This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: 2EASoRuohqYR0S5Ze0nDp1oEVU+BhS66MoWksnwA2fA= Subject key identifier: 3D:A4:19:2D:97:E8:E2:BF:C0:9F:FC:5E:7C:44:17:C8:B9:B0:A0:F5 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 1695AE9497F1C5B1727D976425F2E97F22A5BE18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: 0115 Signing time: Fri 05 Dec 2025 18:12:03 +0000 Manifest this update: Fri 05 Dec 2025 18:07:03 +0000 Manifest next update: Mon 08 Dec 2025 21:06:03 +0000 Files and hashes: 1: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: UJWCfLZ9fSMJLiRnk0tGMzcolNqiNkSGMF3jNmGCBWE=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:95:ae:94:97:f1:c5:b1:72:7d:97:64:25:f2:e9:7f:22:a5:be:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Dec 5 18:07:03 2025 GMT Not After : Dec 8 21:06:03 2025 GMT Subject: CN=3DA4192D97E8E2BFC09FFC5E7C4417C8B9B0A0F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:2a:bd:d5:97:b5:c4:19:14:b2:5f:1b:0b: 5e:9f:8b:71:62:3d:55:8d:91:46:e4:1a:1b:c9:88: 47:de:b5:a5:e9:84:aa:d5:67:60:24:a9:18:b2:ad: 1d:c5:4b:2d:36:2a:7b:1d:17:d5:8d:47:2d:a3:bd: 6c:3a:e1:17:e8:96:66:f6:cc:1b:d9:20:6b:49:a1: 8c:58:fe:68:a1:8c:97:db:80:56:76:37:d7:98:f1: 30:0b:d5:3b:f2:5b:a8:7a:a7:38:82:5d:f0:0f:2c: 3e:05:3b:57:ea:a0:3b:13:f2:11:0b:72:a9:a1:6d: 4b:15:42:04:a0:20:6c:5b:0e:6c:f1:73:55:40:f9: b4:67:fc:15:da:cb:48:1b:8c:8e:49:c8:24:fe:6e: fe:00:5a:6b:08:7f:38:14:69:8a:76:09:27:9b:2f: 43:af:ed:b5:87:21:74:5c:0d:9e:76:77:d2:28:27: 37:b9:35:d0:c7:f5:f3:8f:69:97:d3:52:b4:75:fb: d1:a7:c0:e2:88:1a:1f:6c:bd:40:be:a2:f2:50:99: 5a:52:61:f1:f5:08:b7:ee:d5:24:7d:d5:e1:c3:56: f6:5b:14:e6:7d:34:d0:de:56:79:6c:01:33:fa:48: f0:c9:4d:f7:51:64:b3:05:6f:52:0f:6d:d5:e3:0c: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A4:19:2D:97:E8:E2:BF:C0:9F:FC:5E:7C:44:17:C8:B9:B0:A0:F5 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:04:06:a9:3c:84:8e:67:ab:78:31:6d:db:93:43:dc:ce:cc: 17:99:44:85:dd:93:ed:62:ce:40:46:b8:11:55:c6:84:bf:bd: 8c:80:37:97:96:f7:30:bd:fb:e8:ca:d6:ca:4c:8e:1d:a3:1d: d5:d1:cb:18:69:e3:18:d1:27:c7:a4:24:9e:74:16:17:0d:e3: 27:a1:e4:e8:ef:a1:ff:b5:82:94:bb:9a:85:9b:2e:80:27:2e: 86:02:1b:c0:fa:1e:90:90:c9:b3:e2:90:40:13:c7:2b:cc:08: 9c:09:fb:f8:82:bb:58:dc:ec:43:11:ae:4e:c1:e6:8b:e0:72: 1f:26:de:42:f4:7d:db:ad:ba:9a:02:de:e3:1c:b8:fd:9d:25: 5a:13:a1:43:20:61:2b:a2:a2:5f:66:45:e8:fb:93:65:88:6f: 1c:2c:18:40:f8:34:b1:0a:44:f4:eb:2a:25:d8:d6:c0:4e:5e: 82:35:3f:83:0f:a5:25:da:98:e1:6c:d7:3c:1b:0b:e3:d0:8a: 34:63:06:3d:c0:c9:cd:c0:8e:dd:41:21:37:32:e6:0f:fc:4b: 46:eb:64:17:f2:db:4b:ba:7f:d6:20:e0:58:5a:ce:d0:c1:c3: fc:4f:5e:07:da:97:36:bd:0d:de:cf:a8:c0:59:d6:12:98:0c: 21:37:0a:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFpWulJfxxbFyfZdkJfLpfyKlvhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTEyMDUxODA3MDNaFw0yNTEyMDgyMTA2MDNaMDMxMTAvBgNV BAMTKDNEQTQxOTJEOTdFOEUyQkZDMDlGRkM1RTdDNDQxN0M4QjlCMEEwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfSq91Ze1xBkUsl8bC16fi3Fi PVWNkUbkGhvJiEfetaXphKrVZ2AkqRiyrR3FSy02KnsdF9WNRy2jvWw64Rfolmb2 zBvZIGtJoYxY/mihjJfbgFZ2N9eY8TAL1TvyW6h6pziCXfAPLD4FO1fqoDsT8hEL cqmhbUsVQgSgIGxbDmzxc1VA+bRn/BXay0gbjI5JyCT+bv4AWmsIfzgUaYp2CSeb L0Ov7bWHIXRcDZ52d9IoJze5NdDH9fOPaZfTUrR1+9GnwOKIGh9svUC+ovJQmVpS YfH1CLfu1SR91eHDVvZbFOZ9NNDeVnlsATP6SPDJTfdRZLMFb1IPbdXjDC5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPaQZLZfo4r/An/xefEQXyLmwoPUwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMEBqk8hI5nq3gxbduTQ9zOzBeZRIXdk+1i zkBGuBFVxoS/vYyAN5eW9zC9++jK1spMjh2jHdXRyxhp4xjRJ8ekJJ50FhcN4yeh 5Ojvof+1gpS7moWbLoAnLoYCG8D6HpCQybPikEATxyvMCJwJ+/iCu1jc7EMRrk7B 5ovgch8m3kL0fdutupoC3uMcuP2dJVoToUMgYSuiol9mRej7k2WIbxwsGED4NLEK RPTrKiXY1sBOXoI1P4MPpSXamOFs1zwbC+PQijRjBj3Ayc3Ajt1BITcy5g/8S0br ZBfy20u6f9Yg4FhaztDBw/xPXgfalza9Dd7PqMBZ1hKYDCE3CkY= -----END CERTIFICATE-----Generated at Sat Dec 6 23:49:36 2025 by rpki-client