This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft (raw, json) Hash identifier: G9/j4LUY2Uhkwlvb4vJl/B238jFX+yQ0zij4LHYRNd8= Subject key identifier: AD:D8:26:42:22:A7:4A:09:FC:C5:C5:56:15:7F:58:A2:50:41:1E:39 Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Certificate issuer: /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Certificate serial: 5C7B5836C26B3826F899C16A402B624491E0C621 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft Manifest number: F2 Signing time: Sat 13 Dec 2025 19:31:27 +0000 Manifest this update: Sat 13 Dec 2025 19:26:27 +0000 Manifest next update: Wed 17 Dec 2025 04:11:27 +0000 Files and hashes: 1: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl (hash: CqPHaOE7B2PUBXWgQNeNxM4V8f/Cn5SF1JFXxXYyWrI=) 2: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: t+CPpE2TC/5JImEcRiXdAKKegyxY7qwMPfKY4AYQh6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 13:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7b:58:36:c2:6b:38:26:f8:99:c1:6a:40:2b:62:44:91:e0:c6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Validity Not Before: Dec 13 19:26:27 2025 GMT Not After : Dec 17 04:11:27 2025 GMT Subject: CN=ADD8264222A74A09FCC5C556157F58A250411E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:2d:c6:89:24:1d:57:d4:e1:dc:33:dd:2c: 07:2d:c1:8a:4f:61:a8:0f:a4:32:80:41:70:15:8d: a8:41:2d:c3:02:89:f5:97:b7:4e:44:e9:d9:07:3b: 60:9b:01:56:2e:1f:73:2d:ea:4a:0a:d0:df:72:94: 74:67:f5:0c:9f:58:80:42:d0:bd:87:35:69:88:af: 2a:fc:c3:52:b7:d0:60:b1:98:d0:4a:24:0e:e5:93: 6b:6b:5a:ff:e8:81:3b:7b:03:3c:23:0c:ec:06:d5: 2b:28:57:5e:24:78:ee:44:b2:bb:c5:b0:e3:04:ac: 90:47:0a:8e:fa:01:7d:68:91:91:2b:3e:7c:d1:a1: cc:3a:22:79:f0:e5:a8:dd:b2:d2:64:c8:7a:4b:49: a7:76:07:46:c0:97:48:c5:b8:f9:27:a0:c1:2f:fa: ff:b3:ce:6c:55:e8:f4:30:8e:18:27:09:09:c0:36: e6:9d:67:34:f0:88:36:62:60:18:7b:89:ed:65:80: 88:f5:6b:32:35:85:f6:3a:9b:dc:51:7e:24:18:6d: 77:7f:77:2b:26:a0:14:d2:91:e7:2b:57:f1:9c:a9: c6:90:f8:6e:0e:c6:62:57:df:c1:64:d7:2e:ed:36: 5b:d5:9d:2d:96:23:91:36:8e:43:ce:a1:36:a9:a5: 8e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D8:26:42:22:A7:4A:09:FC:C5:C5:56:15:7F:58:A2:50:41:1E:39 X509v3 Authority Key Identifier: keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b5:af:95:e2:05:61:e2:15:5b:a8:3c:49:10:aa:c1:03:a8: 88:59:a5:b6:d6:d0:38:cf:23:dd:cb:eb:49:93:f8:08:53:aa: a7:67:5f:e8:9b:a6:94:34:03:75:3b:23:8e:c1:6e:37:c4:63: 83:87:b0:96:79:ad:cc:49:af:7b:43:92:03:7b:c4:b9:74:15: a7:11:ab:f9:3c:25:10:ac:19:a5:3e:cf:d0:24:30:3d:68:77: 9f:5f:b1:91:e9:6b:22:51:50:d6:25:77:9e:8d:45:37:b4:91: 3e:35:85:ec:8a:88:37:8d:2d:d8:43:5a:24:66:13:78:32:84: 6c:3f:e3:da:f1:05:d9:b3:2e:a1:25:68:3b:0f:59:d0:68:16: 28:67:ea:ad:13:2e:86:f3:6d:88:f6:f3:2b:ea:d9:49:c5:2b: af:5e:41:8a:be:3b:fe:79:9a:4b:77:1a:d7:a9:62:bb:44:11: 66:41:02:0a:5c:a3:d8:ac:8d:e3:5c:2c:f9:d0:7f:7c:d5:93: b7:d8:0c:92:ef:7e:e2:2f:f3:a3:bb:38:98:d2:8a:16:0b:39: 2f:d8:7e:dd:4f:13:95:2f:a9:70:2b:03:c2:3e:90:fa:ed:e7: f8:db:e5:77:5d:52:e7:7a:71:79:09:47:f3:92:ec:25:c7:3d: 30:a6:b9:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHtYNsJrOCb4mcFqQCtiRJHgxiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThD QTQyNzk2QTAeFw0yNTEyMTMxOTI2MjdaFw0yNTEyMTcwNDExMjdaMDMxMTAvBgNV BAMTKEFERDgyNjQyMjJBNzRBMDlGQ0M1QzU1NjE1N0Y1OEEyNTA0MTFFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoi3GiSQdV9Th3DPdLActwYpP YagPpDKAQXAVjahBLcMCifWXt05E6dkHO2CbAVYuH3Mt6koK0N9ylHRn9QyfWIBC 0L2HNWmIryr8w1K30GCxmNBKJA7lk2trWv/ogTt7AzwjDOwG1SsoV14keO5EsrvF sOMErJBHCo76AX1okZErPnzRocw6Innw5ajdstJkyHpLSad2B0bAl0jFuPknoMEv +v+zzmxV6PQwjhgnCQnANuadZzTwiDZiYBh7ie1lgIj1azI1hfY6m9xRfiQYbXd/ dysmoBTSkecrV/GcqcaQ+G4OxmJX38Fk1y7tNlvVnS2WI5E2jkPOoTappY7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdgmQiKnSgn8xcVWFX9YolBBHjkwHwYDVR0j BBgwFoAUxEevxFR9zxaiTpb/s6L9mMpCeWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC9DNDQ3QUZDNDU0 N0RDRjE2QTI0RTk2RkZCM0EyRkQ5OENBNDI3OTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThDQTQy Nzk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZE OThDQTQyNzk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu1r5XiBWHiFVuoPEkQqsEDqIhZpbbW0DjP I93L60mT+AhTqqdnX+ibppQ0A3U7I47BbjfEY4OHsJZ5rcxJr3tDkgN7xLl0FacR q/k8JRCsGaU+z9AkMD1od59fsZHpayJRUNYld56NRTe0kT41heyKiDeNLdhDWiRm E3gyhGw/49rxBdmzLqElaDsPWdBoFihn6q0TLobzbYj28yvq2UnFK69eQYq+O/55 mkt3GtepYrtEEWZBAgpco9isjeNcLPnQf3zVk7fYDJLvfuIv86O7OJjSihYLOS/Y ft1PE5UvqXArA8I+kPrt5/jb5XddUud6cXkJR/OS7CXHPTCmuUU= -----END CERTIFICATE-----Generated at Sun Dec 14 01:51:14 2025 by rpki-client