This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: KCozOiHsT+80HdB1g+TMTskIVyEvd6pYuQ8KPsVhiso= Subject key identifier: 5D:DB:84:6D:AE:AE:9F:62:76:0F:5C:DC:5A:4F:5B:A6:EF:74:4A:17 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 69B60D26FA79D1F01A8CDA85323245223D323889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 02D5 Signing time: Sat 06 Dec 2025 11:02:14 +0000 Manifest this update: Sat 06 Dec 2025 10:57:13 +0000 Manifest next update: Tue 09 Dec 2025 23:00:13 +0000 Files and hashes: 1: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: t0A77OHFTDCpEwfA+MErwu/qQKgxuHH3HAabEnmLc6o=) 2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b6:0d:26:fa:79:d1:f0:1a:8c:da:85:32:32:45:22:3d:32:38:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Dec 6 10:57:13 2025 GMT Not After : Dec 9 23:00:13 2025 GMT Subject: CN=5DDB846DAEAE9F62760F5CDC5A4F5BA6EF744A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:7e:03:ae:89:e8:38:46:82:53:7f:fa:0f: d5:46:29:46:7c:41:35:be:98:61:9c:db:27:3b:12: de:77:f8:cf:cd:6f:88:7d:8b:b9:12:51:47:fe:f5: e7:f7:27:e6:e6:10:f5:1c:df:43:49:8c:fb:1f:c8: 38:99:b1:60:d2:36:42:0f:bb:a3:13:fd:44:8a:c5: 9b:b8:5e:c3:2a:d1:c5:cc:5b:ff:92:05:3a:19:ec: 9e:40:ac:ff:3b:d6:47:38:75:f2:67:3d:48:c5:eb: 86:03:86:cd:76:3d:eb:fa:1c:56:ce:e7:80:21:f0: 0b:d7:19:9f:8c:60:45:2d:29:3a:04:c1:6c:b2:c6: d8:ca:7c:c9:e5:57:22:d2:65:75:12:93:3d:79:26: 61:b7:bc:33:23:67:90:90:c9:38:da:58:40:f4:60: 3a:c5:93:f5:3a:59:e5:b4:0e:a7:59:50:01:bc:df: f4:8a:17:00:72:51:0a:f0:1c:4f:6b:b2:1e:fb:93: 82:ed:84:5f:a0:89:9d:c4:0b:9e:a7:69:ed:a9:2e: a3:97:14:0e:27:12:0f:d4:d5:37:ac:80:17:31:a4: c6:9b:bd:6f:f5:28:61:39:03:01:ad:68:1c:3a:fe: 7a:0f:28:2c:98:7e:c1:4d:47:44:69:fc:55:46:2c: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DB:84:6D:AE:AE:9F:62:76:0F:5C:DC:5A:4F:5B:A6:EF:74:4A:17 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:0d:9e:d7:66:dd:3c:e3:d9:8e:0c:9c:bf:82:88:14:25:97: d4:8f:de:12:66:84:e8:dd:74:69:1f:e3:f6:71:1a:49:26:66: b2:db:79:cc:79:b8:c8:d1:93:be:3a:96:49:92:62:e5:48:b6: a0:43:ac:da:c2:9f:99:1b:e5:2e:3d:72:6a:6f:2f:42:da:75: 64:13:61:5f:86:ce:0f:73:b5:6e:29:8b:9a:e4:4b:c2:5b:6a: 12:8a:80:d3:41:77:ba:99:6a:b1:51:41:dd:82:1b:a7:81:68: a2:09:ff:e9:b7:6f:93:96:77:ba:cc:c4:70:4f:63:74:56:cc: e9:7a:ff:c8:f6:d3:56:4d:66:dd:7c:df:6a:3f:b7:3e:5b:c1: a3:c3:57:92:32:8e:0a:36:2f:16:1b:03:ab:99:a9:38:f1:f6: 2b:19:e8:99:c4:c8:4a:f3:e8:f1:3c:a1:47:f1:0b:20:54:94: d0:5f:31:23:27:6d:a4:f6:17:f7:40:1a:a5:4d:95:0e:99:49: ba:5b:a3:51:f7:58:da:1e:05:29:9d:c9:a1:5e:d9:7c:5d:91: ae:1c:6c:7c:1c:0a:ff:de:91:3e:15:12:b2:57:a2:92:45:4b: e7:e4:cf:b3:36:a1:97:32:d9:57:7d:ed:3d:12:67:d7:91:ed: 86:1b:c1:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabYNJvp50fAajNqFMjJFIj0yOIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTEyMDYxMDU3MTNaFw0yNTEyMDkyMzAwMTNaMDMxMTAvBgNV BAMTKDVEREI4NDZEQUVBRTlGNjI3NjBGNUNEQzVBNEY1QkE2RUY3NDRBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqC34DronoOEaCU3/6D9VGKUZ8 QTW+mGGc2yc7Et53+M/Nb4h9i7kSUUf+9ef3J+bmEPUc30NJjPsfyDiZsWDSNkIP u6MT/USKxZu4XsMq0cXMW/+SBToZ7J5ArP871kc4dfJnPUjF64YDhs12Pev6HFbO 54Ah8AvXGZ+MYEUtKToEwWyyxtjKfMnlVyLSZXUSkz15JmG3vDMjZ5CQyTjaWED0 YDrFk/U6WeW0DqdZUAG83/SKFwByUQrwHE9rsh77k4LthF+giZ3EC56nae2pLqOX FA4nEg/U1TesgBcxpMabvW/1KGE5AwGtaBw6/noPKCyYfsFNR0Rp/FVGLNwzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXduEba6un2J2D1zcWk9bpu90ShcwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYNntdm3Tzj2Y4MnL+CiBQll9SP3hJmhOjd dGkf4/ZxGkkmZrLbecx5uMjRk746lkmSYuVItqBDrNrCn5kb5S49cmpvL0LadWQT YV+Gzg9ztW4pi5rkS8JbahKKgNNBd7qZarFRQd2CG6eBaKIJ/+m3b5OWd7rMxHBP Y3RWzOl6/8j201ZNZt1832o/tz5bwaPDV5Iyjgo2LxYbA6uZqTjx9isZ6JnEyErz 6PE8oUfxCyBUlNBfMSMnbaT2F/dAGqVNlQ6ZSbpbo1H3WNoeBSmdyaFe2Xxdka4c bHwcCv/ekT4VErJXopJFS+fkz7M2oZcy2Vd97T0SZ9eR7YYbwQ8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:32:25 2025 by rpki-client