This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: 7qoYairSUllL6j/OijjUUaz7bnxjOJ/0FOdlxaYCPzE= Subject key identifier: 42:9E:EC:61:37:F7:1A:B7:AC:EA:3F:D4:A5:C7:21:F6:C0:F8:EF:56 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 5A5FD0C08837A04C3B216B422C961AAD5BBEB4F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: A6 Signing time: Mon 01 Dec 2025 10:52:32 +0000 Manifest this update: Mon 01 Dec 2025 10:47:32 +0000 Manifest next update: Thu 04 Dec 2025 22:24:32 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: RT4BWk1EAQVcwwV/xi0M11SWZ0z4+ZTLK0e7giTy0tY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5f:d0:c0:88:37:a0:4c:3b:21:6b:42:2c:96:1a:ad:5b:be:b4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Dec 1 10:47:32 2025 GMT Not After : Dec 4 22:24:32 2025 GMT Subject: CN=429EEC6137F71AB7ACEA3FD4A5C721F6C0F8EF56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:64:e7:77:c4:c9:4d:7a:5f:95:46:01:a7: e0:4c:f7:40:75:88:e7:02:5f:ae:e2:7c:b2:05:ad: bf:f5:62:8f:e9:0f:2f:8b:a1:a9:d1:66:ba:af:49: 8e:8d:a4:b5:ed:e2:fe:8d:ff:cc:8f:4a:f7:30:30: 14:a8:30:1f:6b:65:c2:49:0c:0b:08:76:80:10:83: 3d:6a:0a:73:8c:88:5d:71:8c:f0:ce:4e:ad:63:8c: d9:8a:13:bb:02:fb:67:52:20:e9:20:47:de:42:a3: bf:79:36:7d:c2:dd:55:16:a4:9d:f0:76:ca:12:b8: 9d:73:ce:21:63:4f:91:c4:22:24:56:3e:2c:67:ff: 95:c3:d3:f8:22:f8:5e:fa:24:3c:c3:89:89:c4:97: 36:03:b2:3d:ca:31:24:f3:a3:a7:af:34:97:18:f8: 3f:56:ad:d1:05:38:d5:20:22:eb:10:75:eb:0b:f9: 8b:40:ba:e7:20:a0:4e:48:b1:10:92:4a:4a:3b:00: a4:0c:14:45:dd:63:e0:73:41:cc:6b:d9:c6:ee:a2: 9c:34:2f:ce:3a:9c:a0:80:9b:52:48:cc:86:68:bc: 91:29:4a:ae:ac:00:0e:96:a7:b6:22:6d:b8:b2:4c: c6:b9:00:08:75:e5:de:ac:b8:e9:ab:d2:5c:7e:4c: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9E:EC:61:37:F7:1A:B7:AC:EA:3F:D4:A5:C7:21:F6:C0:F8:EF:56 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b6:ce:e9:6e:c0:88:25:58:5d:7b:ff:2b:4f:89:af:a9:64: c9:f2:b8:57:c0:59:07:d2:60:38:a4:c2:eb:b9:be:32:6a:42: 3c:37:c9:09:c8:2a:d9:83:aa:3a:8c:45:09:f9:30:17:a6:bd: a0:0f:e5:e7:db:e8:45:a9:da:d2:9a:88:ae:b5:32:8b:43:9a: 5c:c9:b6:e6:5a:63:68:80:63:83:50:f4:20:6e:18:73:29:73: 5e:2e:00:7c:5e:ee:fc:dd:fb:e8:84:24:52:cc:cf:03:c2:81: 8c:54:3f:5a:59:90:07:10:71:32:a3:77:73:77:34:10:8f:d6: 67:7b:fe:90:3f:a7:4c:96:21:09:2b:f4:3e:3c:02:49:c1:12: 2c:89:a8:06:f9:f3:36:7d:a6:ea:37:52:2c:e7:3b:42:b1:a1: cb:6a:3f:a2:ba:ac:42:44:a2:fd:33:2a:d3:01:9e:60:0a:f4: c8:8b:23:93:a8:17:da:f3:55:5d:e6:2e:d7:e3:ec:2c:14:25: 68:d5:04:24:ba:08:08:c4:44:12:1c:50:1c:29:2a:40:2b:cb: 3a:84:bf:a3:fc:c5:5d:7e:7f:13:00:f7:23:65:d7:09:57:98: 75:06:ce:3e:5f:2d:6f:5f:f8:50:2d:56:b3:fe:08:19:e4:3c: e3:57:01:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWl/QwIg3oEw7IWtCLJYarVu+tPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTEyMDExMDQ3MzJaFw0yNTEyMDQyMjI0MzJaMDMxMTAvBgNV BAMTKDQyOUVFQzYxMzdGNzFBQjdBQ0VBM0ZENEE1QzcyMUY2QzBGOEVGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPWTnd8TJTXpflUYBp+BM90B1 iOcCX67ifLIFrb/1Yo/pDy+LoanRZrqvSY6NpLXt4v6N/8yPSvcwMBSoMB9rZcJJ DAsIdoAQgz1qCnOMiF1xjPDOTq1jjNmKE7sC+2dSIOkgR95Co795Nn3C3VUWpJ3w dsoSuJ1zziFjT5HEIiRWPixn/5XD0/gi+F76JDzDiYnElzYDsj3KMSTzo6evNJcY +D9WrdEFONUgIusQdesL+YtAuucgoE5IsRCSSko7AKQMFEXdY+BzQcxr2cbuopw0 L846nKCAm1JIzIZovJEpSq6sAA6Wp7YibbiyTMa5AAh15d6suOmr0lx+TFUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQp7sYTf3Gres6j/Upcch9sD471YwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIi2zuluwIglWF17/ytPia+pZMnyuFfAWQfS YDikwuu5vjJqQjw3yQnIKtmDqjqMRQn5MBemvaAP5efb6EWp2tKaiK61MotDmlzJ tuZaY2iAY4NQ9CBuGHMpc14uAHxe7vzd++iEJFLMzwPCgYxUP1pZkAcQcTKjd3N3 NBCP1md7/pA/p0yWIQkr9D48AknBEiyJqAb58zZ9puo3UiznO0KxoctqP6K6rEJE ov0zKtMBnmAK9MiLI5OoF9rzVV3mLtfj7CwUJWjVBCS6CAjERBIcUBwpKkAryzqE v6P8xV1+fxMA9yNl1wlXmHUGzj5fLW9f+FAtVrP+CBnkPONXAVk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:33 2025 by rpki-client