This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft File: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft (raw, json) Hash identifier: tkf0peUygqeYV3op9t9Fu48ulne9j9HNcgRJIZsnVaw= Subject key identifier: 86:E3:5A:DD:38:28:1E:6D:8C:36:40:6B:3C:20:1C:FA:7A:DC:37:1A Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: 32648F7B6540B8F113837C67DE79D33ADE3447E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft Manifest number: 0206 Signing time: Wed 17 Dec 2025 00:21:52 +0000 Manifest this update: Wed 17 Dec 2025 00:16:52 +0000 Manifest next update: Sat 20 Dec 2025 01:20:52 +0000 Files and hashes: 1: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: c8FIGaCU0t2/B828bx0ZmZOFxlHPrYIwjNCfoYq4Eck=) 2: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: RICXQj6rsugNHVh/wSozR+ATp/7OAGFCxt5pyTwldyU=) 3: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl (hash: 0j3ibrWDtAXd8g/425bAC5U+H2XkNzVPW6+nt+NG+RA=) 4: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: 16WvPyi38t5aKz8ZyY3F0kSDSMJ8HK1h7g9RnFd2LL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:64:8f:7b:65:40:b8:f1:13:83:7c:67:de:79:d3:3a:de:34:47:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Dec 17 00:16:52 2025 GMT Not After : Dec 20 01:20:52 2025 GMT Subject: CN=86E35ADD38281E6D8C36406B3C201CFA7ADC371A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:b9:21:17:1f:c8:61:84:6a:64:bf:68:5d: 06:48:a9:9a:89:f7:42:25:94:47:60:06:50:fd:fa: 10:57:51:56:ca:18:29:8a:24:11:62:fc:01:e8:ba: 47:ef:d3:0c:fb:04:c4:56:23:c1:30:17:87:2d:73: 64:cf:fc:af:a7:a8:ff:76:7d:4a:ab:0e:ce:08:34: 09:6a:04:f7:ba:a3:de:13:53:45:a0:0e:12:7a:7f: 1b:b6:ec:c6:3d:bd:91:fa:49:b3:8c:34:19:27:2e: ee:84:f1:93:1c:d7:e6:0b:d1:cb:39:3a:2b:82:72: 4f:c6:9d:7e:63:c6:e1:59:05:22:13:db:34:05:62: 0a:44:61:25:25:3e:34:0f:fb:46:f3:e0:1c:eb:69: e0:76:85:a6:d9:07:90:9e:7a:17:1a:c9:23:45:83: 41:fa:f0:3e:dc:66:62:48:59:22:53:f0:eb:f1:fe: 58:77:77:24:40:70:d3:a5:94:7b:b8:c0:6e:28:f2: 23:f0:c3:50:b6:11:38:02:3c:44:e0:3f:3f:8c:0e: 29:23:30:10:d7:f4:80:b2:44:0c:c7:38:16:7e:31: d2:22:7a:68:d2:5e:05:d3:86:5b:62:4c:91:f4:ad: 24:46:70:64:e7:16:6d:37:29:ef:e5:24:ab:25:1e: 23:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E3:5A:DD:38:28:1E:6D:8C:36:40:6B:3C:20:1C:FA:7A:DC:37:1A X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:25:6d:6d:c1:a5:b5:cd:69:67:47:4b:9b:da:89:36:37:d2: 7c:d8:3e:86:f6:bf:09:30:4c:ca:a1:fd:50:5c:df:e1:e1:48: 3b:b0:a3:4e:18:40:c8:c3:46:53:8b:6e:1a:3e:5f:33:1c:10: 9b:34:81:b9:91:c5:b9:01:b9:13:15:01:ef:d4:1e:69:fd:0e: 77:be:00:8b:f7:ef:fb:07:81:a0:b9:6e:37:a6:87:6e:d9:37: 36:2c:8e:d7:92:dd:a4:d7:7d:b2:fc:b9:64:e6:3c:79:e7:43: a8:00:59:7d:7f:e1:d2:6c:e8:7c:78:13:0e:f6:b6:87:4f:85: a2:2e:e1:b2:60:f3:cc:90:c4:3c:76:c8:25:fd:4f:57:1a:8f: b2:42:98:b9:e6:aa:13:8f:51:29:d0:73:13:6a:17:57:a0:74: a4:9f:ca:01:d8:80:d3:d7:54:aa:94:f6:ef:ce:24:41:0a:8b: 41:e5:e2:ec:35:80:a7:9d:7d:6d:28:4c:8d:a2:a9:87:b2:33: 73:bb:f9:e0:a9:26:84:10:a1:27:b8:8a:db:a5:3f:b7:f0:ac: 7e:74:c3:7f:2c:08:8d:cb:f5:4a:2e:fd:40:f6:54:7f:82:db: 90:2d:6f:69:50:4d:aa:16:dc:42:b2:08:31:79:bb:5a:f1:a9: d9:89:14:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmSPe2VAuPETg3xn3nnTOt40R+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNTEyMTcwMDE2NTJaFw0yNTEyMjAwMTIwNTJaMDMxMTAvBgNV BAMTKDg2RTM1QUREMzgyODFFNkQ4QzM2NDA2QjNDMjAxQ0ZBN0FEQzM3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUrkhFx/IYYRqZL9oXQZIqZqJ 90IllEdgBlD9+hBXUVbKGCmKJBFi/AHoukfv0wz7BMRWI8EwF4ctc2TP/K+nqP92 fUqrDs4INAlqBPe6o94TU0WgDhJ6fxu27MY9vZH6SbOMNBknLu6E8ZMc1+YL0cs5 OiuCck/GnX5jxuFZBSIT2zQFYgpEYSUlPjQP+0bz4BzraeB2habZB5CeehcaySNF g0H68D7cZmJIWSJT8Ovx/lh3dyRAcNOllHu4wG4o8iPww1C2ETgCPETgPz+MDikj MBDX9ICyRAzHOBZ+MdIiemjSXgXThltiTJH0rSRGcGTnFm03Ke/lJKslHiPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhuNa3TgoHm2MNkBrPCAc+nrcNxowHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2 MDYxMUNDRjBEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMlbW3BpbXNaWdHS5vaiTY30nzYPob2vwkw TMqh/VBc3+HhSDuwo04YQMjDRlOLbho+XzMcEJs0gbmRxbkBuRMVAe/UHmn9Dne+ AIv37/sHgaC5bjemh27ZNzYsjteS3aTXfbL8uWTmPHnnQ6gAWX1/4dJs6Hx4Ew72 todPhaIu4bJg88yQxDx2yCX9T1caj7JCmLnmqhOPUSnQcxNqF1egdKSfygHYgNPX VKqU9u/OJEEKi0Hl4uw1gKedfW0oTI2iqYeyM3O7+eCpJoQQoSe4itulP7fwrH50 w38sCI3L9Uou/UD2VH+C25Atb2lQTaoW3EKyCDF5u1rxqdmJFBA= -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:59 2025 by rpki-client