This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft File: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft (raw, json) Hash identifier: ysqdzAJiU4TjNeeYvOaH0vIhIKK7hQ6uTeHLgpCSZ0s= Subject key identifier: D6:4D:0F:57:93:89:7A:15:BD:BA:07:A8:A1:EB:CB:32:D2:2C:4A:9F Authority key identifier: E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF Certificate issuer: /CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Certificate serial: 1C2CFEA15C026A4854FB15992349994AE7C3144B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft Manifest number: 022A Signing time: Thu 04 Dec 2025 20:52:14 +0000 Manifest this update: Thu 04 Dec 2025 20:47:14 +0000 Manifest next update: Mon 08 Dec 2025 05:34:14 +0000 Files and hashes: 1: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl (hash: 05gnqlu28ocR7IyB6IciWYtjoCMXbQBE4/9VtFt+XRc=) 2: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: N+b2Iu4VbSgstaUesFmQsFf6IU12aajq3e/wLuOvgLQ=) 3: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: AMV0DaoVzEpr6QFAmB1hobQPZBoR2MCCNocuQFbfT54=) 4: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: ++rnMg/cn38VB7ywZ7HTwbB2FOMWD3Zhtth2U6OPVoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2c:fe:a1:5c:02:6a:48:54:fb:15:99:23:49:99:4a:e7:c3:14:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Validity Not Before: Dec 4 20:47:14 2025 GMT Not After : Dec 8 05:34:14 2025 GMT Subject: CN=D64D0F5793897A15BDBA07A8A1EBCB32D22C4A9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:00:c4:d5:fa:31:e6:6b:73:fe:1c:37:a6: 9a:a6:f1:1f:26:f2:01:5f:9a:10:d7:ec:73:88:11: 0d:ca:ab:3a:ee:3b:27:09:ea:f2:2f:7e:d8:a7:a7: a3:34:a3:7d:ae:bc:6e:da:45:eb:3f:4a:c0:53:3a: 1a:c7:1b:bb:f9:52:86:a2:e0:b3:22:ea:6a:17:fd: bc:e8:68:a2:c6:47:f3:fe:33:9e:b0:76:71:b8:35: c1:56:6d:62:54:80:0a:b3:fd:5d:11:5f:ba:1f:5c: 92:fc:4e:81:24:2d:64:16:bf:2d:5a:b6:2e:46:02: 76:87:1a:a4:8c:41:33:45:95:e0:48:13:74:73:28: 47:e7:72:1c:bf:e4:d8:04:84:d0:8a:9f:24:5a:7d: 01:c6:e9:29:2d:d3:99:5c:d5:84:86:22:01:45:9c: 3a:16:44:c5:1e:83:1a:22:31:56:a1:7b:07:93:71: 03:16:f7:d9:3e:36:00:06:f4:57:96:0b:23:17:bb: 0d:3b:06:ba:25:f6:4b:cc:e0:b7:02:57:96:10:a5: e2:18:b1:c9:75:5f:dc:63:5a:d7:92:c8:bf:02:3e: 6d:e5:20:8b:d4:52:4a:a8:a0:fc:c4:48:25:fb:55: cf:01:1d:2f:93:dc:07:21:79:83:01:4b:d5:eb:71: 5e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4D:0F:57:93:89:7A:15:BD:BA:07:A8:A1:EB:CB:32:D2:2C:4A:9F X509v3 Authority Key Identifier: keyid:E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:68:66:72:18:50:5c:65:b4:d6:6d:2d:d1:55:fd:da:b2:4b: 4a:33:a4:a8:1c:14:c9:9b:18:67:ab:30:71:af:e4:c1:2b:e6: ff:6d:3d:a3:7c:88:3d:96:ca:e6:fb:ca:5b:ed:6b:56:44:a9: 13:2f:f4:1c:3c:da:af:6f:14:0a:a6:fc:4b:53:9e:41:a9:cb: 41:b8:65:43:c8:4d:b3:8c:ea:7d:f0:92:a3:8b:02:71:4c:60: c3:7d:6a:8a:d1:81:6d:a6:41:7a:a3:33:4e:71:7d:44:fa:3c: 91:33:dd:fc:81:e3:a2:ac:b8:bf:d4:7a:e9:e9:72:e5:98:0d: 6c:2b:f7:ab:57:a9:1b:cd:8a:f5:4d:2b:a1:3d:79:78:0f:31: 7e:3c:82:2d:33:ca:c1:f8:21:fb:5e:b6:7a:d3:7b:37:16:ec: df:c3:ca:df:31:5d:97:0e:fe:7e:90:19:e4:00:16:b7:d3:d3: 92:dd:b6:b8:e3:8f:98:b1:18:2a:c2:8b:22:b4:80:1d:93:04: a9:bf:c4:06:4c:32:67:e7:e1:53:cb:5f:12:e0:f6:07:9c:06: 50:18:1e:d5:40:02:b9:d5:a7:ba:ee:94:2a:51:75:0c:4d:7d: 5a:7e:17:b9:17:60:2f:ee:cf:3f:cd:fa:e5:47:ab:9e:d6:bd: 5d:1e:c6:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCz+oVwCakhU+xWZI0mZSufDFEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNB OEJERjZERjAeFw0yNTEyMDQyMDQ3MTRaFw0yNTEyMDgwNTM0MTRaMDMxMTAvBgNV BAMTKEQ2NEQwRjU3OTM4OTdBMTVCREJBMDdBOEExRUJDQjMyRDIyQzRBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfgDE1fox5mtz/hw3ppqm8R8m 8gFfmhDX7HOIEQ3KqzruOycJ6vIvftinp6M0o32uvG7aRes/SsBTOhrHG7v5Uoai 4LMi6moX/bzoaKLGR/P+M56wdnG4NcFWbWJUgAqz/V0RX7ofXJL8ToEkLWQWvy1a ti5GAnaHGqSMQTNFleBIE3RzKEfnchy/5NgEhNCKnyRafQHG6Skt05lc1YSGIgFF nDoWRMUegxoiMVaheweTcQMW99k+NgAG9FeWCyMXuw07Brol9kvM4LcCV5YQpeIY scl1X9xjWteSyL8CPm3lIIvUUkqooPzESCX7Vc8BHS+T3AcheYMBS9XrcV41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1k0PV5OJehW9ugeooevLMtIsSp8wHwYDVR0j BBgwFoAU4bA/nupxwA9p2Di8HarRE6i99t8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjNkMTRjYi1jY2MyLTQ2ZDItOGUzMS0xNmY1YmVjMGFjZDgvMC9FMUIwM0Y5RUVB NzFDMDBGNjlEODM4QkMxREFBRDExM0E4QkRGNkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNBOEJE RjZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQx MTNBOEJERjZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRoZnIYUFxltNZtLdFV/dqyS0ozpKgcFMmb GGerMHGv5MEr5v9tPaN8iD2Wyub7ylvta1ZEqRMv9Bw82q9vFAqm/EtTnkGpy0G4 ZUPITbOM6n3wkqOLAnFMYMN9aorRgW2mQXqjM05xfUT6PJEz3fyB46KsuL/Ueunp cuWYDWwr96tXqRvNivVNK6E9eXgPMX48gi0zysH4IftetnrTezcW7N/Dyt8xXZcO /n6QGeQAFrfT05Ldtrjjj5ixGCrCiyK0gB2TBKm/xAZMMmfn4VPLXxLg9gecBlAY HtVAArnVp7rulCpRdQxNfVp+F7kXYC/uzz/N+uVHq57WvV0exvU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:43:15 2025 by rpki-client