This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json) Hash identifier: 4fqN2kFG3HLkBkHACOZ16eCKj1yzJSBl+4kw7Nb/eEI= Subject key identifier: 78:4E:1D:74:79:CF:E0:BA:8D:59:51:3F:43:D8:36:02:0D:CE:9C:87 Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Certificate serial: 2845E7076796C019F6097A937BF62D7F8517B4F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft Manifest number: 015E Signing time: Tue 02 Dec 2025 15:21:56 +0000 Manifest this update: Tue 02 Dec 2025 15:16:56 +0000 Manifest next update: Fri 05 Dec 2025 23:59:56 +0000 Files and hashes: 1: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: dQqh/UiHoQw/70mJd+ZId7SvE382IQVHD0RnWmbxwtI=) 2: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: ki0hIXEeGo8cU77Xr7lKfx7zoFMhB4mSH2tdcqcaUcQ=) 3: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: uYCDbQhiFwJkkuVOKl41Elv/MHONMIKQob1xq0x150c=) 4: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: RiJQOn+iteWsGaHDQ7CJgxTOw5x3cmMgsW4Cbj99H/E=) 5: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 3qwvc0M9032XGDH7vraV4T7cy4QhAdHQHEpVds7HICk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:45:e7:07:67:96:c0:19:f6:09:7a:93:7b:f6:2d:7f:85:17:b4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Validity Not Before: Dec 2 15:16:56 2025 GMT Not After : Dec 5 23:59:56 2025 GMT Subject: CN=784E1D7479CFE0BA8D59513F43D836020DCE9C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:fc:af:b7:73:aa:9c:4d:8b:33:78:6e:c3: 85:57:fe:70:4f:97:7b:62:d5:5f:bb:8f:00:c6:bf: 46:c2:dd:17:07:7c:88:4b:df:d4:68:7d:ad:3d:24: 6c:4b:a0:e4:a7:55:45:5f:f9:4f:01:79:aa:6e:ef: 2b:10:e4:b8:c9:e7:8d:d7:1f:fe:b4:39:fb:f4:ad: 6a:4e:9e:ed:3d:59:69:37:3e:b8:b8:fa:1d:de:e3: 4e:89:04:11:d6:98:d1:fb:b5:80:e5:fa:7e:60:82: b0:b6:ba:99:48:a6:4a:3b:b9:49:c3:17:d6:27:f9: f7:e6:a1:69:4e:18:91:0a:4b:fa:73:f7:5a:0b:90: 17:89:92:e6:45:51:e5:95:91:ca:c6:09:15:9f:22: 82:38:cb:ef:26:cf:cc:d4:a1:92:31:5b:8c:74:6c: ed:b4:f1:37:1c:a5:75:f5:dc:6e:7f:09:47:0e:62: ae:4f:a8:df:08:50:6d:9d:3a:9b:5b:0e:0c:76:f2: 4d:ef:40:85:85:d5:af:a9:e1:83:7a:fb:df:24:04: 57:41:9c:89:ac:0a:43:28:d4:4a:53:50:e5:bb:19: 8f:e4:05:fc:a1:d6:5d:10:e1:1c:66:f9:68:e5:2d: 44:b4:0d:0d:40:c4:bc:e4:67:c2:aa:11:a0:af:95: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4E:1D:74:79:CF:E0:BA:8D:59:51:3F:43:D8:36:02:0D:CE:9C:87 X509v3 Authority Key Identifier: keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:56:8d:84:ef:37:bd:55:47:d6:d6:1d:dc:1d:ae:e7:56:d5: 43:78:be:21:54:a0:f8:76:af:2e:1a:51:61:32:50:0e:6b:bc: 6b:33:ad:86:98:9f:69:1f:c0:ec:e7:63:b8:11:10:a7:76:20: fb:44:fe:fb:ed:8e:7f:88:58:b8:7a:37:e5:3a:72:bb:82:eb: 3a:fd:43:0c:07:32:4a:1d:78:37:eb:3e:af:5b:12:e6:80:04: f3:cf:b6:17:53:1f:63:cb:c2:61:93:64:6a:d6:37:0f:51:1e: 63:65:7a:15:5e:b7:d7:2e:7f:5b:ed:24:b0:00:da:c3:ef:25: 71:80:3a:c8:9f:f0:64:70:0e:03:26:55:0f:5a:ba:01:d7:dd: d5:4f:31:4a:36:34:10:b6:22:bc:e6:2b:fd:7a:f5:34:ce:ed: 39:c7:d1:e6:dd:7b:99:b0:3b:9b:fb:e8:a2:1e:09:0d:c7:07: b1:58:da:87:b3:2d:3b:53:89:2f:97:82:56:84:0a:3b:97:72: 0c:65:fb:89:de:eb:12:f5:b5:f9:09:3e:9c:85:fa:d7:27:ff: cd:5d:66:66:7d:3e:a4:0f:14:b9:ac:87:17:c8:38:ac:80:55: 16:20:77:d0:fe:1d:07:d4:05:a8:53:75:7b:38:38:f7:3a:11: eb:a1:8b:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEXnB2eWwBn2CXqTe/Ytf4UXtPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RC N0UwQkEwQzAeFw0yNTEyMDIxNTE2NTZaFw0yNTEyMDUyMzU5NTZaMDMxMTAvBgNV BAMTKDc4NEUxRDc0NzlDRkUwQkE4RDU5NTEzRjQzRDgzNjAyMERDRTlDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Efyvt3OqnE2LM3huw4VX/nBP l3ti1V+7jwDGv0bC3RcHfIhL39Rofa09JGxLoOSnVUVf+U8Beapu7ysQ5LjJ543X H/60Ofv0rWpOnu09WWk3Pri4+h3e406JBBHWmNH7tYDl+n5ggrC2uplIpko7uUnD F9Yn+ffmoWlOGJEKS/pz91oLkBeJkuZFUeWVkcrGCRWfIoI4y+8mz8zUoZIxW4x0 bO208TccpXX13G5/CUcOYq5PqN8IUG2dOptbDgx28k3vQIWF1a+p4YN6+98kBFdB nImsCkMo1EpTUOW7GY/kBfyh1l0Q4Rxm+WjlLUS0DQ1AxLzkZ8KqEaCvlf9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeE4ddHnP4LqNWVE/Q9g2Ag3OnIcwHwYDVR0j BBgwFoAUDOHhEUbiUdDNUr2DehoKzbfgugwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMC8wQ0UxRTExMTQ2 RTI1MUQwQ0Q1MkJEODM3QTFBMEFDREI3RTBCQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RCN0Uw QkEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBB Q0RCN0UwQkEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxWjYTvN71VR9bWHdwdrudW1UN4viFUoPh2 ry4aUWEyUA5rvGszrYaYn2kfwOznY7gREKd2IPtE/vvtjn+IWLh6N+U6cruC6zr9 QwwHMkodeDfrPq9bEuaABPPPthdTH2PLwmGTZGrWNw9RHmNlehVet9cuf1vtJLAA 2sPvJXGAOsif8GRwDgMmVQ9augHX3dVPMUo2NBC2IrzmK/169TTO7TnH0ebde5mw O5v76KIeCQ3HB7FY2oezLTtTiS+XglaECjuXcgxl+4ne6xL1tfkJPpyF+tcn/81d ZmZ9PqQPFLmshxfIOKyAVRYgd9D+HQfUBahTdXs4OPc6Eeuhiwc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:36 2025 by rpki-client