This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft (raw, json) Hash identifier: y23YLWaklwjpx4GRCuB6XG3dT0XuuEHgAETtCrmnns4= Subject key identifier: CA:49:48:92:2C:65:BC:73:C8:60:36:79:99:8C:C0:17:1B:B3:6B:90 Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Certificate issuer: /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Certificate serial: 1C557B175862FAAD16DACEE97BA22263994580A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft Manifest number: 02B0 Signing time: Fri 05 Dec 2025 16:02:27 +0000 Manifest this update: Fri 05 Dec 2025 15:57:27 +0000 Manifest next update: Mon 08 Dec 2025 23:21:27 +0000 Files and hashes: 1: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl (hash: hKupwzomq0LrFmeM+/dnW6agVmai9w8YJzgJ9CXUaPg=) 2: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: h1Tx5XQe9PTjaWSuT2kvzlzqF3kndx9Hsu7Upo8uOTc=) 3: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: qWtnu+D2OJjgUIAZhBWqF4N8kzQJfxmKrFVqp2H/d+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:55:7b:17:58:62:fa:ad:16:da:ce:e9:7b:a2:22:63:99:45:80:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Validity Not Before: Dec 5 15:57:27 2025 GMT Not After : Dec 8 23:21:27 2025 GMT Subject: CN=CA4948922C65BC73C8603679998CC0171BB36B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:7c:ed:00:73:a9:a1:f2:8e:da:f4:42:4e: 40:cf:9e:86:85:4c:8e:5e:24:da:54:03:b2:ca:2c: 42:6a:0c:e8:34:9d:2b:76:58:78:8c:c6:25:91:07: 23:4c:73:18:52:4a:72:7f:03:56:b0:e5:59:53:4c: b9:c7:b3:b4:ea:06:d6:33:06:cc:0e:70:1f:6d:7d: 2a:74:94:54:9a:bb:35:79:2a:fa:b9:2b:8f:57:52: 14:b0:78:83:47:8e:91:f1:1d:35:d4:62:94:db:5a: f1:f5:30:70:e3:a1:89:13:25:b9:37:22:77:5a:ed: 22:95:6d:46:e9:45:f1:06:52:d0:e0:4f:c2:c5:20: 08:45:ef:d2:43:d3:c6:14:00:af:80:5b:45:37:2c: 55:5e:22:75:fe:73:68:a7:45:af:8d:c7:87:83:43: c4:a9:cb:eb:36:50:ce:d3:48:13:58:9c:93:ab:10: b3:75:57:f4:40:48:fc:4b:b2:73:16:27:b6:63:0f: 9e:de:56:a8:0f:40:67:fe:b3:f0:38:0b:ee:52:b5: 1b:b9:cc:a4:5d:75:6f:dd:32:07:ef:99:46:96:5c: 96:32:d1:12:59:7b:5a:95:f3:b0:dd:5e:2e:36:36: 94:9c:65:81:10:ef:ef:2a:6a:be:d8:1f:00:38:5b: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:49:48:92:2C:65:BC:73:C8:60:36:79:99:8C:C0:17:1B:B3:6B:90 X509v3 Authority Key Identifier: keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1f:d6:c4:a2:bb:b3:01:da:49:ef:1e:40:bf:06:ff:04:07: 30:85:11:86:33:98:f2:6f:e1:b7:f7:4b:be:a4:34:f1:f9:31: 5f:c5:7c:7a:fc:1b:23:1e:e0:82:68:14:71:2d:21:b5:fd:40: 61:49:71:9a:58:00:e3:81:b6:99:9e:be:c7:25:c6:82:da:ef: 56:22:08:31:02:e0:64:6d:12:24:60:45:8b:8d:1b:fd:a1:2a: 08:ec:0e:ce:87:fa:a4:5d:93:ab:c9:5a:5e:36:2e:1a:66:a5: b9:74:f2:fe:35:3b:66:46:8d:a3:34:91:d2:05:9a:ff:06:9c: 51:1b:7d:23:3a:c1:7f:9e:91:8e:41:db:6f:41:47:c0:ec:2d: 4b:df:f2:66:cf:60:96:f6:63:78:97:ed:66:42:41:c6:ab:a1: 3c:4b:5d:e6:57:6e:8d:7a:5f:b3:eb:ac:0e:8c:7d:23:f3:39: 5b:68:02:d8:df:ab:00:e4:7c:ad:30:5c:44:55:01:20:cb:b9: d3:ad:fd:00:45:51:4b:1a:7f:5d:f0:fb:ee:18:09:0a:3d:9d: 2a:ec:94:dc:07:0f:dc:ef:08:4b:7d:9e:c4:7a:f1:e2:b6:1f: 13:0f:81:93:b5:d2:d0:73:6e:56:78:23:f6:13:71:30:c6:21: 65:42:36:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHFV7F1hi+q0W2s7pe6IiY5lFgKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBE MDIyNDZGMTAeFw0yNTEyMDUxNTU3MjdaFw0yNTEyMDgyMzIxMjdaMDMxMTAvBgNV BAMTKENBNDk0ODkyMkM2NUJDNzNDODYwMzY3OTk5OENDMDE3MUJCMzZCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HXztAHOpofKO2vRCTkDPnoaF TI5eJNpUA7LKLEJqDOg0nSt2WHiMxiWRByNMcxhSSnJ/A1aw5VlTTLnHs7TqBtYz BswOcB9tfSp0lFSauzV5Kvq5K49XUhSweINHjpHxHTXUYpTbWvH1MHDjoYkTJbk3 Inda7SKVbUbpRfEGUtDgT8LFIAhF79JD08YUAK+AW0U3LFVeInX+c2inRa+Nx4eD Q8Spy+s2UM7TSBNYnJOrELN1V/RASPxLsnMWJ7ZjD57eVqgPQGf+s/A4C+5StRu5 zKRddW/dMgfvmUaWXJYy0RJZe1qV87DdXi42NpScZYEQ7+8qar7YHwA4W5rPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyklIkixlvHPIYDZ5mYzAFxuza5AwHwYDVR0j BBgwFoAU4J0OHSY9vZFNDE4Mqn5eUNAiRvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMC9FMDlEMEUxRDI2 M0RCRDkxNEQwQzRFMENBQTdFNUU1MEQwMjI0NkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBEMDIy NDZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVF NTBEMDIyNDZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsf1sSiu7MB2knvHkC/Bv8EBzCFEYYzmPJv 4bf3S76kNPH5MV/FfHr8GyMe4IJoFHEtIbX9QGFJcZpYAOOBtpmevsclxoLa71Yi CDEC4GRtEiRgRYuNG/2hKgjsDs6H+qRdk6vJWl42Lhpmpbl08v41O2ZGjaM0kdIF mv8GnFEbfSM6wX+ekY5B229BR8DsLUvf8mbPYJb2Y3iX7WZCQcaroTxLXeZXbo16 X7PrrA6MfSPzOVtoAtjfqwDkfK0wXERVASDLudOt/QBFUUsaf13w++4YCQo9nSrs lNwHD9zvCEt9nsR68eK2HxMPgZO10tBzblZ4I/YTcTDGIWVCNnM= -----END CERTIFICATE-----Generated at Sun Dec 7 08:35:13 2025 by rpki-client