This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: Ew5omR3V6oFo0LA7b0vgWtqAs+rKIWbUoCOjYpfMPCk= Subject key identifier: 87:61:88:E4:31:D7:42:12:AD:DD:17:CE:27:1F:0A:96:82:37:90:79 Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 69EA78531880199C2AEF23F6306A39E926EBEFEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: CD Signing time: Sat 13 Dec 2025 09:34:02 +0000 Manifest this update: Sat 13 Dec 2025 09:29:02 +0000 Manifest next update: Tue 16 Dec 2025 21:06:02 +0000 Files and hashes: 1: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA=) 2: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: qDgc0XBcoRUcNGT5srEqEobc+0cuWbtU1/j1eAaxRGI=) 3: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: +SLAv/Ao5ipR0W/v6AgPtFrgrn+d0qK7qqbca2xo8WU=) 4: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: L0OHjTLAoKuTGX0pU6SpedvQBvVTanvlgQCeJn9jtow=) 5: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: vaX/n6vc4K9mejYUu1eJI/tNjnfyjVyWN2o5zH8Hflc=) 6: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: zKHXogUEbsyyC8ISVc+ANF+73aCbCi6els1lcd1hD1E=) 7: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: Jy6L+sGekPMyuMtdpky0D2jRd/OipqZg9C05WnpPS4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 13:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ea:78:53:18:80:19:9c:2a:ef:23:f6:30:6a:39:e9:26:eb:ef:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Dec 13 09:29:02 2025 GMT Not After : Dec 16 21:06:02 2025 GMT Subject: CN=876188E431D74212ADDD17CE271F0A9682379079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:b7:2d:b9:d5:88:18:e3:2c:32:52:bc:86: 60:b0:bb:02:f0:51:e8:43:5e:39:04:05:41:45:99: 6f:77:e8:e5:28:22:b5:a3:a6:f7:0d:a6:5e:88:b9: 60:a5:9b:3f:26:b9:dd:89:75:51:86:3e:99:79:50: 22:6e:ca:3a:0b:27:89:72:2f:b8:c5:d7:cf:d6:8a: e3:e2:e3:d0:e2:04:91:46:df:dd:7e:39:82:a3:0a: 08:fa:e7:f5:b0:76:97:6e:a3:16:6c:1a:f3:35:ff: f4:88:b9:7e:5c:40:9c:56:64:b8:17:68:c6:12:9e: 3f:19:be:ce:bd:4c:ec:c9:1f:21:ad:69:9b:78:28: 87:d6:32:f7:30:ee:bc:0a:6c:6d:64:a5:8c:ef:64: a0:ce:03:67:6a:81:4d:65:a2:1a:59:85:8f:5d:3b: a5:5c:1b:d7:6d:e0:92:38:c3:79:16:de:61:9d:0c: ee:d4:58:3b:c2:13:f1:c3:54:d3:12:93:2c:6a:fc: 85:19:65:95:7e:67:b5:f9:93:56:71:5a:27:59:92: 09:54:4e:7d:58:dc:bf:7b:de:6e:89:3c:27:11:26: 68:f1:97:9a:bf:be:01:38:40:7a:c0:ec:be:13:dd: 76:61:bb:e9:64:f0:02:fb:9f:af:ab:96:1a:0d:43: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:61:88:E4:31:D7:42:12:AD:DD:17:CE:27:1F:0A:96:82:37:90:79 X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f4:9b:fa:0e:37:0a:62:43:fd:59:4c:8d:9c:3c:eb:f6:a6: 0b:a9:8c:34:6a:70:37:b5:9e:a0:f5:6a:1e:16:a2:af:54:9b: 10:6e:25:e0:7e:91:ef:0d:77:84:d6:45:a9:02:6a:25:57:28: d6:8c:d8:26:d1:d3:96:4e:0a:6b:50:e4:9b:e5:a1:7f:06:2e: a5:1f:95:5e:0f:0c:fb:9f:d8:3a:45:b4:45:78:b2:f5:29:38: ee:ea:d4:17:69:f2:66:63:a3:a7:73:f6:62:20:ec:53:01:e4: d8:c2:e5:c9:80:92:2c:89:6a:c6:47:e5:b6:fa:41:db:02:24: f7:f1:dc:45:40:57:66:98:1f:dc:df:e4:40:a2:2b:cf:b9:56: 35:00:42:65:d9:17:a6:25:3d:fa:c9:f6:15:9a:0c:a6:6e:83: cf:14:72:19:95:0e:f6:c5:c5:f4:92:fb:e2:06:04:f9:cb:6f: 85:80:c3:85:c5:86:87:89:1b:c9:49:dc:02:e3:79:cf:1c:a4: c6:66:c8:6f:ad:9f:9f:3f:62:07:fd:12:ad:5c:ad:4c:57:02: a9:ab:fe:dd:25:1e:59:7b:de:47:cc:52:46:06:e7:7a:73:f0: ae:00:f6:84:b9:de:f2:9b:2b:cc:fa:92:4b:64:38:01:1d:28: 9d:aa:13:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaep4UxiAGZwq7yP2MGo56Sbr7+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTEyMTMwOTI5MDJaFw0yNTEyMTYyMTA2MDJaMDMxMTAvBgNV BAMTKDg3NjE4OEU0MzFENzQyMTJBREREMTdDRTI3MUYwQTk2ODIzNzkwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2urctudWIGOMsMlK8hmCwuwLw UehDXjkEBUFFmW936OUoIrWjpvcNpl6IuWClmz8mud2JdVGGPpl5UCJuyjoLJ4ly L7jF18/WiuPi49DiBJFG391+OYKjCgj65/WwdpduoxZsGvM1//SIuX5cQJxWZLgX aMYSnj8Zvs69TOzJHyGtaZt4KIfWMvcw7rwKbG1kpYzvZKDOA2dqgU1lohpZhY9d O6VcG9dt4JI4w3kW3mGdDO7UWDvCE/HDVNMSkyxq/IUZZZV+Z7X5k1ZxWidZkglU Tn1Y3L973m6JPCcRJmjxl5q/vgE4QHrA7L4T3XZhu+lk8AL7n6+rlhoNQzGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh2GI5DHXQhKt3RfOJx8KloI3kHkwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAz0m/oONwpiQ/1ZTI2cPOv2pgupjDRqcDe1 nqD1ah4Woq9UmxBuJeB+ke8Nd4TWRakCaiVXKNaM2CbR05ZOCmtQ5JvloX8GLqUf lV4PDPuf2DpFtEV4svUpOO7q1Bdp8mZjo6dz9mIg7FMB5NjC5cmAkiyJasZH5bb6 QdsCJPfx3EVAV2aYH9zf5ECiK8+5VjUAQmXZF6YlPfrJ9hWaDKZug88UchmVDvbF xfSS++IGBPnLb4WAw4XFhoeJG8lJ3ALjec8cpMZmyG+tn58/Ygf9Eq1crUxXAqmr /t0lHll73kfMUkYG53pz8K4A9oS53vKbK8z6kktkOAEdKJ2qEzc= -----END CERTIFICATE-----Generated at Sun Dec 14 00:05:55 2025 by rpki-client