This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: gAYj2SX8MhwQprCnemIcAvV7PP2ex8miaAckOXTPSbs= Subject key identifier: 42:C4:06:E7:BF:61:A2:9A:9A:43:16:83:92:FC:3D:E7:F1:77:9C:E0 Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 341FCBDC035C3C961A72BD072F5A9ED493085732 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 01C6 Signing time: Sat 06 Dec 2025 20:21:06 +0000 Manifest this update: Sat 06 Dec 2025 20:16:06 +0000 Manifest next update: Wed 10 Dec 2025 06:43:06 +0000 Files and hashes: 1: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: AgLvlSE1smWWR/jE1YysJDc3mDL4n9sETXp5KZ0HtjU=) 2: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: FsTUoU132Yjf9+KQcvssfmnuxRuuzzjfIBhniA1svWs=) 3: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: uICRVqRri8R1EgyBPUsLQp4TscukJjiepoiJFR6/Ibc=) 4: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: IgBk8nUZZ29ZSChbWhRLqEMkR6u+A1fqdcf9ejFY80Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1f:cb:dc:03:5c:3c:96:1a:72:bd:07:2f:5a:9e:d4:93:08:57:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Dec 6 20:16:06 2025 GMT Not After : Dec 10 06:43:06 2025 GMT Subject: CN=42C406E7BF61A29A9A43168392FC3DE7F1779CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:4f:94:cc:50:e4:73:16:d2:d8:d5:de:c2: 6d:e8:22:3d:dd:64:22:b0:f6:0e:63:df:87:0f:7d: d8:f0:7e:7a:94:e2:b2:56:96:63:75:f8:fc:17:56: 01:00:7b:87:92:39:97:01:48:6e:5e:1b:81:03:ca: 91:ff:00:45:0c:26:40:cd:07:93:d1:d6:2b:31:f4: 06:25:84:b1:de:72:e1:dd:a4:4f:68:c4:d3:80:5c: c7:81:f9:20:d7:ed:56:dd:3b:7d:8b:86:50:36:e2: 1c:ce:e7:4c:f4:ad:bf:8b:d6:a3:f2:8a:0d:6d:7d: 6b:c6:14:84:e0:14:ab:3d:3c:23:b4:67:cc:89:7f: 2b:c0:bb:05:1e:45:4d:aa:0c:5f:93:b4:57:33:64: 31:e3:e7:f9:01:25:06:fb:6d:55:69:d8:84:9f:43: a9:64:2a:7d:13:a0:a9:99:6e:f8:04:57:0c:1f:95: 8a:31:34:19:61:35:50:8b:89:7d:cf:87:a5:91:8a: 7f:a8:b3:05:a0:22:e4:6d:7f:f9:27:31:fa:b5:94: 72:ba:bb:56:b3:ac:97:8f:a4:36:78:0a:5a:ef:69: f5:f6:98:e3:03:46:29:26:2a:82:99:d5:56:69:a3: eb:3f:6c:17:b0:6f:55:78:e3:fa:27:ff:47:5a:90: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C4:06:E7:BF:61:A2:9A:9A:43:16:83:92:FC:3D:E7:F1:77:9C:E0 X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:50:ee:8f:f2:07:f6:d7:28:c2:ce:08:33:c3:47:21:b0:4e: 56:63:7d:2e:91:17:8f:89:ed:b7:07:9e:51:d3:7f:2f:d2:1b: 6d:66:d8:19:25:1c:5b:d7:1f:c2:ff:71:a0:9d:84:bc:ef:f6: dc:f8:0e:e0:98:4d:cd:4f:6e:d3:5c:a6:6d:01:68:71:09:db: e5:d3:3f:86:ae:1b:99:7b:84:15:1c:0a:3d:fd:65:25:78:7e: 85:65:34:4c:9a:71:76:37:85:10:3e:1b:c7:5f:56:d8:57:36: aa:95:87:ba:f4:4a:2e:1d:80:8d:5f:48:0c:ae:80:ef:20:73: 00:f1:21:3e:d5:15:03:c3:75:8f:70:77:ce:2f:1c:44:fe:5b: 6f:ab:a7:ca:52:e4:76:a1:af:8f:9a:39:44:68:16:ee:3d:69: c6:a1:e2:8f:af:cc:52:f2:d9:89:e9:b4:fa:57:f7:c8:72:c1: df:0e:3c:a3:1e:e4:72:19:bb:ba:f9:c2:d3:21:be:a0:aa:2a: 44:64:e4:09:71:5d:6f:2e:d8:06:8a:a0:f4:6e:8e:01:57:42: 36:47:39:d9:e0:d1:f3:47:ed:3f:0c:9f:68:ee:44:1d:18:01: 35:51:b8:d7:c1:7c:90:2a:a7:d4:7f:f9:1d:de:41:22:61:da: 4b:41:79:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNB/L3ANcPJYacr0HL1qe1JMIVzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNTEyMDYyMDE2MDZaFw0yNTEyMTAwNjQzMDZaMDMxMTAvBgNV BAMTKDQyQzQwNkU3QkY2MUEyOUE5QTQzMTY4MzkyRkMzREU3RjE3NzlDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2RU+UzFDkcxbS2NXewm3oIj3d ZCKw9g5j34cPfdjwfnqU4rJWlmN1+PwXVgEAe4eSOZcBSG5eG4EDypH/AEUMJkDN B5PR1isx9AYlhLHecuHdpE9oxNOAXMeB+SDX7VbdO32LhlA24hzO50z0rb+L1qPy ig1tfWvGFITgFKs9PCO0Z8yJfyvAuwUeRU2qDF+TtFczZDHj5/kBJQb7bVVp2ISf Q6lkKn0ToKmZbvgEVwwflYoxNBlhNVCLiX3Ph6WRin+oswWgIuRtf/knMfq1lHK6 u1azrJePpDZ4ClrvafX2mOMDRikmKoKZ1VZpo+s/bBewb1V44/on/0dakFi3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQsQG579hopqaQxaDkvw95/F3nOAwHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxQ7o/yB/bXKMLOCDPDRyGwTlZjfS6RF4+J 7bcHnlHTfy/SG21m2BklHFvXH8L/caCdhLzv9tz4DuCYTc1PbtNcpm0BaHEJ2+XT P4auG5l7hBUcCj39ZSV4foVlNEyacXY3hRA+G8dfVthXNqqVh7r0Si4dgI1fSAyu gO8gcwDxIT7VFQPDdY9wd84vHET+W2+rp8pS5Hahr4+aOURoFu49acah4o+vzFLy 2YnptPpX98hywd8OPKMe5HIZu7r5wtMhvqCqKkRk5AlxXW8u2AaKoPRujgFXQjZH Odng0fNH7T8Mn2juRB0YATVRuNfBfJAqp9R/+R3eQSJh2ktBeZ0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:36 2025 by rpki-client