This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: TjlVBTex/kBGMVBK3ExWG+FLq3F1epyUPAg937INdYo= Subject key identifier: 0E:DC:C0:70:CB:AF:E2:AA:C1:F5:DF:F7:92:44:F0:54:52:B3:AE:D5 Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 7431175C7337A03BFC7A72416A4C0C2E21739715 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 04E8 Signing time: Thu 04 Dec 2025 22:01:49 +0000 Manifest this update: Thu 04 Dec 2025 21:56:49 +0000 Manifest next update: Mon 08 Dec 2025 08:11:49 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 1I55HZV9ASBX91G1gmKkN8XsoZ52BjLH6TscAGFfb1w=) 2: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: D4kVXvXRHzvCo+17skSplr/DLwPW0zF0Ja72GbP4ogI=) 3: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: voGeHKK4ikA3uaKs2J+WeJLtpIfTnr3JdLSLAJpRJmc=) 4: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: VKvXvb3BP6384nLUH1LdjT/mbF098hu6bIg7H4DeDLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:31:17:5c:73:37:a0:3b:fc:7a:72:41:6a:4c:0c:2e:21:73:97:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Dec 4 21:56:49 2025 GMT Not After : Dec 8 08:11:49 2025 GMT Subject: CN=0EDCC070CBAFE2AAC1F5DFF79244F05452B3AED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:68:52:da:fe:d4:21:d6:d2:0b:cb:96:0b:82: 9d:4a:23:8c:06:d4:9e:a6:2d:52:66:a0:15:01:b4: 12:cc:6f:c2:37:39:66:0f:12:5a:63:7e:45:85:91: dc:0b:44:75:24:99:73:9f:9c:e2:d5:64:86:63:59: db:fb:7e:bc:b8:6a:80:ff:05:6b:99:ef:f9:5d:52: a6:ed:00:86:c4:fd:04:be:88:85:9a:73:f4:28:5d: 4e:c3:88:28:47:4f:ec:a7:b8:dc:e4:b9:b5:7b:26: be:7f:58:ef:19:fa:94:8d:c6:51:fa:81:66:65:09: 5d:0f:e1:a1:43:27:1d:36:51:a6:a7:05:63:5e:f0: d5:96:95:a5:6b:16:b9:b5:c0:e9:89:ac:75:c0:b8: b7:50:c0:1c:eb:3e:ee:74:1d:ad:2c:4b:be:b4:3e: 9b:2b:a2:b7:6b:53:87:3d:bf:88:b6:b8:43:f9:54: 1b:df:64:13:0d:30:9e:0e:37:36:14:98:19:87:b8: 03:23:65:af:21:f6:bb:69:b6:e3:7a:3e:b0:69:fb: d1:1d:eb:18:2d:47:2e:c1:16:d9:a5:dd:6e:f4:6f: 9c:c2:a5:ea:11:5a:56:b8:8d:0a:c2:3d:66:8b:3a: ea:c9:bb:2f:58:f2:63:c0:65:c0:85:76:e0:03:8e: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DC:C0:70:CB:AF:E2:AA:C1:F5:DF:F7:92:44:F0:54:52:B3:AE:D5 X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ca:95:51:e4:64:e7:74:65:40:d8:ca:fb:e4:98:4c:35:e9: 71:a2:4d:83:d8:d6:06:bd:d6:1b:34:a6:85:e2:46:ab:8d:ff: fc:1e:04:ba:e7:1f:a6:06:d4:4c:ac:75:a3:68:c0:6b:0b:73: f6:07:52:9d:e5:32:32:72:df:8f:93:d4:77:c3:21:78:5d:f5: e4:d4:03:4a:ff:ad:b6:25:f4:27:ea:f8:a9:38:42:10:63:9c: 35:74:2d:a7:f8:38:38:81:f5:62:d4:70:95:2d:28:05:a7:d7: d3:87:4b:34:da:d1:1a:83:a4:d8:53:53:97:3c:56:be:d5:3b: 27:5c:b7:f9:1d:73:84:8a:4b:1e:fd:ad:da:7d:82:37:1d:0d: 23:5b:a4:b5:8d:f1:63:1e:86:9c:9d:d2:4d:36:37:11:35:2c: 79:dd:20:fe:b4:1e:4a:91:6c:42:4d:b0:29:38:eb:ba:94:21: fe:8a:e5:54:86:cf:d1:c2:55:1b:3f:07:a4:93:3e:f5:b6:41: f7:30:ab:c6:c2:1f:27:96:b5:b9:ed:15:80:db:e9:04:51:b0: c9:2f:fb:fb:0d:ef:31:9c:54:16:20:f2:c1:95:8a:8a:7c:fa: 2d:cd:8e:21:f7:67:79:d0:dd:5d:cc:07:26:11:02:ab:b8:97: f8:61:b2:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDEXXHM3oDv8enJBakwMLiFzlxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNTEyMDQyMTU2NDlaFw0yNTEyMDgwODExNDlaMDMxMTAvBgNV BAMTKDBFRENDMDcwQ0JBRkUyQUFDMUY1REZGNzkyNDRGMDU0NTJCM0FFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTaFLa/tQh1tILy5YLgp1KI4wG 1J6mLVJmoBUBtBLMb8I3OWYPElpjfkWFkdwLRHUkmXOfnOLVZIZjWdv7fry4aoD/ BWuZ7/ldUqbtAIbE/QS+iIWac/QoXU7DiChHT+ynuNzkubV7Jr5/WO8Z+pSNxlH6 gWZlCV0P4aFDJx02UaanBWNe8NWWlaVrFrm1wOmJrHXAuLdQwBzrPu50Ha0sS760 PpsrordrU4c9v4i2uEP5VBvfZBMNMJ4ONzYUmBmHuAMjZa8h9rtptuN6PrBp+9Ed 6xgtRy7BFtml3W70b5zCpeoRWla4jQrCPWaLOurJuy9Y8mPAZcCFduADjgRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDtzAcMuv4qrB9d/3kkTwVFKzrtUwHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvKlVHkZOd0ZUDYyvvkmEw16XGiTYPY1ga9 1hs0poXiRquN//weBLrnH6YG1EysdaNowGsLc/YHUp3lMjJy34+T1HfDIXhd9eTU A0r/rbYl9Cfq+Kk4QhBjnDV0Laf4ODiB9WLUcJUtKAWn19OHSzTa0RqDpNhTU5c8 Vr7VOydct/kdc4SKSx79rdp9gjcdDSNbpLWN8WMehpyd0k02NxE1LHndIP60HkqR bEJNsCk467qUIf6K5VSGz9HCVRs/B6STPvW2Qfcwq8bCHyeWtbntFYDb6QRRsMkv +/sN7zGcVBYg8sGViop8+i3NjiH3Z3nQ3V3MByYRAqu4l/hhsmk= -----END CERTIFICATE-----Generated at Sun Dec 7 05:59:43 2025 by rpki-client