This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json) Hash identifier: bQcxaF035I03KKULJkYD4GqlbFjEfOqhaDxK0H1p/d4= Subject key identifier: 8D:62:21:C1:8C:B2:FB:42:11:87:CD:BF:5A:7D:49:92:75:77:11:BD Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Certificate serial: 6C71D436560F0C102B32B9212625888F5F355239 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft Manifest number: 02DF Signing time: Sat 06 Dec 2025 03:02:14 +0000 Manifest this update: Sat 06 Dec 2025 02:57:14 +0000 Manifest next update: Tue 09 Dec 2025 05:18:14 +0000 Files and hashes: 1: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: iDQo2rorCrz/cQlzZKczPCjzPu4Ox8pedVfba/Sl7Ww=) 2: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: S9fTdkfTps/6Q59nCYC/yJ1+TjRvCvo04elHUxM7Yz8=) 3: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: Vl/OOphd8TYP/hah6fsBqUcpI92+W6WBwIY9PUcjWfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:71:d4:36:56:0f:0c:10:2b:32:b9:21:26:25:88:8f:5f:35:52:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Validity Not Before: Dec 6 02:57:14 2025 GMT Not After : Dec 9 05:18:14 2025 GMT Subject: CN=8D6221C18CB2FB421187CDBF5A7D4992757711BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:cd:c0:d0:01:cf:7d:8f:05:38:5f:71:39: 1d:bc:32:16:a5:8c:2a:83:72:20:5d:68:91:6f:38: 31:05:c3:9a:14:d0:2a:21:0e:4c:50:10:28:ba:ed: 9d:d2:02:6f:c2:70:ee:9d:14:23:09:69:cf:c4:f9: 8a:cf:c1:7a:da:e4:83:a4:c8:04:26:81:44:25:fd: f5:8a:54:22:4f:44:4d:54:c0:63:98:e9:cb:8c:e7: bc:1e:30:04:dc:cb:ed:cb:68:16:56:fe:34:d9:31: 4c:0f:c4:06:40:6e:af:b8:6d:c3:26:99:db:8c:5e: c9:b7:3b:80:c5:97:4c:89:f4:df:8b:21:86:78:fe: 1b:dd:86:5c:09:1b:d7:65:ac:fb:1d:c8:ad:bb:7f: 47:2b:f8:b0:b2:fe:c9:fc:35:f5:95:bb:df:d5:5b: 5e:d7:1e:22:ae:1e:56:0f:5b:9f:ce:3d:0b:7f:5f: ba:25:0d:18:ee:c8:96:c5:55:86:c6:52:e2:72:50: b8:9c:f8:35:9a:4d:1a:a8:87:ed:93:fb:56:2e:0a: a8:d7:4d:f9:b5:12:f5:9d:c5:d5:ae:cb:b9:0e:f6: cf:47:c3:81:b8:55:12:7e:84:ca:16:a7:4b:5b:90: d3:27:da:e7:0d:25:82:17:d7:16:20:ee:4e:d3:a7: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:62:21:C1:8C:B2:FB:42:11:87:CD:BF:5A:7D:49:92:75:77:11:BD X509v3 Authority Key Identifier: keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d6:5d:d2:4a:47:54:90:97:54:1b:b2:d6:6a:0c:72:69:12: 8f:ac:10:15:fe:7e:ea:9b:c9:5c:0d:da:43:4c:25:6b:c3:16: cc:7a:69:af:c0:6c:79:95:98:10:3f:d0:be:78:dc:ed:88:0d: 6f:40:fb:30:a0:3e:e2:20:d4:bc:f7:e8:2c:53:49:bf:bc:da: a9:b8:2b:b6:24:06:47:93:5b:4c:1a:ef:b6:b7:56:79:e4:41: 8f:bb:27:c7:73:7a:ea:f9:5e:e5:da:e4:11:b6:65:51:23:67: a7:03:a1:f2:23:b7:c2:ad:03:d9:3d:8c:b0:85:0f:11:55:a2: d7:a5:7f:ed:ab:e5:cd:f2:99:95:a8:2e:e9:70:71:02:eb:33: fc:a3:e2:c2:ed:6d:69:d4:c0:1d:23:9e:e0:84:f7:c9:d4:0b: b6:61:04:e5:5d:45:95:46:f9:11:6e:c8:d2:e7:9d:61:f0:8c: ee:24:d9:c1:08:b3:8d:54:cb:ae:82:04:97:4b:7b:d7:b8:d7: ef:64:35:f5:9b:0c:2f:a9:be:13:94:f5:18:8e:8d:53:89:06: 85:ca:7c:6a:29:6e:6b:cd:33:42:32:f0:26:8f:0b:af:a4:43: 1c:82:b0:da:a5:dd:e0:f6:9d:65:d4:10:93:9f:17:5b:0a:eb: a4:af:2b:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHHUNlYPDBArMrkhJiWIj181UjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3 NzM5REYxODAeFw0yNTEyMDYwMjU3MTRaFw0yNTEyMDkwNTE4MTRaMDMxMTAvBgNV BAMTKDhENjIyMUMxOENCMkZCNDIxMTg3Q0RCRjVBN0Q0OTkyNzU3NzExQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClDM3A0AHPfY8FOF9xOR28Mhal jCqDciBdaJFvODEFw5oU0CohDkxQECi67Z3SAm/CcO6dFCMJac/E+YrPwXra5IOk yAQmgUQl/fWKVCJPRE1UwGOY6cuM57weMATcy+3LaBZW/jTZMUwPxAZAbq+4bcMm mduMXsm3O4DFl0yJ9N+LIYZ4/hvdhlwJG9dlrPsdyK27f0cr+LCy/sn8NfWVu9/V W17XHiKuHlYPW5/OPQt/X7olDRjuyJbFVYbGUuJyULic+DWaTRqoh+2T+1YuCqjX Tfm1EvWdxdWuy7kO9s9Hw4G4VRJ+hMoWp0tbkNMn2ucNJYIX1xYg7k7Tp9ctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjWIhwYyy+0IRh82/Wn1JknV3Eb0wHwYDVR0j BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1 Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5 REYxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTcz NDU3NzM5REYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjWXdJKR1SQl1QbstZqDHJpEo+sEBX+fuqb yVwN2kNMJWvDFsx6aa/AbHmVmBA/0L543O2IDW9A+zCgPuIg1Lz36CxTSb+82qm4 K7YkBkeTW0wa77a3VnnkQY+7J8dzeur5XuXa5BG2ZVEjZ6cDofIjt8KtA9k9jLCF DxFVotelf+2r5c3ymZWoLulwcQLrM/yj4sLtbWnUwB0jnuCE98nUC7ZhBOVdRZVG +RFuyNLnnWHwjO4k2cEIs41Uy66CBJdLe9e41+9kNfWbDC+pvhOU9RiOjVOJBoXK fGopbmvNM0Iy8CaPC6+kQxyCsNql3eD2nWXUEJOfF1sK66SvKwc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:19:35 2025 by rpki-client