This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft File: ED137633BAEE661A0ACBBF277089F107CB59439A.mft (raw, json) Hash identifier: o1L76SNAiNqSf8cPbSQ6Brbwlr+xgiNYOaMrsxUfmqM= Subject key identifier: 4C:67:FE:A3:A8:1F:7F:AF:65:65:7F:92:77:37:DC:AD:03:BF:00:8D Authority key identifier: ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A Certificate issuer: /CN=ED137633BAEE661A0ACBBF277089F107CB59439A Certificate serial: 33B045F9BF3F08F7BAE58B3E0C6AE48E9FB5BED5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft Manifest number: 01D6 Signing time: Sat 06 Dec 2025 12:11:36 +0000 Manifest this update: Sat 06 Dec 2025 12:06:36 +0000 Manifest next update: Tue 09 Dec 2025 20:33:36 +0000 Files and hashes: 1: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: lA0HvakrheoR+VMWrWjd7ZsfLODkGFiLcqbm8PHhQfs=) 2: ED137633BAEE661A0ACBBF277089F107CB59439A.crl (hash: LIWdSQSpXO0kDQP2mijSwSSelyX+TCc/zYHzVnhLD6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b0:45:f9:bf:3f:08:f7:ba:e5:8b:3e:0c:6a:e4:8e:9f:b5:be:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED137633BAEE661A0ACBBF277089F107CB59439A Validity Not Before: Dec 6 12:06:36 2025 GMT Not After : Dec 9 20:33:36 2025 GMT Subject: CN=4C67FEA3A81F7FAF65657F927737DCAD03BF008D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:43:2f:e7:8b:a1:0f:33:56:4b:d6:22:cb: 5b:ad:89:87:d5:9d:08:2f:d8:af:c8:1f:e8:9c:6e: d8:60:7c:ef:7e:cf:75:95:82:4c:9e:55:b2:f3:2f: 1c:fa:b0:a4:ea:61:c4:25:2e:12:29:a4:e6:d4:06: e9:df:7f:54:9d:d8:07:c9:d7:de:e3:cd:20:b7:20: c3:60:23:9c:ed:ab:34:b2:13:9f:a1:13:0f:47:73: 1a:47:4d:44:e2:b5:04:83:be:32:19:5b:8f:04:64: d5:d1:cf:bc:df:23:8d:7e:e3:fc:af:07:1f:c6:9d: c1:df:48:76:0d:eb:62:17:06:9a:43:7f:a4:97:e2: 64:e6:5b:06:8c:aa:e7:40:ce:45:77:b9:eb:1d:aa: 80:98:3f:be:fe:b4:b9:89:fd:e5:48:78:fe:43:88: ae:ba:c5:0e:1e:11:d1:55:f1:72:17:5f:c5:c1:37: 86:47:ba:08:f3:17:a5:71:29:ef:df:db:b3:d3:86: 77:7f:30:14:ca:a1:7b:58:e6:15:b8:ce:cc:8c:98: 2f:7b:4c:15:bd:13:b5:8d:92:49:9e:71:51:6c:be: 6b:ab:9f:1f:fa:73:12:57:e0:5d:e0:b0:e3:df:9c: 42:0b:18:0c:a4:1a:16:ec:a7:39:2c:c3:1f:e1:1a: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:67:FE:A3:A8:1F:7F:AF:65:65:7F:92:77:37:DC:AD:03:BF:00:8D X509v3 Authority Key Identifier: keyid:ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4f:b2:9a:47:f6:4a:c4:56:be:d8:ee:b9:a4:a6:f5:1c:2e: 68:c9:ee:9d:ba:35:03:be:b1:e3:b0:4f:f8:ac:2a:52:15:f1: 24:8f:97:4a:69:15:e7:52:00:13:46:7c:4d:f8:2a:d6:2f:95: d0:b2:c2:a5:14:ff:fd:e7:25:3c:4d:12:03:20:d2:a5:fe:38: fc:4c:67:7a:1a:64:d4:fe:75:90:cf:87:3f:80:87:fe:bd:b3: 6c:41:d2:28:0d:0b:70:04:60:04:6b:96:02:f6:2b:b4:09:e9: c6:d3:14:28:1b:60:1b:5f:0a:40:92:32:98:4f:e6:d6:77:83: 73:e9:94:1e:fd:60:5f:53:e6:81:9d:8c:56:52:85:76:2c:ed: 8b:fc:6c:f5:c1:0b:72:6f:5b:6c:0d:9b:c6:22:75:23:07:10: 70:bc:a7:2f:14:29:b7:85:a3:19:d4:b4:3e:9b:95:22:16:5c: e2:c5:b6:3d:19:89:55:6b:f0:fe:0e:cc:48:95:85:ca:eb:84: ff:04:85:43:16:14:0e:c4:ca:4b:89:14:c6:80:a4:fd:93:b6: cf:33:ea:b6:a3:2c:53:44:a8:e0:58:86:ee:9d:6a:b4:7e:86: 1b:c7:52:c3:e8:a2:68:64:ca:f7:f5:7f:03:8c:ab:e9:42:34: 92:bf:cd:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7BF+b8/CPe65Ys+DGrkjp+1vtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYxMDdD QjU5NDM5QTAeFw0yNTEyMDYxMjA2MzZaFw0yNTEyMDkyMDMzMzZaMDMxMTAvBgNV BAMTKDRDNjdGRUEzQTgxRjdGQUY2NTY1N0Y5Mjc3MzdEQ0FEMDNCRjAwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIK0Mv54uhDzNWS9Yiy1utiYfV nQgv2K/IH+icbthgfO9+z3WVgkyeVbLzLxz6sKTqYcQlLhIppObUBunff1Sd2AfJ 197jzSC3IMNgI5ztqzSyE5+hEw9HcxpHTUTitQSDvjIZW48EZNXRz7zfI41+4/yv Bx/GncHfSHYN62IXBppDf6SX4mTmWwaMqudAzkV3uesdqoCYP77+tLmJ/eVIeP5D iK66xQ4eEdFV8XIXX8XBN4ZHugjzF6VxKe/f27PThnd/MBTKoXtY5hW4zsyMmC97 TBW9E7WNkkmecVFsvmurnx/6cxJX4F3gsOPfnEILGAykGhbspzkswx/hGh43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTGf+o6gff69lZX+SdzfcrQO/AI0wHwYDVR0j BBgwFoAU7RN2M7ruZhoKy78ncInxB8tZQ5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzIyNDM2MC0yNDVkLTRhMWEtYWYzNi1mOWJlZmNkYjcwYjcvMC9FRDEzNzYzM0JB RUU2NjFBMEFDQkJGMjc3MDg5RjEwN0NCNTk0MzlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYxMDdDQjU5 NDM5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm MzYtZjliZWZjZGI3MGI3LzAvRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYx MDdDQjU5NDM5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExPsppH9krEVr7Y7rmkpvUcLmjJ7p26NQO+ seOwT/isKlIV8SSPl0ppFedSABNGfE34KtYvldCywqUU//3nJTxNEgMg0qX+OPxM Z3oaZNT+dZDPhz+Ah/69s2xB0igNC3AEYARrlgL2K7QJ6cbTFCgbYBtfCkCSMphP 5tZ3g3PplB79YF9T5oGdjFZShXYs7Yv8bPXBC3JvW2wNm8YidSMHEHC8py8UKbeF oxnUtD6blSIWXOLFtj0ZiVVr8P4OzEiVhcrrhP8EhUMWFA7EykuJFMaApP2Tts8z 6rajLFNEqOBYhu6darR+hhvHUsPoomhkyvf1fwOMq+lCNJK/zVM= -----END CERTIFICATE-----Generated at Sun Dec 7 06:37:26 2025 by rpki-client