This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json) Hash identifier: j7zBTi6T4P0PPHe1/7HyKDDutkqaEluUU6DOvNti9bI= Subject key identifier: FD:5B:88:59:DF:14:76:F6:A8:DD:4D:C2:D7:76:AE:F7:B7:60:44:D0 Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 Certificate issuer: /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Certificate serial: 1145A067C2E7D3B4F4D1042CB6463387D802BBB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft Manifest number: E8 Signing time: Sat 06 Dec 2025 23:00:44 +0000 Manifest this update: Sat 06 Dec 2025 22:55:44 +0000 Manifest next update: Wed 10 Dec 2025 00:52:44 +0000 Files and hashes: 1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nQLud3Jn262khF6pI+ZrfSTaiFCpRTXR0OL4+TzR7ac=) 2: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: PMAtBuypMzKnDglQwn4CeWrrSIGqv7POhzjl2HS9GEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:45:a0:67:c2:e7:d3:b4:f4:d1:04:2c:b6:46:33:87:d8:02:bb:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Validity Not Before: Dec 6 22:55:44 2025 GMT Not After : Dec 10 00:52:44 2025 GMT Subject: CN=FD5B8859DF1476F6A8DD4DC2D776AEF7B76044D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:74:58:4f:bf:d2:49:1f:14:c2:c3:ca:a5: e0:48:e6:50:ee:3b:54:52:24:b5:1e:c3:96:4e:3a: b4:6f:48:14:af:c8:b5:68:be:8f:d6:36:d6:64:6a: 0e:4f:4b:2c:3f:45:2f:74:53:70:86:b7:81:6e:1f: 66:1d:1f:01:ee:8c:74:fb:69:1c:73:e8:06:9f:53: 64:a2:50:85:d9:3b:c8:0c:cc:0d:e8:61:93:04:0b: 6e:48:8b:d5:1f:bc:3c:3c:d3:e7:2a:6e:6c:d4:dc: e8:a8:04:95:5b:bd:e7:8c:af:14:ff:68:7e:81:a6: e4:93:0f:33:d3:1b:52:93:f0:d4:2a:7b:6b:76:b3: 87:7d:5c:25:1c:62:1d:14:25:84:bc:ea:9f:3d:13: 28:1d:a9:bf:17:36:91:0f:8d:84:4d:ae:24:8c:5a: b6:d7:53:5b:f8:56:14:16:c7:43:d8:79:33:42:c8: ba:95:bc:44:21:d2:67:99:ac:17:de:6c:02:a1:0c: 84:41:d2:ce:b4:c8:cd:f9:0a:b1:40:11:ab:cc:36: a5:94:f2:c1:2a:2b:ec:4a:0c:c0:03:c8:ac:5d:62: 13:a2:5a:cd:08:1f:ed:95:15:c5:9a:6a:aa:76:5e: 1d:07:89:e6:a6:b4:8e:5d:6e:be:96:26:7f:6a:96: e2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5B:88:59:DF:14:76:F6:A8:DD:4D:C2:D7:76:AE:F7:B7:60:44:D0 X509v3 Authority Key Identifier: keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6b:a6:d6:d0:7f:7c:f0:2d:d3:b3:c9:0c:49:94:60:b3:25: 4f:89:bd:63:3a:01:50:42:43:9a:ed:12:05:ea:34:51:4c:b7: 18:1c:9a:7b:72:b9:84:29:5c:50:d8:5d:93:77:63:66:7f:8d: 8f:66:49:ff:74:15:5e:61:81:ef:c4:cd:75:38:fe:65:32:fe: d1:ff:b2:e7:3a:dd:33:03:5a:4f:61:d2:92:59:00:cc:88:e5: 72:79:2b:d0:73:a7:0d:99:b5:b5:65:eb:1a:23:72:ca:f3:02: dd:04:60:12:a3:75:80:83:4e:11:cd:68:88:53:71:e8:23:32: 6a:e8:c5:5f:25:e2:76:f8:22:93:80:ca:ed:02:fc:4b:41:30: 57:a7:9f:1a:0e:0c:a1:91:b3:5b:e9:24:f2:e8:3c:fd:86:55: 10:ad:b9:77:ce:83:d1:44:95:54:91:fb:72:b0:1b:3f:d0:52: 3f:8f:0f:47:35:a8:e8:3e:07:12:27:f2:aa:34:bf:0f:39:55: b9:de:25:1f:a6:78:f7:85:85:ee:60:e5:c6:8a:7c:fe:94:34: 80:1f:44:d4:a3:e3:86:ef:2a:23:14:54:c9:e5:0b:ea:c8:89: 63:41:01:16:15:f6:68:73:dd:ea:ca:8c:e5:87:76:20:37:ce: 80:20:73:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEUWgZ8Ln07T00QQstkYzh9gCu7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1 RDY5NUE1NDAeFw0yNTEyMDYyMjU1NDRaFw0yNTEyMTAwMDUyNDRaMDMxMTAvBgNV BAMTKEZENUI4ODU5REYxNDc2RjZBOERENERDMkQ3NzZBRUY3Qjc2MDQ0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/z3RYT7/SSR8UwsPKpeBI5lDu O1RSJLUew5ZOOrRvSBSvyLVovo/WNtZkag5PSyw/RS90U3CGt4FuH2YdHwHujHT7 aRxz6AafU2SiUIXZO8gMzA3oYZMEC25Ii9UfvDw80+cqbmzU3OioBJVbveeMrxT/ aH6BpuSTDzPTG1KT8NQqe2t2s4d9XCUcYh0UJYS86p89Eygdqb8XNpEPjYRNriSM WrbXU1v4VhQWx0PYeTNCyLqVvEQh0meZrBfebAKhDIRB0s60yM35CrFAEavMNqWU 8sEqK+xKDMADyKxdYhOiWs0IH+2VFcWaaqp2Xh0HieamtI5dbr6WJn9qluLPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/VuIWd8Udvao3U3C13au97dgRNAwHwYDVR0j BBgwFoAU4H8OjeJXLce4E37AZ59CZF1pWlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGYyODVlZi0zNDUzLTQxNzktYTU1My1mMTk1OTdkZTlkZWQvMC9FMDdGMEU4REUy NTcyREM3QjgxMzdFQzA2NzlGNDI2NDVENjk1QTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1RDY5 NUE1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThmMjg1ZWYtMzQ1My00MTc5LWE1 NTMtZjE5NTk3ZGU5ZGVkLzAvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQy NjQ1RDY5NUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZrptbQf3zwLdOzyQxJlGCzJU+JvWM6AVBC Q5rtEgXqNFFMtxgcmntyuYQpXFDYXZN3Y2Z/jY9mSf90FV5hge/EzXU4/mUy/tH/ suc63TMDWk9h0pJZAMyI5XJ5K9Bzpw2ZtbVl6xojcsrzAt0EYBKjdYCDThHNaIhT cegjMmroxV8l4nb4IpOAyu0C/EtBMFennxoODKGRs1vpJPLoPP2GVRCtuXfOg9FE lVSR+3KwGz/QUj+PD0c1qOg+BxIn8qo0vw85VbneJR+mePeFhe5g5caKfP6UNIAf RNSj44bvKiMUVMnlC+rIiWNBARYV9mhz3erKjOWHdiA3zoAgc4M= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:44 2025 by rpki-client