This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: 2Evb2kekVen95oxrezfYgWQywOzxy3Msc+ja8MCRle4= Subject key identifier: B9:40:74:D1:BD:60:DD:07:94:51:6C:DC:D7:10:F3:F6:DB:4E:62:62 Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 3C05DFA233263A23969760AA27DC3CB7EB38FA4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 0225 Signing time: Fri 05 Dec 2025 00:11:15 +0000 Manifest this update: Fri 05 Dec 2025 00:06:15 +0000 Manifest next update: Mon 08 Dec 2025 11:51:15 +0000 Files and hashes: 1: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: kjm5DjaYkubCu27Jo/HmVQu2ejgHJoU5wAUUIEx+Xx0=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:05:df:a2:33:26:3a:23:96:97:60:aa:27:dc:3c:b7:eb:38:fa:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Dec 5 00:06:15 2025 GMT Not After : Dec 8 11:51:15 2025 GMT Subject: CN=B94074D1BD60DD0794516CDCD710F3F6DB4E6262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:32:6a:4d:0f:9b:b7:dc:24:e9:99:c3:fe: 73:a2:18:5c:f7:22:55:ab:7b:3a:a3:6e:b7:6c:53: 64:26:31:00:a8:99:33:59:8d:63:c9:f0:8a:86:3e: dc:b5:3e:31:7b:ce:b5:a4:c2:dd:68:c2:ad:96:5b: 4e:94:c2:e5:7b:25:ac:7d:ea:e0:f7:79:c1:1a:48: 24:7b:7c:01:93:e7:34:95:8e:94:44:45:e5:f1:55: bb:fe:ac:a8:dd:73:72:d3:0a:36:af:af:95:98:19: 5e:93:b2:81:37:a1:98:3f:c5:79:64:13:1d:1d:7e: e5:95:d0:1b:26:5a:ce:c9:7e:4b:9e:0c:f8:60:11: 0e:61:c2:2a:6b:a9:db:e2:12:f1:96:4e:03:94:76: dd:dc:58:ac:37:68:57:6c:7e:e4:c0:2e:4d:e8:8e: 73:94:38:e4:61:bc:53:b9:89:1b:28:c1:e4:e9:6e: 7f:88:65:7b:34:28:f0:4e:55:2e:d3:79:ff:ef:b5: 2c:eb:00:28:d8:80:46:46:db:04:f6:1a:7b:05:87: 1e:8e:2e:bf:07:f0:35:3d:70:9d:aa:6a:e0:65:bb: 68:97:fe:64:79:db:f9:43:82:37:cd:c7:a9:00:56: e3:47:60:27:fb:62:77:cf:91:71:82:c8:78:f5:ca: 00:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:74:D1:BD:60:DD:07:94:51:6C:DC:D7:10:F3:F6:DB:4E:62:62 X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1c:01:36:11:04:67:ff:ab:d4:14:2e:3a:53:3e:cb:df:4a: 0f:7b:de:77:86:89:46:c6:6f:82:3a:46:4f:ba:19:ca:25:c2: c6:c4:2a:16:bf:e8:7a:29:68:4a:78:3c:a2:50:0b:0b:15:cf: c6:d3:3c:b7:c9:52:a8:f7:13:bb:86:fe:7e:40:2a:f1:0d:8b: 29:2e:2a:51:84:14:b2:03:89:83:dd:8e:c4:b9:d2:81:42:ed: 1d:36:51:56:36:24:00:1c:03:a1:ef:16:8e:ae:bf:19:1c:09: 11:46:19:f5:0b:78:fa:58:9d:0d:84:5c:94:09:00:b6:f2:d7: 95:9f:26:9a:da:0d:6a:d0:4c:22:d4:5e:f7:42:5c:8c:78:a8: f6:5d:0c:3b:55:c3:6b:ae:a2:80:de:5e:af:ca:16:cc:d0:18: 27:06:40:17:7d:4a:b3:0c:42:65:d5:32:66:31:ce:42:22:1b: 9b:ba:6b:0f:3a:4f:4f:21:f5:65:bb:eb:31:e6:32:e6:ac:a4: 85:6f:06:6b:64:96:3c:29:87:8e:24:11:d9:10:a9:ae:31:f5: fe:d5:5f:b0:3a:ac:ef:a0:a6:fd:44:30:4f:cd:e5:f0:19:5c: 8b:6b:41:e8:34:0d:fb:41:f1:7e:bb:7e:1f:61:db:6a:11:d9: 6e:a1:2d:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAXfojMmOiOWl2CqJ9w8t+s4+kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTEyMDUwMDA2MTVaFw0yNTEyMDgxMTUxMTVaMDMxMTAvBgNV BAMTKEI5NDA3NEQxQkQ2MEREMDc5NDUxNkNEQ0Q3MTBGM0Y2REI0RTYyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjljJqTQ+bt9wk6ZnD/nOiGFz3 IlWrezqjbrdsU2QmMQComTNZjWPJ8IqGPty1PjF7zrWkwt1owq2WW06UwuV7Jax9 6uD3ecEaSCR7fAGT5zSVjpREReXxVbv+rKjdc3LTCjavr5WYGV6TsoE3oZg/xXlk Ex0dfuWV0BsmWs7JfkueDPhgEQ5hwiprqdviEvGWTgOUdt3cWKw3aFdsfuTALk3o jnOUOORhvFO5iRsoweTpbn+IZXs0KPBOVS7Tef/vtSzrACjYgEZG2wT2GnsFhx6O Lr8H8DU9cJ2qauBlu2iX/mR52/lDgjfNx6kAVuNHYCf7YnfPkXGCyHj1ygCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuUB00b1g3QeUUWzc1xDz9ttOYmIwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwcATYRBGf/q9QULjpTPsvfSg973neGiUbG b4I6Rk+6GcolwsbEKha/6HopaEp4PKJQCwsVz8bTPLfJUqj3E7uG/n5AKvENiyku KlGEFLIDiYPdjsS50oFC7R02UVY2JAAcA6HvFo6uvxkcCRFGGfULePpYnQ2EXJQJ ALby15WfJpraDWrQTCLUXvdCXIx4qPZdDDtVw2uuooDeXq/KFszQGCcGQBd9SrMM QmXVMmYxzkIiG5u6aw86T08h9WW76zHmMuaspIVvBmtkljwph44kEdkQqa4x9f7V X7A6rO+gpv1EME/N5fAZXItrQeg0DftB8X67fh9h22oR2W6hLbc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:06 2025 by rpki-client