This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft File: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft (raw, json) Hash identifier: 6M7oJeHYxnDJ2BRXufKskt3Qco0u5zhKPUkXpPjzElI= Subject key identifier: 05:F6:71:9B:A5:37:0F:0E:35:42:8C:E8:6C:74:88:C0:23:40:1B:A0 Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C Certificate issuer: /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Certificate serial: 55B6DADFCE029A92F667AD86E0499EDD740489E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft Manifest number: 0531 Signing time: Sun 14 Dec 2025 01:31:31 +0000 Manifest this update: Sun 14 Dec 2025 01:26:31 +0000 Manifest next update: Wed 17 Dec 2025 06:03:31 +0000 Files and hashes: 1: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: bj03wSoaB1PZHhqBBV4Wr4Sjs0onXCgWYauPl2mcWtw=) 2: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: qJMxf0aJqdHPfbLPNvUiMxKhq3U6DmyX3ZCQXdLa44w=) 3: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: gDwS3CZNot9PKNbXfgVaxRg3XKEAojqRRjZmWUnIieM=) 4: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: +hHtMHqrRgOxnxPgQ1JDtVaqmRcnzLdlLvloLKvOcZA=) 5: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl (hash: KiR++CC0MwpTBSSi1ii+ahuT6qylRI9SEMPjFuWBnMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 06:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b6:da:df:ce:02:9a:92:f6:67:ad:86:e0:49:9e:dd:74:04:89:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Validity Not Before: Dec 14 01:26:31 2025 GMT Not After : Dec 17 06:03:31 2025 GMT Subject: CN=05F6719BA5370F0E35428CE86C7488C023401BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:5d:f4:35:d5:aa:6a:c5:fb:3f:01:c6:be: 41:0f:ae:5a:d6:2a:5f:a1:16:26:be:cb:23:f3:5b: 37:f6:77:ac:97:b0:dd:02:5a:02:c9:56:3a:34:3c: dd:cd:39:52:f9:49:18:4d:79:17:a1:47:e6:a8:9a: 02:67:52:a8:0b:9e:99:2f:c0:7d:bb:39:f7:c9:00: fa:dd:06:42:4b:03:87:aa:93:24:2e:f9:70:c0:f1: 2d:a5:15:7d:ae:79:e1:6c:dd:f1:f4:9a:be:21:55: d6:17:a0:ef:cf:68:45:53:14:d4:a5:25:91:6f:07: 53:9c:72:1e:c3:f5:c5:dc:e2:d0:13:d5:a4:b4:b5: d2:de:a7:d7:bc:1f:4e:fa:c7:3b:94:75:93:5e:23: 5b:6a:f0:41:fe:b3:35:f6:c1:64:08:3a:d5:7e:79: 10:e8:cd:7c:2c:a9:7a:29:3d:1c:62:f0:ad:92:cb: e1:a8:48:75:d3:4b:2a:ef:0e:90:79:93:f8:46:02: bf:59:e7:3e:08:28:32:a1:d1:56:4c:c9:6a:6a:f8: a7:f9:d0:f1:11:c1:b3:7b:64:f2:6c:56:77:e6:c7: 4e:b8:ef:cc:a5:f6:4e:cb:4f:6c:01:1f:5d:00:7e: 35:dd:59:c1:48:c1:28:04:36:7e:37:68:14:aa:31: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F6:71:9B:A5:37:0F:0E:35:42:8C:E8:6C:74:88:C0:23:40:1B:A0 X509v3 Authority Key Identifier: keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:95:f6:c7:de:87:5e:29:f5:4b:ff:3d:78:51:13:a5:89:21: 29:02:78:c8:38:25:32:ec:82:f7:aa:8b:5c:d1:df:e4:0e:fd: 3b:ed:7e:9c:49:0d:3e:ef:d3:bc:07:47:df:fc:71:e5:33:71: 45:be:24:25:ae:30:6f:aa:37:4d:e4:fa:af:b3:d6:b7:05:d3: 55:91:a5:b4:be:73:d2:08:c3:b9:bf:fc:4b:af:a5:be:77:41: 3e:0d:55:72:68:f2:34:6a:5f:9b:0c:f4:56:7d:60:87:12:86: c3:2f:4e:2f:fb:dc:dc:90:7c:35:9b:dc:3a:56:1e:98:0c:6f: 05:9e:f0:00:f6:28:d0:11:10:d2:4d:27:5e:2d:e5:fd:5d:38: 35:30:f9:0a:72:0b:d6:ed:0a:e3:b2:7f:d4:d9:d0:c2:c1:d3: 38:04:06:41:52:3e:13:92:94:72:84:05:0f:a2:7b:19:66:63: 96:58:0b:34:d1:c7:3e:41:92:19:e1:94:0b:8e:1e:f6:19:6d: 6b:aa:3a:ea:8e:df:ef:b8:b1:e5:d8:de:df:5b:0d:e8:bd:24: 39:be:da:45:00:7e:ef:64:96:6a:63:a2:07:24:ed:cf:d9:49: 65:ad:e3:06:cd:70:bb:8d:87:59:67:47:4d:e7:21:9b:33:f7: ca:0b:78:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbba384CmpL2Z62G4Eme3XQEieUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcw MzEyQUQ1QzAeFw0yNTEyMTQwMTI2MzFaFw0yNTEyMTcwNjAzMzFaMDMxMTAvBgNV BAMTKDA1RjY3MTlCQTUzNzBGMEUzNTQyOENFODZDNzQ4OEMwMjM0MDFCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnF30NdWqasX7PwHGvkEPrlrW Kl+hFia+yyPzWzf2d6yXsN0CWgLJVjo0PN3NOVL5SRhNeRehR+aomgJnUqgLnpkv wH27OffJAPrdBkJLA4eqkyQu+XDA8S2lFX2ueeFs3fH0mr4hVdYXoO/PaEVTFNSl JZFvB1Occh7D9cXc4tAT1aS0tdLep9e8H076xzuUdZNeI1tq8EH+szX2wWQIOtV+ eRDozXwsqXopPRxi8K2Sy+GoSHXTSyrvDpB5k/hGAr9Z5z4IKDKh0VZMyWpq+Kf5 0PERwbN7ZPJsVnfmx06478yl9k7LT2wBH10AfjXdWcFIwSgENn43aBSqMaBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBfZxm6U3Dw41QozobHSIwCNAG6AwHwYDVR0j BBgwFoAUzqA6B5iRB/VHorKrqmrU5wMSrVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTNhZTQ4NS1hNjU4LTRjNWMtYWJlMi0xZTdmZDhiMDM4YTAvMC9DRUEwM0EwNzk4 OTEwN0Y1NDdBMkIyQUJBQTZBRDRFNzAzMTJBRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcwMzEy QUQ1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0 RTcwMzEyQUQ1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANCV9sfeh14p9Uv/PXhRE6WJISkCeMg4JTLs gveqi1zR3+QO/TvtfpxJDT7v07wHR9/8ceUzcUW+JCWuMG+qN03k+q+z1rcF01WR pbS+c9IIw7m//Euvpb53QT4NVXJo8jRqX5sM9FZ9YIcShsMvTi/73NyQfDWb3DpW HpgMbwWe8AD2KNARENJNJ14t5f1dODUw+QpyC9btCuOyf9TZ0MLB0zgEBkFSPhOS lHKEBQ+iexlmY5ZYCzTRxz5BkhnhlAuOHvYZbWuqOuqO3++4seXY3t9bDei9JDm+ 2kUAfu9klmpjogck7c/ZSWWt4wbNcLuNh1lnR03nIZsz98oLeAg= -----END CERTIFICATE-----Generated at Mon Dec 15 15:32:30 2025 by rpki-client