This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: ojiI7ShLbnc9zi8YeGL7UCBrmlqgj8DbiaIScyBIOK4= Subject key identifier: E0:A5:68:46:2E:F2:8C:C7:EA:25:7C:85:BB:0B:C3:0D:A3:15:E5:F3 Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 0F2931B5E088FC335C146DD7513F6BF5B4781BF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 01D8 Signing time: Sat 06 Dec 2025 10:00:02 +0000 Manifest this update: Sat 06 Dec 2025 09:55:02 +0000 Manifest next update: Tue 09 Dec 2025 21:38:02 +0000 Files and hashes: 1: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: XXDfIIYOEglBKxR32q76DP0xk41MtlD2sFhZIbxce4A=) 2: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: jtXSzqOnlCN6w2Li6F+WzsbTgUEOCjcAxxntPW+Zz4I=) 3: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: GfoRbCqzzEwM+JaSR+jL9jpyyrybmpGlShF5wsNuV5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:29:31:b5:e0:88:fc:33:5c:14:6d:d7:51:3f:6b:f5:b4:78:1b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Dec 6 09:55:02 2025 GMT Not After : Dec 9 21:38:02 2025 GMT Subject: CN=E0A568462EF28CC7EA257C85BB0BC30DA315E5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:dc:db:1a:45:1d:dd:4b:66:15:ae:ae:26: ac:53:4a:e6:e9:c3:67:84:a1:e2:5d:3b:60:c6:10: 37:c9:fa:a2:6e:4e:90:1e:dc:fe:42:c5:9c:2e:bc: c8:10:21:26:76:ab:70:75:d5:d8:cc:b2:40:42:6a: e1:ef:39:75:7b:7e:ac:6d:ca:3f:6c:78:0a:53:e4: 40:c3:b7:f5:9f:91:c2:93:cd:78:47:62:38:b4:1a: 2b:02:13:65:8a:ad:19:8c:db:d4:15:89:f0:17:62: 25:45:b4:be:1f:32:80:bd:d6:2c:65:09:11:1e:74: 2b:d1:3f:e3:43:05:ff:f3:63:8f:48:7d:ec:8e:03: 22:63:9d:41:57:63:b3:d3:81:1c:e4:8c:07:e6:47: f6:dd:b4:78:63:90:8b:71:76:19:4e:f3:fb:d4:ad: 41:23:e9:93:ee:e0:73:15:3e:7e:bd:4a:aa:d1:5e: 38:0c:04:93:3e:63:06:d2:cd:c2:f1:44:2a:53:b0: b5:2f:3d:bd:02:d5:64:62:e3:8e:49:e3:9b:4e:2f: 7b:ce:36:5a:2c:dd:1f:d8:b3:d1:56:15:74:d6:3e: c4:e3:45:e3:6b:e9:2b:52:2c:07:0b:11:61:dd:45: d2:be:43:6c:e2:93:ae:da:3d:f7:a5:de:e5:cd:27: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:68:46:2E:F2:8C:C7:EA:25:7C:85:BB:0B:C3:0D:A3:15:E5:F3 X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a9:0f:f6:97:02:ba:82:9e:22:4d:60:ac:ba:75:ec:72:32: a7:d9:d4:c3:c2:8f:67:12:63:f7:f8:57:d9:2f:8e:91:45:43: eb:46:f3:95:c6:07:80:10:4c:c8:c7:3b:f2:57:33:4b:60:40: a5:4e:40:f4:a0:e8:87:f3:0d:63:d0:4e:6a:d5:15:8b:f6:ae: b9:d1:3a:f1:82:ef:61:f8:11:e4:53:2f:d9:91:44:e0:e6:ec: 9e:4c:b1:a1:15:e6:64:6f:db:ff:7f:4e:84:ef:8a:34:0f:da: c6:e0:ff:ca:7a:c3:f9:3f:a3:42:50:4b:c6:6d:f0:82:83:c8: d2:44:a7:70:6b:03:e4:3e:44:38:ab:1d:01:9d:35:b2:9b:ca: 5e:54:df:b1:5e:65:ef:ad:44:6d:07:09:8d:77:3d:dc:dd:d8: bb:65:95:97:2d:7d:02:90:12:81:b5:e7:c4:5c:7f:e4:17:61: 9d:49:a3:b6:aa:10:41:1a:1a:23:20:34:d8:92:85:77:3e:f8: fc:6c:d9:3a:a6:7b:a7:de:68:ec:40:df:ae:04:be:07:f8:cc: b5:ac:8b:28:3c:aa:8c:bb:7a:00:fa:57:83:57:4f:e5:45:b3: f6:6e:ec:9d:6a:6b:fd:a3:2b:da:a3:22:ed:b7:cb:39:34:05: e1:81:22:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDykxteCI/DNcFG3XUT9r9bR4G/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTEyMDYwOTU1MDJaFw0yNTEyMDkyMTM4MDJaMDMxMTAvBgNV BAMTKEUwQTU2ODQ2MkVGMjhDQzdFQTI1N0M4NUJCMEJDMzBEQTMxNUU1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ItzbGkUd3UtmFa6uJqxTSubp w2eEoeJdO2DGEDfJ+qJuTpAe3P5CxZwuvMgQISZ2q3B11djMskBCauHvOXV7fqxt yj9seApT5EDDt/WfkcKTzXhHYji0GisCE2WKrRmM29QVifAXYiVFtL4fMoC91ixl CREedCvRP+NDBf/zY49IfeyOAyJjnUFXY7PTgRzkjAfmR/bdtHhjkItxdhlO8/vU rUEj6ZPu4HMVPn69SqrRXjgMBJM+YwbSzcLxRCpTsLUvPb0C1WRi445J45tOL3vO Nlos3R/Ys9FWFXTWPsTjReNr6StSLAcLEWHdRdK+Q2zik67aPfel3uXNJ6CZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4KVoRi7yjMfqJXyFuwvDDaMV5fMwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADapD/aXArqCniJNYKy6dexyMqfZ1MPCj2cS Y/f4V9kvjpFFQ+tG85XGB4AQTMjHO/JXM0tgQKVOQPSg6IfzDWPQTmrVFYv2rrnR OvGC72H4EeRTL9mRRODm7J5MsaEV5mRv2/9/ToTvijQP2sbg/8p6w/k/o0JQS8Zt 8IKDyNJEp3BrA+Q+RDirHQGdNbKbyl5U37FeZe+tRG0HCY13Pdzd2LtllZctfQKQ EoG158Rcf+QXYZ1Jo7aqEEEaGiMgNNiShXc++Pxs2Tqme6feaOxA364Evgf4zLWs iyg8qoy7egD6V4NXT+VFs/Zu7J1qa/2jK9qjIu23yzk0BeGBIq0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:10 2025 by rpki-client