This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: 73coAwX090RJ6w/pjuCWFpRlhr3kU7dEaKFcSXUemrc= Subject key identifier: 20:B7:69:57:C0:66:B3:4F:CA:07:8A:4E:E3:91:09:C3:19:04:99:20 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 20C9E604669DC209D1DE0A9CE85B25E1EDB64300 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 0144 Signing time: Sat 06 Dec 2025 12:32:01 +0000 Manifest this update: Sat 06 Dec 2025 12:27:01 +0000 Manifest next update: Tue 09 Dec 2025 22:06:01 +0000 Files and hashes: 1: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: cziExQNbsC9slbA6+8SWM0R0EDsOLwLtgTBqDttdfO0=) 2: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: VplOBLaXlcKJuXzC/kYMwYe44pXvcuZNrI/g2VUmZTU=) 3: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: 17S1NzRw5+8IP/n/zFRvAJ9ydBwiGj1bRmgVr44VYpQ=) 4: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: a0pk9VoKH2r+qjeWuvWIva87V5dxB5KIg+1mbbUVHGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c9:e6:04:66:9d:c2:09:d1:de:0a:9c:e8:5b:25:e1:ed:b6:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Dec 6 12:27:01 2025 GMT Not After : Dec 9 22:06:01 2025 GMT Subject: CN=20B76957C066B34FCA078A4EE39109C319049920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:30:44:84:50:12:b1:0b:57:17:24:62:9c:7a: 6b:34:c0:10:ad:85:2a:24:ca:9b:97:f2:c9:74:9f: 4b:67:1e:32:65:5e:f9:65:e8:b7:6e:d6:0b:ab:40: ef:4c:b3:7a:63:eb:86:8f:41:2f:f5:07:c5:4f:66: b5:31:a6:64:f5:9f:02:40:36:20:48:38:6e:46:e8: 70:3b:3c:ce:a7:15:1c:b9:f6:18:6b:02:b3:f1:14: d2:6f:57:b6:b3:e7:84:67:b7:a0:97:a5:48:f3:32: 25:7a:3e:1f:7f:ff:a8:40:9c:a9:61:d3:16:27:36: 1b:3e:0d:65:11:7e:26:4a:d8:d0:30:46:2c:3b:f3: db:74:f5:7c:53:17:26:01:22:da:9a:be:60:a0:4e: 7d:dc:41:e8:9c:56:eb:74:32:7f:0c:ca:f8:6b:9e: 98:c0:71:e8:31:81:61:f4:f4:d9:f9:42:fa:c7:aa: 9e:51:ae:55:59:46:f3:4a:24:cc:87:ee:62:38:5b: fa:cd:3b:d1:fe:e3:46:8e:71:d6:8d:db:8f:b6:b0: 51:20:e2:8d:4b:d5:a1:15:38:d3:fd:f7:94:f6:35: 14:0e:91:92:81:b9:ae:64:2a:2b:c9:3a:fb:65:10: de:ae:ee:8e:2e:58:e3:61:d7:3d:74:7b:da:2e:b7: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B7:69:57:C0:66:B3:4F:CA:07:8A:4E:E3:91:09:C3:19:04:99:20 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b0:f3:cf:f0:a6:23:bf:c2:b4:e3:6f:45:a4:88:e2:86:53: cf:d9:28:e3:0d:eb:85:e3:e1:49:d7:10:82:5b:b0:1b:0e:b7: ac:7c:8f:a8:b3:b9:63:44:f9:28:e0:e0:76:bc:48:e8:ba:1c: e4:e5:18:6a:aa:d7:52:7a:06:1a:be:3a:95:1e:bd:5b:6a:45: 2f:74:12:0e:ea:9c:12:ca:4e:d8:b6:0d:1d:97:27:90:d0:07: 4c:d0:4e:76:47:a9:e5:14:36:66:15:f8:56:1c:24:b8:e5:c6: e5:dc:1c:f9:ef:a0:49:4b:fc:90:af:ed:4c:be:ca:d6:96:28: d8:01:ff:7c:b6:15:53:dc:70:9c:b1:e8:0f:0d:39:7c:13:21: fa:a1:77:c3:67:62:d5:f5:0b:67:89:b2:60:9f:2c:c9:34:62: 29:e5:4b:56:5b:0a:fe:b8:e4:ce:67:c0:de:ef:3b:3a:59:f8: 4b:46:e9:0b:72:d9:67:7e:a6:8d:60:58:d3:27:bf:fe:2f:45: 8b:57:22:45:78:57:df:b7:2c:97:7a:a8:50:87:77:f7:b8:d6: cd:6a:9a:0c:24:d2:dd:72:0b:61:bd:34:4e:bd:97:8f:16:bd: 25:b0:4f:5c:09:b9:13:20:ee:0c:05:f9:76:69:60:51:91:da: ec:80:4a:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMnmBGadwgnR3gqc6Fsl4e22QwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTEyMDYxMjI3MDFaFw0yNTEyMDkyMjA2MDFaMDMxMTAvBgNV BAMTKDIwQjc2OTU3QzA2NkIzNEZDQTA3OEE0RUUzOTEwOUMzMTkwNDk5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnMESEUBKxC1cXJGKcems0wBCt hSokypuX8sl0n0tnHjJlXvll6Ldu1gurQO9Ms3pj64aPQS/1B8VPZrUxpmT1nwJA NiBIOG5G6HA7PM6nFRy59hhrArPxFNJvV7az54Rnt6CXpUjzMiV6Ph9//6hAnKlh 0xYnNhs+DWURfiZK2NAwRiw789t09XxTFyYBItqavmCgTn3cQeicVut0Mn8Myvhr npjAcegxgWH09Nn5QvrHqp5RrlVZRvNKJMyH7mI4W/rNO9H+40aOcdaN24+2sFEg 4o1L1aEVONP995T2NRQOkZKBua5kKivJOvtlEN6u7o4uWONh1z10e9out6EXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUILdpV8Bms0/KB4pO45EJwxkEmSAwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6w88/wpiO/wrTjb0WkiOKGU8/ZKOMN64Xj 4UnXEIJbsBsOt6x8j6izuWNE+Sjg4Ha8SOi6HOTlGGqq11J6Bhq+OpUevVtqRS90 Eg7qnBLKTti2DR2XJ5DQB0zQTnZHqeUUNmYV+FYcJLjlxuXcHPnvoElL/JCv7Uy+ ytaWKNgB/3y2FVPccJyx6A8NOXwTIfqhd8NnYtX1C2eJsmCfLMk0YinlS1ZbCv64 5M5nwN7vOzpZ+EtG6Qty2Wd+po1gWNMnv/4vRYtXIkV4V9+3LJd6qFCHd/e41s1q mgwk0t1yC2G9NE69l48WvSWwT1wJuRMg7gwF+XZpYFGR2uyASnQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:56 2025 by rpki-client