This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft File: E0B1DDE4FA587276778B8ED650B682C82290CC74.mft (raw, json) Hash identifier: MWlHRN/SgnSspONAjirMUhU6xn9/RmRNwHji4GdSU8o= Subject key identifier: 2F:8A:83:17:36:B6:90:EB:E6:81:00:5D:5E:1C:7B:32:4A:95:EA:36 Authority key identifier: E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74 Certificate issuer: /CN=E0B1DDE4FA587276778B8ED650B682C82290CC74 Certificate serial: 06E358803ABEE8F7880406C837B8789F20BE4504 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft Manifest number: 0241 Signing time: Thu 04 Dec 2025 12:10:06 +0000 Manifest this update: Thu 04 Dec 2025 12:05:06 +0000 Manifest next update: Mon 08 Dec 2025 00:04:06 +0000 Files and hashes: 1: E0B1DDE4FA587276778B8ED650B682C82290CC74.crl (hash: 76NGAa8VxNaZwg3JMpOJW/jwLtC5KQSfO16BktyyDzc=) 2: 3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (hash: x5zb3uAWvj5e13SSg4OBB12y6IX3WqV868pS+RpBHDw=) 3: 3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (hash: ag2qZCKMirlsCPbwPCJ1pHWeTm3Q9hlRW1Uq9izm+eo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.crl rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e3:58:80:3a:be:e8:f7:88:04:06:c8:37:b8:78:9f:20:be:45:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B1DDE4FA587276778B8ED650B682C82290CC74 Validity Not Before: Dec 4 12:05:06 2025 GMT Not After : Dec 8 00:04:06 2025 GMT Subject: CN=2F8A831736B690EBE681005D5E1C7B324A95EA36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1d:4a:9a:1c:36:c1:9f:f9:bd:b9:05:28:52: 1d:e9:7a:7b:48:5e:ea:ec:6b:9a:54:cc:60:e4:c1: 3f:34:07:56:c2:06:6a:bd:61:fc:18:0e:88:d8:c2: 9d:54:23:95:4c:7a:7e:a4:27:c1:a3:50:f8:b8:70: 76:23:7e:7e:2c:01:90:ed:3c:34:8c:4e:cd:e9:5f: f2:2d:bb:63:bd:0b:eb:e3:e9:0f:4d:17:77:d0:e9: b5:25:84:f7:67:e9:c2:86:90:55:58:88:ce:a3:c5: a8:5d:35:30:b5:62:34:b4:c1:de:e1:86:95:1c:24: 49:93:fd:e5:06:80:de:b2:5b:49:0f:9d:ec:fd:87: 6f:a0:fa:a6:dc:95:77:c9:ca:df:6d:e8:6f:67:58: 4c:ac:58:30:3a:cd:5a:6c:e4:1e:98:5e:f5:29:cd: ab:a3:81:cf:b9:48:88:99:d8:8a:2e:c8:5d:6a:2e: e6:11:43:d1:2a:aa:c6:d5:0d:eb:a0:17:4e:47:e4: 54:66:9e:f2:2d:7b:e4:3e:99:e9:87:82:bf:0f:ae: 33:4a:90:86:ba:8c:d8:f1:b3:2b:ae:bb:17:6b:b2: 9c:f7:51:70:05:ec:36:e5:36:01:81:74:b3:94:b6: b2:0a:05:bc:31:07:5b:ae:10:4f:64:60:74:d5:cd: 86:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8A:83:17:36:B6:90:EB:E6:81:00:5D:5E:1C:7B:32:4A:95:EA:36 X509v3 Authority Key Identifier: keyid:E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ec:08:01:e8:d3:6d:15:cf:f2:e6:0f:31:34:be:d7:2e:fb: e8:08:98:c7:a5:25:33:0d:bf:8a:7b:b2:fd:76:93:6c:c6:fd: 27:c6:9e:84:cf:f2:52:18:5b:72:2c:cd:2e:38:7c:b0:ca:91: f5:e1:d8:fe:67:6c:53:93:92:ab:b7:71:44:a6:8f:d9:db:0e: 48:aa:18:65:e2:94:06:2b:f6:67:10:d9:2b:77:7f:09:ac:59: 48:4d:86:31:d5:8a:00:20:f0:d4:9b:aa:cb:26:a3:c2:35:c5: 56:32:a7:1c:2a:8a:f2:f6:8d:ee:f7:dc:d2:5a:fc:a1:73:9d: 5c:a6:dc:07:60:0b:e1:90:52:37:f8:35:4b:ed:ac:83:75:d0: 1f:23:7e:01:9c:d0:02:bd:50:0e:a8:8e:37:0a:ac:d0:c1:a4: 1e:4b:d6:9a:3f:d7:24:cc:af:16:f3:23:06:cb:22:ec:fe:95: 09:8c:d1:19:2f:e8:82:9b:ca:0c:54:d0:bd:99:d6:6a:93:79: aa:5e:9d:d0:3f:67:25:4c:03:d3:f5:83:7b:d5:2d:55:21:e4: d3:3f:dc:7d:83:72:09:1f:2d:d7:56:2e:30:04:12:35:bc:eb: 24:2c:7c:31:3c:a6:f7:40:e0:c9:8b:2a:eb:f6:65:75:f4:71: 06:25:c0:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBuNYgDq+6PeIBAbIN7h4nyC+RQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCMURERTRGQTU4NzI3Njc3OEI4RUQ2NTBCNjgyQzgy MjkwQ0M3NDAeFw0yNTEyMDQxMjA1MDZaFw0yNTEyMDgwMDA0MDZaMDMxMTAvBgNV BAMTKDJGOEE4MzE3MzZCNjkwRUJFNjgxMDA1RDVFMUM3QjMyNEE5NUVBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmHUqaHDbBn/m9uQUoUh3pentI Xursa5pUzGDkwT80B1bCBmq9YfwYDojYwp1UI5VMen6kJ8GjUPi4cHYjfn4sAZDt PDSMTs3pX/Itu2O9C+vj6Q9NF3fQ6bUlhPdn6cKGkFVYiM6jxahdNTC1YjS0wd7h hpUcJEmT/eUGgN6yW0kPnez9h2+g+qbclXfJyt9t6G9nWEysWDA6zVps5B6YXvUp zaujgc+5SIiZ2IouyF1qLuYRQ9EqqsbVDeugF05H5FRmnvIte+Q+memHgr8PrjNK kIa6jNjxsyuuuxdrspz3UXAF7DblNgGBdLOUtrIKBbwxB1uuEE9kYHTVzYbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4qDFza2kOvmgQBdXhx7MkqV6jYwHwYDVR0j BBgwFoAU4LHd5PpYcnZ3i47WULaCyCKQzHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTUxZGZlZS1hNzViLTQ0MjAtYTc1NS0yYzczNThiYWY3ZDMvMC9FMEIxRERFNEZB NTg3Mjc2Nzc4QjhFRDY1MEI2ODJDODIyOTBDQzc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCMURERTRGQTU4NzI3Njc3OEI4RUQ2NTBCNjgyQzgyMjkw Q0M3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1MWRmZWUtYTc1Yi00NDIwLWE3 NTUtMmM3MzU4YmFmN2QzLzAvRTBCMURERTRGQTU4NzI3Njc3OEI4RUQ2NTBCNjgy QzgyMjkwQ0M3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXsCAHo020Vz/LmDzE0vtcu++gImMelJTMN v4p7sv12k2zG/SfGnoTP8lIYW3IszS44fLDKkfXh2P5nbFOTkqu3cUSmj9nbDkiq GGXilAYr9mcQ2St3fwmsWUhNhjHVigAg8NSbqssmo8I1xVYypxwqivL2je733NJa /KFznVym3AdgC+GQUjf4NUvtrIN10B8jfgGc0AK9UA6ojjcKrNDBpB5L1po/1yTM rxbzIwbLIuz+lQmM0Rkv6IKbygxU0L2Z1mqTeapendA/ZyVMA9P1g3vVLVUh5NM/ 3H2DcgkfLddWLjAEEjW86yQsfDE8pvdA4MmLKuv2ZXX0cQYlwL0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:48 2025 by rpki-client