This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: wYPOkNz+ATJ+QpwEi63U8lQv9iI1zfeu3l1D9t9LOGY= Subject key identifier: 82:C5:FA:62:6B:B6:33:98:3C:B9:B4:49:3A:F0:4D:E4:CA:6C:88:20 Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 50A10814D132527267BCED41957B5AA2BFBD8308 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: C8 Signing time: Mon 01 Dec 2025 22:21:32 +0000 Manifest this update: Mon 01 Dec 2025 22:16:32 +0000 Manifest next update: Thu 04 Dec 2025 23:04:32 +0000 Files and hashes: 1: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA=) 2: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: Jy6L+sGekPMyuMtdpky0D2jRd/OipqZg9C05WnpPS4Y=) 3: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: AwbG2P4o+xJxkWzBwoW1VyVgL5OLwkULChXiG+sYURY=) 4: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: L0OHjTLAoKuTGX0pU6SpedvQBvVTanvlgQCeJn9jtow=) 5: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: zKHXogUEbsyyC8ISVc+ANF+73aCbCi6els1lcd1hD1E=) 6: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: +SLAv/Ao5ipR0W/v6AgPtFrgrn+d0qK7qqbca2xo8WU=) 7: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: vaX/n6vc4K9mejYUu1eJI/tNjnfyjVyWN2o5zH8Hflc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a1:08:14:d1:32:52:72:67:bc:ed:41:95:7b:5a:a2:bf:bd:83:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Dec 1 22:16:32 2025 GMT Not After : Dec 4 23:04:32 2025 GMT Subject: CN=82C5FA626BB633983CB9B4493AF04DE4CA6C8820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:f1:3b:93:b6:32:0a:b2:d2:61:95:92:a9: 2b:b0:96:7d:be:65:9a:a0:9d:1c:21:42:42:29:81: dd:a3:e9:2b:38:38:10:91:57:14:14:13:64:07:24: 16:9f:61:78:c7:16:e5:c7:a5:00:a8:d0:d8:78:9e: 6c:a5:19:54:21:1b:42:36:a1:df:d9:d9:cc:94:1d: d2:97:1d:78:75:07:72:3f:b8:00:66:06:a3:19:46: cd:db:66:80:b4:08:94:9e:db:e4:71:86:5b:6b:28: 34:15:d0:42:6c:73:35:5a:29:94:74:4d:85:5a:39: 62:f5:62:87:b3:40:75:ec:d8:86:56:64:74:05:1a: fb:83:a0:97:7e:00:e2:13:1a:1f:57:30:cc:46:0f: e9:55:5c:dc:d3:18:14:63:91:85:85:6f:1a:67:de: 25:14:a5:ca:9a:ad:02:49:01:6d:2c:59:1d:1d:15: e6:71:c3:15:68:9f:ad:ae:e6:59:1e:f1:e7:ae:65: cc:fe:12:8b:d3:0d:d3:f5:ee:6d:19:d3:b7:89:3a: a0:2e:95:54:40:b2:ae:5a:fe:84:32:88:cf:43:6f: 78:95:c9:94:2c:b7:33:15:29:2c:e7:b1:da:0a:6f: 5a:91:6c:8e:e8:06:13:79:d4:0f:8f:17:54:06:80: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C5:FA:62:6B:B6:33:98:3C:B9:B4:49:3A:F0:4D:E4:CA:6C:88:20 X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:04:e1:84:dd:ba:5e:a6:ef:f9:1e:af:6b:31:1c:0a:7a:b4: 6f:16:96:f0:75:05:68:cf:7a:71:19:41:e4:7f:d5:99:6d:18: a8:cb:92:a8:de:ba:a6:11:c7:c7:b7:d5:89:0c:64:4a:d7:ff: 47:57:ad:a1:f0:e8:da:7b:26:9f:8f:59:f3:41:89:42:78:5b: e9:61:76:df:61:26:1b:84:3b:77:bf:73:2c:de:f2:f2:fb:44: 8f:6e:89:8a:e0:92:88:3e:8a:2a:18:2b:84:02:57:65:d9:8e: bb:d0:7b:75:71:70:99:ca:a1:8c:37:87:9b:1b:cc:c0:db:4b: ce:a4:85:84:31:11:52:bb:e3:bf:f8:28:b9:d3:de:d7:df:53: 93:95:da:fd:ef:7a:05:a9:48:46:a4:5d:59:d9:6f:e2:19:54: 4d:a6:ef:ae:ab:4a:96:b1:7d:d8:24:2a:d1:34:8b:d0:b8:12: 75:c5:53:dd:f5:59:e4:31:73:0e:42:e7:f7:23:3f:6b:47:0a: c7:18:20:41:19:4d:38:8b:de:01:ec:10:68:46:6d:90:6b:44: 2e:6f:3a:f8:62:13:65:71:cd:55:95:b9:d6:0b:fc:8a:0f:7c: c1:eb:9c:46:34:c4:54:49:80:fc:03:40:17:de:ba:e1:61:28: 9f:d0:53:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKEIFNEyUnJnvO1BlXtaor+9gwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTEyMDEyMjE2MzJaFw0yNTEyMDQyMzA0MzJaMDMxMTAvBgNV BAMTKDgyQzVGQTYyNkJCNjMzOTgzQ0I5QjQ0OTNBRjA0REU0Q0E2Qzg4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlvE7k7YyCrLSYZWSqSuwln2+ ZZqgnRwhQkIpgd2j6Ss4OBCRVxQUE2QHJBafYXjHFuXHpQCo0Nh4nmylGVQhG0I2 od/Z2cyUHdKXHXh1B3I/uABmBqMZRs3bZoC0CJSe2+RxhltrKDQV0EJsczVaKZR0 TYVaOWL1YoezQHXs2IZWZHQFGvuDoJd+AOITGh9XMMxGD+lVXNzTGBRjkYWFbxpn 3iUUpcqarQJJAW0sWR0dFeZxwxVon62u5lke8eeuZcz+EovTDdP17m0Z07eJOqAu lVRAsq5a/oQyiM9Db3iVyZQstzMVKSznsdoKb1qRbI7oBhN51A+PF1QGgJUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgsX6Ymu2M5g8ubRJOvBN5MpsiCAwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQE4YTdul6m7/ker2sxHAp6tG8WlvB1BWjP enEZQeR/1ZltGKjLkqjeuqYRx8e31YkMZErX/0dXraHw6Np7Jp+PWfNBiUJ4W+lh dt9hJhuEO3e/cyze8vL7RI9uiYrgkog+iioYK4QCV2XZjrvQe3VxcJnKoYw3h5sb zMDbS86khYQxEVK747/4KLnT3tffU5OV2v3vegWpSEakXVnZb+IZVE2m766rSpax fdgkKtE0i9C4EnXFU931WeQxcw5C5/cjP2tHCscYIEEZTTiL3gHsEGhGbZBrRC5v OvhiE2VxzVWVudYL/IoPfMHrnEY0xFRJgPwDQBfeuuFhKJ/QU30= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:28 2025 by rpki-client