This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: cHZuBh/RRpwCMMyHr3ScWDVQ2phoe2ocz024b00/sgk= Subject key identifier: 79:6A:C5:39:7F:8E:AB:69:DE:78:76:77:BE:7F:C6:B3:53:85:08:6E Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 2D553E0BB3AC1D384C775419543322FED10C7E5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 018E Signing time: Fri 05 Dec 2025 16:10:45 +0000 Manifest this update: Fri 05 Dec 2025 16:05:45 +0000 Manifest next update: Mon 08 Dec 2025 23:33:45 +0000 Files and hashes: 1: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: 0kWNjuRvHja41uXvdgSfsXWTfDbXytKm0AClKmXBZ7M=) 2: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:55:3e:0b:b3:ac:1d:38:4c:77:54:19:54:33:22:fe:d1:0c:7e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Dec 5 16:05:45 2025 GMT Not After : Dec 8 23:33:45 2025 GMT Subject: CN=796AC5397F8EAB69DE787677BE7FC6B35385086E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:de:7b:e5:0d:33:b2:88:dd:38:64:30:ab: f2:da:6a:e6:3a:2b:98:97:fd:c2:e5:dc:07:48:3c: aa:a2:d0:78:1e:c7:ca:b7:64:4f:e4:83:a4:01:b1: 3c:8f:91:1a:86:72:55:87:3e:3c:c1:d4:2d:3f:50: b5:9b:92:47:a2:3f:f6:17:50:68:4a:13:a7:a9:c4: 09:b0:17:1f:f2:e9:73:45:15:d2:c5:45:af:d5:5d: 72:1c:58:3e:f8:7e:67:d2:7e:5c:65:8a:47:09:57: 43:48:46:59:cc:6a:af:76:ac:0a:85:6d:6f:97:63: e6:98:2d:42:b5:34:5d:43:db:ef:da:ba:48:ab:6c: 02:4a:8e:e2:15:c3:59:4a:b2:55:46:71:30:6c:6f: 64:1d:a2:ce:50:fc:77:2d:a7:14:f8:a0:21:71:b2: fc:d7:f9:e1:d1:32:5a:24:02:63:7e:50:ed:80:16: 4c:32:60:fe:c6:f3:85:c5:6f:59:de:44:37:7b:bf: 4d:11:3e:a3:eb:a3:c0:44:99:b8:d2:3d:38:a4:e3: 25:c9:36:24:17:0d:29:9f:24:cc:11:24:86:e0:b4: 98:30:6d:6f:e3:80:eb:dd:9b:c1:cb:93:7f:e0:8d: e0:e3:9c:23:1b:fe:91:72:81:ce:35:35:80:6d:b3: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6A:C5:39:7F:8E:AB:69:DE:78:76:77:BE:7F:C6:B3:53:85:08:6E X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0b:ad:5c:4d:1f:ce:17:38:1a:ee:f8:16:0b:8d:8f:af:14: 61:6f:92:b3:06:08:0b:75:b2:87:e3:c0:77:3f:7e:53:d4:98: 4b:5c:e6:ba:b6:a0:f6:e9:a4:33:0f:2e:75:5b:9d:96:c7:30: 95:a3:c8:8e:a7:19:cd:6d:a6:75:66:24:77:76:bb:b0:28:22: bf:d6:a1:ef:b6:d7:59:cf:b6:54:56:5f:d9:f9:85:86:65:02: 18:04:67:57:91:ba:7f:be:34:53:ab:5b:c5:1e:75:4a:4a:bd: 7b:f9:b3:b3:ce:09:b1:92:eb:88:af:6b:dd:f4:76:bf:a5:06: 47:71:55:53:c2:27:3a:23:9c:53:d2:3d:a9:c5:82:5c:9b:f7: 75:60:25:a0:c2:b6:62:f8:5a:57:3c:36:56:1c:bf:42:55:1c: 34:d8:21:5b:bc:a3:54:53:0a:d8:f2:78:20:f0:cf:d9:13:49: b1:28:3e:3d:a3:af:0f:4d:e1:d9:03:23:8b:c9:20:56:d1:93: f2:02:03:6b:32:53:d2:0c:8a:9c:66:2b:ec:1d:34:eb:40:0b: d6:55:e0:e1:f6:be:b2:a0:06:71:ae:9e:14:ff:58:5d:1c:79: 6e:a7:e8:dd:12:3c:e8:eb:1b:cb:8b:ce:cd:99:6b:19:fc:2c: 88:88:8f:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVU+C7OsHThMd1QZVDMi/tEMflswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNTEyMDUxNjA1NDVaFw0yNTEyMDgyMzMzNDVaMDMxMTAvBgNV BAMTKDc5NkFDNTM5N0Y4RUFCNjlERTc4NzY3N0JFN0ZDNkIzNTM4NTA4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIid575Q0zsojdOGQwq/LaauY6 K5iX/cLl3AdIPKqi0Hgex8q3ZE/kg6QBsTyPkRqGclWHPjzB1C0/ULWbkkeiP/YX UGhKE6epxAmwFx/y6XNFFdLFRa/VXXIcWD74fmfSflxlikcJV0NIRlnMaq92rAqF bW+XY+aYLUK1NF1D2+/aukirbAJKjuIVw1lKslVGcTBsb2Qdos5Q/HctpxT4oCFx svzX+eHRMlokAmN+UO2AFkwyYP7G84XFb1neRDd7v00RPqPro8BEmbjSPTik4yXJ NiQXDSmfJMwRJIbgtJgwbW/jgOvdm8HLk3/gjeDjnCMb/pFygc41NYBts5VBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeWrFOX+Oq2neeHZ3vn/Gs1OFCG4wHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQLrVxNH84XOBru+BYLjY+vFGFvkrMGCAt1 sofjwHc/flPUmEtc5rq2oPbppDMPLnVbnZbHMJWjyI6nGc1tpnVmJHd2u7AoIr/W oe+211nPtlRWX9n5hYZlAhgEZ1eRun++NFOrW8UedUpKvXv5s7POCbGS64iva930 dr+lBkdxVVPCJzojnFPSPanFglyb93VgJaDCtmL4Wlc8NlYcv0JVHDTYIVu8o1RT CtjyeCDwz9kTSbEoPj2jrw9N4dkDI4vJIFbRk/ICA2syU9IMipxmK+wdNOtAC9ZV 4OH2vrKgBnGunhT/WF0ceW6n6N0SPOjrG8uLzs2Zaxn8LIiIj5c= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:12 2025 by rpki-client