This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: ATVLfI+2OdSONOE9m/GPH3LSU1yZnZrf1nGJVyaavRg= Subject key identifier: 92:D5:71:8D:A1:2B:EF:57:EA:1F:23:D3:3E:6A:05:39:F7:C7:E3:4B Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 0CA24E76D6F198CA73E54977DA52F20085D76877 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 0399 Signing time: Tue 02 Dec 2025 17:01:33 +0000 Manifest this update: Tue 02 Dec 2025 16:56:33 +0000 Manifest next update: Sat 06 Dec 2025 02:57:33 +0000 Files and hashes: 1: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) 2: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: QfG71FNjIc1gjhWQPjo3yK6pBA2bL2eTmL+Vr8eVy8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a2:4e:76:d6:f1:98:ca:73:e5:49:77:da:52:f2:00:85:d7:68:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Dec 2 16:56:33 2025 GMT Not After : Dec 6 02:57:33 2025 GMT Subject: CN=92D5718DA12BEF57EA1F23D33E6A0539F7C7E34B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:81:44:c2:c3:94:f8:01:88:1c:07:e8:1c: 60:4a:69:d0:66:1d:c2:53:33:cd:e0:90:a3:cf:44: bb:91:fe:c8:ef:4b:1e:16:aa:c1:a9:7a:c0:e0:c7: a9:e3:b6:90:62:77:19:bb:92:95:d3:bc:7b:57:22: a9:d4:c9:23:48:89:60:05:dc:b9:c8:76:03:f1:16: 69:97:e4:dc:4c:42:4c:90:e4:6e:98:30:e4:43:b4: bf:78:ab:f3:b5:8b:6a:c5:57:06:07:45:83:a1:94: 22:7c:29:11:95:98:8f:78:c2:29:40:e3:36:ab:55: e4:05:a0:51:22:50:16:24:83:99:1c:19:7d:b9:fa: 81:8f:88:23:9f:00:dd:55:82:f8:e1:5e:96:fe:5f: b0:4f:78:35:39:0b:0e:8a:9d:5c:0c:be:ef:bc:0f: 56:8d:5c:4f:b7:bd:7b:6c:ad:d2:f3:98:50:f7:9e: ef:b7:b6:16:f7:03:d5:df:ec:1c:3f:94:a7:c0:74: b0:97:3e:a6:a5:70:d5:b3:9e:18:4f:23:e7:66:c6: 41:cb:5e:30:2f:91:3d:55:29:5a:c6:06:3f:db:1a: c6:80:83:f3:36:44:19:1d:49:db:a6:45:68:9a:bc: ab:e9:9d:85:3f:70:76:39:1e:02:ed:9c:1b:a8:0a: de:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D5:71:8D:A1:2B:EF:57:EA:1F:23:D3:3E:6A:05:39:F7:C7:E3:4B X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b0:d7:f4:64:b5:79:07:ca:2e:f5:a4:9e:63:ff:6e:8c:bd: a8:a5:42:aa:5e:d5:db:ba:ef:4e:3e:89:5a:05:ff:97:5f:03: 18:ec:76:eb:ae:7b:6f:aa:52:86:0b:34:43:8f:d3:fb:2e:3a: b0:98:93:df:65:54:d0:63:7d:f5:22:6d:c7:e0:ef:94:b1:57: 90:dd:08:6a:59:ec:ac:13:ea:61:88:e3:95:33:87:72:12:53: 6a:ab:47:ec:a9:73:73:8a:c9:63:00:83:16:dd:1b:e0:ba:d6: fe:63:11:42:fb:71:6e:f3:be:df:c1:bb:c4:3b:e5:4e:c8:c3: 1f:41:ae:28:21:d7:dd:e5:ee:69:ac:45:b0:cb:d3:31:ff:10: 11:4d:3a:6d:d8:7a:9d:09:b9:33:ce:e3:70:00:be:e2:97:81: 50:4f:04:54:aa:11:52:c5:a7:cd:0e:9a:b7:96:c0:de:63:f3: 12:11:f1:45:ba:91:01:f9:a2:e3:0d:6f:d3:2d:58:e4:03:36: 3d:18:a9:2e:a3:5f:e1:ec:d9:53:18:4e:bc:3e:ac:e1:fc:4a: 40:67:36:7a:c6:64:1c:ca:67:62:54:38:5a:6e:c1:60:c3:bf: bf:10:88:08:6c:87:ab:11:98:65:bd:0c:a1:88:c9:a5:39:a8: 30:86:4c:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKJOdtbxmMpz5Ul32lLyAIXXaHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTEyMDIxNjU2MzNaFw0yNTEyMDYwMjU3MzNaMDMxMTAvBgNV BAMTKDkyRDU3MThEQTEyQkVGNTdFQTFGMjNEMzNFNkEwNTM5RjdDN0UzNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6IFEwsOU+AGIHAfoHGBKadBm HcJTM83gkKPPRLuR/sjvSx4WqsGpesDgx6njtpBidxm7kpXTvHtXIqnUySNIiWAF 3LnIdgPxFmmX5NxMQkyQ5G6YMORDtL94q/O1i2rFVwYHRYOhlCJ8KRGVmI94wilA 4zarVeQFoFEiUBYkg5kcGX25+oGPiCOfAN1VgvjhXpb+X7BPeDU5Cw6KnVwMvu+8 D1aNXE+3vXtsrdLzmFD3nu+3thb3A9Xf7Bw/lKfAdLCXPqalcNWznhhPI+dmxkHL XjAvkT1VKVrGBj/bGsaAg/M2RBkdSdumRWiavKvpnYU/cHY5HgLtnBuoCt6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUktVxjaEr71fqHyPTPmoFOffH40swHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6w1/RktXkHyi71pJ5j/26MvailQqpe1du6 704+iVoF/5dfAxjsduuue2+qUoYLNEOP0/suOrCYk99lVNBjffUibcfg75SxV5Dd CGpZ7KwT6mGI45Uzh3ISU2qrR+ypc3OKyWMAgxbdG+C61v5jEUL7cW7zvt/Bu8Q7 5U7Iwx9Brigh193l7mmsRbDL0zH/EBFNOm3Yep0JuTPO43AAvuKXgVBPBFSqEVLF p80OmreWwN5j8xIR8UW6kQH5ouMNb9MtWOQDNj0YqS6jX+Hs2VMYTrw+rOH8SkBn NnrGZBzKZ2JUOFpuwWDDv78QiAhsh6sRmGW9DKGIyaU5qDCGTHo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:52:39 2025 by rpki-client