This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: ebyqZtmZwJWlLy+0rI7nTKj865oZ4wnSOL/Hwk1+BcE= Subject key identifier: 38:25:6E:D7:24:71:BF:16:11:80:5F:BC:54:55:49:1E:5F:76:7A:B1 Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 2AB86CFF119D9CDAC0829635AAC844383634FA74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 052B Signing time: Sat 06 Dec 2025 06:11:21 +0000 Manifest this update: Sat 06 Dec 2025 06:06:21 +0000 Manifest next update: Tue 09 Dec 2025 07:05:21 +0000 Files and hashes: 1: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) 2: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: b5w3Itt6J0eIbx3DxY6O5CCS0KWB6cJ24YKcL4Z4KMM=) 3: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b8:6c:ff:11:9d:9c:da:c0:82:96:35:aa:c8:44:38:36:34:fa:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Dec 6 06:06:21 2025 GMT Not After : Dec 9 07:05:21 2025 GMT Subject: CN=38256ED72471BF1611805FBC5455491E5F767AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:7d:49:41:4d:99:3a:1c:a3:8c:6b:e4:0a: f4:bf:fa:7d:00:b9:31:62:d0:60:3f:64:88:0f:0c: 26:85:e3:39:05:d4:a1:5a:aa:5c:5a:4a:44:a4:ed: 66:d3:51:0b:2c:8d:5a:f5:42:6f:26:4c:3e:fc:1c: 95:47:8d:ad:91:08:2f:2f:29:64:8a:ef:24:65:d9: 34:0b:88:34:b6:66:2d:09:fa:39:91:b4:46:cd:4c: e8:a8:e7:9c:68:ae:5d:6e:b6:cc:14:91:3d:c2:d9: 10:8b:d4:a1:20:31:40:f9:10:d7:e0:88:03:30:16: 2e:65:01:74:ea:e4:a7:a4:7f:4f:f6:ae:4e:ee:b8: d4:c1:f5:a2:ef:37:f2:2d:d7:6d:66:6d:72:b6:2c: 90:d1:53:3d:6d:c0:c8:e9:08:af:30:7f:2e:a5:d9: 28:a2:d4:47:e1:69:4e:ca:61:a8:cf:ce:ae:6b:d7: fe:64:0b:3a:7e:e5:53:4c:f2:17:c9:93:3c:c9:ec: e5:18:38:7a:7b:30:20:41:b7:73:a1:51:e4:ac:06: ee:4a:44:0f:03:82:4e:9b:f4:19:a7:50:51:96:27: 3d:79:c6:25:9d:2e:f8:6d:48:01:30:20:49:4b:73: ab:42:06:2e:5d:a6:37:ce:82:72:30:4d:54:e5:10: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:25:6E:D7:24:71:BF:16:11:80:5F:BC:54:55:49:1E:5F:76:7A:B1 X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3f:73:15:20:07:c5:04:e1:e3:18:4b:df:48:84:aa:56:ce: 1f:7a:d3:cc:4b:02:94:81:ac:67:84:5d:ac:7b:55:d6:c3:25: c3:88:75:36:ac:32:7f:cb:6d:8b:33:47:b3:72:02:96:e8:61: c0:8f:2c:c5:79:2b:ea:8d:bd:e6:d9:c0:11:73:5c:cb:c7:43: dd:df:16:f4:1d:83:9d:3c:23:53:ed:49:a6:f3:10:2b:87:df: 39:9a:23:04:43:47:0e:6d:fb:e2:84:b4:31:ec:40:d3:6e:35: 80:84:29:d0:9d:bc:f8:e3:03:64:8b:82:76:3b:89:69:9a:f1: 9c:65:bb:09:03:6c:6e:58:f7:da:89:21:65:ed:2c:35:94:eb: 70:3e:5e:9c:9d:0b:21:c1:4f:f6:a0:3c:6c:31:3c:a6:e5:28: ec:0e:bd:dc:3a:e5:e9:33:76:16:c7:88:26:a6:2f:98:3d:42: ae:be:e5:cc:5f:fa:fa:2c:45:eb:1e:e8:3d:0b:10:9e:7a:9d: 85:91:1a:43:75:aa:6c:9d:d6:98:95:c7:99:af:2a:c0:4e:fa: 39:2a:d6:c9:22:13:39:8d:c5:3b:0c:59:21:c9:40:d6:df:80: 07:97:b5:c5:b8:b3:3f:b0:cd:3f:32:b2:21:dc:48:76:34:0e: 35:1b:24:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrhs/xGdnNrAgpY1qshEODY0+nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTEyMDYwNjA2MjFaFw0yNTEyMDkwNzA1MjFaMDMxMTAvBgNV BAMTKDM4MjU2RUQ3MjQ3MUJGMTYxMTgwNUZCQzU0NTU0OTFFNUY3NjdBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb6H1JQU2ZOhyjjGvkCvS/+n0A uTFi0GA/ZIgPDCaF4zkF1KFaqlxaSkSk7WbTUQssjVr1Qm8mTD78HJVHja2RCC8v KWSK7yRl2TQLiDS2Zi0J+jmRtEbNTOio55xorl1utswUkT3C2RCL1KEgMUD5ENfg iAMwFi5lAXTq5Kekf0/2rk7uuNTB9aLvN/It121mbXK2LJDRUz1twMjpCK8wfy6l 2Sii1EfhaU7KYajPzq5r1/5kCzp+5VNM8hfJkzzJ7OUYOHp7MCBBt3OhUeSsBu5K RA8Dgk6b9BmnUFGWJz15xiWdLvhtSAEwIElLc6tCBi5dpjfOgnIwTVTlEPJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOCVu1yRxvxYRgF+8VFVJHl92erEwHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4/cxUgB8UE4eMYS99IhKpWzh9608xLApSB rGeEXax7VdbDJcOIdTasMn/LbYszR7NyApboYcCPLMV5K+qNvebZwBFzXMvHQ93f FvQdg508I1PtSabzECuH3zmaIwRDRw5t++KEtDHsQNNuNYCEKdCdvPjjA2SLgnY7 iWma8ZxluwkDbG5Y99qJIWXtLDWU63A+XpydCyHBT/agPGwxPKblKOwOvdw65ekz dhbHiCamL5g9Qq6+5cxf+vosRese6D0LEJ56nYWRGkN1qmyd1piVx5mvKsBO+jkq 1skiEzmNxTsMWSHJQNbfgAeXtcW4sz+wzT8ysiHcSHY0DjUbJLs= -----END CERTIFICATE-----Generated at Sun Dec 7 06:00:01 2025 by rpki-client