This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft File: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json) Hash identifier: uXU5kym6B8SHW4Zs/CyJHQjhquvOWV2BA6R/9QhQxow= Subject key identifier: 94:31:62:56:B4:B8:6F:F5:E8:6F:BD:3E:F0:B4:9E:F4:81:95:FC:A9 Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Certificate serial: 494F1BD2A5C00162CD7108255939E2EB69B6D663 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft Manifest number: 0218 Signing time: Fri 05 Dec 2025 09:52:02 +0000 Manifest this update: Fri 05 Dec 2025 09:47:02 +0000 Manifest next update: Mon 08 Dec 2025 16:59:02 +0000 Files and hashes: 1: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: ztOieajHr1k+CIYjNgErkUbe6vEvP2EXx+nQ8S+WL90=) 2: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: Xa286HSUo0fyGgMTxnpNWC6f7whVJXhK/uFiw4eD3FE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4f:1b:d2:a5:c0:01:62:cd:71:08:25:59:39:e2:eb:69:b6:d6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Validity Not Before: Dec 5 09:47:02 2025 GMT Not After : Dec 8 16:59:02 2025 GMT Subject: CN=94316256B4B86FF5E86FBD3EF0B49EF48195FCA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a8:45:fb:dd:bc:a8:c0:fe:a4:07:c4:f3:a0: cb:9a:92:85:55:8d:8b:77:20:54:52:42:67:1e:97: 54:3c:42:96:25:57:7a:87:7e:b4:bc:ee:3e:99:3a: 92:3f:fd:2d:7f:91:a8:c0:98:87:51:28:2b:46:d0: 5f:d7:33:96:3c:73:b8:c5:0b:23:4a:65:11:46:b8: 9e:9c:58:d3:83:a8:03:9b:ae:da:bb:04:25:12:0b: e1:f6:5d:52:49:fa:eb:4c:af:e8:03:ca:96:41:45: 65:53:1d:50:21:c9:d7:3e:76:65:7a:bc:63:82:4f: 6f:aa:4f:88:db:94:5e:2d:37:2f:84:16:db:bd:a6: 16:1f:6b:7b:ac:04:16:a5:c2:19:a7:47:76:99:9a: 48:dd:c8:6e:aa:44:93:3a:e1:a4:ef:0f:db:34:7e: 28:f9:0c:54:73:a6:a3:21:04:df:97:0f:b2:ae:78: c5:5e:37:c6:9f:25:5e:d8:dc:ac:73:56:f7:01:57: fa:43:7f:10:0f:3d:37:49:fe:83:2a:5d:0d:3d:55: df:cd:28:a3:c3:ac:0e:9d:7c:2a:a4:8b:07:df:72: d5:96:4e:3c:be:f6:f0:e7:05:ae:89:fc:41:26:3e: 26:8b:51:e4:18:35:83:3e:4d:bc:fd:ee:35:e5:fd: f4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:31:62:56:B4:B8:6F:F5:E8:6F:BD:3E:F0:B4:9E:F4:81:95:FC:A9 X509v3 Authority Key Identifier: keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:9b:6c:9e:5a:c7:b9:5f:5a:c5:45:d0:8b:b0:e7:b6:cc:52: 85:f4:bf:16:88:1b:ec:c6:01:80:c0:0c:f0:b8:11:44:d1:40: 1e:2f:28:4d:85:95:87:cb:b8:cb:0c:f2:e0:48:40:85:31:be: 06:d7:92:6b:52:56:7d:56:be:5c:b5:43:e0:f4:6d:56:79:f5: 64:b1:23:12:a6:c1:85:08:d9:22:e0:62:fd:61:94:6c:c4:a3: 1e:31:75:d7:e8:94:8f:5e:6e:79:3d:05:51:0b:f6:bd:8f:55: e6:f4:0c:dd:61:74:64:15:51:1e:62:f1:25:50:11:a6:2b:59: 95:f7:c8:0a:2b:d8:7d:e3:87:73:9d:71:11:38:dc:ff:40:dd: 06:07:9e:47:83:c7:b3:80:ce:2d:71:d6:e9:dc:9b:58:e8:a7: eb:1e:b2:2e:ab:94:a6:93:b4:4c:b6:59:5d:6c:fa:cd:7c:52: 8b:8c:1e:fb:58:0b:be:0c:c8:f5:07:1a:5f:a1:77:ca:87:e4: a0:9b:43:bf:28:9a:ee:a0:81:42:ad:d8:fd:21:df:4f:f3:d1: d2:aa:ca:d5:5d:b5:22:e8:7c:44:7a:11:c8:af:81:7d:15:d0: a1:19:83:b6:25:aa:a7:0f:13:85:58:14:fb:f0:39:d2:b3:ac: 08:4b:fc:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSU8b0qXAAWLNcQglWTni62m21mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG ODdGM0VDODAeFw0yNTEyMDUwOTQ3MDJaFw0yNTEyMDgxNjU5MDJaMDMxMTAvBgNV BAMTKDk0MzE2MjU2QjRCODZGRjVFODZGQkQzRUYwQjQ5RUY0ODE5NUZDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpqEX73byowP6kB8TzoMuakoVV jYt3IFRSQmcel1Q8QpYlV3qHfrS87j6ZOpI//S1/kajAmIdRKCtG0F/XM5Y8c7jF CyNKZRFGuJ6cWNODqAObrtq7BCUSC+H2XVJJ+utMr+gDypZBRWVTHVAhydc+dmV6 vGOCT2+qT4jblF4tNy+EFtu9phYfa3usBBalwhmnR3aZmkjdyG6qRJM64aTvD9s0 fij5DFRzpqMhBN+XD7KueMVeN8afJV7Y3KxzVvcBV/pDfxAPPTdJ/oMqXQ09Vd/N KKPDrA6dfCqkiwffctWWTjy+9vDnBa6J/EEmPiaLUeQYNYM+Tbz97jXl/fSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlDFiVrS4b/Xob70+8LSe9IGV/KkwHwYDVR0j BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG M0VDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBB MjhGODdGM0VDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSbbJ5ax7lfWsVF0Iuw57bMUoX0vxaIG+zG AYDADPC4EUTRQB4vKE2FlYfLuMsM8uBIQIUxvgbXkmtSVn1Wvly1Q+D0bVZ59WSx IxKmwYUI2SLgYv1hlGzEox4xddfolI9ebnk9BVEL9r2PVeb0DN1hdGQVUR5i8SVQ EaYrWZX3yAor2H3jh3OdcRE43P9A3QYHnkeDx7OAzi1x1uncm1jop+sesi6rlKaT tEy2WV1s+s18UouMHvtYC74MyPUHGl+hd8qH5KCbQ78omu6ggUKt2P0h30/z0dKq ytVdtSLofER6EcivgX0V0KEZg7YlqqcPE4VYFPvwOdKzrAhL/N4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:22 2025 by rpki-client