This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: 0b9EzJ7KqQyppWP7YPCf3dnf9TlZzh+i393TbcVJVmg= Subject key identifier: B1:1F:5A:66:C4:66:80:B7:63:A4:3C:C5:7A:F3:F3:CC:57:DC:A3:04 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 027D84E502A6DD681D9D56FC1FF58A9FA38CABCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 0111 Signing time: Fri 05 Dec 2025 15:22:24 +0000 Manifest this update: Fri 05 Dec 2025 15:17:24 +0000 Manifest next update: Tue 09 Dec 2025 00:23:24 +0000 Files and hashes: 1: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 2: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: Qf6uvw88Nw+K8AoxgwPIyAHaZ8dJ4Mi7kLVCpaJ0RbM=) 3: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) 4: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7d:84:e5:02:a6:dd:68:1d:9d:56:fc:1f:f5:8a:9f:a3:8c:ab:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Dec 5 15:17:24 2025 GMT Not After : Dec 9 00:23:24 2025 GMT Subject: CN=B11F5A66C46680B763A43CC57AF3F3CC57DCA304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:df:d7:a2:6b:ec:7d:85:dd:05:e7:a7:1c:72: 4a:fb:d4:f6:77:14:35:8e:d3:03:f0:a3:ed:84:0e: 2d:7a:b4:34:ab:ef:db:0c:cc:73:1e:f9:f0:1c:7a: 41:54:8c:d9:f0:85:10:d4:8f:07:16:7a:0f:9d:f6: 91:ab:e0:80:64:52:ce:c6:3f:dd:0d:73:e0:a4:dd: 45:88:8a:32:91:e4:12:89:86:dc:73:45:2b:88:fb: 7a:58:9d:39:2d:a8:38:88:fe:ff:46:81:01:c5:c3: 9b:f8:8d:32:11:d4:4b:b9:e3:7f:ec:b1:77:08:e1: 80:d1:78:e9:07:0b:44:3f:20:bb:57:a2:4f:59:54: c8:51:4a:0a:f6:58:fb:46:6a:43:84:b9:f6:cc:78: 4b:e5:3e:f9:57:42:a3:7a:fb:0e:43:1e:d1:dc:be: 84:61:3d:1a:bd:94:9c:78:64:f0:6a:a8:81:99:dd: 10:8f:4c:79:03:64:5f:b3:63:69:a0:8c:89:76:d3: 18:90:34:3b:95:9d:61:76:69:f2:b4:d1:a2:5c:f8: 48:db:7c:e9:6e:b3:01:e7:a6:7c:10:c0:0f:ea:24: 8e:65:16:8a:24:51:b6:f8:f6:8c:b0:01:82:d6:7e: 4e:4e:e5:b7:57:ed:e9:2e:c6:46:2f:97:89:27:d0: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1F:5A:66:C4:66:80:B7:63:A4:3C:C5:7A:F3:F3:CC:57:DC:A3:04 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b0:8a:d9:36:a1:20:60:5f:5f:85:5a:74:48:8a:c5:bf:6e: f4:6a:1e:06:31:fb:39:7b:28:84:c1:02:36:d7:14:02:8b:80: cc:dd:0e:6c:14:9c:e7:9c:53:64:f5:27:2e:40:a0:dc:72:c3: f2:7e:1f:90:04:5a:f7:ae:47:7d:e2:a0:ec:cf:b2:1c:87:78: 29:14:98:2c:25:1c:a9:33:4f:bd:2a:19:ec:9c:f8:20:76:bd: 64:83:76:7c:c2:6e:5e:58:17:1c:07:37:77:79:f1:14:86:6f: 16:e8:71:4e:6b:3f:4f:8c:82:43:b0:b7:7e:86:b2:a9:4a:90: f2:86:26:3c:b1:d8:e0:9e:84:7c:04:bf:d0:0e:a6:ff:35:5b: 8f:78:d5:dc:f1:57:7e:57:64:3e:ec:02:cc:d6:1f:04:40:b9: f8:e9:f2:9f:b3:bf:8b:5f:1c:df:44:c0:e1:53:89:e7:03:eb: 05:7f:48:f7:58:93:ff:7f:12:89:22:1b:a6:3a:14:90:e0:c0: 18:f7:45:f5:cb:c4:31:25:a7:68:73:83:74:28:96:da:6c:1b: 00:08:c4:67:3b:78:c4:79:88:26:48:de:5e:73:74:86:f8:98: 7a:bb:2f:18:b0:a2:eb:2f:60:34:0f:09:c2:04:0a:0b:a9:a4: d4:c7:68:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAn2E5QKm3WgdnVb8H/WKn6OMq8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTEyMDUxNTE3MjRaFw0yNTEyMDkwMDIzMjRaMDMxMTAvBgNV BAMTKEIxMUY1QTY2QzQ2NjgwQjc2M0E0M0NDNTdBRjNGM0NDNTdEQ0EzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn39eia+x9hd0F56ccckr71PZ3 FDWO0wPwo+2EDi16tDSr79sMzHMe+fAcekFUjNnwhRDUjwcWeg+d9pGr4IBkUs7G P90Nc+Ck3UWIijKR5BKJhtxzRSuI+3pYnTktqDiI/v9GgQHFw5v4jTIR1Eu543/s sXcI4YDReOkHC0Q/ILtXok9ZVMhRSgr2WPtGakOEufbMeEvlPvlXQqN6+w5DHtHc voRhPRq9lJx4ZPBqqIGZ3RCPTHkDZF+zY2mgjIl20xiQNDuVnWF2afK00aJc+Ejb fOluswHnpnwQwA/qJI5lFookUbb49oywAYLWfk5O5bdX7ekuxkYvl4kn0BgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsR9aZsRmgLdjpDzFevPzzFfcowQwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACwitk2oSBgX1+FWnRIisW/bvRqHgYx+zl7 KITBAjbXFAKLgMzdDmwUnOecU2T1Jy5AoNxyw/J+H5AEWveuR33ioOzPshyHeCkU mCwlHKkzT70qGeyc+CB2vWSDdnzCbl5YFxwHN3d58RSGbxbocU5rP0+MgkOwt36G sqlKkPKGJjyx2OCehHwEv9AOpv81W4941dzxV35XZD7sAszWHwRAufjp8p+zv4tf HN9EwOFTiecD6wV/SPdYk/9/EokiG6Y6FJDgwBj3RfXLxDElp2hzg3QoltpsGwAI xGc7eMR5iCZI3l5zdIb4mHq7LxiwousvYDQPCcIECguppNTHaHo= -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:39 2025 by rpki-client