This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: DSbC2ozUXufwwR/P8uFDJLEZ3p+fjzo+nmXnXyb+dvE= Subject key identifier: F1:63:0C:65:F2:AE:35:F5:F1:C0:3C:5D:83:DF:CB:47:E5:A9:16:4C Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 67951E97A40491C19C9BA1084B81F179B5C8FD69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 01DF Signing time: Wed 03 Dec 2025 11:31:46 +0000 Manifest this update: Wed 03 Dec 2025 11:26:46 +0000 Manifest next update: Sat 06 Dec 2025 15:15:46 +0000 Files and hashes: 1: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: 6g8PbhkbZbLbnKoZLBgTfyMpeWvcwwbeUmAnxaDznuY=) 2: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: tmFeuPlZ1mxifyDl6JyAN4XF8UeYkn4z1M0IFmbU6KA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:95:1e:97:a4:04:91:c1:9c:9b:a1:08:4b:81:f1:79:b5:c8:fd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Dec 3 11:26:46 2025 GMT Not After : Dec 6 15:15:46 2025 GMT Subject: CN=F1630C65F2AE35F5F1C03C5D83DFCB47E5A9164C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:6c:68:8e:8b:56:cf:c5:7f:57:3c:7c:94: 4d:c4:30:04:10:d8:d5:f0:dc:e6:c6:23:09:fb:63: 88:d4:85:47:26:ec:cb:eb:a1:5a:c3:0b:36:d4:b9: 27:c0:3d:87:19:6e:f3:58:7b:73:c7:c5:cd:76:e4: af:bc:b4:a4:b6:a7:35:eb:8f:0a:69:4f:54:c7:c6: f2:09:10:55:74:d6:d9:82:19:f6:d7:9e:2c:7e:de: 3e:54:9d:10:05:51:01:d7:27:df:1f:05:ab:61:cc: f0:17:8a:39:f3:29:06:db:8c:68:d9:d4:cf:a7:09: dd:b7:77:0a:22:e8:e9:21:68:dc:75:d3:fa:3d:b0: 3b:60:78:10:3b:cc:24:8c:d5:4a:6d:46:99:09:fe: 22:3a:c3:1d:f5:41:41:ec:44:66:2c:95:79:ba:2e: cf:5d:11:5b:a5:dd:ac:23:3e:6f:76:94:26:d0:93: 7e:f7:ea:44:d3:0b:8a:d7:9f:aa:7c:be:4b:80:e9: 67:22:bd:0c:eb:08:40:64:21:00:80:bb:2f:a0:8c: 63:f4:fb:e4:a5:52:03:e3:6c:0e:fe:33:71:cd:33: 9f:99:21:20:d5:4a:35:ea:0a:ff:b9:de:69:a4:78: 53:ef:e5:24:3c:dc:7d:96:7f:0d:d2:15:19:38:90: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:63:0C:65:F2:AE:35:F5:F1:C0:3C:5D:83:DF:CB:47:E5:A9:16:4C X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a2:e6:13:bc:67:55:9b:bd:75:81:00:ad:d9:34:bb:df:d3: 8b:e0:c1:e8:ea:22:83:6a:ff:23:f3:e9:44:0a:e4:e3:a4:40: 9a:a6:b0:e1:dc:4a:42:10:99:5b:ff:9e:df:b1:28:99:bb:64: 0e:78:ac:d9:fd:8c:78:f6:a0:55:b1:14:84:a8:dc:3f:e2:a1: 90:d1:3a:57:66:1d:aa:66:f0:d6:3e:b4:04:d6:9c:61:cd:1b: 84:be:23:02:50:54:5b:c4:84:b7:84:64:7d:05:7b:43:97:4b: 82:78:43:36:9a:75:b4:58:04:c8:78:20:65:8b:41:7f:4b:f6: d5:2a:a8:d9:f3:79:74:75:34:91:0b:77:04:2e:c2:9a:d6:46: 70:e0:e7:09:d1:64:f8:10:89:ba:5a:3c:99:51:44:e3:b7:c9: db:f2:a8:27:bd:90:1a:f5:33:69:82:24:61:20:64:3c:2c:5c: c5:62:f8:e4:b8:9b:b5:90:13:89:70:9e:e6:46:9c:f7:4c:d1: 10:55:0a:75:40:74:21:5c:c9:cb:22:36:03:6e:31:c2:5c:58: 87:e8:22:48:85:81:ef:83:5a:bc:5d:59:6f:98:0b:07:25:12: 20:39:da:69:47:34:08:8b:b9:0e:aa:b4:e5:8b:c5:b8:0f:e4: 2d:64:97:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5Uel6QEkcGcm6EIS4HxebXI/WkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTEyMDMxMTI2NDZaFw0yNTEyMDYxNTE1NDZaMDMxMTAvBgNV BAMTKEYxNjMwQzY1RjJBRTM1RjVGMUMwM0M1RDgzREZDQjQ3RTVBOTE2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogGxojotWz8V/Vzx8lE3EMAQQ 2NXw3ObGIwn7Y4jUhUcm7MvroVrDCzbUuSfAPYcZbvNYe3PHxc125K+8tKS2pzXr jwppT1THxvIJEFV01tmCGfbXnix+3j5UnRAFUQHXJ98fBathzPAXijnzKQbbjGjZ 1M+nCd23dwoi6OkhaNx10/o9sDtgeBA7zCSM1UptRpkJ/iI6wx31QUHsRGYslXm6 Ls9dEVul3awjPm92lCbQk3736kTTC4rXn6p8vkuA6WcivQzrCEBkIQCAuy+gjGP0 ++SlUgPjbA7+M3HNM5+ZISDVSjXqCv+53mmkeFPv5SQ83H2Wfw3SFRk4kDSJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8WMMZfKuNfXxwDxdg9/LR+WpFkwwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJii5hO8Z1WbvXWBAK3ZNLvf04vgwejqIoNq /yPz6UQK5OOkQJqmsOHcSkIQmVv/nt+xKJm7ZA54rNn9jHj2oFWxFISo3D/ioZDR OldmHapm8NY+tATWnGHNG4S+IwJQVFvEhLeEZH0Fe0OXS4J4QzaadbRYBMh4IGWL QX9L9tUqqNnzeXR1NJELdwQuwprWRnDg5wnRZPgQibpaPJlRROO3ydvyqCe9kBr1 M2mCJGEgZDwsXMVi+OS4m7WQE4lwnuZGnPdM0RBVCnVAdCFcycsiNgNuMcJcWIfo IkiFge+DWrxdWW+YCwclEiA52mlHNAiLuQ6qtOWLxbgP5C1kl04= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:08 2025 by rpki-client