This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: zGJly8Ig0/yeds6vFHJHT+jyVaa/3ry6burNe1CpWpw= Subject key identifier: F8:35:FE:1D:FB:40:8E:E4:E7:B0:08:4A:2D:AB:5B:9C:06:33:2F:AF Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 7D35418871815E454A93D4558055B3B233F36729 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: 010A Signing time: Fri 05 Dec 2025 04:02:16 +0000 Manifest this update: Fri 05 Dec 2025 03:57:16 +0000 Manifest next update: Mon 08 Dec 2025 12:13:16 +0000 Files and hashes: 1: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) 2: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) 3: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: WV6QuJ+vWlJ7VutsvN2tNFBUrRZBOCgLc0C4oNRFQkA=) 4: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:35:41:88:71:81:5e:45:4a:93:d4:55:80:55:b3:b2:33:f3:67:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Dec 5 03:57:16 2025 GMT Not After : Dec 8 12:13:16 2025 GMT Subject: CN=F835FE1DFB408EE4E7B0084A2DAB5B9C06332FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f9:d1:23:6e:49:12:6c:e1:d1:be:8a:10:d2: e7:8e:f4:68:6a:5a:96:ba:15:ab:3d:64:2a:2d:22: ba:40:59:bb:d8:bf:df:30:e1:48:b0:e2:9c:da:c6: c5:4c:ce:5e:e4:fa:50:e9:5c:78:ca:30:c2:41:af: 43:54:09:14:cf:ca:8c:a8:60:e7:b1:d2:22:77:ee: 50:bf:ed:32:88:2f:ad:2a:f4:66:01:5b:be:86:bc: bc:e9:44:b9:08:7c:c1:20:50:04:da:f5:34:c2:ce: 0b:f9:4d:ca:47:bd:18:77:d1:a1:ce:7e:26:6c:b7: 0c:bf:93:ab:f8:52:7b:9d:f4:1e:32:d0:2d:2d:46: 0e:39:ed:fa:07:4b:47:7e:72:ff:2f:a0:27:f6:53: 87:64:34:e3:d5:eb:05:e5:81:ab:5a:2d:b9:b4:89: a4:a1:ce:28:0b:3d:24:04:00:98:e1:bb:78:6b:53: 8c:06:e1:06:87:4e:54:2f:0a:35:26:af:7a:b2:d1: 73:c2:60:86:5d:49:d8:c6:36:11:9a:1f:1e:1e:bd: 29:d5:f9:3e:de:a0:42:03:07:f2:32:36:99:ca:ac: 9a:94:de:a1:6d:c9:a5:a9:36:5b:a4:6b:07:4f:dd: 96:4d:2a:1f:d7:13:de:d7:53:35:eb:78:f7:d1:27: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:35:FE:1D:FB:40:8E:E4:E7:B0:08:4A:2D:AB:5B:9C:06:33:2F:AF X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:26:4e:02:7a:26:ff:fd:b8:dc:94:2e:5e:e4:05:2c:a2:4c: 61:a6:b2:01:97:f7:11:c3:75:23:ed:73:c3:1e:b4:c4:a6:97: b0:3c:95:02:13:8e:7d:88:36:32:a1:d1:0d:5e:07:78:01:34: 29:67:42:e6:d7:d3:2f:37:fe:4b:20:de:02:73:72:90:e5:db: 14:50:b2:36:47:8c:71:f9:8c:d4:33:fb:d8:85:d1:42:48:47: 82:1e:9d:49:4f:fe:43:8c:e4:4c:0e:42:98:74:9c:2d:f3:43: e5:d4:97:ae:62:ae:29:26:8e:f1:be:56:3f:1c:de:a1:01:14: df:d7:11:b2:6b:88:e0:96:d6:ee:54:a8:21:46:5d:fe:35:79: 3b:ad:2f:d2:3e:7c:98:68:f1:8b:10:ca:09:dc:77:89:fe:17: 2e:4d:c6:6a:36:f3:b7:28:2d:57:4e:26:2f:c1:18:59:47:99: a8:8e:0d:b7:09:2d:aa:05:d1:19:c9:ab:e0:89:4e:c8:c2:e1: e2:e1:4b:84:68:cd:2f:c3:0e:56:8c:82:dc:e3:c5:ae:8f:a9: a6:07:bb:3b:b5:09:3e:06:28:63:1e:04:ae:14:79:73:97:2a: fd:f0:fe:38:f2:cf:f3:1c:79:33:3f:1a:e4:73:55:7f:62:9d: 48:75:ce:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTVBiHGBXkVKk9RVgFWzsjPzZykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTEyMDUwMzU3MTZaFw0yNTEyMDgxMjEzMTZaMDMxMTAvBgNV BAMTKEY4MzVGRTFERkI0MDhFRTRFN0IwMDg0QTJEQUI1QjlDMDYzMzJGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe+dEjbkkSbOHRvooQ0ueO9Ghq Wpa6Fas9ZCotIrpAWbvYv98w4Uiw4pzaxsVMzl7k+lDpXHjKMMJBr0NUCRTPyoyo YOex0iJ37lC/7TKIL60q9GYBW76GvLzpRLkIfMEgUATa9TTCzgv5TcpHvRh30aHO fiZstwy/k6v4Unud9B4y0C0tRg457foHS0d+cv8voCf2U4dkNOPV6wXlgataLbm0 iaShzigLPSQEAJjhu3hrU4wG4QaHTlQvCjUmr3qy0XPCYIZdSdjGNhGaHx4evSnV +T7eoEIDB/IyNpnKrJqU3qFtyaWpNlukawdP3ZZNKh/XE97XUzXrePfRJ59fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+DX+HftAjuTnsAhKLatbnAYzL68wHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQmTgJ6Jv/9uNyULl7kBSyiTGGmsgGX9xHD dSPtc8MetMSml7A8lQITjn2INjKh0Q1eB3gBNClnQubX0y83/ksg3gJzcpDl2xRQ sjZHjHH5jNQz+9iF0UJIR4IenUlP/kOM5EwOQph0nC3zQ+XUl65irikmjvG+Vj8c 3qEBFN/XEbJriOCW1u5UqCFGXf41eTutL9I+fJho8YsQygncd4n+Fy5Nxmo287co LVdOJi/BGFlHmaiODbcJLaoF0RnJq+CJTsjC4eLhS4RozS/DDlaMgtzjxa6PqaYH uzu1CT4GKGMeBK4UeXOXKv3w/jjyz/MceTM/GuRzVX9inUh1zrg= -----END CERTIFICATE-----Generated at Sun Dec 7 04:12:25 2025 by rpki-client