This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: 7sMoC/9PiGNzJLe4HQaMbeesieDN+Je0w1OlTVEn4UY= Subject key identifier: 98:99:35:6C:21:D7:88:B4:EF:30:99:5A:2B:28:2A:FE:85:89:1F:F1 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 7726A1383E03B2C4961BEEDF71D0CD40685E1A2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 037E Signing time: Sat 06 Dec 2025 14:21:55 +0000 Manifest this update: Sat 06 Dec 2025 14:16:55 +0000 Manifest next update: Tue 09 Dec 2025 14:44:55 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) 2: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 3: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: WLCkBQgLVjU9UR2UnNwqlBZ/vTomkopJovX9lmpQCVM=) 4: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:26:a1:38:3e:03:b2:c4:96:1b:ee:df:71:d0:cd:40:68:5e:1a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Dec 6 14:16:55 2025 GMT Not After : Dec 9 14:44:55 2025 GMT Subject: CN=9899356C21D788B4EF30995A2B282AFE85891FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:f1:d7:a5:81:c7:b6:06:91:11:6c:9b:95: d6:28:f9:ea:f6:6b:9e:66:41:6c:a8:63:0a:8d:20: 35:8e:e6:8d:8c:dc:83:a1:ae:a3:f0:47:c5:cb:ee: 39:59:78:40:90:bb:5f:eb:5d:d7:df:8b:b3:a6:87: ca:26:46:f0:fd:a4:56:4e:28:71:74:77:32:3f:2a: eb:80:c2:21:99:8e:33:26:9b:41:5a:70:24:88:9b: d8:ef:f8:bd:e8:28:c2:97:60:db:7e:5a:dc:56:10: 6f:4a:05:db:fa:24:4b:9b:9d:f4:cd:8b:23:52:44: 4f:2b:ec:b2:4c:54:8d:e7:4a:f5:11:89:91:1d:a6: 23:bd:47:a6:00:96:a5:a5:26:0a:10:62:bd:d9:bc: b8:1f:95:43:c8:5c:5f:b0:b5:cb:10:9c:a9:e2:72: b7:d5:d0:3c:1e:51:ab:73:58:5b:1d:ba:d2:ba:07: 7e:85:5f:50:84:b7:3a:e2:6c:76:56:ae:09:d7:be: ba:2c:c7:89:87:36:df:ae:fe:71:36:9b:39:9d:aa: 6f:29:0a:6f:44:e5:8d:f4:bc:f0:5f:0b:75:fa:18: f3:1f:0d:4b:bb:fa:0e:d0:2b:e1:ef:1f:5a:fe:d3: 2d:a1:42:ad:a9:eb:67:4b:d2:a8:70:37:ab:7c:07: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:99:35:6C:21:D7:88:B4:EF:30:99:5A:2B:28:2A:FE:85:89:1F:F1 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a4:20:1b:4d:83:4e:c4:69:c6:77:46:4c:55:e5:90:4f:0c: a4:f4:c9:ed:b2:9d:16:3d:e8:fa:96:7b:0c:86:22:3d:38:f3: 2c:25:bc:dc:1f:19:2d:35:47:49:18:34:6f:5a:19:ed:29:70: 0c:69:bb:12:a5:69:05:1c:f1:f7:18:11:d4:6c:a3:63:ab:f7: dd:22:dd:f8:a9:12:93:df:a1:e5:89:e8:a1:a5:2b:57:72:ae: de:0e:70:c9:17:77:4c:ee:36:44:0e:31:20:4d:78:09:eb:15: 1b:10:da:03:1a:7f:fe:bc:76:82:9b:3a:2a:de:c3:e1:e4:71: d3:dd:17:9e:a8:ff:b1:11:43:fe:90:12:00:cf:09:1e:7a:0d: 2e:10:a9:f8:dc:ac:97:3b:79:b7:8d:0d:01:c5:b7:2e:ed:fb: ed:f1:47:37:d7:de:12:69:b0:d2:d8:27:a8:c8:82:0d:c2:55: 8f:64:ce:c9:5e:5b:d2:d5:86:a1:3d:06:a2:46:80:1f:29:51: 87:49:49:00:ce:10:97:13:af:16:24:b6:68:e3:2d:6c:25:6b: d3:94:7e:2b:ac:88:48:7f:51:70:d3:49:7f:f0:d4:ba:15:e7: 0b:2d:97:1e:a7:11:fe:fe:33:9e:9d:0a:0b:f9:79:68:10:a4: 02:f9:23:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyahOD4DssSWG+7fcdDNQGheGi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTEyMDYxNDE2NTVaFw0yNTEyMDkxNDQ0NTVaMDMxMTAvBgNV BAMTKDk4OTkzNTZDMjFENzg4QjRFRjMwOTk1QTJCMjgyQUZFODU4OTFGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsfHXpYHHtgaREWybldYo+er2 a55mQWyoYwqNIDWO5o2M3IOhrqPwR8XL7jlZeECQu1/rXdffi7Omh8omRvD9pFZO KHF0dzI/KuuAwiGZjjMmm0FacCSIm9jv+L3oKMKXYNt+WtxWEG9KBdv6JEubnfTN iyNSRE8r7LJMVI3nSvURiZEdpiO9R6YAlqWlJgoQYr3ZvLgflUPIXF+wtcsQnKni crfV0DweUatzWFsdutK6B36FX1CEtzribHZWrgnXvrosx4mHNt+u/nE2mzmdqm8p Cm9E5Y30vPBfC3X6GPMfDUu7+g7QK+HvH1r+0y2hQq2p62dL0qhwN6t8B0D7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmJk1bCHXiLTvMJlaKygq/oWJH/EwHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKekIBtNg07EacZ3RkxV5ZBPDKT0ye2ynRY9 6PqWewyGIj048ywlvNwfGS01R0kYNG9aGe0pcAxpuxKlaQUc8fcYEdRso2Or990i 3fipEpPfoeWJ6KGlK1dyrt4OcMkXd0zuNkQOMSBNeAnrFRsQ2gMaf/68doKbOire w+HkcdPdF56o/7ERQ/6QEgDPCR56DS4QqfjcrJc7ebeNDQHFty7t++3xRzfX3hJp sNLYJ6jIgg3CVY9kzsleW9LVhqE9BqJGgB8pUYdJSQDOEJcTrxYktmjjLWwla9OU fiusiEh/UXDTSX/w1LoV5wstlx6nEf7+M56dCgv5eWgQpAL5I6o= -----END CERTIFICATE-----Generated at Sun Dec 7 06:18:04 2025 by rpki-client