This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: 5laUCehF4Ly83+TaXMrew5AZiTwUd6lhfteq4xT3Xi0= Subject key identifier: 1F:12:04:EF:8C:B1:29:0F:8E:3F:FE:5F:EE:61:5D:3C:CB:C6:33:C6 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 046AC7D37DEEBEB083379C6838CCBFDC8AFD221E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 8A Signing time: Wed 03 Dec 2025 12:51:17 +0000 Manifest this update: Wed 03 Dec 2025 12:46:17 +0000 Manifest next update: Sat 06 Dec 2025 16:57:17 +0000 Files and hashes: 1: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) 2: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: 1w8yFUwvaFiOdvnJy8/HiWCNvRRlDlcnyQEaFS3Y/18=) 3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6a:c7:d3:7d:ee:be:b0:83:37:9c:68:38:cc:bf:dc:8a:fd:22:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Dec 3 12:46:17 2025 GMT Not After : Dec 6 16:57:17 2025 GMT Subject: CN=1F1204EF8CB1290F8E3FFE5FEE615D3CCBC633C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:dc:03:a7:7f:9a:5d:9c:45:d8:26:5a:19: c9:16:90:ca:ce:b7:b6:29:4f:20:f6:da:71:10:3e: 68:10:11:d0:0f:d4:13:4e:13:77:37:72:58:dc:85: 03:79:24:c8:76:8f:0f:77:03:dc:74:c1:f5:87:ef: 28:13:0e:1e:87:45:21:21:8c:44:1d:dd:6e:63:b3: c1:bb:8c:7b:0a:c0:d0:db:68:fa:6c:79:fd:03:09: 7f:6a:7e:b0:7d:07:a7:a1:af:13:a4:f8:04:55:dd: 84:78:79:fc:bc:1c:40:a1:4f:84:a3:bc:e3:6f:f6: ad:b2:5e:47:d7:7c:de:ea:ae:69:13:14:bc:f8:2f: 37:5b:e1:95:be:0b:98:86:39:03:81:d5:18:bb:0d: c5:7a:58:c9:c2:f2:7c:f2:7d:62:c0:3e:52:32:1f: 3d:63:20:89:a6:7e:95:0c:70:17:37:2b:2c:47:5a: b8:d5:82:a5:95:08:0d:46:99:db:18:07:c1:44:31: a2:d2:61:bf:61:82:76:38:78:8e:2d:ac:47:b9:3b: 58:32:84:75:28:9d:a3:5f:08:20:b9:ef:0a:a1:9b: 86:21:90:93:b2:b5:c6:bd:ff:1c:7f:89:69:f3:87: 12:50:28:01:69:25:55:d9:f1:71:ff:9a:0b:45:02: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:12:04:EF:8C:B1:29:0F:8E:3F:FE:5F:EE:61:5D:3C:CB:C6:33:C6 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4f:21:bd:05:48:4d:c0:b1:da:73:05:22:4d:18:1f:2f:a0: e1:9d:38:7c:75:c5:41:e6:91:8c:8c:f0:69:58:49:84:76:d4: 5b:6a:a6:27:dd:fd:24:0f:86:d4:2d:79:e7:a1:39:32:55:cd: 60:33:78:2f:08:6c:ad:82:20:13:6b:17:ab:d7:5e:37:1a:12: 8e:c1:42:87:81:43:93:91:17:62:f1:21:96:41:42:b8:c3:dd: f5:0b:2f:0a:24:c9:e2:31:ea:01:f5:0a:d8:ba:b9:69:78:cf: 7d:e8:c8:9c:96:1a:17:8c:bd:00:ad:0e:6d:30:3b:a8:40:d0: 76:b3:54:53:01:a4:73:0f:68:c8:28:6a:39:7b:7d:44:80:db: 24:f3:c5:c6:73:4c:5a:3d:f8:d6:9a:b9:54:42:3a:46:d4:d2: 8f:f0:df:d0:7e:fd:7a:11:4f:cf:5d:92:2c:5d:a2:b0:55:c5: ef:90:06:f9:81:b8:df:cc:78:04:ca:e1:c5:e2:23:71:e1:07: 2c:46:cc:08:ed:0f:9c:cf:79:97:8a:40:6b:07:b1:49:b3:1c: f8:4f:c8:bc:c1:1a:7f:a7:6e:6b:81:0a:c7:ad:84:f3:83:64: bd:33:11:fd:ff:31:cc:f6:27:27:16:d2:36:87:c0:10:95:25: 3f:8c:a2:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBGrH033uvrCDN5xoOMy/3Ir9Ih4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTEyMDMxMjQ2MTdaFw0yNTEyMDYxNjU3MTdaMDMxMTAvBgNV BAMTKDFGMTIwNEVGOENCMTI5MEY4RTNGRkU1RkVFNjE1RDNDQ0JDNjMzQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRtwDp3+aXZxF2CZaGckWkMrO t7YpTyD22nEQPmgQEdAP1BNOE3c3cljchQN5JMh2jw93A9x0wfWH7ygTDh6HRSEh jEQd3W5js8G7jHsKwNDbaPpsef0DCX9qfrB9B6ehrxOk+ARV3YR4efy8HEChT4Sj vONv9q2yXkfXfN7qrmkTFLz4Lzdb4ZW+C5iGOQOB1Ri7DcV6WMnC8nzyfWLAPlIy Hz1jIImmfpUMcBc3KyxHWrjVgqWVCA1GmdsYB8FEMaLSYb9hgnY4eI4trEe5O1gy hHUonaNfCCC57wqhm4YhkJOytca9/xx/iWnzhxJQKAFpJVXZ8XH/mgtFAq5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHxIE74yxKQ+OP/5f7mFdPMvGM8YwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJPIb0FSE3AsdpzBSJNGB8voOGdOHx1xUHm kYyM8GlYSYR21Ftqpifd/SQPhtQteeehOTJVzWAzeC8IbK2CIBNrF6vXXjcaEo7B QoeBQ5ORF2LxIZZBQrjD3fULLwokyeIx6gH1Cti6uWl4z33oyJyWGheMvQCtDm0w O6hA0HazVFMBpHMPaMgoajl7fUSA2yTzxcZzTFo9+NaauVRCOkbU0o/w39B+/XoR T89dkixdorBVxe+QBvmBuN/MeATK4cXiI3HhByxGzAjtD5zPeZeKQGsHsUmzHPhP yLzBGn+nbmuBCsethPODZL0zEf3/Mcz2JycW0jaHwBCVJT+MoqQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:23 2025 by rpki-client