This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: MfWdju2IWxsxmG6AfJ9COpZCag/ze6CZjl6T0Oa5zRQ= Subject key identifier: DB:63:42:66:FB:31:2C:54:87:9F:D1:9F:1A:84:96:F3:BA:D6:16:72 Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 2ABEBF44E5813B8EE054569E147C8F3841B8006D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 01A3 Signing time: Fri 05 Dec 2025 12:41:16 +0000 Manifest this update: Fri 05 Dec 2025 12:36:16 +0000 Manifest next update: Mon 08 Dec 2025 18:00:16 +0000 Files and hashes: 1: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 2: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 3: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: Q/J1aZZB0fOiysNJI3m2A+hcnJdMvelyzmi281IyN6U=) 4: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 5: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) 6: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:be:bf:44:e5:81:3b:8e:e0:54:56:9e:14:7c:8f:38:41:b8:00:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Dec 5 12:36:16 2025 GMT Not After : Dec 8 18:00:16 2025 GMT Subject: CN=DB634266FB312C54879FD19F1A8496F3BAD61672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:30:21:76:92:13:75:3f:c5:1e:59:16:d7: 64:f8:e4:d1:d3:34:43:7a:fd:90:b5:bc:99:8e:91: d5:41:e5:3f:d6:93:ba:4a:22:c2:92:22:ef:60:f2: d5:22:77:b2:59:40:b8:2b:8f:8c:ab:d9:9d:98:01: 54:cd:9b:6c:0b:99:ba:cd:94:0b:02:1b:f4:60:40: 89:8a:f6:6a:2a:02:63:7b:d7:be:8a:ff:43:33:ce: 5a:38:85:67:45:d6:0f:3a:8f:7a:f4:6b:d9:b3:59: cf:59:24:52:63:03:b8:13:80:a0:02:46:2d:ec:05: e9:45:c1:0a:8a:db:c2:df:54:8d:f7:88:71:ef:ee: 27:b0:9a:aa:db:9c:5a:d6:8c:bf:87:db:51:14:15: 5c:df:a5:a3:11:7e:58:50:8e:f9:4b:a8:d2:2b:d9: b4:5b:d1:66:6a:78:73:3f:d2:8b:bd:86:09:b6:12: 5c:10:7c:fd:e1:74:6e:cd:2b:7d:eb:76:7b:71:23: c3:c2:c4:a0:d5:5c:26:5c:59:38:4e:3f:de:e5:5b: 37:29:f9:c1:79:a5:5f:b2:31:0f:ea:91:6e:ea:b4: 7a:9d:80:d4:72:fd:c8:7e:a4:89:dd:88:d1:8a:04: 6a:ef:70:f0:66:1a:5c:d6:f1:1a:69:4d:bf:7c:89: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:63:42:66:FB:31:2C:54:87:9F:D1:9F:1A:84:96:F3:BA:D6:16:72 X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5a:8b:0d:e7:92:06:30:f5:5c:75:c3:08:95:65:6c:1a:c7: f9:db:31:d2:b0:d8:2a:cd:e1:35:ef:1f:39:c8:53:1a:51:9f: 32:ed:84:d4:2b:a5:99:b8:a4:4d:cf:97:6c:17:f7:a7:4b:33: e3:8e:1a:65:20:0a:77:b7:7a:11:e5:23:0c:43:4f:f6:1b:10: 62:13:44:71:80:da:1a:e2:96:93:79:51:8e:17:aa:a9:f3:7a: 7c:db:7a:03:31:54:f5:e3:94:ec:8b:d1:22:d8:f0:93:af:b7: 77:22:29:13:80:30:c7:35:d9:f5:80:9e:a0:8f:bf:0a:a1:6e: 12:1d:0d:47:c5:e5:49:26:54:6a:a6:f2:5c:36:43:bb:35:84: f5:ff:9e:60:b8:e8:51:9f:cd:92:83:73:56:aa:f1:f6:e9:22: 94:f5:36:79:13:ab:5d:94:30:99:8d:ad:97:3e:88:ad:37:2e: b7:73:51:7a:c0:a1:3d:28:2d:22:3c:45:c0:e8:05:95:94:b3: d2:39:51:f9:7d:20:09:9e:d1:81:1d:b6:b1:36:02:0d:c2:fe: 9a:6c:7f:3b:92:99:ce:ba:bd:ce:fa:02:a7:f2:8e:9a:61:7c: 12:04:6b:38:4f:bf:65:f5:da:30:af:2c:1b:78:50:a8:a3:42: 77:13:03:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKr6/ROWBO47gVFaeFHyPOEG4AG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTEyMDUxMjM2MTZaFw0yNTEyMDgxODAwMTZaMDMxMTAvBgNV BAMTKERCNjM0MjY2RkIzMTJDNTQ4NzlGRDE5RjFBODQ5NkYzQkFENjE2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyjAhdpITdT/FHlkW12T45NHT NEN6/ZC1vJmOkdVB5T/Wk7pKIsKSIu9g8tUid7JZQLgrj4yr2Z2YAVTNm2wLmbrN lAsCG/RgQImK9moqAmN7176K/0Mzzlo4hWdF1g86j3r0a9mzWc9ZJFJjA7gTgKAC Ri3sBelFwQqK28LfVI33iHHv7iewmqrbnFrWjL+H21EUFVzfpaMRflhQjvlLqNIr 2bRb0WZqeHM/0ou9hgm2ElwQfP3hdG7NK33rdntxI8PCxKDVXCZcWThOP97lWzcp +cF5pV+yMQ/qkW7qtHqdgNRy/ch+pIndiNGKBGrvcPBmGlzW8RppTb98iXGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22NCZvsxLFSHn9GfGoSW87rWFnIwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5aiw3nkgYw9Vx1wwiVZWwax/nbMdKw2CrN 4TXvHznIUxpRnzLthNQrpZm4pE3Pl2wX96dLM+OOGmUgCne3ehHlIwxDT/YbEGIT RHGA2hrilpN5UY4XqqnzenzbegMxVPXjlOyL0SLY8JOvt3ciKROAMMc12fWAnqCP vwqhbhIdDUfF5UkmVGqm8lw2Q7s1hPX/nmC46FGfzZKDc1aq8fbpIpT1NnkTq12U MJmNrZc+iK03LrdzUXrAoT0oLSI8RcDoBZWUs9I5Ufl9IAme0YEdtrE2Ag3C/pps fzuSmc66vc76AqfyjpphfBIEazhPv2X12jCvLBt4UKijQncTAyk= -----END CERTIFICATE-----Generated at Sun Dec 7 01:56:54 2025 by rpki-client