This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: vhdHjpQc6UUBytqQp5M5G0WYjVj+pZ4T6QoeWZkRy80= Subject key identifier: E7:0A:7A:1E:A0:BE:E4:D5:9A:C4:0B:B0:6C:AB:08:1E:FF:D3:F0:69 Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 66ECD5627D6E68F751EAFAFE42912C2340C26225 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 01D0 Signing time: Tue 02 Dec 2025 21:41:53 +0000 Manifest this update: Tue 02 Dec 2025 21:36:53 +0000 Manifest next update: Sat 06 Dec 2025 02:51:53 +0000 Files and hashes: 1: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: wztQHFm0O2gp44u20xFD60AlMYVhMq7MVJCjLcpogCw=) 2: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: g7r/RVB4oSYAg9bJf585oALndM8Pi1RvbkwVKzFMHo8=) 3: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: QJsx8t/jy2szp1HmLXfAbg7UbUXdGC8z/gTpNC266lo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ec:d5:62:7d:6e:68:f7:51:ea:fa:fe:42:91:2c:23:40:c2:62:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Dec 2 21:36:53 2025 GMT Not After : Dec 6 02:51:53 2025 GMT Subject: CN=E70A7A1EA0BEE4D59AC40BB06CAB081EFFD3F069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:37:3d:92:24:47:9c:60:45:2d:e9:7f:9f: c6:d1:62:f9:a5:d4:a0:83:a0:ba:25:bb:dd:cc:69: ac:72:be:90:9b:72:19:1d:29:14:67:9d:45:30:44: 1f:34:a4:69:d4:e9:49:7e:7a:0e:17:a5:ae:01:bb: 61:d4:7a:46:58:b2:42:fc:3b:ec:61:f0:46:b6:dc: 5c:8a:02:61:8a:e8:2c:e8:db:16:83:b4:42:e7:e0: 80:92:cb:bc:9b:43:35:e4:5f:69:94:4e:51:a2:f4: 14:3b:5f:37:d9:2f:69:9c:f9:2e:9c:4b:8e:67:99: fd:1e:73:93:2a:56:2a:cb:d1:45:b7:36:29:0b:d0: bf:d8:8b:34:1b:ce:99:b5:6a:7f:e7:f0:b2:23:3e: fc:30:ce:5d:77:47:8e:7d:7f:78:02:8d:e5:f0:d7: 32:99:f4:27:e5:e5:7e:88:4f:c0:e0:94:0a:b0:c2: 2d:34:d2:0b:f7:77:6f:2c:8f:a6:2e:74:27:61:bd: 22:aa:f6:eb:e6:c0:2e:bb:c8:9d:9a:27:c2:1f:14: 59:e8:ec:c1:96:79:93:b7:ff:81:0c:20:34:a5:b2: 5f:a9:ae:26:70:62:5c:df:fb:25:34:25:87:99:42: ca:7e:88:28:a0:b8:2e:f3:b7:2e:46:67:29:1b:97: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0A:7A:1E:A0:BE:E4:D5:9A:C4:0B:B0:6C:AB:08:1E:FF:D3:F0:69 X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:06:ea:c7:be:0f:e6:41:af:3a:97:e6:9b:c4:56:e0:46:82: de:80:67:d2:39:55:51:39:e5:af:6f:b0:5b:74:25:b9:4e:ef: af:78:3c:88:e3:2a:d6:52:2b:fc:e2:c1:50:1f:6b:73:49:50: ed:eb:24:f3:0b:3e:81:e5:e1:a3:7b:51:dc:be:10:08:94:4e: 12:1c:e1:69:76:61:8a:57:63:dd:f4:d5:14:1d:5c:19:56:96: 0b:c5:8a:d8:8d:f2:38:c0:1e:07:22:af:8c:d8:29:ab:c1:12: 52:81:48:6e:27:79:20:5b:95:85:93:ea:87:4c:25:4f:50:b8: 84:06:62:53:e6:31:76:8e:bb:fc:c5:b8:44:77:c7:3b:7d:38: a9:9b:e3:13:aa:ee:03:c7:f5:d3:89:19:ef:37:ca:3a:02:8a: c8:46:ca:6b:34:7e:86:e1:2a:e4:d9:72:4c:26:1f:76:4e:79: 9d:50:b1:75:6e:a5:68:29:f9:0f:ba:ad:82:cc:97:97:88:c8: 13:63:54:b1:6c:b8:77:96:af:50:ad:9e:a1:15:3f:0c:dc:56: ba:fe:35:60:9e:7b:fa:7e:1e:1d:ff:af:9f:9f:3b:64:4f:06: d4:22:d7:bd:67:33:d2:cb:6f:eb:76:ef:93:51:6b:d3:72:4f: 64:9c:cd:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuzVYn1uaPdR6vr+QpEsI0DCYiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNTEyMDIyMTM2NTNaFw0yNTEyMDYwMjUxNTNaMDMxMTAvBgNV BAMTKEU3MEE3QTFFQTBCRUU0RDU5QUM0MEJCMDZDQUIwODFFRkZEM0YwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnDc9kiRHnGBFLel/n8bRYvml 1KCDoLolu93MaaxyvpCbchkdKRRnnUUwRB80pGnU6Ul+eg4Xpa4Bu2HUekZYskL8 O+xh8Ea23FyKAmGK6Czo2xaDtELn4ICSy7ybQzXkX2mUTlGi9BQ7XzfZL2mc+S6c S45nmf0ec5MqVirL0UW3NikL0L/YizQbzpm1an/n8LIjPvwwzl13R459f3gCjeXw 1zKZ9Cfl5X6IT8DglAqwwi000gv3d28sj6YudCdhvSKq9uvmwC67yJ2aJ8IfFFno 7MGWeZO3/4EMIDSlsl+priZwYlzf+yU0JYeZQsp+iCiguC7zty5GZykblzYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5wp6HqC+5NWaxAuwbKsIHv/T8GkwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEG6se+D+ZBrzqX5pvEVuBGgt6AZ9I5VVE5 5a9vsFt0JblO7694PIjjKtZSK/ziwVAfa3NJUO3rJPMLPoHl4aN7Udy+EAiUThIc 4Wl2YYpXY9301RQdXBlWlgvFitiN8jjAHgcir4zYKavBElKBSG4neSBblYWT6odM JU9QuIQGYlPmMXaOu/zFuER3xzt9OKmb4xOq7gPH9dOJGe83yjoCishGyms0fobh KuTZckwmH3ZOeZ1QsXVupWgp+Q+6rYLMl5eIyBNjVLFsuHeWr1CtnqEVPwzcVrr+ NWCee/p+Hh3/r5+fO2RPBtQi171nM9LLb+t275NRa9NyT2Scza8= -----END CERTIFICATE-----Generated at Wed Dec 3 12:44:54 2025 by rpki-client