This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: CV7SkcIKqfAWAdOL5RuSLfP6gUPW1iqCXVMfPh2BxQc= Subject key identifier: 8A:0C:0E:CE:3C:21:2F:5B:FC:36:80:16:4D:0D:4D:62:9D:60:76:99 Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 14CE8DC7BBED455D9F7FF5EEB0CC46139B574835 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 022F Signing time: Mon 01 Dec 2025 22:52:17 +0000 Manifest this update: Mon 01 Dec 2025 22:47:17 +0000 Manifest next update: Fri 05 Dec 2025 04:21:17 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: XUTlYI9EY2TmN6oVQa+h5eb6xv4WN3yyQvR5kaJtXjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ce:8d:c7:bb:ed:45:5d:9f:7f:f5:ee:b0:cc:46:13:9b:57:48:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: Dec 1 22:47:17 2025 GMT Not After : Dec 5 04:21:17 2025 GMT Subject: CN=8A0C0ECE3C212F5BFC3680164D0D4D629D607699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:a2:0c:df:c3:ed:27:56:b9:42:d0:9b:2b: 19:e4:1e:4f:1f:04:15:b1:6c:8a:bc:35:35:27:87: 18:a6:b0:70:66:72:0c:d0:a6:75:e9:27:5f:5a:92: ea:a4:bb:4a:ab:0d:da:24:58:6d:90:5c:37:44:97: b7:06:ae:b9:df:23:46:28:20:5e:fc:6c:1e:46:de: 00:da:59:7c:29:ec:c7:42:b9:da:13:fc:2c:cb:75: 03:bb:d1:ac:e9:5a:d9:57:f6:df:26:9e:e1:65:5d: c6:42:ee:c3:7c:af:bd:3b:d6:58:50:86:24:8a:a2: 8e:87:f0:4d:70:a0:ac:40:cf:df:44:3c:30:eb:15: 26:ec:94:94:da:bb:39:e9:d3:cc:a6:e2:ce:ed:ae: 83:96:eb:6a:4d:86:6d:ce:71:51:be:71:03:18:4c: c9:51:14:90:11:fb:1d:2b:b6:8e:98:b6:a0:6d:e4: f8:8d:66:37:91:2a:14:ed:57:a7:d6:0d:cb:5b:fd: 3e:69:81:72:8f:de:29:7c:9b:84:a7:55:2b:73:3f: 29:22:d5:00:1a:c7:0a:7f:16:de:cc:ce:3f:4f:7e: d0:1a:fa:b9:c8:b2:ff:6d:12:45:a2:f1:52:82:29: d3:0d:6b:09:ae:26:bc:fc:58:82:f9:01:17:0e:d5: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0C:0E:CE:3C:21:2F:5B:FC:36:80:16:4D:0D:4D:62:9D:60:76:99 X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:2a:78:6f:48:b5:5f:52:eb:fa:19:21:27:09:91:87:04:6b: 45:ec:a1:41:ef:7d:45:4b:b8:52:32:2b:8c:7d:04:25:e8:8f: 62:66:dc:ac:95:ca:7c:45:c5:4e:9a:af:9a:cb:b5:34:be:3f: 32:70:a5:62:3f:4e:83:2b:4c:33:76:cc:b3:59:36:a9:fd:a4: 7e:83:d0:b9:05:6c:a0:78:d2:c6:29:6f:36:07:22:48:3e:18: 1d:1e:18:bb:32:6a:50:ae:00:a2:a3:0a:2b:33:35:b9:56:c1: ca:54:dc:e3:6d:92:fa:99:c3:2e:35:aa:92:e4:b9:f6:d7:57: 3c:9a:36:b0:d9:b5:a0:98:d9:ea:6d:ef:80:54:71:be:37:bb: 95:be:24:3a:1d:4f:1d:35:63:05:f1:84:2e:95:76:6a:60:29: 0a:27:cb:a9:68:7d:7b:84:98:13:44:85:a8:5d:b7:94:4d:3a: 87:f0:a4:7e:b5:9f:e1:7c:ca:68:a1:0c:8c:62:f0:ad:f7:c5: ae:65:cb:9e:ca:4a:da:f1:e5:bb:a7:88:75:89:ce:0c:f0:4c: fb:e2:52:81:09:0a:6e:10:40:a7:2b:73:97:43:41:df:22:63: 3f:2f:de:e5:1a:62:77:99:1d:1d:5a:00:5f:06:d7:6e:1b:26: d3:d6:36:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFM6Nx7vtRV2ff/XusMxGE5tXSDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNTEyMDEyMjQ3MTdaFw0yNTEyMDUwNDIxMTdaMDMxMTAvBgNV BAMTKDhBMEMwRUNFM0MyMTJGNUJGQzM2ODAxNjREMEQ0RDYyOUQ2MDc2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7waIM38PtJ1a5QtCbKxnkHk8f BBWxbIq8NTUnhximsHBmcgzQpnXpJ19akuqku0qrDdokWG2QXDdEl7cGrrnfI0Yo IF78bB5G3gDaWXwp7MdCudoT/CzLdQO70azpWtlX9t8mnuFlXcZC7sN8r7071lhQ hiSKoo6H8E1woKxAz99EPDDrFSbslJTauznp08ym4s7troOW62pNhm3OcVG+cQMY TMlRFJAR+x0rto6YtqBt5PiNZjeRKhTtV6fWDctb/T5pgXKP3il8m4SnVStzPyki 1QAaxwp/Ft7Mzj9PftAa+rnIsv9tEkWi8VKCKdMNawmuJrz8WIL5ARcO1Wj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUigwOzjwhL1v8NoAWTQ1NYp1gdpkwHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUqeG9ItV9S6/oZIScJkYcEa0XsoUHvfUVL uFIyK4x9BCXoj2Jm3KyVynxFxU6ar5rLtTS+PzJwpWI/ToMrTDN2zLNZNqn9pH6D 0LkFbKB40sYpbzYHIkg+GB0eGLsyalCuAKKjCiszNblWwcpU3ONtkvqZwy41qpLk ufbXVzyaNrDZtaCY2ept74BUcb43u5W+JDodTx01YwXxhC6VdmpgKQony6lofXuE mBNEhahdt5RNOofwpH61n+F8ymihDIxi8K33xa5ly57KStrx5buniHWJzgzwTPvi UoEJCm4QQKcrc5dDQd8iYz8v3uUaYneZHR1aAF8G124bJtPWNt0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:59 2025 by rpki-client