This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft File: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft (raw, json) Hash identifier: 6oHte4WO8Uly6hFSotdCMVBoNS79O3EFk34p1uBXrPw= Subject key identifier: D2:54:88:08:04:7B:5E:81:F9:00:01:8A:99:DF:4B:9C:E2:4F:2E:CC Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C Certificate issuer: /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Certificate serial: 73670D9BD2BD6D68AC3ED74CD75BF5D154F1DA6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft Manifest number: 052D Signing time: Thu 04 Dec 2025 23:21:30 +0000 Manifest this update: Thu 04 Dec 2025 23:16:30 +0000 Manifest next update: Mon 08 Dec 2025 06:59:30 +0000 Files and hashes: 1: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: qJMxf0aJqdHPfbLPNvUiMxKhq3U6DmyX3ZCQXdLa44w=) 2: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: gDwS3CZNot9PKNbXfgVaxRg3XKEAojqRRjZmWUnIieM=) 3: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl (hash: De2Rk1DtbM0OHp4MmJ+vXJk5Zj2HRhDexF3qDjLUws4=) 4: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: +hHtMHqrRgOxnxPgQ1JDtVaqmRcnzLdlLvloLKvOcZA=) 5: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: bj03wSoaB1PZHhqBBV4Wr4Sjs0onXCgWYauPl2mcWtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 06:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:67:0d:9b:d2:bd:6d:68:ac:3e:d7:4c:d7:5b:f5:d1:54:f1:da:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Validity Not Before: Dec 4 23:16:30 2025 GMT Not After : Dec 8 06:59:30 2025 GMT Subject: CN=D2548808047B5E81F900018A99DF4B9CE24F2ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:82:33:37:85:1b:40:85:7e:96:59:66:d5: 56:11:e2:bd:af:85:f4:1a:87:4c:e1:b0:1a:84:8b: a2:56:7c:9b:a1:e6:23:de:ac:c2:6f:87:f6:f9:f9: f3:c9:84:d1:16:be:f6:4d:6d:97:ea:23:2b:ca:24: 9b:91:03:b2:52:32:98:e5:59:4e:75:8e:ce:66:82: 34:51:16:73:3e:f5:0d:fc:6e:21:97:73:9e:e5:44: 42:0f:35:16:4e:89:da:6c:fe:f6:64:d1:04:2d:15: 79:f4:71:c3:6f:91:23:25:76:6e:3f:eb:72:73:d6: fc:40:d3:65:88:2c:53:61:5a:d9:88:f6:71:22:61: 33:9f:15:c7:24:11:e9:4c:ea:9b:09:bc:17:42:1f: 20:a1:32:96:de:00:d7:0f:f0:4b:dd:38:66:b3:3d: 28:7f:7b:ce:0e:55:3b:47:6e:4b:b4:13:09:07:8e: db:4e:a0:99:f1:49:61:3f:31:96:36:eb:08:74:8d: 8f:0e:91:b7:f8:ae:84:3a:83:bc:78:61:0b:df:b3: 3a:9b:a4:d6:ba:fc:4f:e7:10:ec:b8:52:80:86:71: 1a:5a:b2:a0:9b:be:32:a4:60:3b:d3:ad:94:79:a1: e6:96:ab:a8:ce:37:d5:ec:f4:ff:93:22:36:d1:a8: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:54:88:08:04:7B:5E:81:F9:00:01:8A:99:DF:4B:9C:E2:4F:2E:CC X509v3 Authority Key Identifier: keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2a:c5:47:00:6f:87:16:07:5c:7e:20:f0:0d:90:5c:bb:70: 4a:d2:ea:a7:55:57:55:8a:fa:0b:b3:b0:27:ed:f5:e3:be:f7: 22:00:bc:14:1e:86:bd:7c:78:ff:16:92:2e:c3:9e:1a:f2:fc: 2a:f2:a7:9d:51:85:36:7d:75:19:af:1a:f9:e9:26:13:83:9d: ff:80:2a:00:6e:9c:d5:15:9e:8a:30:f3:af:b4:94:4f:02:d7: ac:3f:5d:02:9c:ce:58:6f:bf:60:79:e2:9d:58:94:35:48:e6: 4b:03:8d:4a:6d:cd:51:f9:85:10:bc:be:c2:d4:12:cd:ce:3a: 6a:c3:be:57:33:1f:dd:a4:f5:a2:60:81:12:9b:60:9b:94:dd: 55:a9:bd:b9:17:da:86:65:d0:35:60:66:ab:de:09:93:c9:d2: 8d:4d:e1:cd:44:4f:1c:40:ae:46:09:75:b2:ed:36:24:dd:6f: 58:30:d9:56:00:87:bc:98:84:92:06:d9:dd:6e:5a:5d:0c:45: 10:21:ae:21:1e:13:98:1d:a3:6e:85:77:ce:2f:89:2c:d1:8e: 52:1c:86:6c:b9:aa:43:b1:5d:7d:25:39:48:76:17:3d:98:a5: fb:e6:e6:2c:aa:f9:c4:d0:69:4e:5b:b2:76:60:7a:e6:64:19: 5d:42:b1:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2cNm9K9bWisPtdM11v10VTx2mowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcw MzEyQUQ1QzAeFw0yNTEyMDQyMzE2MzBaFw0yNTEyMDgwNjU5MzBaMDMxMTAvBgNV BAMTKEQyNTQ4ODA4MDQ3QjVFODFGOTAwMDE4QTk5REY0QjlDRTI0RjJFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wYIzN4UbQIV+lllm1VYR4r2v hfQah0zhsBqEi6JWfJuh5iPerMJvh/b5+fPJhNEWvvZNbZfqIyvKJJuRA7JSMpjl WU51js5mgjRRFnM+9Q38biGXc57lREIPNRZOidps/vZk0QQtFXn0ccNvkSMldm4/ 63Jz1vxA02WILFNhWtmI9nEiYTOfFcckEelM6psJvBdCHyChMpbeANcP8EvdOGaz PSh/e84OVTtHbku0EwkHjttOoJnxSWE/MZY26wh0jY8Okbf4roQ6g7x4YQvfszqb pNa6/E/nEOy4UoCGcRpasqCbvjKkYDvTrZR5oeaWq6jON9Xs9P+TIjbRqEBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0lSICAR7XoH5AAGKmd9LnOJPLswwHwYDVR0j BBgwFoAUzqA6B5iRB/VHorKrqmrU5wMSrVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTNhZTQ4NS1hNjU4LTRjNWMtYWJlMi0xZTdmZDhiMDM4YTAvMC9DRUEwM0EwNzk4 OTEwN0Y1NDdBMkIyQUJBQTZBRDRFNzAzMTJBRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcwMzEy QUQ1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0 RTcwMzEyQUQ1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYqxUcAb4cWB1x+IPANkFy7cErS6qdVV1WK +guzsCft9eO+9yIAvBQehr18eP8Wki7Dnhry/Cryp51RhTZ9dRmvGvnpJhODnf+A KgBunNUVnoow86+0lE8C16w/XQKczlhvv2B54p1YlDVI5ksDjUptzVH5hRC8vsLU Es3OOmrDvlczH92k9aJggRKbYJuU3VWpvbkX2oZl0DVgZqveCZPJ0o1N4c1ETxxA rkYJdbLtNiTdb1gw2VYAh7yYhJIG2d1uWl0MRRAhriEeE5gdo26Fd84viSzRjlIc hmy5qkOxXX0lOUh2Fz2Ypfvm5iyq+cTQaU5bsnZgeuZkGV1Csbo= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:39 2025 by rpki-client