This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: vTWwbsV8w8cBu/9ymrkCWOOq6S5GO3qomTuLPxKrr2w= Subject key identifier: 47:0C:35:BA:0E:80:27:2C:CD:69:AB:2C:E4:B1:60:21:38:EC:0F:C7 Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 31817FD753613C7F8F57A6F25E927C5EA82372EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 01A2 Signing time: Fri 05 Dec 2025 16:01:33 +0000 Manifest this update: Fri 05 Dec 2025 15:56:33 +0000 Manifest next update: Mon 08 Dec 2025 21:22:33 +0000 Files and hashes: 1: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: LZihUj4M34sbxrtdVkFiupDTrMtfFW3qsgHymI3+6T4=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:81:7f:d7:53:61:3c:7f:8f:57:a6:f2:5e:92:7c:5e:a8:23:72:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Dec 5 15:56:33 2025 GMT Not After : Dec 8 21:22:33 2025 GMT Subject: CN=470C35BA0E80272CCD69AB2CE4B1602138EC0FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:d7:f9:2f:c7:87:9e:26:d1:df:5b:5c:b4: a9:47:13:a6:51:05:4e:ad:4c:95:00:03:1f:05:51: fc:e5:9f:ec:39:f3:33:96:db:66:4d:10:72:73:bb: 52:49:98:82:83:b3:bd:cc:bd:1c:2c:3d:83:06:8f: 87:aa:eb:7a:ba:f1:bd:cb:30:e3:f7:ee:30:ab:94: f6:d0:22:9d:9b:81:28:a8:57:14:7a:63:40:9b:f9: aa:f8:99:39:69:4d:e8:9b:a8:fb:2c:d1:b2:4e:0f: 87:30:95:01:91:c8:35:48:a3:bc:8a:ab:29:f9:6b: e1:6c:4f:4a:e3:76:82:49:53:d2:b4:b8:eb:0d:88: a1:55:1f:d1:a6:1a:a3:6b:de:dc:fd:a2:a4:26:6e: 21:01:c2:27:39:91:ee:f2:93:1a:ba:f4:29:ee:93: f4:18:fc:91:22:1f:56:fa:95:ea:95:2c:3f:c4:4a: 8e:5b:fe:2f:05:fd:85:0d:3a:5c:b2:e7:c8:1d:40: 17:32:bb:c9:a1:9c:8f:0f:8d:7d:1a:8a:41:43:76: 2c:4a:40:eb:5d:04:65:b5:b0:2f:78:f4:75:48:eb: e3:5b:c6:07:5c:07:bc:6b:a8:b5:a1:43:7d:69:48: 58:53:a0:cd:0d:6d:80:7b:aa:1f:5a:65:9a:e6:62: 3e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0C:35:BA:0E:80:27:2C:CD:69:AB:2C:E4:B1:60:21:38:EC:0F:C7 X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cc:72:fa:6c:99:da:f6:29:a6:f8:3a:c4:74:2e:ef:5e:9f: 16:99:c1:31:de:88:9a:3b:2e:6b:7f:77:63:34:d6:97:fc:b1: 59:e7:8d:5f:69:40:df:7a:15:34:14:ac:c6:1a:bf:bf:de:8f: 3d:17:1f:08:56:42:c9:47:0c:dd:83:32:ac:cb:b4:40:18:87: ec:48:7e:c3:9b:46:4a:01:6c:eb:9d:c6:49:94:a5:48:58:cc: 0e:b5:64:86:b1:a7:20:8e:73:1b:d3:df:1d:69:f6:1c:68:85: 4c:fa:7c:c3:27:4d:3b:dd:e3:74:36:b6:55:8e:63:e5:49:74: d0:a8:8d:25:79:05:f1:03:20:0b:57:29:8c:0e:f9:71:02:43: 22:c2:4d:a0:d9:7a:ed:c6:aa:29:7f:14:f9:4a:50:1b:00:94: 3a:a8:5a:4f:38:69:3b:20:c3:0a:5c:f7:85:28:0e:a6:1d:16: 6e:d0:5b:5f:fe:6f:cd:25:d0:75:e8:02:9a:81:7c:1d:18:f1: dd:fb:6b:41:c4:4f:4c:8b:0c:0d:e5:0b:ed:f4:f9:2a:1d:04: 81:7e:7a:5e:f5:7a:a8:75:a4:7e:7c:cc:f6:13:73:af:56:82: 77:64:da:2e:06:d5:21:4a:b4:e8:9c:65:0b:09:3a:f2:79:5e: 0a:57:94:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYF/11NhPH+PV6byXpJ8XqgjcuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNTEyMDUxNTU2MzNaFw0yNTEyMDgyMTIyMzNaMDMxMTAvBgNV BAMTKDQ3MEMzNUJBMEU4MDI3MkNDRDY5QUIyQ0U0QjE2MDIxMzhFQzBGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28tf5L8eHnibR31tctKlHE6ZR BU6tTJUAAx8FUfzln+w58zOW22ZNEHJzu1JJmIKDs73MvRwsPYMGj4eq63q68b3L MOP37jCrlPbQIp2bgSioVxR6Y0Cb+ar4mTlpTeibqPss0bJOD4cwlQGRyDVIo7yK qyn5a+FsT0rjdoJJU9K0uOsNiKFVH9GmGqNr3tz9oqQmbiEBwic5ke7ykxq69Cnu k/QY/JEiH1b6leqVLD/ESo5b/i8F/YUNOlyy58gdQBcyu8mhnI8PjX0aikFDdixK QOtdBGW1sC949HVI6+NbxgdcB7xrqLWhQ31pSFhToM0NbYB7qh9aZZrmYj6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURww1ug6AJyzNaass5LFgITjsD8cwHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7Mcvpsmdr2Kab4OsR0Lu9enxaZwTHeiJo7 Lmt/d2M01pf8sVnnjV9pQN96FTQUrMYav7/ejz0XHwhWQslHDN2DMqzLtEAYh+xI fsObRkoBbOudxkmUpUhYzA61ZIaxpyCOcxvT3x1p9hxohUz6fMMnTTvd43Q2tlWO Y+VJdNCojSV5BfEDIAtXKYwO+XECQyLCTaDZeu3Gqil/FPlKUBsAlDqoWk84aTsg wwpc94UoDqYdFm7QW1/+b80l0HXoApqBfB0Y8d37a0HET0yLDA3lC+30+SodBIF+ el71eqh1pH58zPYTc69Wgndk2i4G1SFKtOicZQsJOvJ5XgpXlKE= -----END CERTIFICATE-----Generated at Sun Dec 7 05:51:32 2025 by rpki-client