This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft File: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft (raw, json) Hash identifier: 3POxp4ux9YfE3bfcrnsqce96wvFxyyDn9RDQdWAW6nQ= Subject key identifier: 61:34:8E:31:38:A0:11:E4:39:4E:3A:52:1E:89:14:53:C7:69:2C:DB Authority key identifier: 0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 Certificate issuer: /CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Certificate serial: 44582E8E8CED01E68EC81154E7B89C433FD0F21D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft Manifest number: D9 Signing time: Fri 05 Dec 2025 09:01:03 +0000 Manifest this update: Fri 05 Dec 2025 08:56:03 +0000 Manifest next update: Mon 08 Dec 2025 18:02:03 +0000 Files and hashes: 1: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl (hash: pmx8nyIV+48Qc+z+uCPI7D7Hot9ZA6fKUyHvhlmd5RE=) 2: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: 0YTgb847tvQJ6aYcLp7rUu/koq2efZafX5EfBrU5MeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:58:2e:8e:8c:ed:01:e6:8e:c8:11:54:e7:b8:9c:43:3f:d0:f2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Validity Not Before: Dec 5 08:56:03 2025 GMT Not After : Dec 8 18:02:03 2025 GMT Subject: CN=61348E3138A011E4394E3A521E891453C7692CDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:4d:68:1e:ba:f5:6f:75:2a:a0:18:58:b8: e6:c7:ba:f9:c3:b6:12:bd:b3:5f:cb:35:4c:62:7b: 36:ec:77:2c:b6:b0:1e:31:b9:e5:a7:e0:29:24:eb: 42:cf:0c:d3:88:e4:86:8b:07:f6:fc:a9:50:69:ff: 43:49:28:5b:94:f6:df:32:ac:83:35:5c:c3:54:8a: d9:8b:7b:58:15:4b:24:24:12:11:01:0a:45:ea:27: 0f:d3:ea:13:fa:0a:e5:bd:da:b7:0d:46:04:79:21: a1:c5:bc:3d:5e:69:2a:ee:23:55:a0:6b:b6:ae:75: d0:5d:f8:be:39:77:ad:0d:c1:5a:4c:6a:d6:0a:5f: 91:3b:de:d4:53:a8:86:20:1a:dc:f7:21:9a:f4:67: d7:a1:24:43:9c:3a:e7:c3:2c:b5:7e:48:17:da:60: 94:48:c5:44:bd:26:c0:e2:bf:40:fa:6c:9f:2d:b1: 2d:57:93:a2:00:77:c4:3c:3b:40:e1:c8:16:1f:8c: 11:ba:3b:59:a7:7e:ce:7c:42:dd:c5:52:ec:93:8a: ec:24:d8:33:59:68:15:dc:ba:b3:55:f7:19:da:0e: ee:31:18:9e:9e:29:ba:10:eb:bb:90:36:a7:0d:a6: c4:d2:0d:7f:6c:5a:63:fe:cd:b6:1f:ef:60:c5:af: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:34:8E:31:38:A0:11:E4:39:4E:3A:52:1E:89:14:53:C7:69:2C:DB X509v3 Authority Key Identifier: keyid:0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:99:9f:f4:86:5d:3a:2d:8b:9e:5b:b2:8f:6c:43:9a:72:30: 2f:72:dc:29:18:00:a7:29:c2:f1:2f:40:c2:b6:26:b8:7c:d1: cb:a0:9f:1f:da:ab:d6:80:7c:ad:93:f5:3b:f9:7b:a7:48:b7: a5:e0:8d:a9:d6:4c:4c:c1:25:72:37:96:df:75:4e:8e:19:5f: e0:4b:cc:ee:55:86:25:6c:cc:fc:bd:a0:9e:95:cf:3d:24:bc: d9:23:57:5d:3c:c0:d8:08:5d:13:2d:0f:06:0a:7f:e0:8e:c0: f7:9b:89:89:24:f5:bf:aa:93:30:92:1f:bd:65:6b:bd:e3:f9: 69:15:bf:1f:c2:2d:9d:cc:3b:10:75:3c:2e:71:8d:4c:1b:cc: b7:33:98:45:24:6b:aa:b8:98:8c:b1:2e:51:7d:50:ae:b0:16: 63:06:7a:c3:1c:70:1a:6a:a7:26:b4:67:df:f8:3e:b2:75:e0: 03:b3:98:35:62:23:1d:5b:29:82:86:28:b7:25:f1:e5:3d:e1: 6c:44:df:39:f8:15:d4:89:53:90:b8:b7:6c:c9:2e:71:75:79: 9a:74:95:10:19:af:76:e7:b5:76:5d:ad:64:75:2f:34:05:c8: ed:aa:48:d7:7e:64:5f:24:b0:30:2a:7e:88:2d:0e:af:6f:9f: a4:42:d6:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFgujoztAeaOyBFU57icQz/Q8h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0 RjkzQjRCOTAeFw0yNTEyMDUwODU2MDNaFw0yNTEyMDgxODAyMDNaMDMxMTAvBgNV BAMTKDYxMzQ4RTMxMzhBMDExRTQzOTRFM0E1MjFFODkxNDUzQzc2OTJDREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0DE1oHrr1b3UqoBhYuObHuvnD thK9s1/LNUxiezbsdyy2sB4xueWn4Ckk60LPDNOI5IaLB/b8qVBp/0NJKFuU9t8y rIM1XMNUitmLe1gVSyQkEhEBCkXqJw/T6hP6CuW92rcNRgR5IaHFvD1eaSruI1Wg a7auddBd+L45d60NwVpMatYKX5E73tRTqIYgGtz3IZr0Z9ehJEOcOufDLLV+SBfa YJRIxUS9JsDiv0D6bJ8tsS1Xk6IAd8Q8O0DhyBYfjBG6O1mnfs58Qt3FUuyTiuwk 2DNZaBXcurNV9xnaDu4xGJ6eKboQ67uQNqcNpsTSDX9sWmP+zbYf72DFr3onAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYTSOMTigEeQ5TjpSHokUU8dpLNswHwYDVR0j BBgwFoAUDh/voXs2FUD3OySVN98LXE+TtLkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDkwZDg2Yi0wYjBkLTQ1NmYtODQxYS1iZmRiOWQ4MDdmYjcvMC8wRTFGRUZBMTdC MzYxNTQwRjczQjI0OTUzN0RGMEI1QzRGOTNCNEI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0Rjkz QjRCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBC NUM0RjkzQjRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuZn/SGXToti55bso9sQ5pyMC9y3CkYAKcp wvEvQMK2Jrh80cugnx/aq9aAfK2T9Tv5e6dIt6XgjanWTEzBJXI3lt91To4ZX+BL zO5VhiVszPy9oJ6Vzz0kvNkjV108wNgIXRMtDwYKf+COwPebiYkk9b+qkzCSH71l a73j+WkVvx/CLZ3MOxB1PC5xjUwbzLczmEUka6q4mIyxLlF9UK6wFmMGesMccBpq pya0Z9/4PrJ14AOzmDViIx1bKYKGKLcl8eU94WxE3zn4FdSJU5C4t2zJLnF1eZp0 lRAZr3bntXZdrWR1LzQFyO2qSNd+ZF8ksDAqfogtDq9vn6RC1pM= -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:28 2025 by rpki-client