This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: PLFZ00/8/wWKbDhsFFJRT+pNv8AIqsTDkh/Elx2zGkY= Subject key identifier: 7C:64:50:19:E9:29:46:51:98:7A:1E:DD:C7:3D:3A:C2:1B:44:E5:35 Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 2DAE202FAE1B6B43B3D14D70B17101762B1D51E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: FC Signing time: Fri 05 Dec 2025 07:00:58 +0000 Manifest this update: Fri 05 Dec 2025 06:55:58 +0000 Manifest next update: Mon 08 Dec 2025 12:39:58 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) 2: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: P9jbzwRG+7OZ3s9z+9MFbEf+6+Q6RTLZHTo68bxMT44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ae:20:2f:ae:1b:6b:43:b3:d1:4d:70:b1:71:01:76:2b:1d:51:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Dec 5 06:55:58 2025 GMT Not After : Dec 8 12:39:58 2025 GMT Subject: CN=7C645019E9294651987A1EDDC73D3AC21B44E535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:ec:38:73:94:66:57:25:8a:70:91:c3:26: 38:a9:ec:82:3b:76:f3:4b:fb:17:82:4d:cf:4b:6a: 34:2f:48:c5:99:d6:3d:1d:97:30:c1:17:f9:ad:3e: 2a:1d:55:73:63:00:26:d6:b5:28:53:12:0f:89:68: c0:53:87:87:e6:1b:0f:01:ac:b0:1d:c4:b2:37:d2: 17:d2:2f:b7:8b:d6:c6:94:d7:b3:df:88:49:92:84: 5b:da:77:6f:70:e0:af:8d:17:23:d4:c3:af:a2:a7: 0d:44:51:25:13:8e:19:c3:34:68:20:9d:dd:ca:c2: 01:8d:15:e0:c9:ae:32:2e:6b:93:6c:9d:38:b2:a3: 25:a6:45:25:34:b8:8b:4c:ab:44:62:b8:a0:7e:d8: 13:99:23:13:2b:f3:f6:65:9e:9e:4c:a2:29:40:74: 7d:6c:64:4e:4f:c5:ac:af:34:35:4d:db:ce:79:7e: a5:19:fc:47:1c:2c:32:c2:3b:af:42:10:89:b8:4e: 76:5e:58:82:0b:80:45:2c:b2:73:8a:e0:54:cd:b0: 5c:87:ba:c4:d8:67:8a:2a:77:70:d4:09:86:68:21: d1:bb:f1:23:90:fe:15:f0:0c:d8:90:27:8d:2b:4f: d1:d0:58:81:88:bd:17:8b:b7:31:c9:de:cf:9e:f3: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:64:50:19:E9:29:46:51:98:7A:1E:DD:C7:3D:3A:C2:1B:44:E5:35 X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fa:c5:2e:e1:35:1a:da:45:38:7d:4c:93:f0:44:7b:07:a9: bf:1f:04:1e:49:62:b6:0f:ed:2e:da:94:6f:fe:90:b4:81:2b: af:b4:27:22:2c:46:a0:d5:bd:84:ee:83:b7:16:9b:cc:11:5f: 22:2d:d0:ac:c7:ac:2c:da:25:5b:87:45:21:98:2e:7f:62:94: 38:83:8c:43:b1:e9:4c:ee:83:98:0b:22:ef:d8:00:f5:4c:1e: 96:ef:3a:9e:9b:2d:14:19:78:92:8d:b2:6f:04:68:0d:7f:fc: df:49:b8:c3:ce:02:e0:eb:0d:dc:e3:09:0a:50:f6:1f:ee:dc: 8b:35:2a:18:38:f0:9c:e1:3d:f2:cb:bd:64:5b:b3:14:6b:b3: 5d:6e:47:48:f5:96:bb:00:18:82:0e:0c:30:40:54:ee:32:f9: 6f:66:79:fb:80:4c:55:23:e7:0e:be:0c:17:e2:8a:73:7b:35: 31:91:d1:18:63:f1:de:b4:7e:a5:32:00:4a:a7:e8:94:f7:93: fb:04:82:6b:b6:4c:d5:fb:47:74:17:c1:29:b9:7e:9c:d6:17: 07:07:90:a5:c8:6c:60:6d:b1:24:79:09:4c:1a:9e:6c:24:8b: f2:80:b2:f4:73:5f:f1:50:c6:15:4b:3c:b4:50:d0:bc:db:12: cc:eb:32:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULa4gL64ba0Oz0U1wsXEBdisdUecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNTEyMDUwNjU1NThaFw0yNTEyMDgxMjM5NThaMDMxMTAvBgNV BAMTKDdDNjQ1MDE5RTkyOTQ2NTE5ODdBMUVEREM3M0QzQUMyMUI0NEU1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyuw4c5RmVyWKcJHDJjip7II7 dvNL+xeCTc9LajQvSMWZ1j0dlzDBF/mtPiodVXNjACbWtShTEg+JaMBTh4fmGw8B rLAdxLI30hfSL7eL1saU17PfiEmShFvad29w4K+NFyPUw6+ipw1EUSUTjhnDNGgg nd3KwgGNFeDJrjIua5NsnTiyoyWmRSU0uItMq0RiuKB+2BOZIxMr8/Zlnp5MoilA dH1sZE5PxayvNDVN2855fqUZ/EccLDLCO69CEIm4TnZeWIILgEUssnOK4FTNsFyH usTYZ4oqd3DUCYZoIdG78SOQ/hXwDNiQJ40rT9HQWIGIvReLtzHJ3s+e8xkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfGRQGekpRlGYeh7dxz06whtE5TUwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABv6xS7hNRraRTh9TJPwRHsHqb8fBB5JYrYP 7S7alG/+kLSBK6+0JyIsRqDVvYTug7cWm8wRXyIt0KzHrCzaJVuHRSGYLn9ilDiD jEOx6Uzug5gLIu/YAPVMHpbvOp6bLRQZeJKNsm8EaA1//N9JuMPOAuDrDdzjCQpQ 9h/u3Is1Khg48JzhPfLLvWRbsxRrs11uR0j1lrsAGIIODDBAVO4y+W9mefuATFUj 5w6+DBfiinN7NTGR0Rhj8d60fqUyAEqn6JT3k/sEgmu2TNX7R3QXwSm5fpzWFwcH kKXIbGBtsSR5CUwanmwki/KAsvRzX/FQxhVLPLRQ0LzbEszrMkI= -----END CERTIFICATE-----Generated at Sat Dec 6 20:38:39 2025 by rpki-client