This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: eeda2ZYYTA70u5HMpovbyrOltPrIgjBht/KMoIlu/d8= Subject key identifier: 32:32:BD:AE:75:1F:75:5A:8B:9B:DD:B1:E1:36:07:B3:63:93:FA:CA Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 04123363BDEAA1AD8930AF4DA3E7BCCD11346754 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 0251 Signing time: Sat 06 Dec 2025 13:31:02 +0000 Manifest this update: Sat 06 Dec 2025 13:26:02 +0000 Manifest next update: Wed 10 Dec 2025 00:36:02 +0000 Files and hashes: 1: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=) 2: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: sSI0Ib6rde4GKTCGDbMpbmLi7PC3M/axLPceYw62oG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:12:33:63:bd:ea:a1:ad:89:30:af:4d:a3:e7:bc:cd:11:34:67:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Dec 6 13:26:02 2025 GMT Not After : Dec 10 00:36:02 2025 GMT Subject: CN=3232BDAE751F755A8B9BDDB1E13607B36393FACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:13:8f:e9:48:8d:09:3a:43:44:06:e8:3c: 21:20:bf:4b:16:3b:f2:98:1c:31:46:32:86:0d:02: 72:a9:46:b3:38:ca:90:c6:96:04:77:2d:26:f6:14: 90:62:08:f5:4e:c1:ec:71:d0:75:c4:ea:fe:81:12: 33:d9:5a:1a:f9:a3:db:4f:2b:a1:78:13:d9:04:d3: 63:24:5e:4e:b5:77:9d:32:51:b9:19:5f:08:25:5b: 4f:76:a0:c4:94:bd:7e:fe:e3:3f:ba:b6:7c:d9:2d: d1:3a:54:0b:d2:0d:c3:69:a2:1f:04:cf:13:0d:65: 22:58:b2:a1:18:68:84:19:50:c6:7f:7a:e6:e9:81: 2f:f1:64:31:06:52:5e:7b:5e:fc:08:74:57:2e:4c: e1:da:20:5a:2a:0d:8f:bd:cc:55:d3:5a:68:b2:9c: 83:0c:d4:b0:03:1a:58:b5:ab:d5:1e:48:eb:61:cf: f4:78:51:ac:a5:22:1f:aa:e2:8e:61:d2:48:2e:f8: 9b:3c:d3:93:fb:0d:43:41:1d:4e:01:56:9f:05:bb: 13:61:42:d5:f4:2c:6a:bf:b7:6e:f6:78:8c:f2:8c: 27:37:96:e4:b8:c4:01:02:06:8c:37:84:9d:5d:8e: b6:59:a1:e5:6d:fa:26:f2:5b:e0:91:19:a8:7f:b4: 26:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:32:BD:AE:75:1F:75:5A:8B:9B:DD:B1:E1:36:07:B3:63:93:FA:CA X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:48:5b:fc:f2:3b:00:6f:cf:67:95:31:a4:43:2f:e1:13:af: 38:79:5c:71:90:ab:e2:ae:a2:41:fb:c4:45:fd:e2:99:59:d6: d7:94:7c:07:2f:ed:83:ca:e2:e1:72:bc:95:b6:56:9c:62:8e: 20:b5:11:b5:5f:ab:3f:d3:ba:95:1a:87:4c:22:43:cb:f9:4c: 89:89:7a:59:f2:b0:b0:af:53:08:97:76:17:8a:5c:26:56:d5: 81:00:1b:c9:6a:61:c5:7b:51:aa:3c:a3:72:21:ed:28:ba:51: cb:68:d3:67:84:4d:90:41:f7:c6:e0:fb:b4:36:2c:70:2e:43: f6:a0:f2:7d:0f:e5:6d:da:06:de:4c:a4:1d:f3:87:65:7b:ae: ff:0b:8a:be:eb:d9:55:02:34:1e:a4:fe:71:d1:dc:86:7f:89: e9:cb:de:17:f9:b7:28:79:98:bc:be:e0:16:9c:70:47:85:5a: 46:61:7d:02:0f:03:30:77:7d:32:ab:f2:7b:1f:e8:56:8d:4c: f4:3b:78:22:d6:2a:f0:7a:ce:b1:d9:fb:cf:30:f7:9e:dd:88: 1c:c3:f7:68:c7:01:b0:5e:05:f5:e5:5a:57:aa:c7:5b:1f:12: 42:09:35:ca:cc:38:b1:8b:df:88:3d:70:0c:9e:b3:7b:84:1f: 67:e4:c9:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBBIzY73qoa2JMK9No+e8zRE0Z1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNTEyMDYxMzI2MDJaFw0yNTEyMTAwMDM2MDJaMDMxMTAvBgNV BAMTKDMyMzJCREFFNzUxRjc1NUE4QjlCRERCMUUxMzYwN0IzNjM5M0ZBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiyROP6UiNCTpDRAboPCEgv0sW O/KYHDFGMoYNAnKpRrM4ypDGlgR3LSb2FJBiCPVOwexx0HXE6v6BEjPZWhr5o9tP K6F4E9kE02MkXk61d50yUbkZXwglW092oMSUvX7+4z+6tnzZLdE6VAvSDcNpoh8E zxMNZSJYsqEYaIQZUMZ/eubpgS/xZDEGUl57XvwIdFcuTOHaIFoqDY+9zFXTWmiy nIMM1LADGli1q9UeSOthz/R4UaylIh+q4o5h0kgu+Js805P7DUNBHU4BVp8FuxNh QtX0LGq/t272eIzyjCc3luS4xAECBow3hJ1djrZZoeVt+ibyW+CRGah/tCYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMjK9rnUfdVqLm92x4TYHs2OT+sowHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFIW/zyOwBvz2eVMaRDL+ETrzh5XHGQq+Ku okH7xEX94plZ1teUfAcv7YPK4uFyvJW2VpxijiC1EbVfqz/TupUah0wiQ8v5TImJ elnysLCvUwiXdheKXCZW1YEAG8lqYcV7Uao8o3Ih7Si6Ucto02eETZBB98bg+7Q2 LHAuQ/ag8n0P5W3aBt5MpB3zh2V7rv8Lir7r2VUCNB6k/nHR3IZ/ienL3hf5tyh5 mLy+4BaccEeFWkZhfQIPAzB3fTKr8nsf6FaNTPQ7eCLWKvB6zrHZ+88w957diBzD 92jHAbBeBfXlWleqx1sfEkIJNcrMOLGL34g9cAyes3uEH2fkyT0= -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:08 2025 by rpki-client