This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: 2yW3mKi04uCuN1AJFnQj6adAokE4fR1yUjhzKSP4Dk4= Subject key identifier: 33:0A:BB:F1:EC:76:9E:B7:E0:B7:92:20:CB:2C:08:AE:19:82:F6:FC Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 3C8BE6A56579E0FF08080F3C84E02FE04732AB7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: F3 Signing time: Mon 01 Dec 2025 16:12:10 +0000 Manifest this update: Mon 01 Dec 2025 16:07:10 +0000 Manifest next update: Thu 04 Dec 2025 20:36:10 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: fkwhydcawjPnQ9JCy5lJo8TPicw2GD0ntzJPUfios0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8b:e6:a5:65:79:e0:ff:08:08:0f:3c:84:e0:2f:e0:47:32:ab:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Dec 1 16:07:10 2025 GMT Not After : Dec 4 20:36:10 2025 GMT Subject: CN=330ABBF1EC769EB7E0B79220CB2C08AE1982F6FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9a:27:d4:9a:d8:33:a0:59:c6:5b:b9:85:2e: d1:bb:c2:e8:5f:90:28:ae:66:7a:ad:b5:c5:98:9b: 64:8d:a1:da:56:1f:53:8d:19:3d:83:d9:2e:4c:61: 74:96:7d:cf:07:09:0a:fd:7f:86:95:9e:f5:a1:88: 4b:14:8a:f1:7d:44:05:8a:27:18:9e:f7:f9:f3:0f: df:e7:cd:17:1f:bc:be:e2:05:3c:1c:b7:e9:28:aa: 78:ad:e8:9c:55:d8:c4:bd:5d:78:f4:94:44:e7:51: 75:b5:f7:d7:59:e3:9b:5c:ce:eb:91:e0:ec:9b:ce: 73:e4:8e:f2:35:ae:a2:cc:0b:51:6b:be:53:8e:7b: 12:db:97:9e:47:cc:70:36:da:ff:d9:38:bb:04:33: ef:c1:f0:d9:03:9c:e8:66:e2:cd:01:4c:27:2d:a9: 9f:cc:ef:54:a6:7d:a9:f2:08:35:92:03:68:7f:ad: 74:a5:b6:90:e6:5b:4f:e5:23:ba:37:56:f9:f1:e4: 00:e4:6f:d9:1b:ce:65:90:58:3f:2a:e0:91:62:ce: 0f:8d:ed:42:2f:9a:cc:66:34:f4:96:f3:24:0a:b9: cb:95:07:d6:b0:b9:27:5f:a5:6f:7c:02:3b:e9:db: e4:b3:a3:3f:46:8e:0f:4f:3f:0b:d6:36:95:0d:f7: c6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0A:BB:F1:EC:76:9E:B7:E0:B7:92:20:CB:2C:08:AE:19:82:F6:FC X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5b:2a:48:87:2f:45:61:db:79:06:19:7b:c8:bd:19:3e:97: dd:46:ce:a1:19:ea:83:f4:17:bd:3a:9c:09:4c:41:ad:eb:39: 43:4d:66:72:53:a4:fb:33:d9:73:56:b7:97:31:b1:09:df:46: d6:12:5e:48:28:71:6a:e5:88:af:f6:b3:62:21:d0:ac:3b:c2: b0:c8:b5:93:3b:9e:05:ea:48:af:e7:fa:4c:65:51:12:b0:86: 3c:b3:1f:f8:56:76:0e:be:7c:a4:d3:9b:a9:e7:05:d3:7f:38: 9b:1d:d4:fc:85:ed:91:c5:84:97:ca:36:02:a3:84:fc:dd:32: 50:51:6a:b6:32:72:05:fb:da:59:9a:d6:68:e4:d2:05:a9:8b: a5:72:e9:7e:9b:3c:92:62:7b:38:52:a7:28:59:25:3a:f2:38: c2:1a:a8:e2:8b:f3:d1:c4:8c:d6:06:13:fe:12:0c:09:bd:a9: 48:cf:ed:67:ff:14:c7:d0:de:80:50:59:75:2d:bd:11:a2:63: a0:e2:b3:66:6a:88:1a:f0:78:12:75:b7:98:18:fa:1c:83:bd: 26:e7:53:95:02:94:5b:7c:cc:e5:96:55:3e:54:cb:32:27:3a: 43:18:d3:a8:27:67:b4:c7:4d:02:b8:c4:98:68:b0:46:df:be: 7d:87:7c:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIvmpWV54P8ICA88hOAv4Ecyq3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNTEyMDExNjA3MTBaFw0yNTEyMDQyMDM2MTBaMDMxMTAvBgNV BAMTKDMzMEFCQkYxRUM3NjlFQjdFMEI3OTIyMENCMkMwOEFFMTk4MkY2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCemifUmtgzoFnGW7mFLtG7wuhf kCiuZnqttcWYm2SNodpWH1ONGT2D2S5MYXSWfc8HCQr9f4aVnvWhiEsUivF9RAWK Jxie9/nzD9/nzRcfvL7iBTwct+koqnit6JxV2MS9XXj0lETnUXW199dZ45tczuuR 4OybznPkjvI1rqLMC1FrvlOOexLbl55HzHA22v/ZOLsEM+/B8NkDnOhm4s0BTCct qZ/M71SmfanyCDWSA2h/rXSltpDmW0/lI7o3Vvnx5ADkb9kbzmWQWD8q4JFizg+N 7UIvmsxmNPSW8yQKucuVB9awuSdfpW98Ajvp2+Szoz9Gjg9PPwvWNpUN98bvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMwq78ex2nrfgt5IgyywIrhmC9vwwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlbKkiHL0Vh23kGGXvIvRk+l91GzqEZ6oP0 F706nAlMQa3rOUNNZnJTpPsz2XNWt5cxsQnfRtYSXkgocWrliK/2s2Ih0Kw7wrDI tZM7ngXqSK/n+kxlURKwhjyzH/hWdg6+fKTTm6nnBdN/OJsd1PyF7ZHFhJfKNgKj hPzdMlBRarYycgX72lma1mjk0gWpi6Vy6X6bPJJiezhSpyhZJTryOMIaqOKL89HE jNYGE/4SDAm9qUjP7Wf/FMfQ3oBQWXUtvRGiY6Dis2ZqiBrweBJ1t5gY+hyDvSbn U5UClFt8zOWWVT5UyzInOkMY06gnZ7THTQK4xJhosEbfvn2HfE8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:56 2025 by rpki-client