This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: 6f9OT5qY/DPyRbmqp1igwje0Ka5AByGfaHcsAWF95/U= Subject key identifier: B6:5D:D6:41:BD:1A:A1:38:F8:79:9B:BF:67:C4:4F:11:81:1A:34:BE Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 127511FF467225BD1B2F820F0F9CBC54D64C88D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 01B4 Signing time: Sat 06 Dec 2025 10:22:19 +0000 Manifest this update: Sat 06 Dec 2025 10:17:19 +0000 Manifest next update: Tue 09 Dec 2025 16:19:19 +0000 Files and hashes: 1: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: OBM8zTVlcipTv/PgUjfaBpVZCbymXr417u+e1LfeO3s=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:75:11:ff:46:72:25:bd:1b:2f:82:0f:0f:9c:bc:54:d6:4c:88:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Dec 6 10:17:19 2025 GMT Not After : Dec 9 16:19:19 2025 GMT Subject: CN=B65DD641BD1AA138F8799BBF67C44F11811A34BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:e5:7a:e6:aa:e6:5e:9e:a4:02:4b:e0:ae: 44:bc:66:2e:2d:33:2d:21:b4:cb:76:c1:ab:70:c0: 51:1e:e3:27:e4:f8:3f:0f:6d:9a:e1:dd:9e:ee:da: 66:0e:cf:24:21:c6:82:63:39:c6:e0:2e:cc:b2:b5: c3:93:cc:23:dc:0f:46:26:34:ff:93:62:c7:7c:a0: 83:67:9e:f4:61:50:85:49:4f:0f:0d:85:6a:9f:6c: 2c:29:71:e6:6f:2d:8f:3e:11:21:e5:14:46:07:cc: 21:3f:cd:72:6a:7e:20:65:69:59:50:ec:e1:24:7b: e7:8a:f4:95:f5:ab:d3:ed:85:80:92:ce:08:3b:cf: cc:88:de:c5:71:03:92:af:18:0f:e7:94:df:65:ba: b0:dc:6e:db:af:3c:a3:8f:6b:f0:93:c1:20:21:68: 76:6c:5e:d3:0c:cf:98:4a:18:4c:e6:fb:6c:f6:88: 06:dd:ba:81:93:a3:67:c4:f4:a4:ac:08:bb:51:b1: df:1f:e1:2e:49:1d:11:f4:ee:b0:05:f8:6a:47:8d: 7e:e8:18:8b:7b:77:34:ec:ac:c8:42:53:5e:43:99: ec:42:d3:db:b5:10:c1:29:2f:25:38:53:88:e0:e3: 72:2a:dd:98:af:b0:64:f7:10:39:3b:5d:70:7a:75: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5D:D6:41:BD:1A:A1:38:F8:79:9B:BF:67:C4:4F:11:81:1A:34:BE X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:de:5a:aa:5d:55:0e:87:ba:f0:5f:43:ce:c6:7c:5a:d7:26: 34:5f:70:a3:c4:a7:bc:e1:0f:19:2f:26:66:3a:0a:f0:aa:87: ca:60:f9:91:d8:14:7a:f4:85:69:5d:39:25:46:cf:1b:9e:2a: 2e:ec:d8:f7:a7:d1:e5:ba:e6:67:68:02:8a:6e:c0:d8:42:a1: 11:75:fb:3f:a2:57:59:b9:2a:1e:14:1a:29:73:da:45:62:76: f6:c1:2b:8b:90:bd:8f:fb:33:9e:55:24:38:45:d4:70:a7:1a: df:fe:93:d0:31:d0:68:56:d8:91:1b:0c:00:64:44:a7:3f:cc: f2:42:de:9c:f9:e2:44:66:91:a8:0f:4f:37:a0:9e:07:97:08: 8c:86:c5:bb:fd:db:7f:e9:6b:9f:e4:65:fc:c2:9a:5e:9f:01: ea:ab:91:dc:b8:5a:34:87:98:a4:f5:e2:3e:b2:91:0b:de:0f: 30:0d:c8:f6:52:05:56:a8:5a:2f:4a:ea:8f:93:0b:a7:d0:70: d5:55:85:3e:c1:e6:a2:5d:67:94:89:93:0e:11:82:c2:ab:dc: e0:94:c3:50:e7:40:ad:5e:87:79:f5:2a:cf:f7:c6:8a:ba:93: 54:36:66:0c:f6:ae:25:9e:40:3c:50:3f:9e:70:13:d8:46:6c: 27:ba:43:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEnUR/0ZyJb0bL4IPD5y8VNZMiNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTEyMDYxMDE3MTlaFw0yNTEyMDkxNjE5MTlaMDMxMTAvBgNV BAMTKEI2NURENjQxQkQxQUExMzhGODc5OUJCRjY3QzQ0RjExODExQTM0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIuV65qrmXp6kAkvgrkS8Zi4t My0htMt2watwwFEe4yfk+D8PbZrh3Z7u2mYOzyQhxoJjOcbgLsyytcOTzCPcD0Ym NP+TYsd8oINnnvRhUIVJTw8NhWqfbCwpceZvLY8+ESHlFEYHzCE/zXJqfiBlaVlQ 7OEke+eK9JX1q9PthYCSzgg7z8yI3sVxA5KvGA/nlN9lurDcbtuvPKOPa/CTwSAh aHZsXtMMz5hKGEzm+2z2iAbduoGTo2fE9KSsCLtRsd8f4S5JHRH07rAF+GpHjX7o GIt7dzTsrMhCU15DmexC09u1EMEpLyU4U4jg43Iq3ZivsGT3EDk7XXB6dVihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtl3WQb0aoTj4eZu/Z8RPEYEaNL4wHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALreWqpdVQ6HuvBfQ87GfFrXJjRfcKPEp7zh DxkvJmY6CvCqh8pg+ZHYFHr0hWldOSVGzxueKi7s2Pen0eW65mdoAopuwNhCoRF1 +z+iV1m5Kh4UGilz2kVidvbBK4uQvY/7M55VJDhF1HCnGt/+k9Ax0GhW2JEbDABk RKc/zPJC3pz54kRmkagPTzegngeXCIyGxbv923/pa5/kZfzCml6fAeqrkdy4WjSH mKT14j6ykQveDzANyPZSBVaoWi9K6o+TC6fQcNVVhT7B5qJdZ5SJkw4RgsKr3OCU w1DnQK1eh3n1Ks/3xoq6k1Q2Zgz2riWeQDxQP55wE9hGbCe6Qx8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:15 2025 by rpki-client