This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json) Hash identifier: dQni5iSgAYv4oRzTNNWJ/vX1wFlknbO1X6nODx9NqNE= Subject key identifier: 63:C9:88:8D:4A:0A:89:B4:50:02:F4:A1:11:13:D0:83:29:29:98:8D Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863 Certificate serial: 55B837B0280755AF4A9D4824981F21547E06C5EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft Manifest number: 0194 Signing time: Tue 02 Dec 2025 15:12:23 +0000 Manifest this update: Tue 02 Dec 2025 15:07:23 +0000 Manifest next update: Fri 05 Dec 2025 23:39:23 +0000 Files and hashes: 1: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: RP+/bytQ4TZOikqpCQ0nn+bqJlq0ApWL83FInuSd/d8=) 2: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: BLd6q/emexfVlm7VngzEQ5OJ7RS62yZ/WvulX36XvOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b8:37:b0:28:07:55:af:4a:9d:48:24:98:1f:21:54:7e:06:c5:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863 Validity Not Before: Dec 2 15:07:23 2025 GMT Not After : Dec 5 23:39:23 2025 GMT Subject: CN=63C9888D4A0A89B45002F4A11113D0832929988D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6f:94:a8:35:31:13:43:cc:4f:bb:37:e1:b6: d5:1c:d8:eb:0d:ee:ed:e9:1a:aa:b0:d5:b8:b4:69: dc:7d:99:8a:04:3c:6e:c4:ea:ec:be:a5:6f:73:53: f8:9d:1c:9e:48:cf:a7:cb:8c:72:ca:bb:90:93:f8: a5:c7:84:67:c3:99:be:34:bd:84:8d:8b:93:68:e6: d7:dd:9f:1a:26:58:be:cc:e9:da:24:a4:e1:f1:3a: 55:b9:b6:2a:c7:6e:d8:a2:47:9a:6a:53:3c:4f:d0: 11:dc:95:58:df:cf:26:e1:d2:c7:b8:87:f4:2e:a2: 49:8c:44:ee:f0:cd:8c:a0:1a:31:b0:72:43:73:37: 00:5a:d3:39:da:9d:20:61:a0:da:43:a4:da:d8:88: 90:77:3b:20:59:c4:ae:87:d5:6e:27:54:26:d1:7c: 18:ba:9e:a1:08:57:b0:83:54:db:f2:6c:ca:b6:3a: 0c:30:f2:7d:9a:7c:7b:a7:1f:1d:4b:5c:ef:7d:62: 40:04:7a:15:6a:5e:70:3a:55:fd:04:a3:ed:a9:2f: b9:3b:1f:1b:9e:5b:60:4f:53:59:6c:7a:a7:45:15: 39:f3:a3:d3:b0:6a:6f:ab:02:ab:9b:ea:09:4e:f1: ec:95:2a:f3:23:7c:b9:ce:dc:c8:03:13:b7:ba:24: 48:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C9:88:8D:4A:0A:89:B4:50:02:F4:A1:11:13:D0:83:29:29:98:8D X509v3 Authority Key Identifier: keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:dd:a1:4f:34:57:54:e4:93:ae:cd:9e:49:3d:8d:15:e8:e1: f0:94:5a:c3:6e:3a:4e:98:8b:f9:8b:02:29:75:6f:70:31:aa: c5:ee:54:02:c7:b2:cf:88:a8:da:15:18:72:88:95:87:c6:2f: 2a:64:66:57:eb:41:54:1a:04:2b:f1:27:b4:85:67:39:58:26: 19:7d:f1:e5:25:de:19:5a:2b:c8:64:2f:76:84:c8:b9:ae:b7: f7:aa:2c:6b:4c:b3:52:d8:29:08:80:d6:99:0a:a6:cd:98:c0: 0a:16:72:b9:78:72:b5:eb:74:32:0a:9f:97:ad:e8:b9:9c:ac: 03:cf:ae:b3:de:1f:54:4d:22:33:a9:f2:de:0f:c2:91:76:60: c6:fb:a7:fe:50:4b:d7:8a:16:75:35:c4:5e:67:db:01:62:f8: 33:87:62:cb:cd:a0:11:98:5f:63:31:b8:cf:2f:70:7b:af:a7: 1b:ff:be:ad:b7:a6:b1:eb:90:3c:91:54:47:1b:5c:da:09:b1: 76:c8:8a:11:73:31:52:7a:40:b8:8c:d7:a8:6b:06:28:3a:0d: 54:3a:be:81:af:af:ed:c0:2b:0f:b6:61:61:aa:0e:29:17:36: 5b:f7:d1:84:e7:de:0b:8d:9b:8c:70:e9:db:9d:54:0d:22:ef: fe:5b:10:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbg3sCgHVa9KnUgkmB8hVH4GxeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEy QTQwNzg2MzAeFw0yNTEyMDIxNTA3MjNaFw0yNTEyMDUyMzM5MjNaMDMxMTAvBgNV BAMTKDYzQzk4ODhENEEwQTg5QjQ1MDAyRjRBMTExMTNEMDgzMjkyOTk4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOb5SoNTETQ8xPuzfhttUc2OsN 7u3pGqqw1bi0adx9mYoEPG7E6uy+pW9zU/idHJ5Iz6fLjHLKu5CT+KXHhGfDmb40 vYSNi5No5tfdnxomWL7M6dokpOHxOlW5tirHbtiiR5pqUzxP0BHclVjfzybh0se4 h/QuokmMRO7wzYygGjGwckNzNwBa0znanSBhoNpDpNrYiJB3OyBZxK6H1W4nVCbR fBi6nqEIV7CDVNvybMq2Ogww8n2afHunHx1LXO99YkAEehVqXnA6Vf0Eo+2pL7k7 HxueW2BPU1lseqdFFTnzo9Owam+rAqub6glO8eyVKvMjfLnO3MgDE7e6JEj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8mIjUoKibRQAvShERPQgykpmI0wHwYDVR0j BBgwFoAUAMuzFKM5ZQiYRSfcnj+R2ipAeGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzRkYzVlMS0xZDU1LTQ5ZDItOTNkNC01ZDk4ZWFkNzc5ZWQvMC8wMENCQjMxNEEz Mzk2NTA4OTg0NTI3REM5RTNGOTFEQTJBNDA3ODYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEyQTQw Nzg2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkx REEyQTQwNzg2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjdoU80V1Tkk67Nnkk9jRXo4fCUWsNuOk6Y i/mLAil1b3AxqsXuVALHss+IqNoVGHKIlYfGLypkZlfrQVQaBCvxJ7SFZzlYJhl9 8eUl3hlaK8hkL3aEyLmut/eqLGtMs1LYKQiA1pkKps2YwAoWcrl4crXrdDIKn5et 6LmcrAPPrrPeH1RNIjOp8t4PwpF2YMb7p/5QS9eKFnU1xF5n2wFi+DOHYsvNoBGY X2MxuM8vcHuvpxv/vq23prHrkDyRVEcbXNoJsXbIihFzMVJ6QLiM16hrBig6DVQ6 voGvr+3AKw+2YWGqDikXNlv30YTn3guNm4xw6dudVA0i7/5bEBA= -----END CERTIFICATE-----Generated at Wed Dec 3 16:06:59 2025 by rpki-client