This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft (raw, json) Hash identifier: bqlfnjr0HTo7d1tKyQiFohxDLcaiKqgu/5pso2JH+P8= Subject key identifier: 2B:BC:5C:A9:8E:05:79:AE:60:1F:6A:D7:AF:83:0E:70:F4:56:F1:1C Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Certificate issuer: /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Certificate serial: 507ADE6B05FC5CB550D5A00B81DC9A666D5A0DCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft Manifest number: 02B4 Signing time: Sun 14 Dec 2025 14:32:18 +0000 Manifest this update: Sun 14 Dec 2025 14:27:18 +0000 Manifest next update: Wed 17 Dec 2025 18:39:18 +0000 Files and hashes: 1: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl (hash: JrlBzD3RhcQ6qgRmzpKQJa+vEF34L0vmVxFecj05zZI=) 2: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: qWtnu+D2OJjgUIAZhBWqF4N8kzQJfxmKrFVqp2H/d+E=) 3: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: h1Tx5XQe9PTjaWSuT2kvzlzqF3kndx9Hsu7Upo8uOTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7a:de:6b:05:fc:5c:b5:50:d5:a0:0b:81:dc:9a:66:6d:5a:0d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Validity Not Before: Dec 14 14:27:18 2025 GMT Not After : Dec 17 18:39:18 2025 GMT Subject: CN=2BBC5CA98E0579AE601F6AD7AF830E70F456F11C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:94:55:3b:92:01:fa:e0:cd:f7:d4:cc:d4:b4: 0b:86:de:74:c9:09:5c:84:bb:0b:12:9c:91:61:52: b7:37:a4:a6:21:b1:8f:b4:05:ee:ee:b4:1b:26:34: d0:49:d6:3b:fa:fa:ae:1b:37:1f:d0:e5:57:a3:68: 96:cb:e6:3c:2a:30:9e:73:d5:5f:31:b6:18:05:f0: c0:57:84:be:85:f7:43:ab:26:0e:0c:8f:43:7e:b3: 5a:cb:7a:19:49:83:9d:a5:ca:62:5b:56:f7:6d:e4: 18:a3:a7:69:19:49:7d:ca:95:bb:ed:23:0d:e9:3f: e0:db:78:a4:20:79:90:91:00:e5:82:90:ca:93:d0: db:5a:cb:e2:e6:a2:13:04:9a:b6:27:18:29:0c:c1: 54:78:54:70:d3:40:09:b3:e5:64:5b:c0:e0:6d:1b: 59:25:ec:3f:b9:c4:1d:92:10:71:6d:bc:ee:13:18: 55:02:0d:d8:85:81:ec:48:8c:5f:da:ce:bb:b3:0b: 91:8f:cf:de:0f:01:65:c4:bb:c7:de:35:32:74:cf: 20:39:2f:17:77:66:42:bd:53:30:e5:87:a8:c6:90: 61:f0:55:08:ef:bc:8c:b1:25:6d:74:f5:38:13:9f: 1b:fc:39:1e:e5:44:06:a7:f9:d9:82:db:f7:51:d4: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BC:5C:A9:8E:05:79:AE:60:1F:6A:D7:AF:83:0E:70:F4:56:F1:1C X509v3 Authority Key Identifier: keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:7c:01:ad:92:04:50:38:17:50:d1:75:86:03:37:6a:64:33: 9b:66:a2:69:ea:01:58:17:71:2b:32:c2:44:fc:e1:be:89:4d: 8f:55:1b:cc:68:19:81:ee:85:94:96:28:64:39:a0:6d:0b:0f: 43:c0:f5:9f:d4:d3:f4:ad:8b:96:de:f0:30:e1:37:f3:86:39: 16:45:ac:56:d8:85:73:75:03:36:82:11:7c:69:b2:e0:e3:46: d8:ab:58:46:95:45:6b:24:1b:0c:76:13:5d:dc:35:66:0f:af: d4:99:31:fc:46:ff:00:10:93:80:d4:1f:c4:7a:7b:bd:41:fd: 9d:c8:29:24:97:c1:01:c2:46:8e:2c:ee:23:4a:56:80:3c:f3: 30:46:9f:40:20:31:90:7d:ea:bc:a7:8c:24:f5:50:6a:33:5a: 5c:20:4f:54:3c:c6:03:17:bb:65:2f:31:e1:6c:d6:70:5a:c1: 29:2a:5c:8e:3b:4c:b5:d7:e0:e3:61:10:2d:db:0e:55:15:34: c6:23:0d:b5:4c:06:05:ae:75:dd:c3:b4:02:d5:ec:e5:36:66: 13:75:13:ff:da:14:3b:24:b2:58:5c:01:04:4a:52:56:fd:fc: a5:7d:1e:cb:a1:c1:9c:4f:01:91:73:78:5c:3b:b2:a8:8f:8b: 57:0b:a9:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUHreawX8XLVQ1aALgdyaZm1aDcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBE MDIyNDZGMTAeFw0yNTEyMTQxNDI3MThaFw0yNTEyMTcxODM5MThaMDMxMTAvBgNV BAMTKDJCQkM1Q0E5OEUwNTc5QUU2MDFGNkFEN0FGODMwRTcwRjQ1NkYxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdlFU7kgH64M331MzUtAuG3nTJ CVyEuwsSnJFhUrc3pKYhsY+0Be7utBsmNNBJ1jv6+q4bNx/Q5VejaJbL5jwqMJ5z 1V8xthgF8MBXhL6F90OrJg4Mj0N+s1rLehlJg52lymJbVvdt5Bijp2kZSX3Klbvt Iw3pP+DbeKQgeZCRAOWCkMqT0Ntay+LmohMEmrYnGCkMwVR4VHDTQAmz5WRbwOBt G1kl7D+5xB2SEHFtvO4TGFUCDdiFgexIjF/azruzC5GPz94PAWXEu8feNTJ0zyA5 Lxd3ZkK9UzDlh6jGkGHwVQjvvIyxJW109TgTnxv8OR7lRAan+dmC2/dR1MShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK7xcqY4Fea5gH2rXr4MOcPRW8RwwHwYDVR0j BBgwFoAU4J0OHSY9vZFNDE4Mqn5eUNAiRvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMC9FMDlEMEUxRDI2 M0RCRDkxNEQwQzRFMENBQTdFNUU1MEQwMjI0NkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBEMDIy NDZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVF NTBEMDIyNDZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAR8Aa2SBFA4F1DRdYYDN2pkM5tmomnqAVgX cSsywkT84b6JTY9VG8xoGYHuhZSWKGQ5oG0LD0PA9Z/U0/Sti5be8DDhN/OGORZF rFbYhXN1AzaCEXxpsuDjRtirWEaVRWskGwx2E13cNWYPr9SZMfxG/wAQk4DUH8R6 e71B/Z3IKSSXwQHCRo4s7iNKVoA88zBGn0AgMZB96rynjCT1UGozWlwgT1Q8xgMX u2UvMeFs1nBawSkqXI47TLXX4ONhEC3bDlUVNMYjDbVMBgWudd3DtALV7OU2ZhN1 E//aFDskslhcAQRKUlb9/KV9HsuhwZxPAZFzeFw7sqiPi1cLqW8= -----END CERTIFICATE-----Generated at Tue Dec 16 17:54:41 2025 by rpki-client