This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft (raw, json) Hash identifier: SBCNm1JnDGRefvCF32gKPeKdh2UVeC7tAJzHd2FmoBM= Subject key identifier: 68:5E:88:42:7D:8D:8E:6C:99:DA:57:FF:22:C2:AB:EB:E2:89:AE:3A Authority key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C Certificate issuer: /CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Certificate serial: 3C86092BB4BBBA18D303CF8D85C92B308C2093B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft Manifest number: E0 Signing time: Sat 06 Dec 2025 12:10:46 +0000 Manifest this update: Sat 06 Dec 2025 12:05:46 +0000 Manifest next update: Tue 09 Dec 2025 19:52:46 +0000 Files and hashes: 1: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (hash: qYeddWCUDVszc7mZTW90CbBoRIOyBoY1LaUrZanAxXQ=) 2: E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl (hash: bspP7tHF+qWQ99bY/ySYtMtAcol64JJu+7ptO4vqTes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:86:09:2b:b4:bb:ba:18:d3:03:cf:8d:85:c9:2b:30:8c:20:93:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Validity Not Before: Dec 6 12:05:46 2025 GMT Not After : Dec 9 19:52:46 2025 GMT Subject: CN=685E88427D8D8E6C99DA57FF22C2ABEBE289AE3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f4:24:54:77:e1:9c:ab:5c:0c:c1:dc:e9:f7: 5a:85:13:bd:f7:b2:67:99:c4:8e:6d:49:f0:31:5d: 20:b4:25:36:d7:e5:c3:12:75:f8:2b:9a:d9:5d:94: bd:de:39:b5:67:58:57:13:e7:dd:fd:ae:d4:2a:63: df:f9:37:6f:50:4c:39:d2:8b:06:18:a3:0a:cc:bc: 24:41:30:7c:85:08:6e:6d:45:74:69:42:57:4c:3f: 0b:a5:15:ec:65:bf:5c:c2:b5:ed:57:cc:91:3a:4c: d6:80:de:1a:fe:30:c1:a8:05:15:c9:91:cc:83:3b: 79:cd:d1:a7:23:0e:b2:a9:9f:61:57:19:41:2d:f7: 4c:ee:5a:85:c1:51:4c:8e:e6:99:e4:11:93:64:c5: 6f:f7:f9:3d:0d:f8:41:8f:a4:c2:e6:b9:39:27:c4: a8:50:16:36:ef:34:a4:98:bf:db:75:ac:26:89:41: 47:a0:4b:15:4b:5a:19:47:51:bd:e1:df:3a:60:06: 6d:37:e4:39:7e:91:ef:ff:35:aa:85:d7:ed:81:e9: a7:bd:e2:e6:85:cf:23:18:43:3f:75:02:6f:c5:fa: a5:90:0b:62:c1:f3:e8:2c:f0:8c:01:2f:d7:78:e1: 88:5d:b8:81:05:22:5d:46:8b:09:52:0c:28:41:23: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5E:88:42:7D:8D:8E:6C:99:DA:57:FF:22:C2:AB:EB:E2:89:AE:3A X509v3 Authority Key Identifier: keyid:E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e1:7b:2c:7c:9f:d9:c1:81:d8:19:45:a6:c1:1f:87:f8:06: 75:6c:80:98:6b:a9:05:04:1e:51:de:c3:64:c7:04:d1:ab:5c: 70:72:43:ad:39:b5:ec:f7:c7:f5:d6:46:66:0c:68:e5:4f:a5: 49:bb:e9:7b:ab:5c:f2:71:c4:9e:10:b9:87:02:c6:43:6e:d6: 8e:90:f6:d5:1b:f0:55:8d:7c:7b:6e:d9:a4:26:b1:46:b3:4c: 2a:32:79:b0:37:39:94:b8:63:4f:d0:fe:c5:ad:95:4c:e4:34: b7:4f:85:a8:94:2c:4f:f0:44:86:79:c8:ba:44:42:db:38:3e: 73:e4:dd:ef:fd:53:5a:74:de:3b:00:1e:0a:33:a2:18:d3:ef: 3b:99:3b:4a:0a:59:f3:90:29:10:eb:1e:51:a1:b2:6d:19:68: cb:a2:07:3a:a0:dc:fe:7c:33:b3:ea:d7:42:7b:08:56:4a:b7: 89:83:42:1c:39:71:93:bc:aa:cf:57:09:8b:ed:82:01:1b:30: 28:be:99:20:50:d2:56:dd:0b:85:32:cd:62:3d:67:3f:7b:0c: 14:23:c6:33:8c:f8:2c:8b:a6:13:c6:be:4b:ea:a7:5e:b8:cc: 18:9d:7d:a7:9c:81:de:4a:cd:f8:3f:09:eb:08:7f:48:01:68: 8b:ef:86:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIYJK7S7uhjTA8+NhckrMIwgk7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUw MTkyRjU0QzAeFw0yNTEyMDYxMjA1NDZaFw0yNTEyMDkxOTUyNDZaMDMxMTAvBgNV BAMTKDY4NUU4ODQyN0Q4RDhFNkM5OURBNTdGRjIyQzJBQkVCRTI4OUFFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9CRUd+Gcq1wMwdzp91qFE733 smeZxI5tSfAxXSC0JTbX5cMSdfgrmtldlL3eObVnWFcT5939rtQqY9/5N29QTDnS iwYYowrMvCRBMHyFCG5tRXRpQldMPwulFexlv1zCte1XzJE6TNaA3hr+MMGoBRXJ kcyDO3nN0acjDrKpn2FXGUEt90zuWoXBUUyO5pnkEZNkxW/3+T0N+EGPpMLmuTkn xKhQFjbvNKSYv9t1rCaJQUegSxVLWhlHUb3h3zpgBm035Dl+ke//NaqF1+2B6ae9 4uaFzyMYQz91Am/F+qWQC2LB8+gs8IwBL9d44YhduIEFIl1GiwlSDChBI/azAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaF6IQn2NjmyZ2lf/IsKr6+KJrjowHwYDVR0j BBgwFoAU6caQxR6b8bWXgzL9W6lKhQGS9UwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDUzODhmNC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMC9FOUM2OTBDNTFF OUJGMUI1OTc4MzMyRkQ1QkE5NEE4NTAxOTJGNTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUwMTky RjU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA1Mzg4ZjQtMTA3Yi00NGE5LTlk OGYtMTYwM2ZlY2ZkZWU5LzAvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRB ODUwMTkyRjU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArheyx8n9nBgdgZRabBH4f4BnVsgJhrqQUE HlHew2THBNGrXHByQ605tez3x/XWRmYMaOVPpUm76XurXPJxxJ4QuYcCxkNu1o6Q 9tUb8FWNfHtu2aQmsUazTCoyebA3OZS4Y0/Q/sWtlUzkNLdPhaiULE/wRIZ5yLpE Qts4PnPk3e/9U1p03jsAHgozohjT7zuZO0oKWfOQKRDrHlGhsm0ZaMuiBzqg3P58 M7Pq10J7CFZKt4mDQhw5cZO8qs9XCYvtggEbMCi+mSBQ0lbdC4UyzWI9Zz97DBQj xjOM+CyLphPGvkvqp164zBidfaecgd5Kzfg/CesIf0gBaIvvho8= -----END CERTIFICATE-----Generated at Sun Dec 7 03:14:44 2025 by rpki-client