This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: kr3Q/vmgTXMnOWPWREi6anM8tTgHGPyUzqgvwxXgAkc= Subject key identifier: BE:59:C0:C9:14:67:DF:E9:E1:57:09:99:60:52:17:20:E5:2C:3B:85 Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 0FB02B57CD38B6C7CD856267025BF90ADA803AC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 01C5 Signing time: Sat 06 Dec 2025 13:01:27 +0000 Manifest this update: Sat 06 Dec 2025 12:56:27 +0000 Manifest next update: Tue 09 Dec 2025 15:55:27 +0000 Files and hashes: 1: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: XvrWKabUzo+8QdekV/WCEKHm2CO1S57vakuFbZ2xMyY=) 2: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: smDIOPiQjzAuZpmznu+BljTr0abb2SAxfS0FG2ESGgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b0:2b:57:cd:38:b6:c7:cd:85:62:67:02:5b:f9:0a:da:80:3a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: Dec 6 12:56:27 2025 GMT Not After : Dec 9 15:55:27 2025 GMT Subject: CN=BE59C0C91467DFE9E157099960521720E52C3B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:ff:8b:7b:42:06:c5:78:43:52:d3:cf:98: e1:20:86:6f:8a:ac:b9:34:fd:55:07:a7:a3:ee:12: f8:5b:c6:5e:09:a0:8c:ce:c2:c6:3c:e9:1c:c5:d0: 1c:eb:33:f3:0a:c0:78:54:97:7b:ad:eb:9e:a6:9d: 68:c4:68:92:c4:35:c2:3a:fb:f7:28:69:ff:f9:01: 0f:52:b8:29:98:04:4d:a7:b2:8e:76:23:ad:73:a1: d0:e3:12:f4:2f:5d:7e:49:c1:9e:9e:d8:57:84:84: f2:4a:1f:c1:45:a7:87:13:20:02:1f:06:37:08:da: dc:58:c3:43:96:56:29:04:bf:cf:04:44:9d:32:7e: 36:35:80:ee:c9:75:e9:39:f1:ae:91:39:43:b6:12: ee:24:db:8e:42:29:c3:95:a7:86:35:5a:25:88:1a: d5:fa:38:4f:65:f7:87:0f:fc:02:06:2c:84:c8:19: ea:ca:1a:a6:c0:2e:1d:99:cf:6d:93:21:33:71:c9: f8:cb:c6:96:b6:b3:c7:f2:f7:1a:f1:00:51:3d:16: 89:af:6d:8f:78:38:46:70:72:e9:dc:5a:55:34:e9: a1:68:c2:0c:ce:29:f8:03:86:50:aa:66:e2:1a:1f: 8a:8e:5e:51:17:ae:20:6a:a5:2c:24:5c:ba:5e:2d: e2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:59:C0:C9:14:67:DF:E9:E1:57:09:99:60:52:17:20:E5:2C:3B:85 X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5a:4a:3e:87:49:3a:43:8a:ac:ae:34:89:bc:e7:99:f6:54: 52:ed:f0:82:fa:f5:79:08:9c:c9:70:af:04:d2:0e:d7:c6:da: 91:6a:b5:1d:52:8d:47:91:32:d5:15:5c:bc:1c:62:a5:cc:58: 22:d9:65:0b:43:39:03:93:ec:9c:f9:dd:15:4e:3b:fc:95:a4: a5:f2:dd:05:25:84:f1:13:67:1d:1a:48:f9:ad:c5:88:36:5b: 57:44:29:1e:de:3b:7b:5a:ad:82:7a:8d:20:42:4b:82:ed:c9: 5c:78:e0:83:e1:9e:0b:2b:29:a8:4d:9d:5d:3a:13:0f:74:95: 14:ff:bc:ce:fc:d6:37:d2:c8:a3:9d:73:be:0d:b3:13:e2:cd: 13:57:ee:f8:8f:b0:12:23:04:1e:2f:89:67:af:98:aa:dc:0a: 5c:41:77:49:48:b6:34:7f:e8:50:dd:ad:bd:66:de:34:e7:22: 2a:0c:6d:18:fd:17:0b:1d:e2:43:04:dc:5a:24:8f:ee:45:87: c5:1e:1c:88:10:82:40:31:51:5a:21:d9:15:f6:0b:b5:89:43: f8:00:20:f4:53:b3:6d:e2:b8:bd:52:b0:3b:22:39:be:47:64: 84:a8:52:f2:4e:aa:3d:24:aa:0e:9d:43:6a:22:cf:fb:53:61: 36:dd:43:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7ArV804tsfNhWJnAlv5CtqAOsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNTEyMDYxMjU2MjdaFw0yNTEyMDkxNTU1MjdaMDMxMTAvBgNV BAMTKEJFNTlDMEM5MTQ2N0RGRTlFMTU3MDk5OTYwNTIxNzIwRTUyQzNCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfv+Le0IGxXhDUtPPmOEghm+K rLk0/VUHp6PuEvhbxl4JoIzOwsY86RzF0BzrM/MKwHhUl3ut656mnWjEaJLENcI6 +/coaf/5AQ9SuCmYBE2nso52I61zodDjEvQvXX5JwZ6e2FeEhPJKH8FFp4cTIAIf BjcI2txYw0OWVikEv88ERJ0yfjY1gO7Jdek58a6ROUO2Eu4k245CKcOVp4Y1WiWI GtX6OE9l94cP/AIGLITIGerKGqbALh2Zz22TITNxyfjLxpa2s8fy9xrxAFE9Fomv bY94OEZwcuncWlU06aFowgzOKfgDhlCqZuIaH4qOXlEXriBqpSwkXLpeLeKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvlnAyRRn3+nhVwmZYFIXIOUsO4UwHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxaSj6HSTpDiqyuNIm855n2VFLt8IL69XkI nMlwrwTSDtfG2pFqtR1SjUeRMtUVXLwcYqXMWCLZZQtDOQOT7Jz53RVOO/yVpKXy 3QUlhPETZx0aSPmtxYg2W1dEKR7eO3tarYJ6jSBCS4LtyVx44IPhngsrKahNnV06 Ew90lRT/vM781jfSyKOdc74NsxPizRNX7viPsBIjBB4viWevmKrcClxBd0lItjR/ 6FDdrb1m3jTnIioMbRj9Fwsd4kME3Fokj+5Fh8UeHIgQgkAxUVoh2RX2C7WJQ/gA IPRTs23iuL1SsDsiOb5HZISoUvJOqj0kqg6dQ2oiz/tTYTbdQxA= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:30 2025 by rpki-client