This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: pTXxGQ9s/8FCFuWj3qV/mUO9VeSHi8nRC6YJqhZPEy4= Subject key identifier: 89:5D:FC:70:35:E3:93:D1:01:7E:8A:BC:88:29:25:A5:31:22:E5:B4 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 4D86CF7E06BB27FECC786FE7F9DBDF9DDA9BFCCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 020A Signing time: Tue 02 Dec 2025 10:52:27 +0000 Manifest this update: Tue 02 Dec 2025 10:47:27 +0000 Manifest next update: Fri 05 Dec 2025 12:08:27 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: PKPUiMZMx1GyPAXbSexcXnztsj6IN/YVapnE+DtioUY=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:86:cf:7e:06:bb:27:fe:cc:78:6f:e7:f9:db:df:9d:da:9b:fc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Dec 2 10:47:27 2025 GMT Not After : Dec 5 12:08:27 2025 GMT Subject: CN=895DFC7035E393D1017E8ABC882925A53122E5B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:9a:20:31:02:17:ca:1d:2e:07:3d:06:8e: 89:61:fa:66:74:dc:17:81:34:e5:30:21:15:74:73: 0a:a0:e7:cb:91:1c:0e:45:91:98:38:06:ba:84:50: 80:c6:a9:73:a0:b1:49:02:1e:e5:dd:6a:8d:a8:0c: ce:e4:33:7b:85:cf:0d:99:ce:8c:d1:88:bd:fd:d6: 52:c3:78:6b:21:c9:97:ea:d0:c0:97:48:47:db:82: 0d:b0:ac:fd:24:d6:25:eb:a0:be:2e:69:e0:5f:cb: 09:8a:5f:a2:21:45:a4:4c:61:ae:8c:7d:83:4a:92: 97:82:37:4e:43:4e:9e:94:6a:8f:60:fe:44:39:36: 0b:43:24:a9:6a:d2:4f:23:e4:ca:38:48:36:02:c8: de:41:24:5c:db:8e:f6:ca:be:ec:ab:d5:27:5d:7c: b8:06:dc:dc:12:09:03:25:56:05:70:e2:8b:53:01: 74:07:f1:b9:00:d2:e9:c2:9c:89:a2:fb:17:a8:93: 1c:d1:44:ed:9c:e7:b5:64:03:78:c6:9e:9e:0d:1f: 13:65:a3:36:78:56:12:20:dd:55:33:57:71:e1:6c: 23:39:1f:75:74:e7:8d:3c:6a:9c:1c:24:b7:91:4d: 0b:5a:d9:46:7c:4e:fe:cb:9d:12:32:ce:eb:83:12: e5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5D:FC:70:35:E3:93:D1:01:7E:8A:BC:88:29:25:A5:31:22:E5:B4 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c9:cf:8a:90:e5:d2:51:2c:21:c9:52:a3:1a:47:73:78:d7: ce:c1:9b:c6:66:bf:fe:14:e9:4c:4b:c3:c1:1d:5d:f8:1a:39: 03:59:87:89:ba:4c:5b:f3:91:82:66:84:61:cd:42:dc:34:96: 79:40:c5:b8:8d:c0:c3:0c:00:44:77:e0:d4:28:57:ca:c9:23: d8:41:a0:45:45:5b:e8:11:9e:3e:18:0c:06:b1:7a:ff:4e:52: 56:fc:de:a2:40:c3:f6:e7:3b:80:e7:bb:b8:bb:12:6f:4d:44: cc:71:01:54:2d:d2:52:74:97:22:dc:9e:01:45:af:f9:61:f8: 99:e4:7a:0b:68:04:6a:41:70:25:bd:49:a3:d5:50:b9:10:d8: e2:11:74:0a:b0:10:3b:6a:fc:51:9f:c2:39:b2:fb:c2:2e:0f: be:05:37:74:cf:86:9a:2f:d3:cd:56:4e:38:7a:27:39:26:80: d3:c6:aa:91:51:74:c1:4c:7d:d2:16:59:c3:80:ff:eb:31:ee: 5d:86:0b:6f:70:28:66:2f:89:a0:99:b8:c7:8e:09:ee:8d:02: df:ed:55:e4:9f:2d:7b:16:ee:8a:bc:29:92:f4:93:21:b0:e9: 1e:c1:e8:52:db:67:45:3f:85:e6:14:e0:c6:5c:ad:fb:06:0b: 56:f8:3d:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYbPfga7J/7MeG/n+dvfndqb/MswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTEyMDIxMDQ3MjdaFw0yNTEyMDUxMjA4MjdaMDMxMTAvBgNV BAMTKDg5NURGQzcwMzVFMzkzRDEwMTdFOEFCQzg4MjkyNUE1MzEyMkU1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mZogMQIXyh0uBz0Gjolh+mZ0 3BeBNOUwIRV0cwqg58uRHA5FkZg4BrqEUIDGqXOgsUkCHuXdao2oDM7kM3uFzw2Z zozRiL391lLDeGshyZfq0MCXSEfbgg2wrP0k1iXroL4uaeBfywmKX6IhRaRMYa6M fYNKkpeCN05DTp6Uao9g/kQ5NgtDJKlq0k8j5Mo4SDYCyN5BJFzbjvbKvuyr1Sdd fLgG3NwSCQMlVgVw4otTAXQH8bkA0unCnImi+xeokxzRRO2c57VkA3jGnp4NHxNl ozZ4VhIg3VUzV3HhbCM5H3V05408apwcJLeRTQta2UZ8Tv7LnRIyzuuDEuU3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiV38cDXjk9EBfoq8iCklpTEi5bQwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHJz4qQ5dJRLCHJUqMaR3N4187Bm8Zmv/4U 6UxLw8EdXfgaOQNZh4m6TFvzkYJmhGHNQtw0lnlAxbiNwMMMAER34NQoV8rJI9hB oEVFW+gRnj4YDAaxev9OUlb83qJAw/bnO4Dnu7i7Em9NRMxxAVQt0lJ0lyLcngFF r/lh+JnkegtoBGpBcCW9SaPVULkQ2OIRdAqwEDtq/FGfwjmy+8IuD74FN3TPhpov 081WTjh6JzkmgNPGqpFRdMFMfdIWWcOA/+sx7l2GC29wKGYviaCZuMeOCe6NAt/t VeSfLXsW7oq8KZL0kyGw6R7B6FLbZ0U/heYU4MZcrfsGC1b4PWU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:48 2025 by rpki-client