This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: i4ZrZMN1OOUvB3j+kJKEMPup5JkmJT6UzFX7QxixGow= Subject key identifier: 5A:A8:BD:B9:8C:10:A3:E4:5F:DF:5C:56:78:7A:98:04:40:6B:B1:BD Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 50DFC57CEE183E0CA0C76463C3C6E1341E637EBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 02AB Signing time: Sat 06 Dec 2025 01:51:38 +0000 Manifest this update: Sat 06 Dec 2025 01:46:38 +0000 Manifest next update: Tue 09 Dec 2025 06:28:38 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: sz2//cKL2lnXGtJpT3aD9hLtPHpGZpEk9j/3VQDM2fM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:df:c5:7c:ee:18:3e:0c:a0:c7:64:63:c3:c6:e1:34:1e:63:7e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Dec 6 01:46:38 2025 GMT Not After : Dec 9 06:28:38 2025 GMT Subject: CN=5AA8BDB98C10A3E45FDF5C56787A9804406BB1BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:05:25:c8:21:36:b7:30:9e:f4:aa:1b:93: 78:4c:d0:83:83:63:e2:83:01:2f:0e:cd:39:5d:c4: 85:b7:ed:30:2c:d7:8a:fb:61:8e:80:ce:37:d2:6f: 69:75:d8:ac:e4:84:6c:7b:17:47:26:84:b2:3f:69: b4:79:78:0a:78:93:2b:d6:4c:ff:ad:6e:02:4d:77: 32:26:d7:8f:5a:46:93:f7:af:08:ac:b8:69:05:66: 5f:2b:96:ad:30:ec:8e:5e:9b:7c:a9:d7:09:31:c0: 83:31:12:e0:84:65:d7:47:e9:d0:c5:1a:f7:63:67: ed:1f:80:a1:71:00:4e:bf:5f:d8:96:04:15:64:e6: f0:5e:4c:fa:02:31:ab:86:91:ea:51:5c:d3:b2:13: 27:82:10:8b:a4:18:0f:d3:c4:b7:1e:ae:37:92:f3: 06:f5:52:d6:15:4c:95:0a:54:25:65:eb:5f:b0:b3: 12:13:7e:e5:27:9f:73:52:a8:2c:f3:02:b8:8f:5b: 75:88:1f:27:0b:be:2c:42:32:25:b9:3c:93:cd:03: 06:5f:9b:78:a1:47:aa:70:d7:04:3a:1a:12:9f:83: 45:e4:c8:53:5b:c9:61:d1:9c:85:ea:c1:3a:f3:44: a6:09:a5:85:58:30:ed:3d:b3:b2:c2:31:49:7a:75: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:BD:B9:8C:10:A3:E4:5F:DF:5C:56:78:7A:98:04:40:6B:B1:BD X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:bc:30:18:51:14:b3:cb:60:ab:8e:89:66:d6:93:64:76:09: 44:1d:7d:a9:a3:a6:ba:f8:16:eb:43:a9:94:7b:99:eb:5b:f0: bd:0a:21:fc:03:31:34:3c:41:8b:21:43:86:09:dd:f4:11:33: 65:c8:5a:6b:25:8a:a1:0e:08:4a:95:67:e0:78:0b:1e:17:76: 54:37:4f:9a:fd:ae:a4:38:5f:e5:d6:81:1a:97:7d:2c:f9:17: c8:c5:82:ad:60:cc:c6:b6:2b:56:7e:07:6c:85:12:fb:59:22: 09:16:82:91:52:4b:22:96:7d:da:0b:9f:c8:7a:37:b0:01:e0: 15:a7:cf:d4:82:b2:bb:e2:26:b1:da:68:01:8b:8b:2c:34:f6: 1d:ed:9a:9c:80:4e:63:f6:da:3d:b9:c8:8d:ac:fc:4b:93:ab: 86:14:d1:43:23:3a:e5:b7:0f:c1:0b:f2:a3:c1:48:bd:e6:2f: 48:6e:1c:20:bf:e0:b9:a0:8f:13:7a:c4:5d:d8:de:8e:77:72: 06:80:67:cd:21:bb:75:99:40:2c:19:9f:b8:15:36:e3:69:b3: fe:c4:d5:52:bc:70:8a:66:d8:47:ff:a7:91:a3:10:4a:fc:ca: 6e:a7:b9:f7:a3:24:ed:9e:32:8b:e7:29:a7:ab:41:f4:14:eb: fa:71:43:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUN/FfO4YPgygx2Rjw8bhNB5jfr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTEyMDYwMTQ2MzhaFw0yNTEyMDkwNjI4MzhaMDMxMTAvBgNV BAMTKDVBQThCREI5OEMxMEEzRTQ1RkRGNUM1Njc4N0E5ODA0NDA2QkIxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wwUlyCE2tzCe9Kobk3hM0IOD Y+KDAS8OzTldxIW37TAs14r7YY6AzjfSb2l12KzkhGx7F0cmhLI/abR5eAp4kyvW TP+tbgJNdzIm149aRpP3rwisuGkFZl8rlq0w7I5em3yp1wkxwIMxEuCEZddH6dDF GvdjZ+0fgKFxAE6/X9iWBBVk5vBeTPoCMauGkepRXNOyEyeCEIukGA/TxLcerjeS 8wb1UtYVTJUKVCVl61+wsxITfuUnn3NSqCzzAriPW3WIHycLvixCMiW5PJPNAwZf m3ihR6pw1wQ6GhKfg0XkyFNbyWHRnIXqwTrzRKYJpYVYMO09s7LCMUl6dW3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqi9uYwQo+Rf31xWeHqYBEBrsb0wHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJe8MBhRFLPLYKuOiWbWk2R2CUQdfamjprr4 FutDqZR7metb8L0KIfwDMTQ8QYshQ4YJ3fQRM2XIWmsliqEOCEqVZ+B4Cx4XdlQ3 T5r9rqQ4X+XWgRqXfSz5F8jFgq1gzMa2K1Z+B2yFEvtZIgkWgpFSSyKWfdoLn8h6 N7AB4BWnz9SCsrviJrHaaAGLiyw09h3tmpyATmP22j25yI2s/EuTq4YU0UMjOuW3 D8EL8qPBSL3mL0huHCC/4LmgjxN6xF3Y3o53cgaAZ80hu3WZQCwZn7gVNuNps/7E 1VK8cIpm2Ef/p5GjEEr8ym6nufejJO2eMovnKaerQfQU6/pxQ8Q= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:57 2025 by rpki-client