This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json) Hash identifier: BuLx0LS41uuu1V2b2KX6tdmxVyRVA3+blg6rJdjzFEk= Subject key identifier: C6:DD:2D:EE:47:DC:81:E5:FA:70:3D:0A:07:95:F6:79:5A:B6:0E:EA Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Certificate serial: 4943950C6250E91BB2D40404A1D21F8C33A7EF79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft Manifest number: 02E4 Signing time: Tue 16 Dec 2025 20:32:15 +0000 Manifest this update: Tue 16 Dec 2025 20:27:15 +0000 Manifest next update: Fri 19 Dec 2025 23:11:15 +0000 Files and hashes: 1: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: CeWfs+kKfDCS/nXXKhRxnfH0c7qHqM4CuiQMFMPq8Gk=) 2: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: Vl/OOphd8TYP/hah6fsBqUcpI92+W6WBwIY9PUcjWfo=) 3: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: S9fTdkfTps/6Q59nCYC/yJ1+TjRvCvo04elHUxM7Yz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 23:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:43:95:0c:62:50:e9:1b:b2:d4:04:04:a1:d2:1f:8c:33:a7:ef:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Validity Not Before: Dec 16 20:27:15 2025 GMT Not After : Dec 19 23:11:15 2025 GMT Subject: CN=C6DD2DEE47DC81E5FA703D0A0795F6795AB60EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:c5:84:33:5d:f9:32:d1:a0:25:d6:85:91: 5b:71:93:62:b5:97:c3:44:41:55:b0:74:26:ee:87: fe:74:e5:1a:31:14:07:51:05:a0:9d:52:75:ca:94: e1:fc:df:8b:90:3e:41:41:4e:82:2e:0d:24:b6:0a: 81:72:7d:c3:83:3b:73:a5:d9:52:85:90:34:86:34: f3:38:1b:f0:2a:7f:b6:be:6a:28:f3:9f:62:d6:54: ed:3a:ed:1b:e4:7b:ae:b5:4c:39:d7:7e:19:5c:6f: b3:11:16:c7:24:2f:0a:5b:68:17:45:67:d6:7a:9b: 9a:1b:ea:73:6c:f0:ad:b2:13:c4:92:76:06:4d:74: e6:25:85:70:51:c1:64:b2:40:60:e7:5e:42:bc:fd: ac:48:64:d4:cd:25:85:d0:e7:f0:10:19:37:3e:d7: 40:f1:c1:d9:8c:37:f7:7b:29:0d:7f:2a:34:bd:59: 95:98:f2:1e:dd:9b:0d:83:c1:60:04:fd:cd:b3:a8: fb:69:87:b5:55:f8:a4:3d:75:c8:05:55:51:12:2d: 48:a0:99:b9:fe:a4:42:1e:c1:c8:33:0e:c2:19:37: 8a:5f:81:01:29:e3:09:5b:d7:bb:f0:74:31:90:4a: ed:02:70:25:7f:ca:a4:f4:dd:da:61:cd:06:b9:86: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DD:2D:EE:47:DC:81:E5:FA:70:3D:0A:07:95:F6:79:5A:B6:0E:EA X509v3 Authority Key Identifier: keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:9e:df:a8:fc:6f:b7:d1:46:52:f5:2c:b4:d4:b6:db:fb:9a: c5:64:d2:8e:7a:14:f7:1b:7c:e0:a3:c9:aa:ea:31:75:70:41: 99:2d:c4:53:f6:98:d1:cc:fc:68:03:ff:08:30:f6:94:4c:a5: 78:e1:da:66:88:d4:46:ff:18:81:5b:25:f5:56:5e:b2:ce:18: 83:55:fc:a2:c9:3d:df:94:55:b2:16:1c:10:06:df:c7:e7:e6: 14:7b:97:14:72:04:31:53:98:f7:4c:09:3b:b7:13:b4:83:c4: 85:db:db:44:b3:21:95:2b:70:41:2b:ed:a9:9d:11:0a:3f:ea: 8d:c5:61:62:72:f7:4d:c5:78:39:04:75:5c:0b:c0:77:1d:48: 8b:7e:f7:20:cf:81:fc:91:17:04:50:ff:03:05:67:7c:89:35: 2c:b0:fc:bf:8b:cf:5a:d6:49:ca:ca:ff:8b:6a:24:0d:3b:be: 1b:27:63:23:58:17:a7:73:9e:04:e8:4b:11:3f:77:03:18:d2: cc:3d:96:e4:0d:29:2d:c4:96:ef:c6:87:2f:a9:40:38:f0:b1: 4d:f6:92:90:8a:a1:91:4c:e7:4f:09:c8:b4:e0:3a:15:31:fb: 7d:7a:0e:e4:c3:f5:1d:c6:44:ce:fe:70:95:3c:63:e6:ca:ff: f4:70:2b:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSUOVDGJQ6Ruy1AQEodIfjDOn73kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3 NzM5REYxODAeFw0yNTEyMTYyMDI3MTVaFw0yNTEyMTkyMzExMTVaMDMxMTAvBgNV BAMTKEM2REQyREVFNDdEQzgxRTVGQTcwM0QwQTA3OTVGNjc5NUFCNjBFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9sWEM135MtGgJdaFkVtxk2K1 l8NEQVWwdCbuh/505RoxFAdRBaCdUnXKlOH834uQPkFBToIuDSS2CoFyfcODO3Ol 2VKFkDSGNPM4G/Aqf7a+aijzn2LWVO067Rvke661TDnXfhlcb7MRFsckLwpbaBdF Z9Z6m5ob6nNs8K2yE8SSdgZNdOYlhXBRwWSyQGDnXkK8/axIZNTNJYXQ5/AQGTc+ 10DxwdmMN/d7KQ1/KjS9WZWY8h7dmw2DwWAE/c2zqPtph7VV+KQ9dcgFVVESLUig mbn+pEIewcgzDsIZN4pfgQEp4wlb17vwdDGQSu0CcCV/yqT03dphzQa5hqA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxt0t7kfcgeX6cD0KB5X2eVq2DuowHwYDVR0j BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1 Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5 REYxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTcz NDU3NzM5REYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2e36j8b7fRRlL1LLTUttv7msVk0o56FPcb fOCjyarqMXVwQZktxFP2mNHM/GgD/wgw9pRMpXjh2maI1Eb/GIFbJfVWXrLOGINV /KLJPd+UVbIWHBAG38fn5hR7lxRyBDFTmPdMCTu3E7SDxIXb20SzIZUrcEEr7amd EQo/6o3FYWJy903FeDkEdVwLwHcdSIt+9yDPgfyRFwRQ/wMFZ3yJNSyw/L+Lz1rW ScrK/4tqJA07vhsnYyNYF6dzngToSxE/dwMY0sw9luQNKS3Elu/Ghy+pQDjwsU32 kpCKoZFM508JyLTgOhUx+316DuTD9R3GRM7+cJU8Y+bK//RwK6Q= -----END CERTIFICATE-----Generated at Wed Dec 17 16:39:36 2025 by rpki-client