This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft File: ED4F41D4EBE684D523406475FAB471CE1B24E360.mft (raw, json) Hash identifier: sJt6J797ahjNA4JRAn5oWtHuocYr/VPJvbiOlo/YMqM= Subject key identifier: 96:EB:0E:5F:46:6C:DB:7D:9A:5B:52:5B:1F:7F:97:73:70:9A:FF:4E Authority key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 Certificate issuer: /CN=ED4F41D4EBE684D523406475FAB471CE1B24E360 Certificate serial: 52BF5D4E24000399835C2DF288A3C0F51ECA44A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft Manifest number: 01D4 Signing time: Fri 05 Dec 2025 17:30:44 +0000 Manifest this update: Fri 05 Dec 2025 17:25:44 +0000 Manifest next update: Tue 09 Dec 2025 02:22:44 +0000 Files and hashes: 1: ED4F41D4EBE684D523406475FAB471CE1B24E360.crl (hash: czsc+j6cDijXFCvBX4UgcDrk5zzu01XgyDrpXSwnKog=) 2: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: a+I06nP5b+sG7uombRaO/A9VFiWnda28578PbtlGH3U=) 3: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: BXp0DiStVhZuRg84lCtQ4q7ZgVrjo+zScqcIWL6/IJE=) 4: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: 0zElYS8pYAdAq2zXe+2YefY+xTaQBq2KFhrk8AH5DcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bf:5d:4e:24:00:03:99:83:5c:2d:f2:88:a3:c0:f5:1e:ca:44:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360 Validity Not Before: Dec 5 17:25:44 2025 GMT Not After : Dec 9 02:22:44 2025 GMT Subject: CN=96EB0E5F466CDB7D9A5B525B1F7F9773709AFF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:89:c6:dd:02:8d:6d:6a:68:6c:b3:99:9c:a4: 28:dd:f6:df:c3:d2:39:55:f9:f6:5f:9c:ad:54:62: 91:64:a9:eb:19:9f:79:4f:ec:aa:70:75:f2:3b:7b: 48:ef:ea:9f:7c:c7:da:3e:8c:ce:80:96:01:60:03: 61:bd:b1:fc:c6:1b:b0:db:4f:3f:70:d8:48:e2:82: c5:3c:70:15:99:40:27:fa:ad:c5:61:fa:90:a1:83: 95:f2:58:9b:53:27:52:7e:ee:7d:34:6f:a8:94:39: 13:56:15:13:ca:fe:d3:ff:ad:5a:37:a0:71:16:3a: 68:84:c8:94:41:1a:0b:67:e5:2b:77:74:5d:0d:49: bb:f4:19:49:fc:1b:b1:b7:38:ca:4a:8a:71:72:f0: d5:68:87:c8:0e:1a:42:5f:06:b3:70:0e:ce:13:10: 17:b6:c5:78:d2:8d:ef:29:86:03:e7:47:61:fc:7d: f1:1d:2b:7f:0a:59:b0:ab:a7:a2:74:53:cb:cf:5b: c1:2c:4d:3a:1f:ed:bd:e6:4b:ec:cd:d0:f4:d7:6e: a1:96:11:c4:bb:bc:78:e4:46:26:1e:93:0c:d6:be: e8:2c:e3:ce:81:32:5d:fa:65:a3:a4:c1:cf:23:bc: 80:ad:9a:05:4c:9a:6c:3e:1f:e3:a6:88:5f:61:aa: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EB:0E:5F:46:6C:DB:7D:9A:5B:52:5B:1F:7F:97:73:70:9A:FF:4E X509v3 Authority Key Identifier: keyid:ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:e8:bb:fc:b2:b1:2c:56:9c:16:16:9d:40:d8:6f:f7:72:b3: f1:f4:e1:19:06:2c:1a:d1:a5:b6:6a:ad:66:df:5e:79:72:bc: 67:2d:b2:fd:10:35:02:97:a9:6d:b2:e4:4e:35:a3:53:c5:5d: 3e:ae:c1:c5:44:be:77:d8:16:21:b8:68:cc:a5:a9:41:0c:76: 54:6d:2e:cd:5d:61:12:f5:e0:54:d1:a1:af:22:41:e8:ab:7d: 68:6b:a5:c8:f2:28:76:fa:2a:61:de:16:d1:75:50:c2:77:ee: d3:42:7a:63:9b:de:57:4f:ab:36:1b:63:1d:28:23:9f:7f:eb: b7:03:85:f5:00:3d:e7:ed:9a:05:b8:9f:5e:54:35:60:a6:d5: 5a:6c:ba:04:24:8b:be:d2:f8:0d:5a:cc:b5:fe:35:02:cf:c6: cf:16:ea:e6:98:4f:53:4f:0b:f1:7d:24:e4:21:27:57:d7:d9: 22:c0:ab:24:a2:c6:59:f6:99:a7:94:5a:dd:ea:4e:18:3f:e0: 9a:20:b3:b5:da:95:00:96:e1:92:f6:8a:4d:6e:84:0e:c9:24: e6:f4:c6:a7:38:87:7b:5a:41:22:e9:9c:d9:26:8c:ae:01:14: 5c:3e:61:e0:f2:01:a5:07:22:79:2e:b1:1f:d8:27:72:28:68: a0:bf:3e:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUr9dTiQAA5mDXC3yiKPA9R7KRKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcxQ0Ux QjI0RTM2MDAeFw0yNTEyMDUxNzI1NDRaFw0yNTEyMDkwMjIyNDRaMDMxMTAvBgNV BAMTKDk2RUIwRTVGNDY2Q0RCN0Q5QTVCNTI1QjFGN0Y5NzczNzA5QUZGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdicbdAo1tamhss5mcpCjd9t/D 0jlV+fZfnK1UYpFkqesZn3lP7KpwdfI7e0jv6p98x9o+jM6AlgFgA2G9sfzGG7Db Tz9w2EjigsU8cBWZQCf6rcVh+pChg5XyWJtTJ1J+7n00b6iUORNWFRPK/tP/rVo3 oHEWOmiEyJRBGgtn5St3dF0NSbv0GUn8G7G3OMpKinFy8NVoh8gOGkJfBrNwDs4T EBe2xXjSje8phgPnR2H8ffEdK38KWbCrp6J0U8vPW8EsTTof7b3mS+zN0PTXbqGW EcS7vHjkRiYekwzWvugs486BMl36ZaOkwc8jvICtmgVMmmw+H+OmiF9hqmVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlusOX0Zs232aW1JbH3+Xc3Ca/04wHwYDVR0j BBgwFoAU7U9B1OvmhNUjQGR1+rRxzhsk42AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmVlN2E1Zi01MTIxLTQxODEtYTYzNS0xMjFiNmU2OWFkNTkvMC9FRDRGNDFENEVC RTY4NEQ1MjM0MDY0NzVGQUI0NzFDRTFCMjRFMzYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcxQ0UxQjI0 RTM2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZlZTdhNWYtNTEyMS00MTgxLWE2 MzUtMTIxYjZlNjlhZDU5LzAvRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcx Q0UxQjI0RTM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMbou/yysSxWnBYWnUDYb/dys/H04RkGLBrR pbZqrWbfXnlyvGctsv0QNQKXqW2y5E41o1PFXT6uwcVEvnfYFiG4aMylqUEMdlRt Ls1dYRL14FTRoa8iQeirfWhrpcjyKHb6KmHeFtF1UMJ37tNCemOb3ldPqzYbYx0o I59/67cDhfUAPeftmgW4n15UNWCm1VpsugQki77S+A1azLX+NQLPxs8W6uaYT1NP C/F9JOQhJ1fX2SLAqySixln2maeUWt3qThg/4Jogs7XalQCW4ZL2ik1uhA7JJOb0 xqc4h3taQSLpnNkmjK4BFFw+YeDyAaUHInkusR/YJ3IoaKC/Plw= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:39 2025 by rpki-client