This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft File: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft (raw, json) Hash identifier: pZrZKnaoYB7OyfzDhZ4jBhoHExoNBRhEEIDzZEwsS0Q= Subject key identifier: 24:53:98:89:8F:AC:31:01:02:99:C3:75:D4:C6:D9:EA:BB:F3:8A:11 Authority key identifier: E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 Certificate issuer: /CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Certificate serial: 5DF6AADA480F958970690694CB5A29B7A0D300C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft Manifest number: 022D Signing time: Sat 06 Dec 2025 00:32:18 +0000 Manifest this update: Sat 06 Dec 2025 00:27:18 +0000 Manifest next update: Tue 09 Dec 2025 04:57:18 +0000 Files and hashes: 1: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: LI13Oiwos27NH9fZ9uCjsrTtT/ALoh094BdiKflNCjg=) 2: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: P2JGQjJlh0X8PPnIYvpO+iKqp7Ecvs49iVh/XO+bX5A=) 3: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl (hash: eiTmpBh7crE10S7bqmZME8oZXLkQTM4Bo+Kqu3Np2mU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 04:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f6:aa:da:48:0f:95:89:70:69:06:94:cb:5a:29:b7:a0:d3:00:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Validity Not Before: Dec 6 00:27:18 2025 GMT Not After : Dec 9 04:57:18 2025 GMT Subject: CN=245398898FAC31010299C375D4C6D9EABBF38A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:18:84:fd:c5:f0:22:23:af:5b:3f:dd:ef: d3:c7:dc:e7:c3:0f:b4:c2:d5:3d:a8:9e:f9:6d:19: b8:2a:c8:fe:92:fa:8f:bc:9a:a8:ed:8f:b9:0e:7f: af:47:aa:5d:c5:0e:ed:69:35:f1:77:d8:ef:4d:74: 00:30:fa:48:cf:bf:3d:81:93:bd:98:33:1e:6e:67: b4:de:21:c7:9e:e0:9b:12:bf:b9:b5:30:2c:b9:c5: f9:eb:59:6e:38:15:ce:d7:9e:50:37:ec:14:41:ee: 4a:80:12:d6:96:f7:70:a6:4d:1d:18:5b:6b:db:00: 3f:9f:59:cf:f1:41:21:17:1b:78:5c:d7:83:bc:8d: cd:88:f0:53:48:45:5d:27:d9:06:9f:35:14:86:0a: 28:10:02:13:b9:91:d7:ef:c9:d9:b1:6d:2e:1a:7a: 31:18:e4:41:51:4c:55:74:3e:8b:f7:e4:f3:9f:de: 28:3a:01:81:a3:67:ce:f4:cc:9f:60:96:22:27:32: 19:06:9a:5a:e2:d0:01:82:71:bc:c6:78:75:75:5c: 9e:ba:14:eb:68:65:6c:90:b1:e7:86:9f:ca:9d:bb: db:fc:bb:e0:63:6d:13:13:8d:cb:dc:14:8a:4f:f9: f4:4f:93:5d:72:1c:79:a6:fb:0e:ef:6c:69:45:6a: 21:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:53:98:89:8F:AC:31:01:02:99:C3:75:D4:C6:D9:EA:BB:F3:8A:11 X509v3 Authority Key Identifier: keyid:E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4c:84:f5:aa:f3:3c:28:ed:31:e1:bd:92:b9:6e:40:21:9c: a2:52:30:d2:7c:9a:72:88:db:98:6b:2a:0e:c6:27:33:c9:b7: 7a:0b:d9:2c:af:33:da:29:b8:37:f3:00:e6:06:2f:f7:d7:2d: dd:f0:a0:7a:e3:04:19:5e:69:a7:cc:c2:48:7a:24:cd:0a:d4: a0:b3:52:41:fb:9a:69:8f:0f:1a:e3:b6:7f:8a:79:40:11:49: 6c:51:5e:8a:1e:59:0a:f3:f7:ea:2e:cd:f0:e0:8c:8c:c6:4f: e3:f6:86:00:99:95:72:1a:b5:c4:df:71:09:cc:c1:34:5a:1f: 86:74:f4:f0:a6:93:d9:b3:23:96:bd:a9:09:f1:2f:15:42:24: df:85:0d:7b:65:7c:06:04:73:e0:97:92:bd:54:2c:cf:b9:cc: 0a:36:cb:07:8b:66:44:cb:75:93:90:68:38:61:5f:71:d9:4b: 40:d2:72:18:f2:d9:25:ba:14:34:79:ca:cc:2d:92:fc:bd:c5: c7:46:a4:79:df:b8:ce:a7:a6:2c:fc:02:9f:3d:0e:f2:41:a1: 79:c7:99:a1:7d:54:56:28:8e:18:72:ee:26:8d:5f:ad:13:2f: 7d:d5:af:b4:42:b5:76:3e:57:3d:58:f7:f4:79:6a:70:f6:42: 21:39:63:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfaq2kgPlYlwaQaUy1opt6DTAMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYz OUZCNEZGNjAeFw0yNTEyMDYwMDI3MThaFw0yNTEyMDkwNDU3MThaMDMxMTAvBgNV BAMTKDI0NTM5ODg5OEZBQzMxMDEwMjk5QzM3NUQ0QzZEOUVBQkJGMzhBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mxiE/cXwIiOvWz/d79PH3OfD D7TC1T2onvltGbgqyP6S+o+8mqjtj7kOf69Hql3FDu1pNfF32O9NdAAw+kjPvz2B k72YMx5uZ7TeIcee4JsSv7m1MCy5xfnrWW44Fc7XnlA37BRB7kqAEtaW93CmTR0Y W2vbAD+fWc/xQSEXG3hc14O8jc2I8FNIRV0n2QafNRSGCigQAhO5kdfvydmxbS4a ejEY5EFRTFV0Pov35POf3ig6AYGjZ870zJ9gliInMhkGmlri0AGCcbzGeHV1XJ66 FOtoZWyQseeGn8qdu9v8u+BjbRMTjcvcFIpP+fRPk11yHHmm+w7vbGlFaiGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJFOYiY+sMQECmcN11MbZ6rvzihEwHwYDVR0j BBgwFoAU4xy95cbzPa48qXoBHqT05jn7T/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzAyMDFlMy04NzVkLTQ5YzQtOGUxNC05OTk5NDkzNmQ0OTEvMC9FMzFDQkRFNUM2 RjMzREFFM0NBOTdBMDExRUE0RjRFNjM5RkI0RkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYzOUZC NEZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0 RTYzOUZCNEZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZMhPWq8zwo7THhvZK5bkAhnKJSMNJ8mnKI 25hrKg7GJzPJt3oL2SyvM9opuDfzAOYGL/fXLd3woHrjBBleaafMwkh6JM0K1KCz UkH7mmmPDxrjtn+KeUARSWxRXooeWQrz9+ouzfDgjIzGT+P2hgCZlXIatcTfcQnM wTRaH4Z09PCmk9mzI5a9qQnxLxVCJN+FDXtlfAYEc+CXkr1ULM+5zAo2yweLZkTL dZOQaDhhX3HZS0DSchjy2SW6FDR5yswtkvy9xcdGpHnfuM6npiz8Ap89DvJBoXnH maF9VFYojhhy7iaNX60TL33Vr7RCtXY+Vz1Y9/R5anD2QiE5Y+s= -----END CERTIFICATE-----Generated at Sun Dec 7 06:06:37 2025 by rpki-client