This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: iyqZQx+5XxG5G2xwHkptZ+2AGrVpv3bsfacFNoP+Bis= Subject key identifier: 04:7C:43:5E:3B:22:C1:BE:71:A1:FC:05:E4:45:0F:65:5B:6C:2B:74 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 098AA40BD98DDA5D475E72278420DCC74C8954CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: F5 Signing time: Wed 03 Dec 2025 11:21:32 +0000 Manifest this update: Wed 03 Dec 2025 11:16:32 +0000 Manifest next update: Sat 06 Dec 2025 21:17:32 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: uuqTRjc7431pDptaJPg4wAor3jNgcehUY3wFZsgARv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8a:a4:0b:d9:8d:da:5d:47:5e:72:27:84:20:dc:c7:4c:89:54:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Dec 3 11:16:32 2025 GMT Not After : Dec 6 21:17:32 2025 GMT Subject: CN=047C435E3B22C1BE71A1FC05E4450F655B6C2B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:3f:ab:36:bc:f2:42:36:8a:d3:45:c0:61: 0a:ea:34:42:bf:d4:b1:fc:e7:6b:78:c4:95:29:6f: ed:3e:96:23:88:b0:52:fa:b7:78:eb:df:92:09:7b: ed:91:85:b4:e1:6c:2c:fa:5b:8d:03:56:9a:0e:6a: 74:90:60:55:cc:23:bc:49:52:61:9a:f3:cd:ab:55: 1a:36:04:79:11:a5:bb:ab:f4:bc:e2:e3:ac:82:2f: aa:c7:48:9b:09:da:ad:0d:1d:e0:ec:61:2f:94:f2: 29:a8:38:dc:0a:4a:13:99:45:a5:b2:dd:c7:17:4b: 61:c0:05:58:48:96:70:71:b7:a3:63:05:5d:06:81: ff:0f:09:82:ba:90:16:a4:2b:68:e2:84:d6:cc:58: cb:aa:42:70:d9:28:9a:49:2e:0d:28:72:32:36:71: e9:58:0a:f9:7e:a0:63:d0:51:35:ba:10:f7:e4:15: 7d:e3:b6:7c:5e:0f:b5:77:0c:33:de:3e:86:83:f5: 9e:3e:53:6b:05:5c:23:14:e0:0d:6d:67:2d:7c:0d: 3c:9d:0b:7b:40:2f:d6:cf:c0:27:58:ec:dc:bd:4d: 28:5c:02:34:8a:d4:46:dc:fa:7b:f6:e0:7f:76:6f: 40:5c:98:54:0a:48:9b:68:f3:5f:d5:07:13:0b:53: 9e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7C:43:5E:3B:22:C1:BE:71:A1:FC:05:E4:45:0F:65:5B:6C:2B:74 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:8a:dc:f5:3d:23:b5:a1:c3:42:e7:2f:9a:c7:45:d5:8c:9b: c3:eb:ca:a3:39:f8:ef:32:7b:43:e7:6a:85:d0:2d:b9:f4:49: db:57:f6:28:1f:58:5b:f7:8c:da:52:01:0e:ce:c6:34:b4:2a: 2c:e2:75:4e:fc:0b:9b:49:02:4a:fc:73:d5:b0:db:d9:7c:fd: 5f:94:e0:a4:c9:91:5e:4d:8f:6f:1a:cb:cd:c3:2d:87:5b:59: 2a:92:5b:9c:8c:bb:29:d2:e3:64:66:89:4b:1f:79:31:47:79: 7c:0e:4b:7c:df:e5:75:7d:e8:a5:5a:d5:81:ec:fd:4f:71:fd: 37:27:c6:88:a6:1a:0a:0f:2c:b7:a6:a6:5a:46:da:96:b8:21: c9:54:5b:fd:57:2a:84:c1:61:03:45:ab:7e:a7:57:45:ca:33: cc:9a:f4:0f:eb:3b:34:3f:b2:04:ab:4e:81:2b:0f:ff:99:12: c4:a2:24:15:55:74:72:ad:d2:92:6a:31:9e:7f:d9:17:b2:4a: 89:d4:d5:79:94:b4:59:6c:14:5e:c0:12:67:2f:02:c7:41:d3: bb:cf:85:82:8b:01:2b:f2:66:f7:28:a1:af:12:ed:54:69:0f: c6:d0:d6:8f:02:79:ad:f4:34:de:a5:13:23:16:fe:c7:50:24: ee:b3:8e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYqkC9mN2l1HXnInhCDcx0yJVM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTEyMDMxMTE2MzJaFw0yNTEyMDYyMTE3MzJaMDMxMTAvBgNV BAMTKDA0N0M0MzVFM0IyMkMxQkU3MUExRkMwNUU0NDUwRjY1NUI2QzJCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnj+rNrzyQjaK00XAYQrqNEK/ 1LH852t4xJUpb+0+liOIsFL6t3jr35IJe+2RhbThbCz6W40DVpoOanSQYFXMI7xJ UmGa882rVRo2BHkRpbur9Lzi46yCL6rHSJsJ2q0NHeDsYS+U8imoONwKShOZRaWy 3ccXS2HABVhIlnBxt6NjBV0Ggf8PCYK6kBakK2jihNbMWMuqQnDZKJpJLg0ocjI2 celYCvl+oGPQUTW6EPfkFX3jtnxeD7V3DDPePoaD9Z4+U2sFXCMU4A1tZy18DTyd C3tAL9bPwCdY7Ny9TShcAjSK1Ebc+nv24H92b0BcmFQKSJto81/VBxMLU57XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBHxDXjsiwb5xofwF5EUPZVtsK3QwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWK3PU9I7Whw0LnL5rHRdWMm8PryqM5+O8y e0PnaoXQLbn0SdtX9igfWFv3jNpSAQ7OxjS0KizidU78C5tJAkr8c9Ww29l8/V+U 4KTJkV5Nj28ay83DLYdbWSqSW5yMuynS42RmiUsfeTFHeXwOS3zf5XV96KVa1YHs /U9x/TcnxoimGgoPLLemplpG2pa4IclUW/1XKoTBYQNFq36nV0XKM8ya9A/rOzQ/ sgSrToErD/+ZEsSiJBVVdHKt0pJqMZ5/2ReySonU1XmUtFlsFF7AEmcvAsdB07vP hYKLASvyZvcooa8S7VRpD8bQ1o8Cea30NN6lEyMW/sdQJO6zjqg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:15 2025 by rpki-client