This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft File: E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft (raw, json) Hash identifier: LHVKpojhWPAGMeIREy9SbeMnFUU+Y6OT0pa14hxw5W8= Subject key identifier: D1:EF:CE:D5:03:A2:C8:ED:6D:0A:F3:4F:82:C2:9E:29:88:F2:5D:72 Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Certificate serial: 25026E56B0A2A396EF7BB3A14AF45620C95E7820 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft Manifest number: 0472 Signing time: Fri 05 Dec 2025 22:01:52 +0000 Manifest this update: Fri 05 Dec 2025 21:56:52 +0000 Manifest next update: Tue 09 Dec 2025 02:30:52 +0000 Files and hashes: 1: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY=) 2: E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl (hash: PVcfb8fglMxgcrkzBCPCcJC35UkBCT2wPj7yzMD56dM=) 3: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: c+kaUi4De+/vm5rVBRPjrkkr1HTjdZlHY3+0tiasoH8=) 4: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: ftn9K7p77+T5MEgcZnDpxyUXZFHtofZmQssGsi+FEgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:02:6e:56:b0:a2:a3:96:ef:7b:b3:a1:4a:f4:56:20:c9:5e:78:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Validity Not Before: Dec 5 21:56:52 2025 GMT Not After : Dec 9 02:30:52 2025 GMT Subject: CN=D1EFCED503A2C8ED6D0AF34F82C29E2988F25D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:27:ad:5b:08:8b:80:19:e0:18:98:9c:fa: 30:1d:57:81:83:f9:c9:da:3c:21:3e:bf:39:d9:e3: 9d:4b:5e:f1:72:e2:2a:ba:a9:94:a5:38:64:91:1f: d2:12:39:2d:14:9f:5b:c1:65:da:46:dd:28:b4:f9: 97:2b:28:0a:e7:41:2b:db:7f:6b:d7:75:bc:0f:1a: 1f:31:87:7b:57:cd:93:ad:57:ff:97:a0:51:4e:69: 06:b6:6c:45:4a:eb:6b:63:12:ed:b1:c0:09:f7:55: b4:68:82:0d:ce:03:84:4c:06:b3:ef:25:46:66:38: 9e:6f:a5:87:37:3e:50:49:b9:7e:2b:26:dd:b3:aa: aa:87:f4:28:f9:43:1b:6c:7c:4f:96:14:0e:94:1e: f6:11:90:1c:6c:73:65:18:bf:aa:b2:8a:d1:65:ad: 56:57:1b:d5:7d:e3:fc:79:30:65:5c:56:ce:c3:c3: 0e:89:91:78:6f:71:11:16:33:26:f3:42:dc:f2:0e: 20:27:b1:4b:02:55:4c:90:74:4e:51:db:0c:51:ba: 4c:cb:f7:8d:43:7f:1c:2f:2b:cf:60:ff:8f:97:2e: b4:b0:3c:87:8b:a4:36:0f:cf:f4:b1:d4:58:46:a3: d2:c1:00:dd:ab:80:6d:53:35:c2:d7:da:85:17:1a: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EF:CE:D5:03:A2:C8:ED:6D:0A:F3:4F:82:C2:9E:29:88:F2:5D:72 X509v3 Authority Key Identifier: keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:7d:93:9d:a2:3b:42:db:1b:b7:ae:7c:ae:48:1a:b7:fc:61: 90:a6:18:23:5d:fc:af:8e:b0:f5:b8:1f:16:7e:30:9c:3d:3d: 1a:64:8a:5e:78:6f:43:49:fe:03:ca:24:a2:4e:92:7f:97:de: ea:34:04:e8:b1:3d:67:bb:f0:de:97:94:ee:3e:aa:af:db:1b: 4e:e6:aa:89:ba:1d:8b:ba:0b:3c:e4:e7:71:8d:52:b7:78:7a: 0d:fd:41:73:f4:6c:f0:61:18:e5:12:f6:40:16:e5:9e:3b:67: 52:ba:05:a2:c2:22:77:7f:20:3c:df:82:de:7d:dc:c8:1b:75: b7:5b:ba:ca:56:f0:67:eb:69:b4:ff:39:c9:fd:83:5b:88:be: 1d:2a:88:02:c7:02:60:e6:5c:41:3d:07:a9:43:ca:64:9c:1e: 53:a8:59:3a:53:03:de:9c:95:04:98:15:d1:ec:3d:c4:c7:e0: f5:8a:47:8c:4a:b7:29:a8:7b:2e:62:54:80:0c:4d:3c:b7:9d: 59:e6:d5:bc:77:f8:03:ec:c3:9f:b2:18:68:16:47:33:3c:c9: b1:50:6b:79:f9:31:38:fa:d2:26:d1:2e:c5:13:52:6c:5e:fa: c2:88:fa:cd:44:9e:8d:cd:68:21:af:4f:18:8f:e9:eb:c1:d6: b4:f4:00:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQJuVrCio5bve7OhSvRWIMleeCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2 QjkxMTY1QTAeFw0yNTEyMDUyMTU2NTJaFw0yNTEyMDkwMjMwNTJaMDMxMTAvBgNV BAMTKEQxRUZDRUQ1MDNBMkM4RUQ2RDBBRjM0RjgyQzI5RTI5ODhGMjVENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRyetWwiLgBngGJic+jAdV4GD +cnaPCE+vznZ451LXvFy4iq6qZSlOGSRH9ISOS0Un1vBZdpG3Si0+ZcrKArnQSvb f2vXdbwPGh8xh3tXzZOtV/+XoFFOaQa2bEVK62tjEu2xwAn3VbRogg3OA4RMBrPv JUZmOJ5vpYc3PlBJuX4rJt2zqqqH9Cj5QxtsfE+WFA6UHvYRkBxsc2UYv6qyitFl rVZXG9V94/x5MGVcVs7Dww6JkXhvcREWMybzQtzyDiAnsUsCVUyQdE5R2wxRukzL 941DfxwvK89g/4+XLrSwPIeLpDYPz/Sx1FhGo9LBAN2rgG1TNcLX2oUXGj9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0e/O1QOiyO1tCvNPgsKeKYjyXXIwHwYDVR0j BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx MTY1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJhYzllNjMtOTg5MC00MjJlLTg4 ZGMtN2NiNmRkYWMyMmZhLzAvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEy OTM2QjkxMTY1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALV9k52iO0LbG7eufK5IGrf8YZCmGCNd/K+O sPW4HxZ+MJw9PRpkil54b0NJ/gPKJKJOkn+X3uo0BOixPWe78N6XlO4+qq/bG07m qom6HYu6Czzk53GNUrd4eg39QXP0bPBhGOUS9kAW5Z47Z1K6BaLCInd/IDzfgt59 3MgbdbdbuspW8GfrabT/Ocn9g1uIvh0qiALHAmDmXEE9B6lDymScHlOoWTpTA96c lQSYFdHsPcTH4PWKR4xKtymoey5iVIAMTTy3nVnm1bx3+APsw5+yGGgWRzM8ybFQ a3n5MTj60ibRLsUTUmxe+sKI+s1Eno3NaCGvTxiP6evB1rT0APQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:20 2025 by rpki-client