This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: OpYpPksrgKrJj9dLVhJ1kOrlFLjuCnRq2nkH6ohvKDo= Subject key identifier: 6C:9A:8C:79:76:75:DF:9E:D6:69:F6:E4:58:52:AD:70:CE:FB:EF:6F Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 0F015758AD03E21F762A4F82C6AC724CCB4486FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 0211 Signing time: Sat 06 Dec 2025 19:21:36 +0000 Manifest this update: Sat 06 Dec 2025 19:16:36 +0000 Manifest next update: Wed 10 Dec 2025 06:16:36 +0000 Files and hashes: 1: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: /i++pRzc8BixwCHqNEJp4VdwEtvEv167UW2sk4arNiw=) 2: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: r4fgqA47qTlb3GhP6gzYmrPLdVv6QpS/f5hXYEC/f/k=) 3: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: yz9DrhiZMU3eHWMSo1Oy5Cw6+/2sDeBXKj2G3NoDN0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:01:57:58:ad:03:e2:1f:76:2a:4f:82:c6:ac:72:4c:cb:44:86:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Dec 6 19:16:36 2025 GMT Not After : Dec 10 06:16:36 2025 GMT Subject: CN=6C9A8C797675DF9ED669F6E45852AD70CEFBEF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:10:bc:1a:ef:81:fd:cd:d4:6c:d5:e6:d7: a5:fa:8c:ad:cd:67:f5:2a:fb:96:cb:3a:9f:8a:07: db:79:40:10:71:8c:fc:34:89:59:7d:09:10:51:cb: 73:be:63:02:32:bf:97:ac:ce:d2:a1:a3:0e:d3:cb: 89:a3:5d:25:ed:47:89:13:7c:4b:85:86:51:72:b5: e2:cb:9b:77:59:bc:cb:3a:32:a0:3f:e8:f1:f1:09: fa:80:3a:37:f4:13:fb:1e:48:be:b2:24:9a:10:12: 59:8d:0f:13:18:df:ac:39:15:5a:eb:e3:fb:9a:26: c7:35:24:e4:c5:24:40:23:66:76:08:68:c4:60:d4: 21:85:5d:76:39:48:49:59:f4:64:de:4c:45:e3:6d: d2:a1:45:1b:06:f5:0b:77:d4:60:5d:23:21:ae:49: 78:9a:1f:d0:b2:f7:89:80:a6:bc:d9:fb:61:44:95: 5f:51:1b:39:d0:31:cb:0c:c5:31:8f:4a:07:b4:01: 7a:dd:2b:0b:26:4e:70:68:68:34:fa:5d:3e:89:68: 17:b1:0a:4d:dd:ed:68:06:e9:4b:9a:41:47:c8:63: 16:ae:40:a0:1f:b2:fa:61:8b:ec:cc:77:bd:87:74: a3:eb:40:db:53:3f:b1:2a:79:0b:89:4d:ea:a0:7b: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9A:8C:79:76:75:DF:9E:D6:69:F6:E4:58:52:AD:70:CE:FB:EF:6F X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:62:47:3a:0a:45:54:55:e5:50:82:06:7f:14:25:42:8a:fb: 92:0a:c9:ea:0e:68:53:5e:8f:72:25:08:85:76:cc:24:d6:8c: 45:3c:72:f1:1c:e1:9d:a4:59:26:1c:b8:ab:88:f1:e7:73:ab: cc:e7:c2:22:77:dd:a0:6d:70:bb:df:89:b9:de:0b:79:c1:8c: 87:0f:73:95:11:71:38:f6:88:f9:24:4c:9f:56:62:e6:fe:3b: 22:8e:c3:99:61:30:a6:6e:b8:90:a0:9d:c3:76:02:85:68:46: 5f:34:cb:02:0e:f1:8e:c1:b0:a6:e3:4c:f2:72:65:d0:05:da: 10:ef:f5:08:6f:4f:e1:b4:77:fa:5a:b0:58:e8:a6:22:72:b2: 38:6f:16:ec:77:88:a8:64:22:a8:18:62:2d:c8:00:e6:06:94: 10:cb:9d:e5:c3:9e:31:7a:7f:54:2f:1b:57:4b:34:b0:b1:f5: 9f:f1:a1:9b:36:f1:2a:d5:3d:0d:1d:df:d5:ec:30:82:0a:83: 08:1c:51:8d:65:d9:a2:52:3e:f0:de:fe:02:3b:43:90:9c:10: d8:21:c7:2b:fe:22:5e:66:28:51:75:dc:57:7c:c9:0f:34:a7: bc:36:69:e9:5c:49:ca:fa:e9:82:8f:aa:7b:38:7b:2c:59:1e: 72:f3:d0:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwFXWK0D4h92Kk+CxqxyTMtEhvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNTEyMDYxOTE2MzZaFw0yNTEyMTAwNjE2MzZaMDMxMTAvBgNV BAMTKDZDOUE4Qzc5NzY3NURGOUVENjY5RjZFNDU4NTJBRDcwQ0VGQkVGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XRC8Gu+B/c3UbNXm16X6jK3N Z/Uq+5bLOp+KB9t5QBBxjPw0iVl9CRBRy3O+YwIyv5esztKhow7Ty4mjXSXtR4kT fEuFhlFyteLLm3dZvMs6MqA/6PHxCfqAOjf0E/seSL6yJJoQElmNDxMY36w5FVrr 4/uaJsc1JOTFJEAjZnYIaMRg1CGFXXY5SElZ9GTeTEXjbdKhRRsG9Qt31GBdIyGu SXiaH9Cy94mAprzZ+2FElV9RGznQMcsMxTGPSge0AXrdKwsmTnBoaDT6XT6JaBex Ck3d7WgG6UuaQUfIYxauQKAfsvphi+zMd72HdKPrQNtTP7EqeQuJTeqge18LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbJqMeXZ1357WafbkWFKtcM77728wHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdiRzoKRVRV5VCCBn8UJUKK+5IKyeoOaFNe j3IlCIV2zCTWjEU8cvEc4Z2kWSYcuKuI8edzq8znwiJ33aBtcLvfibneC3nBjIcP c5URcTj2iPkkTJ9WYub+OyKOw5lhMKZuuJCgncN2AoVoRl80ywIO8Y7BsKbjTPJy ZdAF2hDv9QhvT+G0d/pasFjopiJysjhvFux3iKhkIqgYYi3IAOYGlBDLneXDnjF6 f1QvG1dLNLCx9Z/xoZs28SrVPQ0d39XsMIIKgwgcUY1l2aJSPvDe/gI7Q5CcENgh xyv+Il5mKFF13Fd8yQ80p7w2aelcScr66YKPqns4eyxZHnLz0Ko= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:29 2025 by rpki-client