This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft File: EA581458C8710B7F2862361DF5BE327D72423B7F.mft (raw, json) Hash identifier: rfgZRgVdBqAMc491ZNaLsKuOjZ5iwfsHD6uf9sJnB/k= Subject key identifier: 88:DA:E8:F3:D1:50:A5:3D:75:0A:76:5C:3D:F9:C2:A4:C1:31:DC:CD Authority key identifier: EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F Certificate issuer: /CN=EA581458C8710B7F2862361DF5BE327D72423B7F Certificate serial: 377B72ECF959DA8DFFF5D51104BC0F2AB1C7E43C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft Manifest number: 025A Signing time: Sat 06 Dec 2025 06:10:01 +0000 Manifest this update: Sat 06 Dec 2025 06:05:01 +0000 Manifest next update: Tue 09 Dec 2025 13:09:01 +0000 Files and hashes: 1: EA581458C8710B7F2862361DF5BE327D72423B7F.crl (hash: b/fVjdSi/+jfvulZ5jJJNQgpZn/5vUMJ0mI3SZqaDTQ=) 2: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (hash: 17GkwMI8n2+iBGNp+2muXCL7ItlUGULiv1HjDHqDmB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7b:72:ec:f9:59:da:8d:ff:f5:d5:11:04:bc:0f:2a:b1:c7:e4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA581458C8710B7F2862361DF5BE327D72423B7F Validity Not Before: Dec 6 06:05:01 2025 GMT Not After : Dec 9 13:09:01 2025 GMT Subject: CN=88DAE8F3D150A53D750A765C3DF9C2A4C131DCCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:1f:e6:3c:51:a8:18:5b:59:26:8a:f2:da: e7:ec:29:3b:41:20:5f:16:37:da:6b:1d:00:e2:62: 23:95:b8:4f:3a:09:ec:16:7b:37:da:cd:f7:ec:be: 37:99:a5:9e:d3:cf:2b:63:cf:03:9a:af:21:2d:57: 34:59:48:0b:c9:94:aa:6c:17:6c:87:5c:4c:da:da: 3b:ff:81:d4:df:80:0f:6a:f4:04:9a:0a:92:83:17: 57:c9:e4:c8:56:42:b9:c9:ac:ee:43:a8:5e:19:a8: b9:49:ea:aa:35:ae:d6:b4:38:72:19:c8:2f:41:12: 8a:cf:6f:4a:9d:d9:fe:b1:ef:16:0c:bd:6a:a1:65: 85:00:3d:f1:d8:5f:2a:7d:30:e0:df:14:5a:b1:6e: a1:dc:94:8b:5a:91:43:bf:6c:52:71:40:61:61:98: 32:7f:0f:27:23:c0:bc:95:9d:0c:89:0f:42:95:91: 68:67:27:0e:2b:9d:ec:e0:64:5f:32:a7:18:e1:1a: 80:f4:b6:f4:8d:6d:65:13:59:96:01:4b:84:9f:ee: 8a:9c:38:de:16:b5:76:1f:cd:30:aa:e7:b8:a1:e7: 1c:fd:a6:1b:2c:47:e3:18:fb:c0:ff:cf:6d:ce:9b: 57:97:2e:f7:6b:32:c1:66:c0:62:6b:2b:02:18:76: b7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DA:E8:F3:D1:50:A5:3D:75:0A:76:5C:3D:F9:C2:A4:C1:31:DC:CD X509v3 Authority Key Identifier: keyid:EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:4a:6f:64:9b:1b:38:ad:74:96:14:f0:fc:40:dc:85:3b:da: 01:6f:2f:ed:b5:29:51:0a:af:8a:13:fa:c8:56:c4:6d:d8:23: 34:02:47:54:ed:fe:b8:32:5b:a0:fe:0e:cc:bc:00:3c:e3:c6: 27:bc:16:57:fd:15:db:b7:ef:67:be:63:c3:17:c7:eb:46:dc: cc:15:21:97:26:b9:3a:65:21:87:2a:8b:ac:07:f1:1d:d2:bb: 12:63:e6:33:55:d0:35:a0:98:e0:86:56:61:9a:f5:c0:1f:1e: 13:ab:7b:bf:d2:f7:88:b6:26:6b:6f:17:e8:56:b6:b0:4f:ae: a5:ab:c8:b0:18:01:31:6e:38:38:1f:dc:37:63:00:95:1a:08: 71:d3:ff:0a:5f:f9:b8:56:5a:12:48:14:5a:8b:c2:df:91:64: cd:23:96:46:25:13:68:ff:cf:18:3f:11:fd:7d:f6:e9:51:e3: 21:c0:41:e3:38:fa:da:32:73:56:ca:9e:07:ba:e1:94:b0:f9: b2:32:ad:e9:74:cd:e4:ef:d8:a7:1f:21:52:5b:c0:81:0c:75: 7b:23:74:b3:d4:fd:57:b8:ed:8f:3e:6f:48:7b:52:1a:e8:e7: 00:57:d8:25:6f:f0:d8:7d:a2:4b:a1:8f:1b:d3:f9:23:10:9e: 4d:e9:ce:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3ty7PlZ2o3/9dURBLwPKrHH5DwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1ODE0NThDODcxMEI3RjI4NjIzNjFERjVCRTMyN0Q3 MjQyM0I3RjAeFw0yNTEyMDYwNjA1MDFaFw0yNTEyMDkxMzA5MDFaMDMxMTAvBgNV BAMTKDg4REFFOEYzRDE1MEE1M0Q3NTBBNzY1QzNERjlDMkE0QzEzMURDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXh/mPFGoGFtZJory2ufsKTtB IF8WN9prHQDiYiOVuE86CewWezfazffsvjeZpZ7TzytjzwOaryEtVzRZSAvJlKps F2yHXEza2jv/gdTfgA9q9ASaCpKDF1fJ5MhWQrnJrO5DqF4ZqLlJ6qo1rta0OHIZ yC9BEorPb0qd2f6x7xYMvWqhZYUAPfHYXyp9MODfFFqxbqHclItakUO/bFJxQGFh mDJ/DycjwLyVnQyJD0KVkWhnJw4rnezgZF8ypxjhGoD0tvSNbWUTWZYBS4Sf7oqc ON4WtXYfzTCq57ih5xz9phssR+MY+8D/z23Om1eXLvdrMsFmwGJrKwIYdrexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNro89FQpT11CnZcPfnCpMEx3M0wHwYDVR0j BBgwFoAU6lgUWMhxC38oYjYd9b4yfXJCO38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA1YWI2Ni02NmFmLTQwYTQtODlhNS04MDY5NDAyODM5YTkvMC9FQTU4MTQ1OEM4 NzEwQjdGMjg2MjM2MURGNUJFMzI3RDcyNDIzQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1ODE0NThDODcxMEI3RjI4NjIzNjFERjVCRTMyN0Q3MjQy M0I3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRUE1ODE0NThDODcxMEI3RjI4NjIzNjFERjVCRTMy N0Q3MjQyM0I3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVKb2SbGzitdJYU8PxA3IU72gFvL+21KVEK r4oT+shWxG3YIzQCR1Tt/rgyW6D+Dsy8ADzjxie8Flf9Fdu372e+Y8MXx+tG3MwV IZcmuTplIYcqi6wH8R3SuxJj5jNV0DWgmOCGVmGa9cAfHhOre7/S94i2JmtvF+hW trBPrqWryLAYATFuODgf3DdjAJUaCHHT/wpf+bhWWhJIFFqLwt+RZM0jlkYlE2j/ zxg/Ef199ulR4yHAQeM4+toyc1bKnge64ZSw+bIyrel0zeTv2KcfIVJbwIEMdXsj dLPU/Ve47Y8+b0h7Uhro5wBX2CVv8Nh9okuhjxvT+SMQnk3pzv8= -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:57 2025 by rpki-client