This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: ixeeZIS0mu7pQTnC5KjXduXfIi72LIWsTGVPNq1pmjA= Subject key identifier: 89:2A:F2:44:96:76:AE:74:89:40:91:8E:E7:07:D5:12:EB:81:B8:3F Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 15EF4C86D9165DA67FF55E1D0E2A2C4B42E45105 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 01E2 Signing time: Sat 06 Dec 2025 15:41:31 +0000 Manifest this update: Sat 06 Dec 2025 15:36:31 +0000 Manifest next update: Wed 10 Dec 2025 01:10:31 +0000 Files and hashes: 1: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: 80MS0ZuTW+5iQNzQYBDQPZfjWsQsANAR7yyCgQ7zGBU=) 2: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: C0JSow11Jj04QsRskAqA6naBrmtSo5Wm65U+u+h5Tm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ef:4c:86:d9:16:5d:a6:7f:f5:5e:1d:0e:2a:2c:4b:42:e4:51:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Dec 6 15:36:31 2025 GMT Not After : Dec 10 01:10:31 2025 GMT Subject: CN=892AF2449676AE748940918EE707D512EB81B83F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:64:2c:ae:c4:ec:d3:35:39:11:6b:14:2d: a7:2d:57:16:43:40:22:c5:c6:56:0b:a5:a3:92:67: 6c:99:34:9f:48:d2:56:34:a0:b4:e7:b2:fa:38:70: 57:66:2e:e3:05:00:7c:7d:e9:ed:af:2b:04:f7:db: 79:5e:05:d5:7b:44:2f:03:d9:44:08:9c:54:86:6f: 8e:de:6f:26:ff:42:b9:31:93:ba:5e:f0:c3:fd:c7: d0:ec:7b:11:22:c6:95:70:ce:8f:3b:4e:0c:da:70: 0f:be:a6:5f:dc:5a:94:82:fb:d4:ae:9a:6a:ec:78: 19:e7:30:e2:97:b7:25:0e:67:00:be:72:a9:11:74: 6e:ca:97:75:38:b7:a3:89:7f:aa:57:86:58:1c:3b: 38:05:b8:33:aa:a1:7c:7f:66:2b:28:9d:67:9d:9b: 4b:74:6a:ba:23:f0:1e:0c:a7:79:bb:77:f5:8d:35: 6c:45:13:79:65:68:c2:6f:9a:ee:1a:eb:d8:df:1e: 01:29:71:a2:db:6f:42:c0:7e:24:74:7e:bf:31:ad: ac:f2:a0:a9:00:7c:c1:fe:40:ed:af:31:d6:7e:c6: 02:9d:cf:3e:90:6f:8b:8c:3f:e0:8d:b6:07:a7:b1: 15:a6:77:2f:b4:91:05:8d:cf:ed:01:c8:69:88:f1: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2A:F2:44:96:76:AE:74:89:40:91:8E:E7:07:D5:12:EB:81:B8:3F X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:be:3b:c4:b1:d1:15:fa:6e:f6:d4:73:6d:f3:93:4f:51:ca: f2:96:db:39:33:1e:db:6c:3b:6b:45:a1:a9:cb:40:02:ee:5b: 6d:02:7d:ee:0d:5f:49:6c:24:a0:90:5b:eb:49:b3:e6:86:e5: cb:1b:07:93:c6:17:1a:a8:0c:4f:79:a4:83:e9:d6:b2:fe:a6: b3:c5:4f:31:7a:aa:0a:cf:50:56:2e:80:86:ca:bc:e7:b5:65: fe:2c:4a:de:bf:bc:bb:c7:03:9c:e6:30:ba:44:46:30:26:b1: 44:98:40:49:83:93:e8:d5:7e:d6:d1:85:2a:80:08:0c:c1:1e: 1f:bc:8b:73:c9:48:5e:cb:06:1f:b7:80:92:c8:87:04:08:98: 44:44:b5:4b:a2:94:25:1b:d4:7c:19:4b:be:49:de:f1:3b:a7: f8:6f:35:08:da:1b:9f:46:a9:12:3a:87:04:6b:03:00:98:59: 90:a4:b5:d4:e7:ae:5e:ed:d5:a7:f6:d7:33:7e:07:fe:e3:75: 97:4d:be:dd:ef:0a:0c:4e:73:cb:19:9b:6d:77:b8:ea:35:39: 90:2e:32:1e:4a:21:74:e3:5d:31:15:3e:11:75:fa:96:ad:c7: e6:ac:64:26:a8:6b:63:d8:62:80:f0:d4:26:60:56:99:bf:33: 88:9c:02:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFe9MhtkWXaZ/9V4dDiosS0LkUQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTEyMDYxNTM2MzFaFw0yNTEyMTAwMTEwMzFaMDMxMTAvBgNV BAMTKDg5MkFGMjQ0OTY3NkFFNzQ4OTQwOTE4RUU3MDdENTEyRUI4MUI4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBWQsrsTs0zU5EWsULactVxZD QCLFxlYLpaOSZ2yZNJ9I0lY0oLTnsvo4cFdmLuMFAHx96e2vKwT323leBdV7RC8D 2UQInFSGb47ebyb/Qrkxk7pe8MP9x9DsexEixpVwzo87TgzacA++pl/cWpSC+9Su mmrseBnnMOKXtyUOZwC+cqkRdG7Kl3U4t6OJf6pXhlgcOzgFuDOqoXx/ZisonWed m0t0aroj8B4Mp3m7d/WNNWxFE3llaMJvmu4a69jfHgEpcaLbb0LAfiR0fr8xrazy oKkAfMH+QO2vMdZ+xgKdzz6Qb4uMP+CNtgensRWmdy+0kQWNz+0ByGmI8aV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiSryRJZ2rnSJQJGO5wfVEuuBuD8wHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADe+O8Sx0RX6bvbUc23zk09RyvKW2zkzHtts O2tFoanLQALuW20Cfe4NX0lsJKCQW+tJs+aG5csbB5PGFxqoDE95pIPp1rL+prPF TzF6qgrPUFYugIbKvOe1Zf4sSt6/vLvHA5zmMLpERjAmsUSYQEmDk+jVftbRhSqA CAzBHh+8i3PJSF7LBh+3gJLIhwQImEREtUuilCUb1HwZS75J3vE7p/hvNQjaG59G qRI6hwRrAwCYWZCktdTnrl7t1af21zN+B/7jdZdNvt3vCgxOc8sZm213uOo1OZAu Mh5KIXTjXTEVPhF1+patx+asZCaoa2PYYoDw1CZgVpm/M4icAh0= -----END CERTIFICATE-----Generated at Sun Dec 7 05:59:51 2025 by rpki-client