This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: waoq9pvEjs1k2Of5NsEpFgmStdSXQn89Wco/xlnKjHE= Subject key identifier: C1:A4:D7:90:97:30:53:9E:4F:11:73:D3:4C:C8:00:1A:E2:FB:96:DF Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 60B723A7F03AAAF7F7BADA2514BCE809EE079B22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: A3 Signing time: Sat 06 Dec 2025 18:02:02 +0000 Manifest this update: Sat 06 Dec 2025 17:57:02 +0000 Manifest next update: Wed 10 Dec 2025 05:52:02 +0000 Files and hashes: 1: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: YHDb3JACUdZIuqnuO5tCNb2XDfcAoJJLvoFN6KcJuUk=) 2: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: B9dkfAuQSGFkOUPXQNcOnfZc9f5rLPsJ947+ZcqQIGc=) 3: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: K9djVkSLZL7Bw4K3e9tKRF4aAw6JK34iXwFmQ3sWP34=) 4: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: 5+7EpoRHiM1GiIon48eKxVuE1jLZPngRC9OVhAPzb0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b7:23:a7:f0:3a:aa:f7:f7:ba:da:25:14:bc:e8:09:ee:07:9b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Dec 6 17:57:02 2025 GMT Not After : Dec 10 05:52:02 2025 GMT Subject: CN=C1A4D7909730539E4F1173D34CC8001AE2FB96DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:82:56:4e:25:f0:aa:c7:93:e3:69:82:fa:9a: fb:fa:c6:eb:f1:a3:65:d6:b0:ee:b1:d6:41:8e:b7: cc:1c:d4:3a:49:e4:62:1d:ad:ed:34:90:90:45:53: e4:2c:1f:a0:2b:5e:6d:35:b1:f4:b2:37:50:a6:48: 24:e9:d2:98:b9:2d:65:34:dc:1a:f2:8a:b0:e9:8e: 35:8e:02:9c:24:ba:4d:5d:93:6d:44:52:da:68:88: e7:d0:68:0b:33:0c:e0:a1:db:5d:ba:4b:fa:2b:56: bc:93:a3:30:d1:6b:d1:00:31:c5:e1:a6:38:cd:e7: 8f:f9:dd:0f:12:eb:c6:92:1f:3c:c5:a8:80:21:e3: c4:b5:51:1b:ad:91:c7:d1:40:d7:4d:97:b0:32:fc: fd:77:36:30:91:5e:14:b7:68:61:d3:5f:35:8e:6b: ae:03:95:eb:77:cc:ff:71:79:e9:46:5a:22:d1:d6: 2c:69:0a:77:5f:c6:c2:21:50:74:b4:aa:9a:d1:a6: f1:77:b6:ed:15:2c:63:b5:ad:a5:5b:a3:94:0d:24: fb:7c:55:56:36:c8:72:a7:af:6c:ee:29:fc:8e:da: c1:95:65:57:70:f7:00:c8:bb:6e:29:b7:27:0e:d1: cc:e8:11:8c:59:55:c6:9f:48:9e:24:43:9b:83:cb: 9d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A4:D7:90:97:30:53:9E:4F:11:73:D3:4C:C8:00:1A:E2:FB:96:DF X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:85:18:e7:89:a1:c8:9a:1f:2e:07:cd:5b:9b:e0:8e:dc:68: 81:c4:ab:b6:01:5d:a3:0f:32:c1:d7:30:dc:a7:77:36:cd:3e: e5:ae:e1:1a:a9:7a:d4:13:b8:48:0e:77:4c:90:9b:30:53:81: 19:e0:34:02:30:aa:ba:58:16:ae:ca:7f:47:5d:3f:02:e9:4c: 3b:e7:92:9c:86:f8:88:c0:b1:a6:a9:2e:ff:a8:e7:2c:49:52: 59:c0:29:17:6c:28:7d:6d:9c:9b:d6:c8:0c:e9:6c:17:16:39: e2:f4:ed:91:34:54:ba:b7:19:f4:e7:44:84:3a:03:78:bd:6b: 9c:eb:9c:37:59:8f:8d:ca:30:6d:c9:b1:02:d8:98:77:64:04: 61:84:72:21:3d:c6:03:b1:60:a3:91:05:45:8f:38:77:5e:cd: f5:f2:63:ac:0c:53:d4:f6:8a:ad:1e:7a:86:bc:53:c9:cf:18: 9a:7f:29:fc:8e:df:b8:91:58:93:16:c1:e2:d2:b4:46:38:03: 8c:17:c4:c8:04:db:b6:fb:04:25:43:ab:77:b1:cc:21:82:d1: d0:36:49:60:d7:57:3e:11:26:46:78:4e:1f:61:0c:51:0d:cb: 4c:92:78:47:2a:0b:c4:01:1d:5a:d8:61:c8:32:81:17:bd:d6: 06:1d:92:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLcjp/A6qvf3utolFLzoCe4HmyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTEyMDYxNzU3MDJaFw0yNTEyMTAwNTUyMDJaMDMxMTAvBgNV BAMTKEMxQTRENzkwOTczMDUzOUU0RjExNzNEMzRDQzgwMDFBRTJGQjk2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuglZOJfCqx5PjaYL6mvv6xuvx o2XWsO6x1kGOt8wc1DpJ5GIdre00kJBFU+QsH6ArXm01sfSyN1CmSCTp0pi5LWU0 3BryirDpjjWOApwkuk1dk21EUtpoiOfQaAszDOCh2126S/orVryTozDRa9EAMcXh pjjN54/53Q8S68aSHzzFqIAh48S1URutkcfRQNdNl7Ay/P13NjCRXhS3aGHTXzWO a64Dlet3zP9xeelGWiLR1ixpCndfxsIhUHS0qprRpvF3tu0VLGO1raVbo5QNJPt8 VVY2yHKnr2zuKfyO2sGVZVdw9wDIu24ptycO0czoEYxZVcafSJ4kQ5uDy52XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwaTXkJcwU55PEXPTTMgAGuL7lt8wHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiFGOeJociaHy4HzVub4I7caIHEq7YBXaMP MsHXMNyndzbNPuWu4RqpetQTuEgOd0yQmzBTgRngNAIwqrpYFq7Kf0ddPwLpTDvn kpyG+IjAsaapLv+o5yxJUlnAKRdsKH1tnJvWyAzpbBcWOeL07ZE0VLq3GfTnRIQ6 A3i9a5zrnDdZj43KMG3JsQLYmHdkBGGEciE9xgOxYKORBUWPOHdezfXyY6wMU9T2 iq0eeoa8U8nPGJp/KfyO37iRWJMWweLStEY4A4wXxMgE27b7BCVDq3exzCGC0dA2 SWDXVz4RJkZ4Th9hDFENy0ySeEcqC8QBHVrYYcgygRe91gYdkpE= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:04 2025 by rpki-client