This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: 697NBUJC2G4dSpAjP1ZoE0rl7TsJi/W2uHtYTjEzf+w= Subject key identifier: D8:41:E6:3A:2B:AA:3F:4E:A9:B6:7E:99:84:88:B7:B9:8F:27:D2:CF Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 761E82EB7BE336D944B158B9168E027D86EA9CB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: 0110 Signing time: Sat 06 Dec 2025 18:41:56 +0000 Manifest this update: Sat 06 Dec 2025 18:36:56 +0000 Manifest next update: Wed 10 Dec 2025 03:53:56 +0000 Files and hashes: 1: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) 2: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: p6X/TJ1LoklJHEwPIsNb3BbC3o7wo6IKMxwB5UFTV4c=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) 4: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1e:82:eb:7b:e3:36:d9:44:b1:58:b9:16:8e:02:7d:86:ea:9c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Dec 6 18:36:56 2025 GMT Not After : Dec 10 03:53:56 2025 GMT Subject: CN=D841E63A2BAA3F4EA9B67E998488B7B98F27D2CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:d4:1e:33:a2:8b:38:0a:14:b9:b0:39:54: 1e:0e:46:41:78:8e:b8:7b:6a:2b:ab:90:cd:60:d7: 19:2a:26:4c:d4:d0:25:2b:21:47:26:c0:c5:61:2a: 62:d7:2a:c6:a8:04:2a:fd:3f:af:c2:b7:00:6a:0e: 1c:8c:a2:bb:fa:cf:fe:a9:bf:7b:29:92:73:bc:a9: 87:3e:e0:df:bf:19:05:48:86:9f:8b:a1:7a:b7:3a: 67:3a:7b:38:5b:dd:31:b8:50:8a:44:92:59:11:7e: b7:5d:77:ae:fb:0b:d1:47:06:b3:98:63:df:0c:c1: a4:2a:2d:f9:17:68:84:d9:52:8b:02:c4:f9:e3:ed: f9:64:71:63:60:92:b6:43:44:b5:2a:44:f1:39:82: e6:83:57:29:8e:da:c1:88:fa:68:21:76:ea:16:41: 6d:6a:d1:73:36:4b:5e:b3:54:eb:db:f3:1d:6f:9e: a7:99:5a:20:0c:ee:dd:2a:5d:44:28:63:0b:36:06: bb:1b:94:c8:ac:6a:22:68:e9:a7:ac:08:a3:a9:93: c6:0d:4e:9f:14:84:5b:2d:46:2e:28:49:c0:79:36: db:bd:1e:36:0b:c5:df:0d:57:b3:c4:89:cc:0b:ad: 3e:de:1a:eb:f2:da:9b:f2:56:04:e6:80:86:4c:77: f9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:41:E6:3A:2B:AA:3F:4E:A9:B6:7E:99:84:88:B7:B9:8F:27:D2:CF X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cb:f9:6b:5b:c8:3f:e0:1d:08:7a:8e:07:15:11:e0:7f:17: 67:c7:83:97:13:7f:ea:d8:25:2b:5d:70:38:37:30:1f:a0:33: 3c:ac:94:42:89:65:d3:57:44:2c:1d:69:01:5d:2d:7b:a2:67: 91:d4:89:33:36:c4:85:a1:12:35:07:64:16:4f:98:9a:b2:7d: ab:d0:6f:e1:fb:2d:c8:51:9c:bb:f9:4f:41:12:e0:60:6d:ac: 07:97:dd:e6:d7:c2:2a:43:89:15:51:f8:cb:17:b2:ce:03:14: 4c:9b:f4:9e:fa:e8:9d:77:bf:b2:11:3a:e5:e8:c2:58:4f:78: d7:46:6f:4c:05:f5:83:b2:62:5a:26:45:f0:73:3d:59:df:bd: 9d:03:98:04:07:23:1e:b5:1b:b2:ff:62:d8:f5:c6:76:87:d7: 3e:c2:10:53:79:5f:66:84:1a:cf:f2:5b:f0:fe:15:c4:3a:02: 39:3e:35:a2:6c:2f:9a:13:aa:de:ba:8f:53:f4:96:3e:27:65: 11:7f:cd:03:62:44:d2:1e:bd:fb:c2:20:ea:c8:2c:47:19:b7: 81:6c:0f:e4:23:df:33:22:26:00:3e:51:2a:43:4e:87:f7:a6: 9c:63:65:3f:ea:5e:cb:9e:e2:15:ee:50:c0:0e:c4:9d:27:4e: 46:5d:c4:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdh6C63vjNtlEsVi5Fo4CfYbqnLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTEyMDYxODM2NTZaFw0yNTEyMTAwMzUzNTZaMDMxMTAvBgNV BAMTKEQ4NDFFNjNBMkJBQTNGNEVBOUI2N0U5OTg0ODhCN0I5OEYyN0QyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DdQeM6KLOAoUubA5VB4ORkF4 jrh7aiurkM1g1xkqJkzU0CUrIUcmwMVhKmLXKsaoBCr9P6/CtwBqDhyMorv6z/6p v3spknO8qYc+4N+/GQVIhp+LoXq3Omc6ezhb3TG4UIpEklkRfrddd677C9FHBrOY Y98MwaQqLfkXaITZUosCxPnj7flkcWNgkrZDRLUqRPE5guaDVymO2sGI+mghduoW QW1q0XM2S16zVOvb8x1vnqeZWiAM7t0qXUQoYws2BrsblMisaiJo6aesCKOpk8YN Tp8UhFstRi4oScB5Ntu9HjYLxd8NV7PEicwLrT7eGuvy2pvyVgTmgIZMd/nBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2EHmOiuqP06ptn6ZhIi3uY8n0s8wHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/L+WtbyD/gHQh6jgcVEeB/F2fHg5cTf+rY JStdcDg3MB+gMzyslEKJZdNXRCwdaQFdLXuiZ5HUiTM2xIWhEjUHZBZPmJqyfavQ b+H7LchRnLv5T0ES4GBtrAeX3ebXwipDiRVR+MsXss4DFEyb9J766J13v7IROuXo wlhPeNdGb0wF9YOyYlomRfBzPVnfvZ0DmAQHIx61G7L/Ytj1xnaH1z7CEFN5X2aE Gs/yW/D+FcQ6Ajk+NaJsL5oTqt66j1P0lj4nZRF/zQNiRNIevfvCIOrILEcZt4Fs D+Qj3zMiJgA+USpDTof3ppxjZT/qXsue4hXuUMAOxJ0nTkZdxO8= -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:01 2025 by rpki-client