This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft File: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft (raw, json) Hash identifier: 9lTAPGNAWJIWwLRY02R1xGsI9H29bw7SDjoMNzD97/0= Subject key identifier: 2B:3B:95:26:5B:73:5F:D2:8E:0B:D2:4F:32:22:E9:69:C4:EE:7C:23 Authority key identifier: CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC Certificate issuer: /CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Certificate serial: 3943EB87E5CB990C28418AFE6611D8679F4DC653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft Manifest number: 35 Signing time: Thu 04 Dec 2025 22:41:50 +0000 Manifest this update: Thu 04 Dec 2025 22:36:50 +0000 Manifest next update: Mon 08 Dec 2025 02:41:50 +0000 Files and hashes: 1: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl (hash: LBRbdjpPsn1MpmEx7kdsBP73A1Yq0TyGiEYyEH4oHnM=) 2: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: 9Q3I81vfimJR2eOE3uBt/l1OU+u3ttXpoOc8s4Hxxs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:43:eb:87:e5:cb:99:0c:28:41:8a:fe:66:11:d8:67:9f:4d:c6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Validity Not Before: Dec 4 22:36:50 2025 GMT Not After : Dec 8 02:41:50 2025 GMT Subject: CN=2B3B95265B735FD28E0BD24F3222E969C4EE7C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:56:b8:b6:c2:ce:b3:ea:5c:ad:68:a8:08: 1e:31:5d:94:a5:1d:b4:a4:e3:05:49:cf:43:42:da: a8:80:33:eb:2b:5e:9c:28:01:b6:6f:b9:bb:17:8e: 9f:43:2f:40:56:73:66:57:f9:4b:90:a8:42:20:a9: a0:f2:28:cf:d9:e9:02:1f:49:bf:1b:cc:c5:be:3c: a8:d9:dd:d1:0c:4e:91:5f:de:cc:c7:9d:56:ad:ec: 91:06:8c:fc:97:8c:80:e5:53:cb:6e:2c:43:5d:6f: 99:f3:40:1b:cb:1b:a2:0a:b4:5c:0b:47:3b:ad:d2: 4f:b7:f8:99:a7:42:e7:74:ff:63:2e:a3:e8:07:c7: 32:7c:3b:6b:7c:08:d6:2f:34:ab:55:e2:60:f5:f3: cf:71:71:97:c0:b9:90:69:67:ff:77:d8:a7:4b:e2: 43:68:16:ae:d7:d0:e3:12:de:96:34:5d:06:05:87: c0:c5:ee:38:72:f4:97:35:8d:41:cb:7c:dc:e4:b4: 05:5d:c2:92:c0:c6:98:6d:90:d1:fa:f2:d8:e6:c3: 73:a0:84:00:6f:1e:a1:99:1b:13:c0:cc:80:bd:65: b1:b5:ed:24:ee:cf:1e:09:db:d5:13:f6:58:81:55: c5:3d:74:e3:03:5b:3f:c1:3f:c9:d8:1c:6f:05:ca: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3B:95:26:5B:73:5F:D2:8E:0B:D2:4F:32:22:E9:69:C4:EE:7C:23 X509v3 Authority Key Identifier: keyid:CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:dd:ef:6e:d4:38:d6:28:3a:d9:57:e7:db:17:e0:04:b5:ab: ea:76:72:d7:f2:1f:50:44:c0:92:e7:29:97:3c:b6:d3:85:18: a5:aa:c0:c9:5c:65:46:c8:c7:2e:af:fa:3d:63:9f:a9:fc:03: d8:6e:be:3f:73:78:66:d7:9e:8d:20:88:d1:fe:c2:94:77:80: 6d:6a:76:1d:26:d2:fc:1c:79:2d:92:cc:1e:59:04:ea:5e:29: 78:98:bc:02:d5:11:45:c6:86:02:51:bf:b3:f3:81:c4:4f:55: 58:b9:15:22:2a:70:a6:d6:34:8a:4b:bb:e0:a5:57:c8:d6:64: b9:9c:1b:b8:95:4d:1b:b0:72:aa:26:f3:fc:e1:c5:87:85:a0: bf:99:f4:c0:e7:98:d8:ba:0d:31:2a:62:fa:4d:1e:b4:33:c0: c7:1f:0a:0a:27:c7:6d:d4:71:49:91:60:d1:c9:af:9c:de:82: 17:37:e9:cd:b5:e6:dc:1d:0b:78:05:13:9e:78:43:4b:77:3f: b4:40:29:30:43:e6:17:ba:cd:f6:de:04:1d:f9:6f:5e:f3:b4: 29:4f:3c:1d:3e:c7:47:92:24:b7:e4:0d:83:fc:6a:0b:1e:fa: 08:36:17:40:03:b9:f9:53:8c:25:e3:3c:c0:b0:35:4d:5c:7e: 51:3f:78:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUPrh+XLmQwoQYr+ZhHYZ59NxlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4 QTcyOUZDQzAeFw0yNTEyMDQyMjM2NTBaFw0yNTEyMDgwMjQxNTBaMDMxMTAvBgNV BAMTKDJCM0I5NTI2NUI3MzVGRDI4RTBCRDI0RjMyMjJFOTY5QzRFRTdDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2R1a4tsLOs+pcrWioCB4xXZSl HbSk4wVJz0NC2qiAM+srXpwoAbZvubsXjp9DL0BWc2ZX+UuQqEIgqaDyKM/Z6QIf Sb8bzMW+PKjZ3dEMTpFf3szHnVat7JEGjPyXjIDlU8tuLENdb5nzQBvLG6IKtFwL Rzut0k+3+JmnQud0/2Muo+gHxzJ8O2t8CNYvNKtV4mD1889xcZfAuZBpZ/932KdL 4kNoFq7X0OMS3pY0XQYFh8DF7jhy9Jc1jUHLfNzktAVdwpLAxphtkNH68tjmw3Og hABvHqGZGxPAzIC9ZbG17STuzx4J29UT9liBVcU9dOMDWz/BP8nYHG8FyvuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKzuVJltzX9KOC9JPMiLpacTufCMwHwYDVR0j BBgwFoAUzuG1vp+MMMpxDBt+sibDZIpyn8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjkzZmM4Zi1hZmNjLTRkZWYtODA2Zi1mNDQ0OTNkMDdhM2YvMC9DRUUxQjVCRTlG OEMzMENBNzEwQzFCN0VCMjI2QzM2NDhBNzI5RkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4QTcy OUZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMz NjQ4QTcyOUZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfd727UONYoOtlX59sX4AS1q+p2ctfyH1BE wJLnKZc8ttOFGKWqwMlcZUbIxy6v+j1jn6n8A9huvj9zeGbXno0giNH+wpR3gG1q dh0m0vwceS2SzB5ZBOpeKXiYvALVEUXGhgJRv7PzgcRPVVi5FSIqcKbWNIpLu+Cl V8jWZLmcG7iVTRuwcqom8/zhxYeFoL+Z9MDnmNi6DTEqYvpNHrQzwMcfCgonx23U cUmRYNHJr5zeghc36c215twdC3gFE554Q0t3P7RAKTBD5he6zfbeBB35b17ztClP PB0+x0eSJLfkDYP8agse+gg2F0ADuflTjCXjPMCwNU1cflE/eB4= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:09 2025 by rpki-client