This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: e3GOsRcmU1zdJCNjnvBV9/kdcAyTES0AiHm3sFWGJaw= Subject key identifier: F6:BD:EB:57:F5:CB:66:2E:F8:05:B9:AA:A4:96:42:31:6F:85:8F:91 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 08BD462EAE4EDA7B876ACF641FBCB073AE087BDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 0228 Signing time: Sat 06 Dec 2025 06:11:03 +0000 Manifest this update: Sat 06 Dec 2025 06:06:03 +0000 Manifest next update: Tue 09 Dec 2025 10:02:03 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: bK2Ewxjowxn5HBW2ewfHsK9UvAKm6pq5hYS/j/yIogM=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bd:46:2e:ae:4e:da:7b:87:6a:cf:64:1f:bc:b0:73:ae:08:7b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Dec 6 06:06:03 2025 GMT Not After : Dec 9 10:02:03 2025 GMT Subject: CN=F6BDEB57F5CB662EF805B9AAA49642316F858F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:c8:11:78:ed:99:53:6a:2a:99:80:51:60: 14:ae:3a:e9:60:6a:2d:7e:9e:58:00:9e:f4:a2:13: ec:47:5d:9b:30:2b:1b:37:9d:24:e5:4c:3c:b5:6c: dc:f3:42:80:b6:60:67:02:6d:a9:6a:90:a5:57:aa: e5:52:9b:34:66:60:1e:77:51:f0:31:1c:42:9c:dc: ef:3a:0b:87:d7:71:c5:df:bb:c7:42:0a:6a:87:e0: 7a:a3:3e:63:67:38:a4:32:72:d3:6d:44:39:f2:b9: ad:f0:e8:db:d0:d8:6d:ce:21:e1:4b:0e:d8:8a:22: 9c:3d:4b:eb:81:a8:83:5d:3d:86:69:41:0e:3f:b2: d1:4d:5f:0c:60:e3:69:5a:b9:f9:e8:a2:92:82:7f: 9e:01:a1:6f:1f:50:3e:b7:4e:75:21:ed:dd:67:5d: 50:30:79:50:cd:75:20:58:74:7f:39:1c:30:ca:7b: 60:0f:3a:41:79:08:2e:72:f4:47:a3:e7:30:b7:3a: d1:5f:22:f4:ba:83:c2:ea:46:cb:8f:ea:07:0b:31: 3c:c5:94:2d:1a:c0:4d:e4:4b:05:33:66:99:1a:d9: 93:9e:9f:92:7b:19:53:b4:9c:80:a3:fc:f7:3a:0b: 21:4d:4d:be:dc:8f:90:12:8b:2b:f5:ed:9a:59:b9: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BD:EB:57:F5:CB:66:2E:F8:05:B9:AA:A4:96:42:31:6F:85:8F:91 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e6:18:e2:3d:a0:99:fb:83:e1:ed:cf:df:a2:97:ca:9b:32: 9e:6a:d6:a5:dd:69:52:89:fa:e8:14:f2:1b:71:54:74:ca:74: 43:5a:c6:b7:ab:1d:97:94:7d:f9:67:cd:96:68:ba:bf:b3:22: 0a:e6:9c:0b:14:18:48:88:26:56:56:f4:50:32:19:7a:9e:4f: 96:c7:08:e2:05:b4:28:5c:c0:ff:d1:17:46:0d:55:4a:d7:0a: af:56:90:b4:39:e9:f6:44:99:61:49:16:06:c9:fc:0c:b4:5c: d9:1d:31:83:98:e3:cd:f6:01:3c:49:98:ef:8d:bb:db:ad:38: 4d:ef:e9:4b:53:a5:28:dc:91:47:aa:1e:57:f2:38:85:f8:42: 55:dd:49:17:6a:68:32:ab:d7:39:f6:8c:8f:ea:0b:06:85:71: f4:d5:2e:93:2c:e3:0b:1d:95:63:0d:c9:43:dd:93:3c:e0:dc: 33:4c:f0:b8:e5:51:4b:5b:83:38:9b:18:bf:dd:c3:67:40:da: 1d:2b:3f:22:21:b1:2b:c1:14:b8:19:72:81:27:54:32:a1:d3: 31:bf:82:da:8e:56:fb:aa:fa:9e:3b:c9:6c:30:2b:db:f8:cc: 85:69:ae:25:ce:31:56:fa:67:da:2e:1a:23:4f:e9:1f:e5:2d: 1c:79:55:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCL1GLq5O2nuHas9kH7ywc64Ie9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTEyMDYwNjA2MDNaFw0yNTEyMDkxMDAyMDNaMDMxMTAvBgNV BAMTKEY2QkRFQjU3RjVDQjY2MkVGODA1QjlBQUE0OTY0MjMxNkY4NThGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0u8gReO2ZU2oqmYBRYBSuOulg ai1+nlgAnvSiE+xHXZswKxs3nSTlTDy1bNzzQoC2YGcCbalqkKVXquVSmzRmYB53 UfAxHEKc3O86C4fXccXfu8dCCmqH4HqjPmNnOKQyctNtRDnyua3w6NvQ2G3OIeFL DtiKIpw9S+uBqINdPYZpQQ4/stFNXwxg42laufnoopKCf54BoW8fUD63TnUh7d1n XVAweVDNdSBYdH85HDDKe2APOkF5CC5y9Eej5zC3OtFfIvS6g8LqRsuP6gcLMTzF lC0awE3kSwUzZpka2ZOen5J7GVO0nICj/Pc6CyFNTb7cj5ASiyv17ZpZudYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9r3rV/XLZi74BbmqpJZCMW+Fj5EwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjmGOI9oJn7g+Htz9+il8qbMp5q1qXdaVKJ +ugU8htxVHTKdENaxrerHZeUfflnzZZour+zIgrmnAsUGEiIJlZW9FAyGXqeT5bH COIFtChcwP/RF0YNVUrXCq9WkLQ56fZEmWFJFgbJ/Ay0XNkdMYOY4832ATxJmO+N u9utOE3v6UtTpSjckUeqHlfyOIX4QlXdSRdqaDKr1zn2jI/qCwaFcfTVLpMs4wsd lWMNyUPdkzzg3DNM8LjlUUtbgzibGL/dw2dA2h0rPyIhsSvBFLgZcoEnVDKh0zG/ gtqOVvuq+p47yWwwK9v4zIVpriXOMVb6Z9ouGiNP6R/lLRx5VXQ= -----END CERTIFICATE-----Generated at Sun Dec 7 02:11:56 2025 by rpki-client