This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: M4+OlqmC6lUvV1v9sEsnvYHABqIHb7ggvFqMnwRM/Fk= Subject key identifier: 6E:27:83:AF:D0:D1:AC:41:74:67:2F:49:4E:49:D5:F3:4E:C2:E3:E7 Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 7316BE540ED5BC780F123E64D9F575D5BD4F78BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 01D1 Signing time: Wed 17 Dec 2025 10:00:53 +0000 Manifest this update: Wed 17 Dec 2025 09:55:53 +0000 Manifest next update: Sat 20 Dec 2025 14:31:53 +0000 Files and hashes: 1: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: raBe9H8Ik7qjO/Zne/QaEi21Di0iYdBRSLGu1nIQ00k=) 2: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 3lqgIQzyR6/7cSCmR5iJslHIsmApf6ImpEqOGdjCApk=) 3: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: PNsGrsunNYvLcLEfdpgZYxKAz1Ra4qJ7YYKHTqQZiJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:16:be:54:0e:d5:bc:78:0f:12:3e:64:d9:f5:75:d5:bd:4f:78:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Dec 17 09:55:53 2025 GMT Not After : Dec 20 14:31:53 2025 GMT Subject: CN=6E2783AFD0D1AC4174672F494E49D5F34EC2E3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:49:c1:01:30:84:26:d4:e5:7f:65:fa:f8:4e: 4d:b9:ea:ee:5e:fd:5c:b5:63:2d:6e:ee:aa:4e:3a: 0f:cc:f2:3f:5b:d1:ad:a5:4b:26:63:37:a6:19:b2: 29:1d:86:70:58:aa:c3:ca:97:e6:8d:f7:f7:a9:37: cc:19:3f:9b:59:8b:47:fe:1f:c2:95:ae:e5:7c:f6: cc:4d:b7:e1:c5:9c:62:b6:bf:ab:63:d1:2e:b9:f3: 34:9c:9e:5b:cf:fc:cc:f6:a5:73:2b:2d:e8:79:5c: 42:6a:f9:5c:ac:0d:af:dc:35:e8:0f:b1:38:e9:fd: e0:72:0f:68:75:32:62:fb:ae:9b:8b:76:ee:ff:1b: 5b:ae:a0:a7:a4:ac:39:0f:69:9b:88:1e:6c:2c:3b: 2e:fd:8b:c8:7f:9b:d5:70:16:bf:ba:07:40:4c:4b: 19:f4:5f:8a:09:e2:9b:21:f6:b3:ee:24:d8:42:b4: d3:86:5f:68:0b:29:bc:a3:c9:99:bb:aa:63:f5:cf: 67:e3:52:0c:11:1a:bc:74:5e:2b:61:7e:23:08:97: 1b:60:b3:5f:10:d5:1c:2b:9e:d7:ab:fc:4c:fe:24: 15:c2:e1:db:89:4a:b9:d2:b0:06:40:4f:b1:9c:6a: 13:7a:cb:59:3b:7a:60:e4:d6:fc:1d:47:c9:9e:77: 62:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:27:83:AF:D0:D1:AC:41:74:67:2F:49:4E:49:D5:F3:4E:C2:E3:E7 X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:1c:74:11:1e:4d:dc:91:75:56:77:d7:4b:36:64:54:d9:b3: 30:6a:e6:e1:53:4d:0e:61:a5:b4:fa:bf:49:28:ce:55:c8:42: dd:f8:b7:1c:88:9f:8b:19:53:49:48:4c:11:5f:19:e0:c2:e9: ba:05:5a:a8:3a:29:56:d9:76:a6:a3:d1:36:71:35:9a:49:de: fa:7c:f9:65:b9:60:60:bb:df:3e:34:7f:0d:9e:33:25:d8:7f: 8b:cb:96:c6:1c:0f:10:a2:83:02:63:50:f6:45:8b:fe:17:9b: 44:19:f6:52:57:4f:a3:f4:d8:1c:ad:8e:d9:be:c6:88:aa:aa: c0:7a:2f:68:81:5a:6b:37:c3:46:a1:4a:44:7b:39:96:dd:85: a0:6e:bf:8a:0c:78:89:48:92:0d:2c:63:07:7e:b1:bb:63:ef: e5:64:d0:7d:d0:1a:91:00:be:9c:24:6f:97:0c:4b:db:fa:c9: 9c:b3:95:72:73:7b:1c:8f:fd:26:75:b4:e9:92:24:fd:e4:54: a0:bf:eb:1b:9f:a2:03:f6:08:d4:23:78:65:cf:33:b7:3a:3e: 5c:19:45:4f:13:ee:50:ea:35:9d:87:0b:34:66:3b:57:62:fa: f2:06:a5:25:5b:a1:cd:ce:c6:12:2e:79:2d:63:e7:f5:3a:ea: e1:71:30:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcxa+VA7VvHgPEj5k2fV11b1PeLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNTEyMTcwOTU1NTNaFw0yNTEyMjAxNDMxNTNaMDMxMTAvBgNV BAMTKDZFMjc4M0FGRDBEMUFDNDE3NDY3MkY0OTRFNDlENUYzNEVDMkUzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcScEBMIQm1OV/Zfr4Tk256u5e /Vy1Yy1u7qpOOg/M8j9b0a2lSyZjN6YZsikdhnBYqsPKl+aN9/epN8wZP5tZi0f+ H8KVruV89sxNt+HFnGK2v6tj0S658zScnlvP/Mz2pXMrLeh5XEJq+VysDa/cNegP sTjp/eByD2h1MmL7rpuLdu7/G1uuoKekrDkPaZuIHmwsOy79i8h/m9VwFr+6B0BM Sxn0X4oJ4psh9rPuJNhCtNOGX2gLKbyjyZm7qmP1z2fjUgwRGrx0XithfiMIlxtg s18Q1Rwrnter/Ez+JBXC4duJSrnSsAZAT7GcahN6y1k7emDk1vwdR8med2JPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbieDr9DRrEF0Zy9JTknV807C4+cwHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwcdBEeTdyRdVZ310s2ZFTZszBq5uFTTQ5h pbT6v0kozlXIQt34txyIn4sZU0lITBFfGeDC6boFWqg6KVbZdqaj0TZxNZpJ3vp8 +WW5YGC73z40fw2eMyXYf4vLlsYcDxCigwJjUPZFi/4Xm0QZ9lJXT6P02Bytjtm+ xoiqqsB6L2iBWms3w0ahSkR7OZbdhaBuv4oMeIlIkg0sYwd+sbtj7+Vk0H3QGpEA vpwkb5cMS9v6yZyzlXJzexyP/SZ1tOmSJP3kVKC/6xufogP2CNQjeGXPM7c6PlwZ RU8T7lDqNZ2HCzRmO1di+vIGpSVboc3OxhIueS1j5/U66uFxMEY= -----END CERTIFICATE-----Generated at Thu Dec 18 21:47:25 2025 by rpki-client