This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: 7tD0Ocp8SfPCPJr8oqrEQWtet4YX74mk1plN2XY1kFw= Subject key identifier: 0D:D6:E4:2B:7F:AA:2A:42:58:61:9B:7E:28:2A:EB:6F:A9:17:C0:F5 Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 0A8C39F1CC8E9B4CEF534378D9358A373B94ED74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: C7 Signing time: Tue 02 Dec 2025 15:21:33 +0000 Manifest this update: Tue 02 Dec 2025 15:16:33 +0000 Manifest next update: Fri 05 Dec 2025 21:37:33 +0000 Files and hashes: 1: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: BdKMxkQu30afKKFkrHhO4xUe8gNV3HXV1N395oxjhIQ=) 2: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: WLCShlxfdsF203Qx2wOYYjy6P8cT8pTLxL//5fp4yiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8c:39:f1:cc:8e:9b:4c:ef:53:43:78:d9:35:8a:37:3b:94:ed:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Dec 2 15:16:33 2025 GMT Not After : Dec 5 21:37:33 2025 GMT Subject: CN=0DD6E42B7FAA2A4258619B7E282AEB6FA917C0F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:6f:26:93:42:dd:88:af:5d:23:fc:d4:0b: b0:c2:bd:af:8b:09:fb:66:fb:14:ee:b2:c9:1c:91: 4a:8f:b9:0e:77:1b:4e:c3:ae:79:ff:28:8a:d1:dd: 6d:f5:c0:00:6f:59:c8:45:c1:33:2d:f5:72:f0:39: 94:fa:43:41:e6:b2:6b:01:ce:cd:9b:9f:25:48:6c: fd:e5:d6:58:a1:96:aa:69:18:a0:76:29:61:9b:c8: af:d6:a6:5b:ec:1a:0f:91:a8:d0:a9:9d:1f:c6:80: c3:dc:57:0c:40:2f:6c:46:0b:f7:92:2e:7b:b5:57: 29:19:24:92:ee:b7:c5:14:73:84:97:a2:f7:65:b3: ec:7d:d9:a7:bd:33:2b:db:25:11:c8:78:48:53:f4: 0f:cd:b5:39:c0:75:79:36:9e:b5:ba:d1:0b:c5:b0: ed:af:48:61:04:64:eb:e8:8a:e7:8c:e8:af:dd:90: 0c:d0:12:b2:f4:71:24:dd:b8:1f:9b:03:00:83:8d: 74:ee:4f:15:ef:b3:7e:f3:ba:0e:c8:16:d1:ef:dd: f7:e6:a1:41:5f:1c:7a:59:0a:ce:cd:52:e8:e1:e2: f3:b1:dd:30:e9:05:92:d3:6c:57:97:21:51:17:e5: 6d:ab:2d:7e:ea:5b:66:16:28:6f:18:05:41:05:4d: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D6:E4:2B:7F:AA:2A:42:58:61:9B:7E:28:2A:EB:6F:A9:17:C0:F5 X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:17:e6:76:13:d4:9a:2a:d8:10:e7:6a:0d:56:2d:2c:88:d0: 72:64:61:89:19:4e:f1:ab:f2:84:9e:de:9f:0f:c3:74:a7:0c: 2f:77:d1:fb:c5:8a:39:96:e7:86:31:d5:f1:38:fe:fc:8b:d0: 5f:92:81:a0:f0:a3:4b:2e:96:ea:bc:19:e4:b4:a3:31:23:2a: df:8b:38:f6:92:b1:e6:ec:75:d6:0e:dd:44:93:c6:50:30:79: fa:fc:2b:87:b6:bf:ab:75:9e:77:64:f9:c3:91:5a:2a:0f:41: 19:f1:3f:62:4b:23:4c:20:a7:53:bf:cf:44:9c:05:b2:19:cf: 09:67:25:8d:f8:40:38:a9:df:11:12:41:e2:1a:b1:f6:f6:4f: 28:85:2f:11:15:aa:20:dc:e8:70:b4:65:95:88:b0:33:eb:a8: 32:20:5f:b6:11:79:0f:11:e6:cf:b3:72:6c:c6:74:65:91:e2: f4:6f:65:3b:60:7f:2d:0e:91:55:d5:93:57:08:76:36:2d:96: e8:3f:7d:42:48:1d:89:60:9c:c7:8f:fd:d6:d5:88:e2:aa:b2: 44:a0:55:fb:21:5a:ee:e6:2f:5b:93:f0:9e:5a:00:84:d5:27: a6:6c:05:f3:5b:ee:b7:56:ed:74:71:6c:9a:bb:7e:c1:be:98: ba:b9:14:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCow58cyOm0zvU0N42TWKNzuU7XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNTEyMDIxNTE2MzNaFw0yNTEyMDUyMTM3MzNaMDMxMTAvBgNV BAMTKDBERDZFNDJCN0ZBQTJBNDI1ODYxOUI3RTI4MkFFQjZGQTkxN0MwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIb28mk0LdiK9dI/zUC7DCva+L Cftm+xTusskckUqPuQ53G07Drnn/KIrR3W31wABvWchFwTMt9XLwOZT6Q0HmsmsB zs2bnyVIbP3l1lihlqppGKB2KWGbyK/WplvsGg+RqNCpnR/GgMPcVwxAL2xGC/eS Lnu1VykZJJLut8UUc4SXovdls+x92ae9MyvbJRHIeEhT9A/NtTnAdXk2nrW60QvF sO2vSGEEZOvoiueM6K/dkAzQErL0cSTduB+bAwCDjXTuTxXvs37zug7IFtHv3ffm oUFfHHpZCs7NUujh4vOx3TDpBZLTbFeXIVEX5W2rLX7qW2YWKG8YBUEFTdtxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDdbkK3+qKkJYYZt+KCrrb6kXwPUwHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgX5nYT1Joq2BDnag1WLSyI0HJkYYkZTvGr 8oSe3p8Pw3SnDC930fvFijmW54Yx1fE4/vyL0F+SgaDwo0suluq8GeS0ozEjKt+L OPaSsebsddYO3USTxlAwefr8K4e2v6t1nndk+cORWioPQRnxP2JLI0wgp1O/z0Sc BbIZzwlnJY34QDip3xESQeIasfb2TyiFLxEVqiDc6HC0ZZWIsDPrqDIgX7YReQ8R 5s+zcmzGdGWR4vRvZTtgfy0OkVXVk1cIdjYtlug/fUJIHYlgnMeP/dbViOKqskSg VfshWu7mL1uT8J5aAITVJ6ZsBfNb7rdW7XRxbJq7fsG+mLq5FJ0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:22 2025 by rpki-client