This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: aBQiGAOXdBcZqfbDdWeSbMLc2dLH8qs8oOrwsYZK6wc= Subject key identifier: AB:F2:C7:6F:2C:AF:60:FB:AB:33:94:03:44:54:8F:97:2E:62:1F:74 Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 6AC3AF55C70009ED2B3388ED18A65AF9BFBA93B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 0535 Signing time: Sun 07 Dec 2025 00:30:05 +0000 Manifest this update: Sun 07 Dec 2025 00:25:05 +0000 Manifest next update: Wed 10 Dec 2025 09:46:05 +0000 Files and hashes: 1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) 2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: b5ZD0iWhRFcX+xFIAYvwo5qipOAISAGZhqr9ika3UsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c3:af:55:c7:00:09:ed:2b:33:88:ed:18:a6:5a:f9:bf:ba:93:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Dec 7 00:25:05 2025 GMT Not After : Dec 10 09:46:05 2025 GMT Subject: CN=ABF2C76F2CAF60FBAB33940344548F972E621F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:48:ba:99:89:f6:a9:85:69:92:9e:d8:6e:0a: a0:19:4a:56:af:cd:85:a8:41:d1:e1:cf:6f:6f:fb: 1b:8e:e2:e6:d9:0b:1b:41:4f:28:b7:6c:fb:5d:01: 71:26:27:90:4f:aa:bf:bb:55:30:65:c8:fd:91:d9: d8:88:4f:02:04:9e:69:4c:c7:26:f3:a3:f4:6e:21: 7e:6f:59:76:67:2f:ac:42:b1:ad:c5:e2:a0:64:c1: 89:77:ca:58:04:2a:66:b9:26:a3:e9:4d:ee:59:23: 2b:b1:f8:3d:29:1e:f4:b0:47:ad:3a:87:f3:10:e4: 4f:77:55:26:59:c1:23:e5:e4:d2:bb:ac:30:9d:d9: 85:df:c6:9f:39:e8:a0:c7:88:49:a9:e7:dc:2a:72: 02:64:e2:2b:2a:05:b7:99:bc:f1:91:88:37:0c:83: ed:bc:c0:31:f9:6a:c2:7a:14:a5:e1:61:55:43:b6: 8a:3d:ca:38:a4:19:51:bb:fe:1b:a1:f9:bd:6d:74: 78:ad:9d:2e:e4:e9:ac:a3:9e:10:5e:c9:10:6f:a0: ca:85:7c:d1:b0:e3:95:9c:a2:35:ff:11:60:f3:75: 2f:b2:08:ab:36:b7:03:bc:ae:df:5b:e9:30:12:26: 49:38:c9:e3:e3:93:88:38:61:35:ab:41:aa:b2:8c: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F2:C7:6F:2C:AF:60:FB:AB:33:94:03:44:54:8F:97:2E:62:1F:74 X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6e:3e:e6:6a:2e:10:19:27:42:99:a0:90:00:a3:05:0c:f2: 31:49:04:cd:21:58:6e:1e:98:4d:d5:ed:db:f9:0a:54:1e:70: 9b:dd:89:19:4a:e1:4c:06:1d:e8:a2:8c:9e:53:2f:db:d0:7c: 00:c5:0d:a3:ae:45:6b:e7:b5:59:03:a8:52:5a:af:a5:f9:cb: fb:c5:26:16:ec:eb:5b:81:a9:3b:5d:57:5d:d3:42:46:ea:21: 8a:55:07:d1:c8:86:98:94:c7:40:74:b1:3f:25:44:49:41:b3: e8:e4:de:ee:a0:e6:1d:32:fc:e2:9f:2f:58:25:e2:80:c6:07: 47:7b:ca:a1:9a:fc:3c:8a:83:e4:ee:48:05:1a:24:82:c5:b8: bc:f2:a4:cf:a3:4c:79:e6:fd:0e:7a:f0:1c:39:8d:23:c1:fd: 70:5b:4a:fd:1d:9b:65:ef:04:1e:70:80:bf:5c:05:a4:f0:4e: 87:c3:65:8d:29:97:54:c2:22:f4:3e:33:e7:e5:13:5a:58:35: ef:47:ca:6a:67:6f:f5:87:21:e5:13:3c:41:c9:a4:81:62:14: a1:a5:ed:bf:dc:0e:cc:cc:ed:95:9b:28:ac:bb:f6:7f:61:85: 03:84:73:54:ed:13:a4:76:dd:a0:b3:ea:81:99:d0:2d:0d:df: 17:38:5d:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasOvVccACe0rM4jtGKZa+b+6k7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNTEyMDcwMDI1MDVaFw0yNTEyMTAwOTQ2MDVaMDMxMTAvBgNV BAMTKEFCRjJDNzZGMkNBRjYwRkJBQjMzOTQwMzQ0NTQ4Rjk3MkU2MjFGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SLqZifaphWmSnthuCqAZSlav zYWoQdHhz29v+xuO4ubZCxtBTyi3bPtdAXEmJ5BPqr+7VTBlyP2R2diITwIEnmlM xybzo/RuIX5vWXZnL6xCsa3F4qBkwYl3ylgEKma5JqPpTe5ZIyux+D0pHvSwR606 h/MQ5E93VSZZwSPl5NK7rDCd2YXfxp856KDHiEmp59wqcgJk4isqBbeZvPGRiDcM g+28wDH5asJ6FKXhYVVDtoo9yjikGVG7/huh+b1tdHitnS7k6ayjnhBeyRBvoMqF fNGw45WcojX/EWDzdS+yCKs2twO8rt9b6TASJkk4yePjk4g4YTWrQaqyjCwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq/LHbyyvYPurM5QDRFSPly5iH3QwHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9uPuZqLhAZJ0KZoJAAowUM8jFJBM0hWG4e mE3V7dv5ClQecJvdiRlK4UwGHeiijJ5TL9vQfADFDaOuRWvntVkDqFJar6X5y/vF Jhbs61uBqTtdV13TQkbqIYpVB9HIhpiUx0B0sT8lRElBs+jk3u6g5h0y/OKfL1gl 4oDGB0d7yqGa/DyKg+TuSAUaJILFuLzypM+jTHnm/Q568Bw5jSPB/XBbSv0dm2Xv BB5wgL9cBaTwTofDZY0pl1TCIvQ+M+flE1pYNe9Hympnb/WHIeUTPEHJpIFiFKGl 7b/cDszM7ZWbKKy79n9hhQOEc1TtE6R23aCz6oGZ0C0N3xc4XX0= -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:19 2025 by rpki-client