This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: LSflhFBO9MqWMKehK/8lLmJ37XRQ+0zvc3BVP9BYH9c= Subject key identifier: 2F:DF:B7:31:C7:FA:16:9D:0A:DC:31:75:96:58:79:11:DA:9B:DB:E9 Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 3CE34E71AA671541A66D3D332C64D70B8FC27731 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 0529 Signing time: Tue 02 Dec 2025 00:01:14 +0000 Manifest this update: Mon 01 Dec 2025 23:56:14 +0000 Manifest next update: Fri 05 Dec 2025 10:01:14 +0000 Files and hashes: 1: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) 2: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) 3: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: OZZFEHEiOGF0tU3fzlxuXRcOf3GJYvPNwx3ztzAGi80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e3:4e:71:aa:67:15:41:a6:6d:3d:33:2c:64:d7:0b:8f:c2:77:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Dec 1 23:56:14 2025 GMT Not After : Dec 5 10:01:14 2025 GMT Subject: CN=2FDFB731C7FA169D0ADC317596587911DA9BDBE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:15:c9:2d:0d:3f:1e:b4:96:52:fa:49:45: 75:94:e8:81:9e:1b:33:06:69:3a:24:9f:db:56:6f: f4:cc:68:6e:ff:ef:2c:03:c5:8b:51:c6:37:90:97: f1:54:db:18:41:0d:0c:16:ba:7e:ac:f0:18:19:f3: b5:34:3a:8a:3e:d6:4c:b1:97:9a:fe:18:10:d7:4f: c5:da:40:fa:41:79:14:3f:8f:89:f3:4d:34:65:5b: 9c:99:1e:0a:ef:cc:59:17:97:9b:f9:57:af:53:c7: 4b:40:38:e0:1c:44:81:5e:7a:7c:d9:ad:2a:f3:ad: 52:96:3d:b1:76:73:15:90:ee:e5:36:88:74:14:16: 8f:68:cb:5a:32:52:1d:dc:13:54:66:23:9b:36:97: c8:77:88:d2:2a:76:c4:04:41:03:a8:61:45:a6:1c: 70:41:23:e6:d9:82:5e:77:a7:00:b4:df:ab:c2:f4: cf:79:51:f6:ef:2d:e0:23:ef:a5:68:f7:da:96:15: 90:f0:19:15:22:9b:95:41:7c:30:4f:e2:c0:f4:65: de:70:4c:6e:ee:2b:75:cc:a3:34:89:0d:00:c2:0c: 93:5c:7b:58:f4:73:58:8c:00:be:b3:3a:e0:d7:d7: 58:1f:79:24:2e:a7:87:2a:f8:ec:92:0e:5a:5f:28: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DF:B7:31:C7:FA:16:9D:0A:DC:31:75:96:58:79:11:DA:9B:DB:E9 X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9c:8d:0d:f4:c3:40:a9:bf:ed:94:0f:87:1f:18:c3:14:80: f2:ea:ed:3a:e9:c8:0c:f2:30:8a:0f:63:22:50:15:01:94:cb: 19:1f:10:4a:c5:c1:35:4a:9f:57:93:e7:b3:77:78:3b:60:30: a2:9f:97:f7:97:bb:fc:ad:89:f7:bd:2e:4c:65:b1:6b:d5:32: 21:ff:b7:43:1f:13:cb:9b:f8:56:57:d7:71:38:05:b9:a7:d6: c5:3e:ee:7c:43:fa:4a:1f:14:99:33:d3:b2:cc:82:d2:f5:52: 06:45:66:da:04:c9:e7:e0:d0:82:4f:89:2e:b4:6f:1f:ad:6e: a1:24:74:b0:cf:d9:29:0d:35:1a:8c:85:1f:22:4c:87:9b:e8: 89:df:27:72:fa:65:c8:72:c4:bb:33:cc:d6:e9:ee:89:14:0e: 92:87:38:8c:d0:9f:04:f3:c8:8c:c4:70:d3:f7:f5:8c:16:69: 60:6e:ce:55:fc:bd:13:aa:8b:10:dc:9f:a4:b0:a6:26:30:0d: 85:68:4d:8c:30:d4:a1:73:f4:ff:17:f7:e9:d1:3c:bb:8d:71: d2:5e:ac:c2:a9:54:ea:59:3e:77:ab:0d:eb:1a:bd:3d:d6:aa: 3a:c0:0b:d1:b4:0f:aa:a7:1e:e6:19:78:7a:12:c1:5d:23:e9: a9:0a:96:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPONOcapnFUGmbT0zLGTXC4/CdzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTEyMDEyMzU2MTRaFw0yNTEyMDUxMDAxMTRaMDMxMTAvBgNV BAMTKDJGREZCNzMxQzdGQTE2OUQwQURDMzE3NTk2NTg3OTExREE5QkRCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFxXJLQ0/HrSWUvpJRXWU6IGe GzMGaTokn9tWb/TMaG7/7ywDxYtRxjeQl/FU2xhBDQwWun6s8BgZ87U0Ooo+1kyx l5r+GBDXT8XaQPpBeRQ/j4nzTTRlW5yZHgrvzFkXl5v5V69Tx0tAOOAcRIFeenzZ rSrzrVKWPbF2cxWQ7uU2iHQUFo9oy1oyUh3cE1RmI5s2l8h3iNIqdsQEQQOoYUWm HHBBI+bZgl53pwC036vC9M95UfbvLeAj76Vo99qWFZDwGRUim5VBfDBP4sD0Zd5w TG7uK3XMozSJDQDCDJNce1j0c1iMAL6zOuDX11gfeSQup4cq+OySDlpfKEkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL9+3Mcf6Fp0K3DF1llh5Edqb2+kwHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFycjQ30w0Cpv+2UD4cfGMMUgPLq7TrpyAzy MIoPYyJQFQGUyxkfEErFwTVKn1eT57N3eDtgMKKfl/eXu/ytife9LkxlsWvVMiH/ t0MfE8ub+FZX13E4Bbmn1sU+7nxD+kofFJkz07LMgtL1UgZFZtoEyefg0IJPiS60 bx+tbqEkdLDP2SkNNRqMhR8iTIeb6InfJ3L6ZchyxLszzNbp7okUDpKHOIzQnwTz yIzEcNP39YwWaWBuzlX8vROqixDcn6SwpiYwDYVoTYww1KFz9P8X9+nRPLuNcdJe rMKpVOpZPnerDesavT3WqjrAC9G0D6qnHuYZeHoSwV0j6akKlnY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:32 2025 by rpki-client