This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: GxccOBmO4phBnzrKJ7pl3OyYqcyry+5Iv0e/AWYq7PI= Subject key identifier: BD:B4:E8:F5:C9:AF:1A:85:CE:D9:83:9A:9E:94:85:52:90:58:4D:3D Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 33EC09F8E18BBB892835300564EE0DB155580916 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: 0106 Signing time: Sun 07 Dec 2025 16:12:20 +0000 Manifest this update: Sun 07 Dec 2025 16:07:20 +0000 Manifest next update: Wed 10 Dec 2025 23:38:20 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) 2: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: 2DJSkQ+jnIHS8h54rR5n0c9QpU9v83V8SeYtWmvuaQ0=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ec:09:f8:e1:8b:bb:89:28:35:30:05:64:ee:0d:b1:55:58:09:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Dec 7 16:07:20 2025 GMT Not After : Dec 10 23:38:20 2025 GMT Subject: CN=BDB4E8F5C9AF1A85CED9839A9E94855290584D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:e3:45:66:4b:ed:e6:75:a9:0b:9d:3e:df: 1d:0b:26:fe:a9:85:5f:c8:fb:f8:e8:9a:9f:56:26: 40:81:f9:a0:d6:6d:3b:d3:10:f9:5e:55:06:c3:c1: a4:41:99:99:2b:58:7a:94:75:2b:f4:7f:2e:d9:5f: 50:01:af:0c:18:b0:a1:19:8a:3b:d3:4c:bb:de:17: 69:d0:8c:fd:ec:8f:0c:27:6c:6d:9a:2a:f4:36:0b: d3:6e:cf:15:40:8d:02:f8:a4:96:a6:a3:06:d7:9f: a5:40:0c:ec:71:35:1e:d4:81:d8:a9:d2:2f:e0:79: c3:bd:48:5e:43:22:1e:87:6b:bc:1b:fa:9a:c4:2d: 8f:e0:e9:d9:f3:1c:e1:48:ce:5b:cc:f7:78:8b:d0: 66:aa:da:ff:00:ae:c6:7c:09:64:a2:47:2a:7c:b6: 58:47:dd:77:95:ea:f7:26:9c:02:ea:b3:c3:2a:3c: da:8d:da:c4:06:f7:dc:89:92:8c:3c:0a:59:20:66: 04:58:97:53:1e:d7:ca:11:81:35:ef:ae:85:f6:2b: fa:6b:16:52:70:63:40:f9:ac:75:f1:42:ff:bb:50: 3c:e5:6e:04:93:2b:e5:24:e0:e2:a2:c5:06:1e:d6: 09:4a:07:16:30:28:cd:b6:cd:ed:f9:d6:cc:df:b4: e2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B4:E8:F5:C9:AF:1A:85:CE:D9:83:9A:9E:94:85:52:90:58:4D:3D X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6c:29:0c:bf:fc:7c:a5:26:9a:a8:1e:67:2a:39:6e:58:0c: 5d:07:87:f3:23:a9:53:8a:10:f1:d7:15:d9:17:41:3f:f6:1f: 2d:b6:be:9a:6f:6c:ba:5a:ff:41:27:2d:0a:54:9b:93:dc:46: f8:8b:3b:6d:c7:8d:95:79:05:84:78:4f:f3:82:67:ea:16:6c: 24:68:fd:93:c8:48:36:38:ef:1c:8f:a8:ce:25:99:74:85:0d: d9:53:0a:70:be:a6:56:6d:c6:97:86:4c:a9:0f:b5:fc:db:55: 61:59:cc:62:0f:8b:41:35:01:37:89:f6:0f:92:9b:e2:33:66: 7b:d3:b9:d9:cc:e8:ff:9b:e6:20:17:fd:32:5a:95:1c:9b:c4: 70:ad:77:e3:ea:d7:0d:56:b3:db:2a:98:b4:11:71:74:cf:b9: c7:52:5e:ae:80:f5:51:ed:8b:5e:b6:1a:68:22:4c:ae:25:2c: aa:dc:2c:a0:4f:81:6f:e8:3b:ad:2d:03:d6:49:70:d3:ce:91: 1c:89:14:be:fc:65:fb:29:c6:25:6a:1a:30:8a:68:c3:0a:ee: b7:a4:60:7a:6d:47:f7:f9:b8:a3:13:a8:cc:4b:ea:d9:16:24: ff:19:46:25:f4:94:c7:bc:7c:f7:1d:5b:32:be:a5:8e:ad:45: c6:a9:94:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+wJ+OGLu4koNTAFZO4NsVVYCRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTEyMDcxNjA3MjBaFw0yNTEyMTAyMzM4MjBaMDMxMTAvBgNV BAMTKEJEQjRFOEY1QzlBRjFBODVDRUQ5ODM5QTlFOTQ4NTUyOTA1ODREM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuceNFZkvt5nWpC50+3x0LJv6p hV/I+/jomp9WJkCB+aDWbTvTEPleVQbDwaRBmZkrWHqUdSv0fy7ZX1ABrwwYsKEZ ijvTTLveF2nQjP3sjwwnbG2aKvQ2C9NuzxVAjQL4pJamowbXn6VADOxxNR7Ugdip 0i/gecO9SF5DIh6Ha7wb+prELY/g6dnzHOFIzlvM93iL0Gaq2v8ArsZ8CWSiRyp8 tlhH3XeV6vcmnALqs8MqPNqN2sQG99yJkow8ClkgZgRYl1Me18oRgTXvroX2K/pr FlJwY0D5rHXxQv+7UDzlbgSTK+Uk4OKixQYe1glKBxYwKM22ze351szftOKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvbTo9cmvGoXO2YOanpSFUpBYTT0wHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENsKQy//HylJpqoHmcqOW5YDF0Hh/MjqVOK EPHXFdkXQT/2Hy22vppvbLpa/0EnLQpUm5PcRviLO23HjZV5BYR4T/OCZ+oWbCRo /ZPISDY47xyPqM4lmXSFDdlTCnC+plZtxpeGTKkPtfzbVWFZzGIPi0E1ATeJ9g+S m+IzZnvTudnM6P+b5iAX/TJalRybxHCtd+Pq1w1Ws9sqmLQRcXTPucdSXq6A9VHt i162GmgiTK4lLKrcLKBPgW/oO60tA9ZJcNPOkRyJFL78ZfspxiVqGjCKaMMK7rek YHptR/f5uKMTqMxL6tkWJP8ZRiX0lMe8fPcdWzK+pY6tRcaplAY= -----END CERTIFICATE-----Generated at Sun Dec 7 18:49:00 2025 by rpki-client