This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: 3bgEnKs+IK67HXbmHc9p9ojMtaMVvECefTgvYvQQwXA= Subject key identifier: 11:A8:74:70:50:1B:04:89:A6:2C:65:3A:8C:44:6B:6A:18:8B:CD:C9 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 30D4FCE2E6065ED82B715252F61203B1AB775C53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 0218 Signing time: Wed 17 Dec 2025 15:51:54 +0000 Manifest this update: Wed 17 Dec 2025 15:46:54 +0000 Manifest next update: Sun 21 Dec 2025 03:18:54 +0000 Files and hashes: 1: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: hcvHa1LWfJneSrDtzO7ovKCiv8EbiUYA14pIXecpfdo=) 2: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 3: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) 4: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d4:fc:e2:e6:06:5e:d8:2b:71:52:52:f6:12:03:b1:ab:77:5c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Dec 17 15:46:54 2025 GMT Not After : Dec 21 03:18:54 2025 GMT Subject: CN=11A87470501B0489A62C653A8C446B6A188BCDC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:aa:61:00:31:bd:f0:b1:ef:8c:33:cd:bb: 0b:89:33:63:ca:75:85:3c:8d:7c:3a:d4:fb:67:df: d0:f1:69:e6:70:3d:55:5b:a1:42:87:9f:39:d2:a0: 9e:e1:36:b3:ad:07:a6:5f:09:0e:a2:d9:8f:74:3f: e3:8c:c5:d2:46:c0:f3:87:e8:aa:50:33:5a:ec:36: 1c:4c:14:7f:29:1e:6a:30:9e:4f:c2:c0:d4:cf:64: 55:61:b0:4f:c5:ef:eb:ef:db:8e:ff:81:1f:f2:e2: c4:41:e2:40:24:e9:33:d7:d8:83:f4:30:e2:bb:58: 1e:61:b3:68:cd:e7:07:23:7e:fa:4f:29:54:62:b9: 77:f1:ad:38:1c:2d:1e:83:50:66:ab:bc:dd:ed:b4: c3:fb:ab:06:c9:b7:da:76:5a:5b:88:68:b4:3c:ca: a9:6b:d2:7b:b1:f7:a5:f2:18:d4:7d:0f:fc:34:a8: 82:9c:57:45:c5:77:25:c2:5b:cb:f9:fb:1e:60:64: c1:ee:17:f5:5f:ff:41:38:47:17:6c:c1:df:65:be: 81:94:28:5b:53:d6:c8:25:d7:6f:c7:48:65:5b:c6: 75:7e:f7:d6:d4:72:05:d0:2c:90:3c:ff:dc:67:77: a0:32:84:c0:c3:80:dc:74:fc:1f:75:c6:4e:6e:9f: 59:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A8:74:70:50:1B:04:89:A6:2C:65:3A:8C:44:6B:6A:18:8B:CD:C9 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:3c:a4:cd:ed:05:af:bc:16:3e:b7:12:fa:e0:c8:f0:09:81: a1:2e:df:5b:94:21:37:ba:0b:3b:7d:ca:2c:22:88:20:53:e1: 77:1a:81:0c:ad:e6:b2:c5:e6:c9:17:d3:92:5e:e1:dc:40:44: c5:a2:a1:5b:42:9b:c5:aa:6d:76:65:22:0e:93:8a:f4:1f:96: 7a:3a:78:6d:52:16:94:2a:a5:93:c1:81:45:48:b2:e8:32:17: 5b:ec:99:26:dd:38:42:3b:cf:f5:f5:87:9a:ec:97:48:45:12: ca:96:22:53:b3:57:16:f0:b5:1b:f5:a8:52:14:7f:66:9a:a1: ba:c7:5d:cf:41:3f:a3:56:20:98:7a:b5:6c:69:00:b8:e2:75: 0b:42:ea:10:fb:53:3b:9a:78:e0:8a:8e:e1:3d:ce:e8:66:cd: dc:b9:be:45:99:61:57:91:1b:63:28:04:aa:05:bf:51:2f:7b: ef:34:a8:2e:f5:a3:2f:44:e7:65:c3:fe:eb:30:f1:66:15:22: 60:1c:97:49:04:f5:ea:7a:b9:02:8f:56:28:d3:5b:80:10:b5: 08:95:c3:79:44:e9:9f:cc:07:fa:eb:51:58:c8:7a:c2:2b:d0: 84:62:06:a8:cd:f3:c0:ac:55:74:2d:7a:03:9a:f8:8e:42:0f: 24:88:4a:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNT84uYGXtgrcVJS9hIDsat3XFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTEyMTcxNTQ2NTRaFw0yNTEyMjEwMzE4NTRaMDMxMTAvBgNV BAMTKDExQTg3NDcwNTAxQjA0ODlBNjJDNjUzQThDNDQ2QjZBMTg4QkNEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbEKphADG98LHvjDPNuwuJM2PK dYU8jXw61Ptn39DxaeZwPVVboUKHnznSoJ7hNrOtB6ZfCQ6i2Y90P+OMxdJGwPOH 6KpQM1rsNhxMFH8pHmownk/CwNTPZFVhsE/F7+vv247/gR/y4sRB4kAk6TPX2IP0 MOK7WB5hs2jN5wcjfvpPKVRiuXfxrTgcLR6DUGarvN3ttMP7qwbJt9p2WluIaLQ8 yqlr0nux96XyGNR9D/w0qIKcV0XFdyXCW8v5+x5gZMHuF/Vf/0E4Rxdswd9lvoGU KFtT1sgl12/HSGVbxnV+99bUcgXQLJA8/9xnd6AyhMDDgNx0/B91xk5un1nFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEah0cFAbBImmLGU6jERrahiLzckwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKA8pM3tBa+8Fj63EvrgyPAJgaEu31uUITe6 Czt9yiwiiCBT4XcagQyt5rLF5skX05Je4dxARMWioVtCm8WqbXZlIg6TivQflno6 eG1SFpQqpZPBgUVIsugyF1vsmSbdOEI7z/X1h5rsl0hFEsqWIlOzVxbwtRv1qFIU f2aaobrHXc9BP6NWIJh6tWxpALjidQtC6hD7UzuaeOCKjuE9zuhmzdy5vkWZYVeR G2MoBKoFv1Eve+80qC71oy9E52XD/usw8WYVImAcl0kE9ep6uQKPVijTW4AQtQiV w3lE6Z/MB/rrUVjIesIr0IRiBqjN88CsVXQtegOa+I5CDySISpU= -----END CERTIFICATE-----Generated at Fri Dec 19 09:45:06 2025 by rpki-client