This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json) Hash identifier: F7XJQHlpA3bAvAYB4/g1MI5Hpmm/pHIKTblsvjxalpE= Subject key identifier: 29:AF:61:77:75:25:BB:A1:5F:D5:25:03:14:83:8C:35:0A:F1:7F:4A Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 0CB677CC591DD465CCC36313B3F3604038C3F5CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft Manifest number: CE Signing time: Sat 06 Dec 2025 16:31:59 +0000 Manifest this update: Sat 06 Dec 2025 16:26:59 +0000 Manifest next update: Tue 09 Dec 2025 16:50:59 +0000 Files and hashes: 1: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: jU/SQlHFg0i0t2XT427YG+4xTKw9TASNvTEDlba6svA=) 2: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: S22ChZGEvJ5gAYFztY/TYC839FBrS83Y5ZysrOVb4ss=) 3: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: TMxDhVN8zA/JG5qtIINDrUeAj4nlSI++i16gwlXqnTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b6:77:cc:59:1d:d4:65:cc:c3:63:13:b3:f3:60:40:38:c3:f5:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Dec 6 16:26:59 2025 GMT Not After : Dec 9 16:50:59 2025 GMT Subject: CN=29AF61777525BBA15FD5250314838C350AF17F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:7d:c9:f7:06:7e:3a:41:7d:7d:e1:b4:7f: d7:1d:bb:ee:4e:1f:26:62:b4:f6:8c:4e:21:65:98: 19:b9:c6:98:a1:39:3f:e5:99:2c:62:ef:b0:59:b5: 69:c4:6b:09:27:3d:9a:0c:5f:22:69:f9:10:8d:59: 9e:6d:cd:c1:2b:c5:2c:95:65:e6:14:9e:98:28:ec: 9b:45:2c:7e:3c:13:00:9b:84:4e:bf:aa:1e:c9:12: 05:5c:9e:55:98:ac:8b:4f:fc:f9:fc:c6:21:72:e3: 47:51:6f:71:b9:e0:85:fb:a7:50:8e:a5:7a:15:eb: 7e:d9:43:4d:41:68:65:70:24:6e:12:cb:90:7b:4f: af:83:2f:3b:68:76:86:72:91:05:40:8e:7b:9b:67: d0:4e:31:07:5d:77:aa:06:45:4b:39:97:f4:c0:a0: 7c:00:3a:cf:c2:b3:f2:90:8b:05:84:bb:52:3d:34: 66:2a:b1:6c:ad:f1:4f:a3:fe:23:91:b8:2b:88:1d: 0d:2d:d3:47:6a:e8:db:15:7a:ac:6f:71:08:f8:a8: e4:79:7a:be:45:b5:c1:1c:46:94:18:f7:39:26:15: 4e:95:9e:91:17:04:f3:90:e6:ce:59:8e:b7:36:8e: 3d:06:5f:9b:e0:94:13:b6:27:f4:a0:e7:6b:21:cf: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AF:61:77:75:25:BB:A1:5F:D5:25:03:14:83:8C:35:0A:F1:7F:4A X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:06:95:e0:79:e7:38:10:37:b1:5b:45:6d:de:35:fe:54:8d: 9b:a9:a9:dc:55:89:de:cc:d2:83:79:47:d3:56:aa:61:81:01: 29:82:16:57:b0:0f:d5:76:0e:41:d3:4c:0b:6a:4e:bd:f6:d9: ae:4e:e3:e9:21:bc:fe:9e:20:23:f1:68:8a:02:c5:ba:76:ae: cf:6d:b2:e1:1c:09:7a:d6:fd:e9:21:d6:9d:69:4e:5d:8a:2b: 42:c8:1d:f5:b1:3e:1d:da:f3:c4:94:b8:42:de:a5:d7:37:f2: e9:f8:39:ad:6f:e1:20:45:c5:3d:28:1b:6e:c6:c6:3f:88:47: 57:83:0d:8d:ab:86:9d:c5:d6:99:35:89:59:fa:73:15:8b:71: a2:51:30:51:bb:c3:6a:60:2d:54:f7:30:6d:06:55:be:9d:62: c7:1a:a7:bf:39:5e:8a:36:de:80:a8:f4:8f:cc:e9:ea:fd:df: 4b:f7:0d:48:83:eb:f2:1c:4b:1d:5d:e8:80:33:0e:48:b6:ed: 51:6b:25:07:db:6d:aa:5e:1b:22:7f:bc:55:0f:2b:77:cc:3a: 58:27:b5:f8:f2:e9:3c:5f:0e:40:37:20:fe:6f:16:ed:e8:47: 98:5f:a2:51:1f:73:30:07:3e:88:b0:19:ce:da:4d:97:a5:d7: 8d:72:73:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLZ3zFkd1GXMw2MTs/NgQDjD9c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNTEyMDYxNjI2NTlaFw0yNTEyMDkxNjUwNTlaMDMxMTAvBgNV BAMTKDI5QUY2MTc3NzUyNUJCQTE1RkQ1MjUwMzE0ODM4QzM1MEFGMTdGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vX3J9wZ+OkF9feG0f9cdu+5O HyZitPaMTiFlmBm5xpihOT/lmSxi77BZtWnEawknPZoMXyJp+RCNWZ5tzcErxSyV ZeYUnpgo7JtFLH48EwCbhE6/qh7JEgVcnlWYrItP/Pn8xiFy40dRb3G54IX7p1CO pXoV637ZQ01BaGVwJG4Sy5B7T6+DLztodoZykQVAjnubZ9BOMQddd6oGRUs5l/TA oHwAOs/Cs/KQiwWEu1I9NGYqsWyt8U+j/iORuCuIHQ0t00dq6NsVeqxvcQj4qOR5 er5FtcEcRpQY9zkmFU6VnpEXBPOQ5s5Zjrc2jj0GX5vglBO2J/Sg52shz/8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKa9hd3Ulu6Ff1SUDFIOMNQrxf0owHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5 QTJDMzZDRUU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoGleB55zgQN7FbRW3eNf5UjZupqdxVid7M 0oN5R9NWqmGBASmCFlewD9V2DkHTTAtqTr322a5O4+khvP6eICPxaIoCxbp2rs9t suEcCXrW/ekh1p1pTl2KK0LIHfWxPh3a88SUuELepdc38un4Oa1v4SBFxT0oG27G xj+IR1eDDY2rhp3F1pk1iVn6cxWLcaJRMFG7w2pgLVT3MG0GVb6dYscap785Xoo2 3oCo9I/M6er930v3DUiD6/IcSx1d6IAzDki27VFrJQfbbapeGyJ/vFUPK3fMOlgn tfjy6TxfDkA3IP5vFu3oR5hfolEfczAHPoiwGc7aTZel141yc7c= -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:19 2025 by rpki-client