This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: Wj4JvotIoPcdtTyuWVPPTvVW7k2fJUxATCRsBeGFj4w= Subject key identifier: B3:94:91:B1:BB:68:03:9E:02:63:3E:69:C2:E9:C0:D1:24:0A:94:71 Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 49BCCE449A40BA14283728B7295B806A614E48F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 01F0 Signing time: Wed 17 Dec 2025 01:21:08 +0000 Manifest this update: Wed 17 Dec 2025 01:16:08 +0000 Manifest next update: Sat 20 Dec 2025 12:58:08 +0000 Files and hashes: 1: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: QQ3Rh44LarCBGGxrx2/AHtC6m0nt4l2HW31clE2Q/SY=) 2: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: vk7T822WbxXheC3q1gZxob89FJvtZQ/4o3bbzbe5Ue4=) 3: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: FYTnb6URKqil9v4UEaprZL6ZdMktcRy6nGXbNBxOe04=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: R73yUQxsrQ2/QYaOv8BqS7ocOQns71iqOhL/AfjwD0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bc:ce:44:9a:40:ba:14:28:37:28:b7:29:5b:80:6a:61:4e:48:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Dec 17 01:16:08 2025 GMT Not After : Dec 20 12:58:08 2025 GMT Subject: CN=B39491B1BB68039E02633E69C2E9C0D1240A9471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:ca:90:ae:5b:fb:9e:da:09:e1:00:ac:cf: 5c:37:d0:53:41:6b:1e:19:51:79:af:cb:c4:ba:08: fb:98:0f:f3:e6:ce:a5:2b:f4:2c:be:c6:8a:7c:da: c1:45:b9:75:9a:3e:07:09:5f:dd:28:6c:dc:6b:82: 90:7a:ad:a9:02:f8:41:c8:1e:f1:73:1d:33:8d:5d: 23:fb:48:22:99:8c:dd:7f:22:54:46:c7:f2:6e:04: 69:ab:bf:7f:a1:17:69:22:d7:1a:91:ec:6e:cf:76: f0:57:4d:37:91:bf:9b:4a:c6:9e:1b:e8:6f:08:0e: 2a:1c:7e:86:6a:45:32:cb:89:fd:2f:49:83:f4:a9: 8c:83:af:23:1e:f0:3a:c1:c6:52:c1:fb:29:ed:d3: bb:a1:46:9c:ac:eb:6d:44:c2:07:6a:96:cf:31:bb: 64:be:60:20:ba:13:f3:3b:a5:70:38:c9:ae:2f:cf: 84:cd:1d:1b:97:a0:c7:5b:6b:69:b7:8a:2c:2f:cf: e5:b2:ae:83:24:7d:47:75:75:8f:b3:28:66:13:36: 44:98:f5:b6:06:6b:94:b5:14:fa:15:14:2c:53:0f: a7:e2:c8:de:18:bd:72:07:09:9f:43:fa:6e:98:ae: ea:e9:bd:99:f1:37:24:bf:fd:48:85:06:f0:32:41: 4a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:94:91:B1:BB:68:03:9E:02:63:3E:69:C2:E9:C0:D1:24:0A:94:71 X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b4:20:14:8f:d9:ac:bc:27:06:e6:3f:72:2e:ff:ff:08:80: d4:eb:6e:0b:85:da:87:15:c0:fa:8d:bd:c0:f0:32:fc:00:9c: a9:e2:17:b1:92:e5:6d:d2:7d:1c:43:67:23:dc:e5:1d:99:9d: 35:b4:68:7a:5c:a7:7d:aa:8a:c3:1d:7e:c4:c5:ed:e6:e9:2e: b3:bd:19:76:7c:65:19:4d:6c:7d:fe:4b:4c:b9:51:a7:14:6d: 98:60:6c:a3:25:5b:b5:4f:29:cd:a9:aa:7b:ef:60:85:db:01: d0:48:72:00:b9:cd:83:95:c8:86:55:a4:44:49:0a:7f:74:39: c1:a2:78:b2:06:64:cd:d1:09:f4:0a:ba:95:a2:f7:b5:f4:62: 3a:aa:e3:44:55:70:f3:dd:68:08:ac:43:69:52:40:f8:74:86: 4e:b3:9c:6b:46:b5:0a:cd:0f:b3:5a:a8:df:d3:ad:92:e0:1b: 0c:31:b5:dc:bf:b2:6e:5a:5c:c9:33:db:11:cd:03:dc:b3:59: 55:0e:3d:5c:63:66:8f:ad:de:8f:71:71:06:ef:f0:e6:1f:3c: 39:2f:8d:a1:79:75:f3:aa:b5:cd:44:7f:50:97:a4:6d:d9:46: 48:0b:f9:28:08:60:80:d2:e4:5c:2a:85:f0:b4:ff:0c:37:31: 81:62:b6:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbzORJpAuhQoNyi3KVuAamFOSPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTEyMTcwMTE2MDhaFw0yNTEyMjAxMjU4MDhaMDMxMTAvBgNV BAMTKEIzOTQ5MUIxQkI2ODAzOUUwMjYzM0U2OUMyRTlDMEQxMjQwQTk0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAMqQrlv7ntoJ4QCsz1w30FNB ax4ZUXmvy8S6CPuYD/PmzqUr9Cy+xop82sFFuXWaPgcJX90obNxrgpB6rakC+EHI HvFzHTONXSP7SCKZjN1/IlRGx/JuBGmrv3+hF2ki1xqR7G7PdvBXTTeRv5tKxp4b 6G8IDiocfoZqRTLLif0vSYP0qYyDryMe8DrBxlLB+ynt07uhRpys621Ewgdqls8x u2S+YCC6E/M7pXA4ya4vz4TNHRuXoMdba2m3iiwvz+WyroMkfUd1dY+zKGYTNkSY 9bYGa5S1FPoVFCxTD6fiyN4YvXIHCZ9D+m6YrurpvZnxNyS//UiFBvAyQUoNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs5SRsbtoA54CYz5pwunA0SQKlHEwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS0IBSP2ay8JwbmP3Iu//8IgNTrbguF2ocV wPqNvcDwMvwAnKniF7GS5W3SfRxDZyPc5R2ZnTW0aHpcp32qisMdfsTF7ebpLrO9 GXZ8ZRlNbH3+S0y5UacUbZhgbKMlW7VPKc2pqnvvYIXbAdBIcgC5zYOVyIZVpERJ Cn90OcGieLIGZM3RCfQKupWi97X0Yjqq40RVcPPdaAisQ2lSQPh0hk6znGtGtQrN D7NaqN/TrZLgGwwxtdy/sm5aXMkz2xHNA9yzWVUOPVxjZo+t3o9xcQbv8OYfPDkv jaF5dfOqtc1Ef1CXpG3ZRkgL+SgIYIDS5FwqhfC0/ww3MYFiti0= -----END CERTIFICATE-----Generated at Wed Dec 17 16:41:46 2025 by rpki-client