSbk/ak9vTZayR1CZCFCOE0LVuLj8= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:11 2025 by rpki-client