This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft File: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json) Hash identifier: PnKiDDpq9gAVMMw9pE9rcKH/Oks5sqUqXQEoi5mfi9I= Subject key identifier: 30:9E:1E:DB:30:5A:48:93:B2:1A:6C:8B:2C:57:B1:57:54:31:36:E8 Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Certificate issuer: /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Certificate serial: 67E420960296ADDCB118B1506279334BC04E01E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft Manifest number: 0153 Signing time: Fri 05 Dec 2025 12:02:29 +0000 Manifest this update: Fri 05 Dec 2025 11:57:29 +0000 Manifest next update: Mon 08 Dec 2025 21:02:29 +0000 Files and hashes: 1: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: LJVWK744DaCLalz0/Sl7Gt/PYQWV0FOVmOX8NAlnD4I=) 2: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: icoM+EmZmnaUSNYe+M3YT7QPi2377uDTJ5GrlCTs7Lw=) 3: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: D55h2DAB4lGwua6lNXVT6B4W2IDJcv2j3EFXZbK2yOc=) 4: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: Y71EeD959aIr9ucCZApJALClmCCepz1YWwy1H6B20+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e4:20:96:02:96:ad:dc:b1:18:b1:50:62:79:33:4b:c0:4e:01:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Validity Not Before: Dec 5 11:57:29 2025 GMT Not After : Dec 8 21:02:29 2025 GMT Subject: CN=309E1EDB305A4893B21A6C8B2C57B157543136E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:83:f7:a6:16:6a:72:65:fc:ef:be:94:a5: 61:dd:ee:b2:3b:4f:99:6a:a8:80:6e:b6:53:29:4c: c9:f3:71:88:53:51:66:07:96:83:5e:b2:36:13:67: 63:98:ab:78:5b:e9:a0:9f:5e:ac:c3:3c:be:a3:4d: b2:ec:80:5e:1b:a9:c9:c1:b2:11:3f:e5:6c:cd:70: 32:2f:ef:c8:6c:28:f4:ec:5c:67:c3:e1:3f:d1:19: 68:10:dd:03:e0:9a:47:b8:9c:cc:3c:78:73:4d:39: fc:16:b0:9e:40:5d:dd:92:b1:54:b3:31:4d:a4:1f: 3f:d2:cf:1e:20:46:e1:07:10:16:41:35:27:17:cf: 19:c1:07:5e:2e:e3:82:eb:c6:60:b9:68:cd:4a:14: 3b:35:ec:6c:3e:22:0e:7b:f2:a0:39:e5:17:5a:14: 06:92:a7:19:ee:a4:3c:2d:76:f7:8b:50:b2:9d:cf: ca:57:73:15:0d:48:1c:33:c8:a8:1a:e3:a7:8c:ae: 68:e3:88:3d:97:ad:07:8c:25:1c:37:cf:6e:28:66: ae:8a:12:a3:31:a0:28:53:e8:a7:b5:1e:c2:3e:56: b1:a6:d8:b5:e1:3e:81:e0:8a:52:3d:1a:10:a3:3b: 4f:51:a8:94:40:43:fd:87:a5:e6:8a:73:8f:23:d6: d7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9E:1E:DB:30:5A:48:93:B2:1A:6C:8B:2C:57:B1:57:54:31:36:E8 X509v3 Authority Key Identifier: keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5c:9c:ce:81:b7:02:66:24:a0:f5:ef:0c:7d:f8:71:1c:31: 5d:f3:d0:6e:aa:db:82:c9:84:30:f1:d0:71:0a:5a:94:83:02: fe:de:6f:47:ca:df:6e:76:ea:ed:5c:e5:11:05:71:4e:74:35: 0b:f2:f7:02:bd:32:93:b4:12:27:70:7c:01:b8:a1:90:65:7f: a7:9a:20:46:39:1d:e8:36:58:07:da:05:67:ee:f0:6e:5e:b8: cc:a9:76:9c:43:9a:c5:ec:9d:dc:eb:f3:dd:44:40:da:2e:ba: 05:b8:0e:89:59:f5:07:e7:50:0e:63:06:0b:7f:d2:ab:69:da: 72:cf:af:8b:fa:ed:9a:39:b8:a9:dd:20:2c:e8:92:92:9e:15: 59:d4:52:30:6c:48:4a:8f:23:48:77:e4:f1:e9:db:a2:3b:5a: b3:e6:3e:46:6b:11:a6:29:8f:83:58:bf:eb:5c:57:1e:bd:93: be:ab:44:0c:1d:9d:09:c4:1e:09:70:3e:e6:a9:32:19:64:a7: 98:ad:b6:b1:14:01:ce:af:be:20:e6:40:d4:b4:2e:60:76:93: 7b:3a:9d:f7:bd:9e:35:e7:bc:e9:54:ca:6c:fe:84:be:a1:53: aa:59:96:a1:78:3e:df:2f:e4:93:a2:a3:b4:c3:4e:e6:db:d5: dc:fd:db:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+QglgKWrdyxGLFQYnkzS8BOAeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIz NEEwRjFCMjAeFw0yNTEyMDUxMTU3MjlaFw0yNTEyMDgyMTAyMjlaMDMxMTAvBgNV BAMTKDMwOUUxRURCMzA1QTQ4OTNCMjFBNkM4QjJDNTdCMTU3NTQzMTM2RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8IP3phZqcmX8776UpWHd7rI7 T5lqqIButlMpTMnzcYhTUWYHloNesjYTZ2OYq3hb6aCfXqzDPL6jTbLsgF4bqcnB shE/5WzNcDIv78hsKPTsXGfD4T/RGWgQ3QPgmke4nMw8eHNNOfwWsJ5AXd2SsVSz MU2kHz/Szx4gRuEHEBZBNScXzxnBB14u44LrxmC5aM1KFDs17Gw+Ig578qA55Rda FAaSpxnupDwtdveLULKdz8pXcxUNSBwzyKga46eMrmjjiD2XrQeMJRw3z24oZq6K EqMxoChT6Ke1HsI+VrGm2LXhPoHgilI9GhCjO09RqJRAQ/2HpeaKc48j1tclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMJ4e2zBaSJOyGmyLLFexV1QxNugwHwYDVR0j BBgwFoAU4f5po0IWwk0YcPXO06QwkjSg8bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMC9FMUZFNjlBMzQy MTZDMjREMTg3MEY1Q0VEM0E0MzA5MjM0QTBGMUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIzNEEw RjFCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMw OTIzNEEwRjFCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhcnM6BtwJmJKD17wx9+HEcMV3z0G6q24LJ hDDx0HEKWpSDAv7eb0fK32526u1c5REFcU50NQvy9wK9MpO0EidwfAG4oZBlf6ea IEY5Heg2WAfaBWfu8G5euMypdpxDmsXsndzr891EQNouugW4DolZ9QfnUA5jBgt/ 0qtp2nLPr4v67Zo5uKndICzokpKeFVnUUjBsSEqPI0h35PHp26I7WrPmPkZrEaYp j4NYv+tcVx69k76rRAwdnQnEHglwPuapMhlkp5ittrEUAc6vviDmQNS0LmB2k3s6 nfe9njXnvOlUymz+hL6hU6pZlqF4Pt8v5JOio7TDTubb1dz92xM= -----END CERTIFICATE-----Generated at Sun Dec 7 06:43:12 2025 by rpki-client