This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: VRTQr23ekq3sRHKgicNxP1Dika4LcuFmqgOCVCqK5ps= Subject key identifier: 31:21:BD:55:05:4A:C7:B3:C8:1E:EC:4C:0E:45:E1:12:6F:5D:C2:FE Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 68DE4E8659CA7D1C4434DB8AEF30C293163E611F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 01CC Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:55:53 +0000 Manifest next update: Tue 09 Dec 2025 06:39:53 +0000 Files and hashes: 1: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: PNsGrsunNYvLcLEfdpgZYxKAz1Ra4qJ7YYKHTqQZiJg=) 2: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 3lqgIQzyR6/7cSCmR5iJslHIsmApf6ImpEqOGdjCApk=) 3: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: 67Nq7F8u3rREcVIQ7sdF0CuhC6iSlnwws4GcqrriePU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:de:4e:86:59:ca:7d:1c:44:34:db:8a:ef:30:c2:93:16:3e:61:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Dec 6 01:55:53 2025 GMT Not After : Dec 9 06:39:53 2025 GMT Subject: CN=3121BD55054AC7B3C81EEC4C0E45E1126F5DC2FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:04:9d:42:fd:e0:f7:bc:f2:b4:9b:06:17: 0f:b9:44:2c:f2:a8:ac:93:a4:36:6c:6d:22:3e:d6: ef:d2:d7:77:ad:51:4f:15:3e:dd:12:52:70:de:39: ad:97:5c:8f:16:5a:91:51:4e:23:41:3d:76:f9:b3: 6f:cb:a9:a4:c6:de:d9:65:aa:3a:8e:4e:c4:42:58: 29:32:af:db:d0:c4:b5:18:28:80:d3:a5:46:6e:a8: d9:90:31:f2:8b:55:c3:5b:d6:aa:f4:74:73:8c:f7: 1c:bd:72:59:ef:9b:dc:e6:f8:a4:5d:0c:6f:22:20: 00:cb:97:fd:b6:f6:5c:7d:db:1f:54:06:f8:a6:22: 7e:11:1d:62:33:1c:1f:e9:af:46:1e:d3:e3:cf:76: 7d:d4:2d:1b:11:18:75:10:05:80:f4:4c:33:34:aa: 76:d8:38:b2:fb:ed:6d:94:fe:8e:0f:fd:30:51:68: d7:d0:37:cc:87:11:38:47:3a:1b:59:a2:6d:9f:2d: f7:56:ad:64:a2:f0:28:1d:c0:08:f8:d0:d1:7b:89: 9f:c8:63:c7:1c:65:eb:38:16:71:16:29:91:e9:b9: 52:d0:a7:8e:33:e7:6c:98:ba:0a:55:2f:ed:e1:a7: 5e:cb:49:19:e2:d6:8d:dc:18:0c:8a:ea:64:66:a2: ba:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:21:BD:55:05:4A:C7:B3:C8:1E:EC:4C:0E:45:E1:12:6F:5D:C2:FE X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:62:c0:f7:7f:15:ac:33:ac:22:23:df:ea:f2:b3:db:f9:81: f8:0a:05:17:3c:62:19:c0:c0:3b:4c:23:fa:6c:47:80:8a:1c: 82:b0:3a:05:03:ed:3a:07:66:7b:33:3b:9d:0f:d8:f9:aa:67: 90:d5:21:7e:7f:08:5c:63:e6:fc:02:02:df:7c:34:e7:38:3d: 55:bb:cf:49:31:d0:8d:e6:72:2e:52:f3:b2:22:d7:56:96:3a: 8e:79:f9:25:ab:8e:88:50:5a:8d:42:1a:fe:e1:cb:ab:6f:35: 14:58:ef:4e:f2:cc:a2:52:15:b4:66:6c:91:3f:43:41:09:62: 59:e9:c7:8f:96:e0:75:07:e8:3f:7f:ac:b4:cc:04:cf:c4:34: 9a:59:2b:d6:f5:63:b3:64:21:7b:d7:36:8a:06:e6:0c:66:4e: be:05:4b:46:dc:ff:d4:3a:e8:cb:ea:e2:95:a1:ab:0f:e7:8a: d6:44:65:fb:99:3f:5c:04:8c:ac:b1:a2:e6:34:1f:f6:a2:d6: 91:3e:3d:f3:f6:5f:21:95:a2:91:e3:52:ba:cc:3b:93:8e:94: 46:81:a8:4d:a8:8c:b1:64:00:ac:4d:b7:70:66:bd:5d:3e:2d: 42:da:73:02:79:72:e1:a9:93:66:b8:15:80:a5:6b:53:27:f5: b8:af:20:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaN5OhlnKfRxENNuK7zDCkxY+YR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNTEyMDYwMTU1NTNaFw0yNTEyMDkwNjM5NTNaMDMxMTAvBgNV BAMTKDMxMjFCRDU1MDU0QUM3QjNDODFFRUM0QzBFNDVFMTEyNkY1REMyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98QSdQv3g97zytJsGFw+5RCzy qKyTpDZsbSI+1u/S13etUU8VPt0SUnDeOa2XXI8WWpFRTiNBPXb5s2/LqaTG3tll qjqOTsRCWCkyr9vQxLUYKIDTpUZuqNmQMfKLVcNb1qr0dHOM9xy9clnvm9zm+KRd DG8iIADLl/229lx92x9UBvimIn4RHWIzHB/pr0Ye0+PPdn3ULRsRGHUQBYD0TDM0 qnbYOLL77W2U/o4P/TBRaNfQN8yHEThHOhtZom2fLfdWrWSi8CgdwAj40NF7iZ/I Y8ccZes4FnEWKZHpuVLQp44z52yYugpVL+3hp17LSRni1o3cGAyK6mRmoroBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMSG9VQVKx7PIHuxMDkXhEm9dwv4wHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKViwPd/FawzrCIj3+rys9v5gfgKBRc8YhnA wDtMI/psR4CKHIKwOgUD7ToHZnszO50P2PmqZ5DVIX5/CFxj5vwCAt98NOc4PVW7 z0kx0I3mci5S87Ii11aWOo55+SWrjohQWo1CGv7hy6tvNRRY707yzKJSFbRmbJE/ Q0EJYlnpx4+W4HUH6D9/rLTMBM/ENJpZK9b1Y7NkIXvXNooG5gxmTr4FS0bc/9Q6 6Mvq4pWhqw/nitZEZfuZP1wEjKyxouY0H/ai1pE+PfP2XyGVopHjUrrMO5OOlEaB qE2ojLFkAKxNt3BmvV0+LULacwJ5cuGpk2a4FYCla1Mn9bivIEI= -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:34 2025 by rpki-client