This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft File: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft (raw, json) Hash identifier: NLIj9+5DF8E9f78WrFR4JGNpUZZK5GwyaWXv62VHhFc= Subject key identifier: B9:17:D2:D9:9A:6F:F2:53:8B:19:E9:78:55:57:BA:1F:3D:28:D1:8B Authority key identifier: EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB Certificate issuer: /CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Certificate serial: 05C9861C00554CC86C3F146813299CBF0113E1A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft Manifest number: 0226 Signing time: Fri 05 Dec 2025 15:21:40 +0000 Manifest this update: Fri 05 Dec 2025 15:16:40 +0000 Manifest next update: Mon 08 Dec 2025 20:50:40 +0000 Files and hashes: 1: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: i80S93LcbuzfKOEUZo9C4vjXTfLHmrCj4n9ypSMTwBE=) 2: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl (hash: PqoMNg+/k/PEYjleQpXbDfoI8lRryb63WRGbCi3Y7KI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c9:86:1c:00:55:4c:c8:6c:3f:14:68:13:29:9c:bf:01:13:e1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Validity Not Before: Dec 5 15:16:40 2025 GMT Not After : Dec 8 20:50:40 2025 GMT Subject: CN=B917D2D99A6FF2538B19E9785557BA1F3D28D18B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:68:a4:b7:10:af:dc:83:47:5e:8e:29:8e: 71:9c:e1:b7:9b:83:27:be:5d:17:58:a7:a6:84:04: 5c:ec:bf:19:b8:fb:96:85:bf:42:a1:8e:e9:9f:77: 32:4a:a4:96:a4:87:ad:54:c8:ca:b6:37:92:eb:a4: 73:dd:a1:42:c1:d8:2a:43:41:c1:a7:8a:90:9a:c5: 1b:4e:e6:89:97:6b:56:58:ea:08:b1:65:cd:e9:cd: a8:0d:4e:11:40:d5:d0:48:f7:51:9c:34:91:cf:4b: cb:93:2e:c2:54:10:e9:48:81:6a:04:57:7e:8e:d2: 9c:62:68:49:d9:3a:3d:4b:7b:d4:76:a8:07:f6:0c: 58:3e:c6:e4:8f:d6:7b:ce:7e:b2:00:73:3a:1c:5c: f1:f1:3a:37:ef:1f:72:7b:36:a7:65:18:8e:ce:b8: c2:43:ed:45:91:85:65:1c:f4:b8:70:e6:15:a4:c8: 31:72:eb:3c:15:27:7f:aa:fe:e1:b3:ac:9c:ff:8e: 80:5c:ce:81:00:1a:75:7d:51:8f:b1:6a:1c:46:60: f2:27:92:67:ea:c9:6a:c4:7b:9c:62:c1:91:8b:02: 48:c8:47:5d:42:8b:fe:29:54:97:fc:63:49:d7:6e: dd:67:c2:3e:b1:22:a1:4e:36:b6:1e:c8:d0:c6:fe: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:17:D2:D9:9A:6F:F2:53:8B:19:E9:78:55:57:BA:1F:3D:28:D1:8B X509v3 Authority Key Identifier: keyid:EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4d:b6:7b:0d:fb:f5:1a:df:1f:8a:57:c8:56:bf:66:35:1b: 7d:e8:90:b5:78:8e:89:c3:e4:97:3a:a2:c8:a6:26:21:98:e3: 69:e6:33:ab:a2:0c:d4:bc:8c:b9:63:dd:f9:bc:4d:cd:7a:bc: f5:ac:f7:2e:5e:9b:20:67:d6:6c:e8:0c:9e:5c:9c:93:27:0c: 2c:f8:30:01:26:b6:d3:77:94:1a:af:65:84:32:30:73:3a:48: 58:2b:93:77:b9:95:89:a2:3d:6d:c4:69:34:ae:2f:b5:f1:0c: 6f:6a:eb:e4:19:d9:e4:68:bc:b0:87:ed:00:0f:f7:d1:ce:08: 7e:52:ba:7f:1a:b1:2b:02:4c:66:3e:d0:0a:18:20:45:d8:f1: ed:4c:20:d3:eb:ec:df:b5:70:01:37:33:bc:e5:3d:7d:1d:dc: fc:db:69:e0:7e:52:de:d3:30:6f:d8:0c:82:6b:b6:82:6d:fc: c7:d5:e4:0e:24:ea:d0:93:f2:81:67:06:2b:bf:0d:92:47:00: 18:07:77:30:e2:bd:24:61:fc:9c:05:2d:c0:17:f5:ba:b0:ac: 05:92:e4:13:25:83:dd:dc:8a:ce:31:91:65:b6:71:84:fd:3e: 03:b7:47:19:ad:16:60:97:79:59:e6:37:52:8f:21:b7:2c:70: 58:bc:cb:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcmGHABVTMhsPxRoEymcvwET4aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2 RjRFQzFDQjAeFw0yNTEyMDUxNTE2NDBaFw0yNTEyMDgyMDUwNDBaMDMxMTAvBgNV BAMTKEI5MTdEMkQ5OUE2RkYyNTM4QjE5RTk3ODU1NTdCQTFGM0QyOEQxOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68miktxCv3INHXo4pjnGc4beb gye+XRdYp6aEBFzsvxm4+5aFv0KhjumfdzJKpJakh61UyMq2N5LrpHPdoULB2CpD QcGnipCaxRtO5omXa1ZY6gixZc3pzagNThFA1dBI91GcNJHPS8uTLsJUEOlIgWoE V36O0pxiaEnZOj1Le9R2qAf2DFg+xuSP1nvOfrIAczocXPHxOjfvH3J7NqdlGI7O uMJD7UWRhWUc9Lhw5hWkyDFy6zwVJ3+q/uGzrJz/joBczoEAGnV9UY+xahxGYPIn kmfqyWrEe5xiwZGLAkjIR11Ci/4pVJf8Y0nXbt1nwj6xIqFONrYeyNDG/mB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuRfS2Zpv8lOLGel4VVe6Hz0o0YswHwYDVR0j BBgwFoAU6uovLwf/80NAd3s7vX0dGG9OwcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGI0MjQyMC01NmQwLTQ1MWEtYTI5ZC01ZjlkNjIzMGUyMjcvMC9FQUVBMkYyRjA3 RkZGMzQzNDA3NzdCM0JCRDdEMUQxODZGNEVDMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2RjRF QzFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFE MTg2RjRFQzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpNtnsN+/Ua3x+KV8hWv2Y1G33okLV4jonD 5Jc6osimJiGY42nmM6uiDNS8jLlj3fm8Tc16vPWs9y5emyBn1mzoDJ5cnJMnDCz4 MAEmttN3lBqvZYQyMHM6SFgrk3e5lYmiPW3EaTSuL7XxDG9q6+QZ2eRovLCH7QAP 99HOCH5Sun8asSsCTGY+0AoYIEXY8e1MINPr7N+1cAE3M7zlPX0d3PzbaeB+Ut7T MG/YDIJrtoJt/MfV5A4k6tCT8oFnBiu/DZJHABgHdzDivSRh/JwFLcAX9bqwrAWS 5BMlg93cis4xkWW2cYT9PgO3RxmtFmCXeVnmN1KPIbcscFi8y8A= -----END CERTIFICATE-----Generated at Sun Dec 7 05:51:43 2025 by rpki-client