This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: lPVeWyUgFbkJEUhg3Zshkz1ftJ7E+F1UOFDtrqtiCa0= Subject key identifier: BD:AD:B4:07:76:78:29:AA:30:8E:ED:D6:DA:F0:43:13:00:E8:79:12 Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 2D74062C58A56A770DEFF19DE708A3700229258D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: ED Signing time: Sat 06 Dec 2025 10:32:11 +0000 Manifest this update: Sat 06 Dec 2025 10:27:11 +0000 Manifest next update: Tue 09 Dec 2025 16:22:11 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (hash: qxwzYie9RBuV/7W0nohtPX4U19ZjLN0Jy/HLrDrkfAc=) 2: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: sCMISp/4Lxgm/M7hXudOeQD7P085snc/w+X+pfwUJTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:74:06:2c:58:a5:6a:77:0d:ef:f1:9d:e7:08:a3:70:02:29:25:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Dec 6 10:27:11 2025 GMT Not After : Dec 9 16:22:11 2025 GMT Subject: CN=BDADB407767829AA308EEDD6DAF0431300E87912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:6a:9a:ec:57:47:0e:02:c7:15:aa:fe:14: 7d:6d:d0:f5:ab:65:3f:3d:32:08:f2:52:09:b4:d5: 5f:b0:c2:bd:c3:98:0d:7c:41:f5:12:7e:43:90:2d: 78:50:ca:8a:0a:0d:5b:50:d9:2b:f0:15:15:d5:23: 33:ca:0c:9d:7e:9b:b6:d4:1a:fb:7a:de:77:f0:bf: 2f:16:30:0e:a7:f1:53:83:90:ea:93:da:60:82:46: 9a:f9:d9:21:0f:02:a5:ec:a8:f6:e8:ff:8f:b9:75: 50:0e:1f:69:af:b5:e4:55:a9:fd:ca:29:66:c5:b8: 1f:91:43:94:96:ff:fe:d9:e0:3e:f4:c0:63:da:73: ab:f1:03:fc:ba:dc:2b:ad:0d:d3:90:ee:47:1e:93: 20:ec:47:53:8c:f9:da:b9:b6:41:d1:8f:9b:71:21: db:b5:c1:60:c8:a8:93:2d:71:a0:28:fd:47:fa:16: 81:b0:13:0e:6c:f1:7c:4e:38:d7:ea:09:56:8f:6c: 83:d1:e1:72:14:9c:2b:d0:08:57:0d:dd:8d:26:5e: 1e:b0:c3:55:75:17:9f:79:13:74:96:7f:ba:2b:44: 12:bc:f2:6b:c3:23:88:bc:b7:21:e8:d8:b2:32:ef: 22:23:cf:cc:cf:d1:d6:b8:6f:6f:7e:68:60:4f:5c: 32:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AD:B4:07:76:78:29:AA:30:8E:ED:D6:DA:F0:43:13:00:E8:79:12 X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:9d:18:4a:45:4b:c8:c5:be:4b:22:46:9c:a3:01:ec:84:22: db:91:5b:b5:5d:d7:1d:67:e6:e6:44:f7:70:ad:08:bc:eb:98: a2:77:61:8b:b1:0c:23:0a:89:19:11:0b:cf:c8:8d:70:12:4d: 66:98:72:c4:f5:66:28:09:64:38:b4:af:5c:9a:21:ee:ed:9c: 19:ee:24:dc:73:ca:4a:5d:c9:c1:74:45:f3:e7:fe:bf:53:f2: 16:ff:e1:93:16:41:46:b8:ae:cb:78:23:12:b2:86:4a:3d:d0: 62:a5:8a:a9:2e:ea:d4:87:c6:4f:31:96:c7:df:d4:69:4e:48: 58:0e:d8:c7:27:d3:ab:15:c4:cc:6f:0f:dc:7a:0a:25:f2:f7: 21:e5:22:66:a5:63:dc:30:5d:61:94:03:4c:3d:d3:f6:f7:b3: 32:5c:55:a4:61:49:6f:2d:15:bd:0f:0e:9e:01:cd:bf:27:9d: 59:89:52:cd:f4:bc:0c:8b:6f:0d:b8:8f:ce:ae:42:f9:90:b5: 95:88:b7:bf:cb:e4:99:1d:94:88:61:24:7c:d3:7f:7e:1d:53: a5:a3:ff:34:96:7b:62:9c:9b:42:e5:55:bd:46:69:e6:5c:40: be:39:65:9a:88:fd:12:bf:60:9c:b0:16:8c:7a:e5:50:9f:26: 57:0d:24:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXQGLFilancN7/Gd5wijcAIpJY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTEyMDYxMDI3MTFaFw0yNTEyMDkxNjIyMTFaMDMxMTAvBgNV BAMTKEJEQURCNDA3NzY3ODI5QUEzMDhFRURENkRBRjA0MzEzMDBFODc5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsImqa7FdHDgLHFar+FH1t0PWr ZT89MgjyUgm01V+wwr3DmA18QfUSfkOQLXhQyooKDVtQ2SvwFRXVIzPKDJ1+m7bU Gvt63nfwvy8WMA6n8VODkOqT2mCCRpr52SEPAqXsqPbo/4+5dVAOH2mvteRVqf3K KWbFuB+RQ5SW//7Z4D70wGPac6vxA/y63CutDdOQ7kcekyDsR1OM+dq5tkHRj5tx Idu1wWDIqJMtcaAo/Uf6FoGwEw5s8XxOONfqCVaPbIPR4XIUnCvQCFcN3Y0mXh6w w1V1F595E3SWf7orRBK88mvDI4i8tyHo2LIy7yIjz8zP0da4b29+aGBPXDJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUva20B3Z4Kaowju3W2vBDEwDoeRIwHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFedGEpFS8jFvksiRpyjAeyEItuRW7Vd1x1n 5uZE93CtCLzrmKJ3YYuxDCMKiRkRC8/IjXASTWaYcsT1ZigJZDi0r1yaIe7tnBnu JNxzykpdycF0RfPn/r9T8hb/4ZMWQUa4rst4IxKyhko90GKliqku6tSHxk8xlsff 1GlOSFgO2Mcn06sVxMxvD9x6CiXy9yHlImalY9wwXWGUA0w90/b3szJcVaRhSW8t Fb0PDp4Bzb8nnVmJUs30vAyLbw24j86uQvmQtZWIt7/L5JkdlIhhJHzTf34dU6Wj /zSWe2Kcm0LlVb1GaeZcQL45ZZqI/RK/YJywFox65VCfJlcNJMI= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:14 2025 by rpki-client