This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: +zI2sSIxQTWl1a7hASo05yrK3Dn/QT1xrPnaZrxzw/Y= Subject key identifier: 5B:D6:D5:19:13:AC:A1:1D:EB:A6:96:F6:9E:17:F7:EA:11:28:55:AD Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 7261E4A8A0DBA865617FEF0B4613856E28F2F0D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 01AC Signing time: Fri 05 Dec 2025 11:21:45 +0000 Manifest this update: Fri 05 Dec 2025 11:16:45 +0000 Manifest next update: Mon 08 Dec 2025 20:23:45 +0000 Files and hashes: 1: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: vX8BWt4/FEBMTdxyryKfK+yc+DyfY+FHUhedP9HDrrg=) 2: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: InrImlNizXyRaZ5OSZAbKYKNMEMqIX4WAQ1A/9whx7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:61:e4:a8:a0:db:a8:65:61:7f:ef:0b:46:13:85:6e:28:f2:f0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Dec 5 11:16:45 2025 GMT Not After : Dec 8 20:23:45 2025 GMT Subject: CN=5BD6D51913ACA11DEBA696F69E17F7EA112855AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:46:8a:cf:3e:df:b7:b2:54:46:15:b7:52: 8f:64:5a:74:73:85:37:be:9e:be:97:ab:9c:5a:3d: 76:3f:ff:fa:7f:43:0e:2d:d2:59:1e:a6:63:22:b0: 73:d2:d1:76:92:88:9e:7b:50:db:02:97:45:4f:5f: f7:1a:25:c1:36:42:ae:a8:09:8f:cb:27:be:15:ba: e2:bc:19:14:14:17:74:a3:76:fe:8e:5b:e4:11:47: df:bd:06:1d:43:c8:79:51:c9:a2:c1:9a:d1:3a:48: 86:17:7d:2c:48:5b:30:d4:65:32:2e:c3:ae:4c:31: 8e:bd:7c:07:28:4e:cd:78:33:39:a7:76:04:6e:89: e7:e1:4b:47:7a:0b:15:3b:e8:d0:84:5f:a3:12:61: ea:ef:03:1e:8f:ed:fe:b6:fc:4c:0f:b7:49:b6:55: 25:71:41:66:39:10:68:37:0d:81:d2:54:32:40:f9: 22:c9:e7:1e:4d:2e:63:6c:e9:7f:da:ea:84:96:5f: 02:4c:93:85:30:80:4f:11:f2:e4:a3:c8:9f:7b:e2: 3e:ec:aa:f4:d7:3a:77:c3:5c:99:2a:17:0e:4b:b5: bc:db:95:1e:37:18:45:fa:6a:b3:15:68:13:33:bc: fb:1f:be:cc:b8:f3:9e:2b:c5:f5:59:10:1f:59:7f: 05:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D6:D5:19:13:AC:A1:1D:EB:A6:96:F6:9E:17:F7:EA:11:28:55:AD X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f7:f3:aa:66:a0:41:1a:4d:6b:74:ad:49:56:08:a9:93:3b: 31:d4:52:84:3f:8c:6c:a3:27:76:8f:52:13:08:70:4f:fb:c4: bb:70:58:68:5b:27:95:9f:72:d6:a2:66:cd:22:1f:f6:d7:65: 02:b2:3e:b6:ff:ed:58:a9:d7:64:bf:9c:25:c9:c0:7c:01:92: e8:45:36:4c:9d:ee:84:2f:f7:e7:3c:e3:fa:5f:70:35:8f:48: 22:0a:95:d3:2e:5b:bc:35:93:3d:b8:b1:de:2e:75:59:b8:9b: 47:b6:57:b5:3c:a4:5e:33:3a:fc:b0:90:da:ba:ac:ed:88:8a: cc:0f:4f:1e:45:a3:05:3b:09:7d:4c:bd:2c:27:84:87:95:d5: 54:22:c6:43:48:b8:f5:42:27:ef:94:c0:12:6e:05:b5:22:2e: 97:89:a0:80:c8:95:0b:bf:56:90:7c:a3:7f:87:f3:22:8f:c2: b3:7e:6e:d3:cb:b1:c3:b8:66:e8:43:7f:15:1c:45:d7:f7:26: bc:a5:5f:0b:05:cb:fc:d2:dd:65:53:a9:91:ba:81:9e:c7:b4: 5f:81:36:78:e8:5c:ea:2c:9e:5d:82:9f:7a:f2:71:53:fb:ab: e4:2f:c2:ae:a7:01:d5:a8:ad:69:d0:92:5d:62:f4:79:8f:20: 0d:01:0c:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmHkqKDbqGVhf+8LRhOFbijy8NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNTEyMDUxMTE2NDVaFw0yNTEyMDgyMDIzNDVaMDMxMTAvBgNV BAMTKDVCRDZENTE5MTNBQ0ExMURFQkE2OTZGNjlFMTdGN0VBMTEyODU1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgkaKzz7ft7JURhW3Uo9kWnRz hTe+nr6Xq5xaPXY///p/Qw4t0lkepmMisHPS0XaSiJ57UNsCl0VPX/caJcE2Qq6o CY/LJ74VuuK8GRQUF3Sjdv6OW+QRR9+9Bh1DyHlRyaLBmtE6SIYXfSxIWzDUZTIu w65MMY69fAcoTs14MzmndgRuiefhS0d6CxU76NCEX6MSYervAx6P7f62/EwPt0m2 VSVxQWY5EGg3DYHSVDJA+SLJ5x5NLmNs6X/a6oSWXwJMk4UwgE8R8uSjyJ974j7s qvTXOnfDXJkqFw5LtbzblR43GEX6arMVaBMzvPsfvsy4854rxfVZEB9ZfwV7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9bVGROsoR3rppb2nhf36hEoVa0wHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3386pmoEEaTWt0rUlWCKmTOzHUUoQ/jGyj J3aPUhMIcE/7xLtwWGhbJ5WfctaiZs0iH/bXZQKyPrb/7Vip12S/nCXJwHwBkuhF Nkyd7oQv9+c84/pfcDWPSCIKldMuW7w1kz24sd4udVm4m0e2V7U8pF4zOvywkNq6 rO2IiswPTx5FowU7CX1MvSwnhIeV1VQixkNIuPVCJ++UwBJuBbUiLpeJoIDIlQu/ VpB8o3+H8yKPwrN+btPLscO4ZuhDfxUcRdf3JrylXwsFy/zS3WVTqZG6gZ7HtF+B NnjoXOosnl2Cn3rycVP7q+Qvwq6nAdWorWnQkl1i9HmPIA0BDAk= -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:46 2025 by rpki-client