This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: Z4onk8ipxqfi+lAwIhT0Yiuphi9IiDhnj1RrFq+Nphc= Subject key identifier: 22:EE:FA:58:25:EA:F9:25:AC:C7:66:A4:F4:1C:A8:FA:71:84:E3:C6 Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 1F8FDAAC15AC543E8AA03BA17F87D994ED3A0303 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: F2 Signing time: Sun 14 Dec 2025 06:52:11 +0000 Manifest this update: Sun 14 Dec 2025 06:47:11 +0000 Manifest next update: Wed 17 Dec 2025 17:35:11 +0000 Files and hashes: 1: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: dzpAr5BHJ5MQpECFgiDf0eesw/IgZvmQogqKOKeU3zU=) 2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: jSEbOeozzsEZCSdGeWqpOPWmprMivxkyWYoadrFyhRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8f:da:ac:15:ac:54:3e:8a:a0:3b:a1:7f:87:d9:94:ed:3a:03:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Dec 14 06:47:11 2025 GMT Not After : Dec 17 17:35:11 2025 GMT Subject: CN=22EEFA5825EAF925ACC766A4F41CA8FA7184E3C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:60:08:7c:1b:7b:9f:3b:fb:cb:12:8e:9c: e8:05:56:b5:80:73:90:8e:4d:49:25:cd:a1:70:ea: fa:75:94:a5:7c:db:8f:ae:47:62:f6:c8:17:7b:43: 03:6b:92:9f:0c:10:d6:38:f5:1c:ce:92:1f:b0:e3: fd:5f:86:78:12:18:90:da:4b:ba:05:c5:d2:9a:61: 67:80:27:35:13:ca:94:ed:e1:d5:4c:24:0d:ae:4a: 8a:56:9f:81:c8:16:f9:cd:2d:d4:fc:fe:1f:29:eb: 72:c4:b7:42:c0:7c:89:2e:3e:d5:5d:84:d0:e2:3b: 0a:4d:6c:2b:39:07:6f:87:94:a3:c0:1b:3e:a2:d1: 97:c6:25:73:1d:46:15:d7:6d:f7:6a:9f:da:35:1c: 3e:9d:fb:24:8d:9b:10:1c:2a:f1:c1:df:cd:7f:ce: c8:27:cb:76:0c:b8:f8:6c:6e:a0:63:ee:5c:c5:15: 37:53:45:61:3a:7a:43:01:46:7c:47:dc:e5:1b:07: f1:4a:8c:00:db:a4:4f:c3:21:4f:ff:47:d5:c6:43: e2:b9:fa:ad:f2:98:8b:93:28:2d:2b:fa:bb:75:c4: 53:3e:01:a5:e2:a0:99:20:02:d7:5f:21:b3:5e:52: 36:a4:e8:cb:37:f3:f5:8a:da:13:eb:9c:57:68:85: e0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EE:FA:58:25:EA:F9:25:AC:C7:66:A4:F4:1C:A8:FA:71:84:E3:C6 X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8e:39:87:f4:67:ee:c6:cd:a3:b5:49:d5:5c:ab:fb:06:d9: 80:a7:01:3a:34:f1:bf:09:03:96:75:d5:81:91:a1:16:50:25: 67:48:f6:d9:9b:21:5e:41:fb:a2:fd:e9:0a:7e:8b:a6:10:06: 31:c1:0d:30:e5:ca:41:4b:37:c8:53:c3:b4:fe:7e:59:06:1b: e4:f5:a6:27:91:20:c0:ed:4c:84:e1:0c:4d:74:10:44:03:bd: 97:a2:3b:99:54:47:cd:13:8b:a3:5b:17:ea:71:24:f4:0f:88: 81:0b:53:84:47:2b:29:14:4a:70:d8:18:8f:99:a1:2c:75:49: d2:ca:5f:73:28:3a:72:18:e8:83:af:69:1f:33:6f:80:35:3c: f2:06:d3:1c:f8:d6:02:e3:24:b4:01:22:65:5b:ff:30:9c:f2: 81:d0:e3:37:b4:05:cf:37:df:f1:d7:54:f8:5d:87:89:3a:44: 3f:72:f1:f2:2c:96:78:52:c2:68:86:aa:83:e4:0a:c2:7a:d3: 9d:a4:b1:9b:40:2b:32:39:99:93:73:0a:ff:d8:37:a6:e3:3d: b7:62:da:d4:db:9c:2c:c6:7d:8a:29:4a:65:f8:03:4c:22:30: 7a:d6:e1:9b:31:2e:4b:19:de:bd:96:d6:1a:33:b6:26:98:c8: 91:6c:b0:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4/arBWsVD6KoDuhf4fZlO06AwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTEyMTQwNjQ3MTFaFw0yNTEyMTcxNzM1MTFaMDMxMTAvBgNV BAMTKDIyRUVGQTU4MjVFQUY5MjVBQ0M3NjZBNEY0MUNBOEZBNzE4NEUzQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kGAIfBt7nzv7yxKOnOgFVrWA c5COTUklzaFw6vp1lKV824+uR2L2yBd7QwNrkp8MENY49RzOkh+w4/1fhngSGJDa S7oFxdKaYWeAJzUTypTt4dVMJA2uSopWn4HIFvnNLdT8/h8p63LEt0LAfIkuPtVd hNDiOwpNbCs5B2+HlKPAGz6i0ZfGJXMdRhXXbfdqn9o1HD6d+ySNmxAcKvHB381/ zsgny3YMuPhsbqBj7lzFFTdTRWE6ekMBRnxH3OUbB/FKjADbpE/DIU//R9XGQ+K5 +q3ymIuTKC0r+rt1xFM+AaXioJkgAtdfIbNeUjak6Ms38/WK2hPrnFdoheA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIu76WCXq+SWsx2ak9Byo+nGE48YwHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+OOYf0Z+7GzaO1SdVcq/sG2YCnATo08b8J A5Z11YGRoRZQJWdI9tmbIV5B+6L96Qp+i6YQBjHBDTDlykFLN8hTw7T+flkGG+T1 pieRIMDtTIThDE10EEQDvZeiO5lUR80Ti6NbF+pxJPQPiIELU4RHKykUSnDYGI+Z oSx1SdLKX3MoOnIY6IOvaR8zb4A1PPIG0xz41gLjJLQBImVb/zCc8oHQ4ze0Bc83 3/HXVPhdh4k6RD9y8fIslnhSwmiGqoPkCsJ6052ksZtAKzI5mZNzCv/YN6bjPbdi 2tTbnCzGfYopSmX4A0wiMHrW4ZsxLksZ3r2W1hoztiaYyJFssKg= -----END CERTIFICATE-----Generated at Tue Dec 16 00:29:48 2025 by rpki-client