This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft File: E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json) Hash identifier: indxcdktx0LT8neD3SKyBCa0yrVLWSzeb6ZFnOw+drE= Subject key identifier: 6E:57:AD:7E:F5:47:23:73:40:EA:76:6F:3C:BE:3E:5C:4A:08:FF:D2 Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03 Certificate serial: 3ACD6DBDD0DBEB69151BFBDB4E53E8D98751D00A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft Manifest number: E2 Signing time: Sat 06 Dec 2025 00:02:19 +0000 Manifest this update: Fri 05 Dec 2025 23:57:19 +0000 Manifest next update: Tue 09 Dec 2025 06:02:19 +0000 Files and hashes: 1: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: 55S2ouKSLp+tLvqBDThwPSXFVmDbqXAyXGAd7z8IpQM=) 2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cd:6d:bd:d0:db:eb:69:15:1b:fb:db:4e:53:e8:d9:87:51:d0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03 Validity Not Before: Dec 5 23:57:19 2025 GMT Not After : Dec 9 06:02:19 2025 GMT Subject: CN=6E57AD7EF547237340EA766F3CBE3E5C4A08FFD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:89:1b:29:4b:c1:bf:de:c2:12:ec:e0:84: ba:4d:fa:b3:c9:09:03:de:43:4a:68:a7:88:b0:23: 00:dc:dc:17:47:58:99:58:08:de:c5:ff:fa:fd:06: ce:3e:f1:a2:03:e1:2a:09:c9:cb:79:43:ec:b2:0b: c0:8b:21:db:4d:42:c1:a8:11:98:15:ed:1b:36:69: 49:d0:8c:bc:43:8e:7c:77:e7:4e:ea:8b:84:53:95: a9:9f:62:87:73:d0:fd:81:57:73:69:52:02:cc:a5: 74:3a:99:25:6a:32:59:98:10:b6:b8:82:53:90:be: 2d:41:67:b3:97:19:b6:0f:80:5e:94:49:1b:42:08: 03:38:f4:fe:e1:89:7e:3f:be:7a:a3:46:6c:38:34: 36:cb:6c:47:d4:c7:78:6c:48:fb:44:ee:bd:4e:b7: 22:8b:6c:2e:61:ce:cc:84:83:c6:96:43:9a:87:5c: 4c:05:67:f4:4a:d1:4a:10:83:f2:02:a1:4c:ec:e9: bb:ec:ab:2d:15:9e:46:7c:ce:ed:e5:45:40:95:95: b8:bd:1f:61:99:cc:db:0d:19:a9:f3:c7:70:e5:a8: b5:36:0b:aa:2c:74:1d:8a:f6:87:31:c4:6e:09:5c: 86:19:ec:6c:2a:30:f6:09:3b:84:37:19:9b:3d:ca: 7e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:57:AD:7E:F5:47:23:73:40:EA:76:6F:3C:BE:3E:5C:4A:08:FF:D2 X509v3 Authority Key Identifier: keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c5:c2:d6:d8:a1:a5:26:47:3c:13:10:ae:ad:ea:fe:08:43: 5e:22:b5:2b:96:cd:a2:ec:ad:1a:7a:c9:5d:80:1c:79:52:fb: 60:ce:55:29:86:4f:55:2b:72:7f:d3:16:14:86:09:20:de:80: 63:b0:76:ba:99:36:f7:fb:a4:95:6c:8a:8e:d8:83:fa:be:c4: ce:2e:67:9c:2f:ab:ca:92:f9:e2:d9:b1:95:0d:d6:34:c7:ca: 09:64:03:fe:56:19:50:be:29:77:ec:fb:91:1c:e9:b1:82:a3: 8b:a3:8a:44:7a:76:14:04:4a:1e:4c:9f:1e:a1:9e:e8:23:3a: e8:29:3c:a9:60:7f:49:c0:26:d0:9a:c1:f1:b8:3d:92:0e:9d: 42:3f:b6:64:c6:fc:08:e5:76:84:1d:a0:a3:81:31:c2:4a:98: db:df:a8:38:6c:bd:d8:d5:0c:12:80:3f:8e:92:02:69:8b:be: 39:e6:02:36:d5:6b:25:a0:60:a8:a9:c9:f6:30:03:0e:61:fb: 26:cc:64:d6:37:85:38:c5:f3:28:01:d9:6e:88:8b:49:aa:54: ef:33:2f:81:b1:1a:2d:41:37:4c:f7:ff:9e:3e:02:4f:9d:23: ce:38:77:3b:cc:0a:a9:ab:9e:e0:ba:05:ce:3e:76:e4:a6:7c: 05:db:ba:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOs1tvdDb62kVG/vbTlPo2YdR0AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2 MzZFNkMwMzAeFw0yNTEyMDUyMzU3MTlaFw0yNTEyMDkwNjAyMTlaMDMxMTAvBgNV BAMTKDZFNTdBRDdFRjU0NzIzNzM0MEVBNzY2RjNDQkUzRTVDNEEwOEZGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpoYkbKUvBv97CEuzghLpN+rPJ CQPeQ0pop4iwIwDc3BdHWJlYCN7F//r9Bs4+8aID4SoJyct5Q+yyC8CLIdtNQsGo EZgV7Rs2aUnQjLxDjnx3507qi4RTlamfYodz0P2BV3NpUgLMpXQ6mSVqMlmYELa4 glOQvi1BZ7OXGbYPgF6USRtCCAM49P7hiX4/vnqjRmw4NDbLbEfUx3hsSPtE7r1O tyKLbC5hzsyEg8aWQ5qHXEwFZ/RK0UoQg/ICoUzs6bvsqy0VnkZ8zu3lRUCVlbi9 H2GZzNsNGanzx3DlqLU2C6osdB2K9ocxxG4JXIYZ7GwqMPYJO4Q3GZs9yn6DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbletfvVHI3NA6nZvPL4+XEoI/9IwHwYDVR0j BBgwFoAU45KGI0CcHBDikvg4+DCOEWNubAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMS9FMzkyODYyMzQw OUMxQzEwRTI5MkY4MzhGODMwOEUxMTYzNkU2QzAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2MzZF NkMwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhF MTE2MzZFNkMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnFwtbYoaUmRzwTEK6t6v4IQ14itSuWzaLs rRp6yV2AHHlS+2DOVSmGT1Urcn/TFhSGCSDegGOwdrqZNvf7pJVsio7Yg/q+xM4u Z5wvq8qS+eLZsZUN1jTHyglkA/5WGVC+KXfs+5Ec6bGCo4ujikR6dhQESh5Mnx6h nugjOugpPKlgf0nAJtCawfG4PZIOnUI/tmTG/AjldoQdoKOBMcJKmNvfqDhsvdjV DBKAP46SAmmLvjnmAjbVayWgYKipyfYwAw5h+ybMZNY3hTjF8ygB2W6Ii0mqVO8z L4GxGi1BN0z3/54+Ak+dI844dzvMCqmrnuC6Bc4+duSmfAXbunI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:47:54 2025 by rpki-client