This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft File: E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json) Hash identifier: RqDkVm/T7a7ybLKSm+k/edKFn4JEcqSjrQmniUaoALs= Subject key identifier: 20:D5:46:D3:B9:35:E3:BD:4C:47:21:A3:91:CC:35:B1:57:27:97:01 Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Certificate serial: 2675A01A9B275AD56111C93B9F054C8AEE96D97A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft Manifest number: 0161 Signing time: Fri 05 Dec 2025 21:20:38 +0000 Manifest this update: Fri 05 Dec 2025 21:15:38 +0000 Manifest next update: Tue 09 Dec 2025 03:20:38 +0000 Files and hashes: 1: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: Rhg5aNgGNlmCyNIVPwbalQaZbrw4NkSvzWXyW6o8n9Q=) 2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: pWyEMJB2NECQjGD21jXFIhV6AewDgUPpxcuSNxlavYI=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: p909d8VjhDkob+UXRoZRxJtZcS/lf4G9yDRtU4iVWWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:75:a0:1a:9b:27:5a:d5:61:11:c9:3b:9f:05:4c:8a:ee:96:d9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Validity Not Before: Dec 5 21:15:38 2025 GMT Not After : Dec 9 03:20:38 2025 GMT Subject: CN=20D546D3B935E3BD4C4721A391CC35B157279701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:22:7e:47:bd:2f:9c:dd:84:fe:d2:c7:cf:3e: b8:a3:31:43:0e:9c:84:3a:93:57:6a:30:46:9b:1c: aa:f1:64:8c:7d:34:e8:b6:10:b6:bc:95:ba:16:69: 66:83:74:14:f7:59:2b:2b:3d:c8:a3:5c:61:7a:2a: 9d:fb:20:34:a3:85:b2:ba:2a:bb:c4:c4:68:34:76: 33:fe:db:b2:bb:d0:d4:70:59:f0:09:76:9e:17:a3: 2f:29:5b:60:a0:fb:77:1b:af:ad:8a:12:cb:6c:c6: f2:5e:a3:b7:e3:23:fb:3f:3d:22:1b:8c:d4:95:35: e7:d9:d5:bb:76:ca:93:e6:7e:94:2e:84:32:4a:c4: af:db:22:de:ab:a9:93:87:06:5d:82:b6:d4:bd:e9: 80:0d:ee:35:1c:8d:97:46:f1:0b:42:42:74:41:e4: 66:cc:26:09:86:15:68:53:7c:6c:ba:cf:6d:17:34: c8:e3:0a:70:9d:77:19:bc:b6:54:ef:00:50:74:00: 88:b7:8d:88:72:75:02:a5:e3:24:f4:26:39:8b:4e: de:03:ed:dc:84:71:4d:e3:46:f2:6d:3f:8c:45:92: 7c:8b:69:22:0b:90:5b:22:84:3a:24:0d:ca:51:e1: 41:fb:ad:df:02:94:72:7f:e9:d0:16:34:73:99:df: 5b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:46:D3:B9:35:E3:BD:4C:47:21:A3:91:CC:35:B1:57:27:97:01 X509v3 Authority Key Identifier: keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:db:c3:fd:23:af:66:84:a7:37:c5:c1:13:34:36:a2:74:2e: e2:84:e5:57:62:ec:b8:bc:ff:a0:13:28:00:05:6a:7f:85:0e: be:a7:a2:5c:7c:15:83:28:e5:ab:da:71:95:a3:36:b5:05:d6: de:93:d4:b9:62:15:c7:e8:33:3f:b5:d3:d0:61:88:41:af:1a: c3:8e:88:07:c9:a1:e6:79:52:b6:13:64:a8:52:c9:9b:52:b0: 1e:a6:96:ce:01:e7:ec:5f:00:57:af:01:fe:4e:5d:a3:0f:70: 3c:ee:87:56:aa:0b:e3:a2:18:18:64:17:57:60:57:88:bd:1f: c8:d4:12:fb:b1:51:41:51:69:52:72:ac:23:27:b3:9f:7a:33: 97:7f:21:26:cc:4c:30:2b:fe:0d:1c:f3:01:c6:6b:fa:1d:73: f3:c5:93:b5:66:e6:f6:1c:04:5b:13:ff:ec:f6:93:13:6b:06: ff:bb:56:d4:78:46:3a:33:a1:1c:61:1f:f8:c9:b0:6f:10:36: 88:a3:32:8c:ae:4f:20:14:5e:87:42:de:06:aa:19:6a:ce:1e: 51:8f:1c:5f:83:f5:48:58:9d:53:41:a9:e6:f2:5d:39:b9:45: 7f:e6:7b:c1:9b:aa:2b:2a:1d:3e:c8:50:fb:4c:41:26:79:bc: 41:e3:ff:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJnWgGpsnWtVhEck7nwVMiu6W2XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5 NTU4NTcxRDAeFw0yNTEyMDUyMTE1MzhaFw0yNTEyMDkwMzIwMzhaMDMxMTAvBgNV BAMTKDIwRDU0NkQzQjkzNUUzQkQ0QzQ3MjFBMzkxQ0MzNUIxNTcyNzk3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIn5HvS+c3YT+0sfPPrijMUMO nIQ6k1dqMEabHKrxZIx9NOi2ELa8lboWaWaDdBT3WSsrPcijXGF6Kp37IDSjhbK6 KrvExGg0djP+27K70NRwWfAJdp4Xoy8pW2Cg+3cbr62KEstsxvJeo7fjI/s/PSIb jNSVNefZ1bt2ypPmfpQuhDJKxK/bIt6rqZOHBl2CttS96YAN7jUcjZdG8QtCQnRB 5GbMJgmGFWhTfGy6z20XNMjjCnCddxm8tlTvAFB0AIi3jYhydQKl4yT0JjmLTt4D 7dyEcU3jRvJtP4xFknyLaSILkFsihDokDcpR4UH7rd8ClHJ/6dAWNHOZ31tbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUINVG07k1471MRyGjkcw1sVcnlwEwHwYDVR0j BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4 NTcxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3 ODU5NTU4NTcxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7bw/0jr2aEpzfFwRM0NqJ0LuKE5Vdi7Li8 /6ATKAAFan+FDr6nolx8FYMo5avacZWjNrUF1t6T1LliFcfoMz+109BhiEGvGsOO iAfJoeZ5UrYTZKhSyZtSsB6mls4B5+xfAFevAf5OXaMPcDzuh1aqC+OiGBhkF1dg V4i9H8jUEvuxUUFRaVJyrCMns596M5d/ISbMTDAr/g0c8wHGa/odc/PFk7Vm5vYc BFsT/+z2kxNrBv+7VtR4RjozoRxhH/jJsG8QNoijMoyuTyAUXodC3gaqGWrOHlGP HF+D9UhYnVNBqebyXTm5RX/me8GbqisqHT7IUPtMQSZ5vEHj/+s= -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:08 2025 by rpki-client