This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft File: 00C1EB3BEE971CEAB531D756361F934BE0179628.mft (raw, json) Hash identifier: Hjsp/7dLsT0VF8br4hRuLhzdLeNsxGCj2mFovc/cRx4= Subject key identifier: E7:46:EC:F0:CB:E3:A6:3E:CA:43:FF:1A:EC:65:45:C0:1A:19:9A:D8 Authority key identifier: 00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 Certificate issuer: /CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Certificate serial: 3CE2670DC0A197FA89ACAF112F1CE9F58287A305 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft Manifest number: D1 Signing time: Tue 02 Dec 2025 16:01:51 +0000 Manifest this update: Tue 02 Dec 2025 15:56:51 +0000 Manifest next update: Fri 05 Dec 2025 16:28:51 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 2PH25lGx4aoDxJSQ/LOSozIUBGDxDVOVLodCc7y15nU=) 2: 00C1EB3BEE971CEAB531D756361F934BE0179628.crl (hash: 4vGXj5cVGjo7iXrSu1wufaVAdpVails7B1vSA8kuzwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e2:67:0d:c0:a1:97:fa:89:ac:af:11:2f:1c:e9:f5:82:87:a3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Validity Not Before: Dec 2 15:56:51 2025 GMT Not After : Dec 5 16:28:51 2025 GMT Subject: CN=E746ECF0CBE3A63ECA43FF1AEC6545C01A199AD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:74:46:f1:cd:2b:8b:91:5f:d9:51:28:9b: 6f:64:c1:e6:c6:ab:0b:f5:86:76:c3:5f:cb:b2:5d: 01:6a:9d:07:a3:19:a3:67:0a:05:c8:a1:1b:7d:54: 12:5c:57:b8:bb:50:53:a4:26:cf:3e:18:e2:63:62: 58:cf:78:aa:08:87:ac:44:45:fe:0d:02:49:d6:5d: 18:34:27:1a:c5:d4:e7:91:6c:26:cd:bd:7a:59:c3: ae:61:a2:1f:98:f1:d7:ab:ce:ae:03:c1:53:44:a1: 25:a5:ff:52:6f:84:69:39:3c:71:56:24:5f:b3:6b: 97:39:25:52:b6:85:cd:c2:ce:e3:65:9f:74:89:2c: 32:11:52:f4:f4:de:74:09:e0:cd:c9:b6:ea:da:5c: 87:da:21:a6:39:d1:cd:c1:8d:56:b0:f0:39:2f:c2: 0e:31:da:72:f6:ea:a3:98:11:d2:bc:f6:df:31:21: 87:0b:93:f9:9a:4e:72:93:97:de:22:36:a2:eb:11: 28:01:70:bc:32:97:76:70:7b:21:94:01:bb:3e:d4: 47:bb:b1:05:97:0e:75:b8:9b:6f:7b:f8:63:1a:74: 5f:f7:a2:53:63:86:2f:87:ad:9d:11:90:7d:c7:9e: 7a:76:a3:38:03:23:98:1f:c2:46:c7:e6:90:c0:a3: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:46:EC:F0:CB:E3:A6:3E:CA:43:FF:1A:EC:65:45:C0:1A:19:9A:D8 X509v3 Authority Key Identifier: keyid:00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:9e:56:1d:62:4f:2b:97:26:83:9b:50:e7:91:86:fe:05:59: c5:98:07:6c:04:8f:86:5f:57:1e:dc:26:a8:53:07:05:93:79: b4:72:f0:9d:f7:30:f8:90:e6:a9:56:cf:99:46:22:62:48:37: 67:b2:31:f2:3d:8c:bb:80:18:ff:4c:c0:70:3a:3e:6c:a9:55: fe:f2:10:0e:3e:4a:b1:70:69:d4:15:55:16:3d:64:ae:9a:23: a8:c6:8b:dc:8f:ac:2d:e9:c1:ae:8f:1d:a8:4e:a5:ea:70:f0: 2c:ed:9e:7d:25:d4:fd:ed:45:bc:9e:9c:73:5e:22:f6:df:6f: 0d:31:7c:20:d4:e0:e1:11:b8:fe:f9:9c:d6:67:46:44:a7:70: a9:7e:6d:c8:fa:e4:70:28:53:2c:27:19:f8:a3:aa:36:0a:6c: 2d:ab:72:92:15:5f:9b:b3:40:bb:bf:db:1b:f8:ff:3c:e1:fc: 13:18:87:7e:18:35:3b:93:dc:43:55:9f:6f:f2:1a:b1:67:0e: b0:a0:4d:7a:0b:6a:29:34:c6:90:8d:48:43:88:b6:16:a8:47: 10:4d:db:b9:2e:bb:24:63:57:05:f6:83:08:3e:1f:e8:57:b1: 69:28:fe:b7:e7:85:24:e9:fc:76:42:30:79:34:cc:32:b5:fb: 0e:76:46:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOJnDcChl/qJrK8RLxzp9YKHowUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkzNEJF MDE3OTYyODAeFw0yNTEyMDIxNTU2NTFaFw0yNTEyMDUxNjI4NTFaMDMxMTAvBgNV BAMTKEU3NDZFQ0YwQ0JFM0E2M0VDQTQzRkYxQUVDNjU0NUMwMUExOTlBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwHRG8c0ri5Ff2VEom29kwebG qwv1hnbDX8uyXQFqnQejGaNnCgXIoRt9VBJcV7i7UFOkJs8+GOJjYljPeKoIh6xE Rf4NAknWXRg0JxrF1OeRbCbNvXpZw65hoh+Y8derzq4DwVNEoSWl/1JvhGk5PHFW JF+za5c5JVK2hc3CzuNln3SJLDIRUvT03nQJ4M3JturaXIfaIaY50c3BjVaw8Dkv wg4x2nL26qOYEdK89t8xIYcLk/maTnKTl94iNqLrESgBcLwyl3ZweyGUAbs+1Ee7 sQWXDnW4m297+GMadF/3olNjhi+HrZ0RkH3Hnnp2ozgDI5gfwkbH5pDAo8VjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50bs8Mvjpj7KQ/8a7GVFwBoZmtgwHwYDVR0j BBgwFoAUAMHrO+6XHOq1MddWNh+TS+AXligwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIwY2U3Ni1kYjc1LTQ2NTEtODViMC0wYmZiMThlMGIxNzUvMC8wMEMxRUIzQkVF OTcxQ0VBQjUzMUQ3NTYzNjFGOTM0QkUwMTc5NjI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkzNEJFMDE3 OTYyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMGNlNzYtZGI3NS00NjUxLTg1 YjAtMGJmYjE4ZTBiMTc1LzAvMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkz NEJFMDE3OTYyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyeVh1iTyuXJoObUOeRhv4FWcWYB2wEj4Zf Vx7cJqhTBwWTebRy8J33MPiQ5qlWz5lGImJIN2eyMfI9jLuAGP9MwHA6PmypVf7y EA4+SrFwadQVVRY9ZK6aI6jGi9yPrC3pwa6PHahOpepw8Cztnn0l1P3tRbyenHNe Ivbfbw0xfCDU4OERuP75nNZnRkSncKl+bcj65HAoUywnGfijqjYKbC2rcpIVX5uz QLu/2xv4/zzh/BMYh34YNTuT3ENVn2/yGrFnDrCgTXoLaik0xpCNSEOIthaoRxBN 27kuuyRjVwX2gwg+H+hXsWko/rfnhSTp/HZCMHk0zDK1+w52Rgk= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:24 2025 by rpki-client