This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: v+asCo45P/q4TQH4eGILlcnaX5g2VOM64Zb6PHO1FmY= Subject key identifier: 2E:99:02:2A:35:ED:E6:BC:52:A0:84:FB:10:CA:F8:6F:74:B0:39:23 Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 177659077ABD035D78995CDE95884ADB123832F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: F4 Signing time: Sat 06 Dec 2025 04:50:47 +0000 Manifest this update: Sat 06 Dec 2025 04:45:47 +0000 Manifest next update: Tue 09 Dec 2025 11:34:47 +0000 Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=) 2: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: 4whdZ+Yy3SgrA924A5JGlSforfhfOYbbY+Xvne5yW0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 11:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:76:59:07:7a:bd:03:5d:78:99:5c:de:95:88:4a:db:12:38:32:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Dec 6 04:45:47 2025 GMT Not After : Dec 9 11:34:47 2025 GMT Subject: CN=2E99022A35EDE6BC52A084FB10CAF86F74B03923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:3d:b4:63:2b:d6:0c:33:a5:10:86:1e:4c: 6e:1b:79:be:4b:52:2c:ae:2e:1f:ca:92:9a:23:09: 72:62:45:65:4d:39:33:12:1a:b8:91:4e:75:3a:62: 9f:40:cd:cf:f5:58:cc:30:0c:43:28:e0:ca:53:d5: dd:8c:07:1b:ad:b5:a1:98:54:d3:19:67:04:31:18: 27:0a:87:84:b9:91:c9:9c:66:79:3a:a3:ab:ca:6d: a7:29:09:e3:f6:c2:ed:2b:e3:cd:0b:16:05:62:59: ba:e3:cb:48:f9:5e:b7:27:fc:7c:42:11:cf:6f:50: 2d:f1:7f:52:a0:21:c9:60:58:55:be:36:4c:a3:94: 1b:58:b8:e4:30:55:c1:7b:a4:0f:e9:1d:6e:c8:79: ab:ec:34:83:d9:6b:45:34:c6:6d:21:99:a9:45:ef: ea:af:05:51:6a:42:96:78:28:7c:05:f7:cd:e5:b3: 0e:02:71:b3:86:76:b4:54:be:14:8c:56:40:ba:3f: 11:b9:f9:a3:d3:48:76:87:4f:cf:02:1a:f8:2e:82: e9:0f:4e:e8:e7:6a:93:3a:b2:a5:d2:06:21:03:05: 97:76:13:ab:75:5e:fa:ac:56:16:93:6d:1d:e4:1f: 2e:29:f4:4c:f1:24:86:9d:33:fc:58:60:1c:29:c4: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:99:02:2A:35:ED:E6:BC:52:A0:84:FB:10:CA:F8:6F:74:B0:39:23 X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d7:89:09:fc:4a:f3:5c:4e:6e:ca:eb:0b:8e:62:83:9b:05: 9a:aa:68:01:ee:d6:f5:4d:45:bc:ab:b8:06:02:c1:e9:6a:b5: 9e:db:97:aa:03:93:d9:8c:50:70:1c:b9:05:ef:01:f1:7f:6d: c5:38:14:9d:27:0d:4e:08:54:e9:2b:d8:08:49:35:f4:05:d8: d1:3d:a1:06:64:51:5f:e2:a0:ea:58:6c:a9:1d:e0:0c:af:08: e1:92:65:0e:bc:e4:88:b2:ea:da:50:65:72:67:4b:c6:2f:a7: dc:6c:39:ac:16:0a:be:00:11:5e:6d:95:de:13:f4:1a:27:ba: 18:b1:42:44:81:96:8a:d0:4a:16:8e:d1:a0:94:92:55:32:63: 5b:91:36:40:49:cd:a7:89:6a:8e:c6:11:30:86:6b:85:24:88: 2b:99:54:84:10:52:b2:8f:e4:11:fb:0e:65:e2:12:a3:d5:25: ac:18:bb:dc:9a:9d:59:74:7b:88:66:ca:41:95:4b:b4:dc:6d: 0c:89:09:18:8e:b2:09:ce:9f:1a:23:f0:95:58:72:cb:22:4f: b8:fd:d7:61:06:6b:03:25:03:fe:7a:2c:c7:85:a6:f5:33:d7: 14:5b:53:02:f1:bb:57:88:28:ba:a9:9e:74:bf:bf:f8:30:38: f1:75:97:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3ZZB3q9A114mVzelYhK2xI4MvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNTEyMDYwNDQ1NDdaFw0yNTEyMDkxMTM0NDdaMDMxMTAvBgNV BAMTKDJFOTkwMjJBMzVFREU2QkM1MkEwODRGQjEwQ0FGODZGNzRCMDM5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmj20YyvWDDOlEIYeTG4beb5L UiyuLh/KkpojCXJiRWVNOTMSGriRTnU6Yp9Azc/1WMwwDEMo4MpT1d2MBxuttaGY VNMZZwQxGCcKh4S5kcmcZnk6o6vKbacpCeP2wu0r480LFgViWbrjy0j5Xrcn/HxC Ec9vUC3xf1KgIclgWFW+NkyjlBtYuOQwVcF7pA/pHW7IeavsNIPZa0U0xm0hmalF 7+qvBVFqQpZ4KHwF983lsw4CcbOGdrRUvhSMVkC6PxG5+aPTSHaHT88CGvgugukP TujnapM6sqXSBiEDBZd2E6t1XvqsVhaTbR3kHy4p9EzxJIadM/xYYBwpxB1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULpkCKjXt5rxSoIT7EMr4b3SwOSMwHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXXiQn8SvNcTm7K6wuOYoObBZqqaAHu1vVN RbyruAYCwelqtZ7bl6oDk9mMUHAcuQXvAfF/bcU4FJ0nDU4IVOkr2AhJNfQF2NE9 oQZkUV/ioOpYbKkd4AyvCOGSZQ685Iiy6tpQZXJnS8Yvp9xsOawWCr4AEV5tld4T 9BonuhixQkSBlorQShaO0aCUklUyY1uRNkBJzaeJao7GETCGa4UkiCuZVIQQUrKP 5BH7DmXiEqPVJawYu9yanVl0e4hmykGVS7TcbQyJCRiOsgnOnxoj8JVYcssiT7j9 12EGawMlA/56LMeFpvUz1xRbUwLxu1eIKLqpnnS/v/gwOPF1l2Y= -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:23 2025 by rpki-client