This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft File: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft (raw, json) Hash identifier: dLo9/RhaDqFDppoMXn3tdg4ZYPqSENOGVoTpRnXlNzg= Subject key identifier: E4:17:05:A5:00:44:DB:C3:F2:A0:EE:4E:F8:04:B3:E8:25:A9:03:F0 Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 03FE8788B630AF901D6724AD877BADC141A724AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft Manifest number: 0121 Signing time: Mon 01 Dec 2025 18:20:52 +0000 Manifest this update: Mon 01 Dec 2025 18:15:52 +0000 Manifest next update: Thu 04 Dec 2025 18:57:52 +0000 Files and hashes: 1: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: bBnfqhprKZxO7GNHi6JFSi7ubIWOVMTy7/ydlUAr+qE=) 2: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl (hash: gjEoEQZhjDOe3ble6/FD+TsDOaydzao2Eor4Fkoocec=) 3: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: XQ5YOO3QMAmUiXXyDyAvfXAeHqliwoa7oF/Rg8qefuw=) 4: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: lPAaUMCnmORN0lcIkL1SdTQ//TRobbXWIgBrv9ai9Yc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fe:87:88:b6:30:af:90:1d:67:24:ad:87:7b:ad:c1:41:a7:24:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Dec 1 18:15:52 2025 GMT Not After : Dec 4 18:57:52 2025 GMT Subject: CN=E41705A50044DBC3F2A0EE4EF804B3E825A903F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:75:0e:ff:5b:b6:de:d6:4e:20:cd:ec:6d: 9a:24:ef:8f:d0:ba:e3:09:ff:92:60:de:27:c2:04: 58:ed:73:38:6a:55:82:3b:6c:78:f0:f2:10:bb:c6: f1:83:72:63:d4:1e:e3:ff:50:1d:5a:9c:57:f6:05: d5:2b:02:0f:e1:d8:04:59:f3:2b:f1:02:4a:8d:fd: 04:74:8b:e9:7e:1a:86:32:9f:ae:a7:ba:08:85:0c: c5:c9:41:f8:9f:6f:7c:6f:ae:d0:32:4b:51:b2:1b: 64:2c:25:8d:c9:cf:86:34:b6:08:e0:d4:e6:ba:55: a3:86:b7:a6:18:65:00:35:e2:41:0d:a9:d0:5f:48: 11:6e:4e:1e:7b:7a:70:c6:8f:f3:c1:9b:fb:fd:ee: 2f:63:b0:d8:10:c9:a3:6f:f2:53:69:a1:16:05:75: 0f:14:1b:be:6e:60:74:56:16:b4:7f:36:ef:07:43: 36:05:2a:97:cc:6c:ba:cb:7d:02:5a:bd:1b:e8:70: e1:63:e1:d8:ab:46:e8:08:35:d5:e3:6b:4d:64:b8: 30:e7:9b:74:88:f5:b5:59:85:be:45:d3:e9:42:47: d0:09:c6:37:51:6e:89:b6:34:16:51:87:50:8c:32: 44:43:01:0a:31:7c:6a:b4:cb:3b:69:fe:6a:8c:28: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:17:05:A5:00:44:DB:C3:F2:A0:EE:4E:F8:04:B3:E8:25:A9:03:F0 X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f0:c4:22:82:6c:4d:0f:87:69:00:45:c5:d4:4c:1a:82:16: e6:26:5e:23:03:ea:2a:51:f1:7d:f5:5e:0c:f7:50:c9:83:6f: 10:c6:a7:c6:50:ed:95:60:76:ec:52:71:c9:c0:77:e9:29:bd: d2:a2:7c:cf:68:6e:ee:aa:88:a6:64:29:36:a7:b3:0c:f0:db: b2:44:80:3f:e2:06:9a:76:1e:de:cd:98:4a:6a:55:7d:d0:b7: 28:04:73:37:c1:09:0f:e2:fd:6e:fb:1d:34:c1:e4:ae:4e:58: 38:73:f2:5a:c5:85:b7:4e:69:36:96:19:a0:cd:ce:d1:65:a4: 04:c0:b9:46:df:bb:ee:f2:cf:0b:d4:1f:5b:3d:60:2e:86:61: 08:ba:9e:5f:03:9f:fb:0e:f0:0a:4f:41:0a:88:68:1f:eb:07: 4a:ef:21:8a:82:25:c5:60:ad:e2:03:af:10:6e:bf:f0:c7:38: 9c:2c:22:c5:81:b9:84:14:00:36:d6:09:61:0a:5a:c2:3c:c7: e6:d7:1c:45:69:a7:23:c6:38:4b:d4:f7:c7:bf:7d:f0:e0:d7: 6f:b7:08:3f:bf:55:b8:4e:a3:9a:e3:41:ee:18:b2:af:71:f2: ee:5a:16:84:da:26:e8:42:29:2e:47:14:fc:33:22:12:6d:d0: ed:26:6b:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/6HiLYwr5AdZySth3utwUGnJKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNTEyMDExODE1NTJaFw0yNTEyMDQxODU3NTJaMDMxMTAvBgNV BAMTKEU0MTcwNUE1MDA0NERCQzNGMkEwRUU0RUY4MDRCM0U4MjVBOTAzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnBXUO/1u23tZOIM3sbZok74/Q uuMJ/5Jg3ifCBFjtczhqVYI7bHjw8hC7xvGDcmPUHuP/UB1anFf2BdUrAg/h2ARZ 8yvxAkqN/QR0i+l+GoYyn66nugiFDMXJQfifb3xvrtAyS1GyG2QsJY3Jz4Y0tgjg 1Oa6VaOGt6YYZQA14kENqdBfSBFuTh57enDGj/PBm/v97i9jsNgQyaNv8lNpoRYF dQ8UG75uYHRWFrR/Nu8HQzYFKpfMbLrLfQJavRvocOFj4dirRugINdXja01kuDDn m3SI9bVZhb5F0+lCR9AJxjdRbom2NBZRh1CMMkRDAQoxfGq0yztp/mqMKHPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5BcFpQBE28PyoO5O+ASz6CWpA/AwHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMz RTFCNTMwNjMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfwxCKCbE0Ph2kARcXUTBqCFuYmXiMD6ipR 8X31Xgz3UMmDbxDGp8ZQ7ZVgduxSccnAd+kpvdKifM9obu6qiKZkKTanswzw27JE gD/iBpp2Ht7NmEpqVX3QtygEczfBCQ/i/W77HTTB5K5OWDhz8lrFhbdOaTaWGaDN ztFlpATAuUbfu+7yzwvUH1s9YC6GYQi6nl8Dn/sO8ApPQQqIaB/rB0rvIYqCJcVg reIDrxBuv/DHOJwsIsWBuYQUADbWCWEKWsI8x+bXHEVppyPGOEvU98e/ffDg12+3 CD+/VbhOo5rjQe4Ysq9x8u5aFoTaJuhCKS5HFPwzIhJt0O0ma/A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:05 2025 by rpki-client