This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: bneaRB3q+0QY3Cp8f3t5mpa9QuyE7+E6GLCWuBkkNgk= Subject key identifier: C8:24:B4:D0:15:F7:43:45:0B:41:E2:40:11:F9:AF:CA:3A:6C:E5:B8 Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 4A93FA80D5F4AE826C62252F48AE4A28F5BD3A38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 0206 Signing time: Fri 05 Dec 2025 15:50:49 +0000 Manifest this update: Fri 05 Dec 2025 15:45:49 +0000 Manifest next update: Mon 08 Dec 2025 21:59:49 +0000 Files and hashes: 1: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: GXLOPfGm/zFBOQIaCl2ftsf73ice02cQsQVWBGdzd3E=) 2: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:93:fa:80:d5:f4:ae:82:6c:62:25:2f:48:ae:4a:28:f5:bd:3a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Dec 5 15:45:49 2025 GMT Not After : Dec 8 21:59:49 2025 GMT Subject: CN=C824B4D015F743450B41E24011F9AFCA3A6CE5B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:d9:cb:a7:7d:6e:f6:84:19:db:07:ce:e7: 63:0f:55:3b:97:37:68:e7:1a:d2:ed:d7:21:16:df: 3e:97:ee:71:d9:6a:be:32:bf:16:0a:04:7d:e5:20: 46:92:0a:2c:1e:2c:65:37:bd:c8:5b:c9:b2:c8:b0: 77:ba:e3:37:4b:b2:8e:67:4f:71:f1:71:d5:55:ba: c8:bf:25:0e:95:de:0d:1f:bc:06:96:da:3e:2a:98: 2e:5c:a0:34:64:9f:19:80:5b:27:68:32:b9:35:69: fe:e9:35:3f:fa:c3:4d:6d:d5:fb:8b:f0:8e:21:1c: 7a:ee:28:af:bc:66:6e:49:da:82:e6:54:dc:b7:2a: f6:a1:5c:5d:4c:1f:ea:d3:c6:ab:77:50:0b:24:10: e1:75:46:a6:74:0b:e3:2c:0d:07:80:3f:64:4e:18: b5:02:ae:76:98:c4:0b:f8:af:7a:c4:f9:32:de:cd: 4f:3a:8b:c6:65:b8:c5:c8:f8:08:8a:fa:a6:19:60: c3:38:b4:8d:51:56:d0:ef:24:de:aa:50:24:68:53: 8a:3f:a2:3a:27:68:4b:55:5b:8a:e0:3a:56:93:b6: bc:87:b2:43:83:7c:90:ab:43:3b:da:a2:c4:b2:fb: df:4f:ec:03:68:32:0f:2a:ad:8d:8c:19:4a:e5:ae: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:24:B4:D0:15:F7:43:45:0B:41:E2:40:11:F9:AF:CA:3A:6C:E5:B8 X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9f:f4:ec:3c:86:db:1d:ac:ba:7e:a7:fc:ff:93:1b:ca:5f: 3d:5b:a1:25:a8:a6:fe:83:df:7e:88:e2:56:93:65:d3:2f:af: 9b:65:d0:8d:44:c1:b4:44:10:e0:18:d9:21:f6:d3:27:a6:22: 8f:0f:96:15:83:f1:7f:a9:fa:75:17:dd:6d:1f:76:99:91:d0: 9c:0b:01:db:23:d2:71:8f:84:48:6c:9a:d3:d3:cf:1c:a4:14: 3e:a2:96:03:7b:c8:b5:cd:f4:2a:ad:b5:5a:2a:38:fa:09:43: d8:f3:f7:b0:5e:33:4d:3e:93:71:79:44:90:89:a5:13:d9:bc: dd:9c:30:9a:4b:fc:36:e4:d0:9a:ca:48:fd:b0:a9:da:7e:93: aa:39:ca:9b:c9:ac:de:a2:64:5d:82:d6:eb:ef:25:ce:48:d4: ea:18:0e:28:7e:b0:26:0a:e4:76:54:cf:98:ce:28:91:09:b4: 48:1b:a1:98:8b:24:5c:96:32:71:d4:25:ba:06:e7:1c:f4:f9: dd:f4:01:4a:d7:1b:1e:e5:33:3b:4d:e9:49:3b:e2:1e:2d:21: 5f:53:c6:10:e8:2f:9d:59:cb:bd:0a:6a:2f:49:28:94:92:51: e1:ca:25:88:82:f0:a2:fd:75:b2:52:77:03:db:de:89:08:e0: d0:fc:71:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSpP6gNX0roJsYiUvSK5KKPW9OjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNTEyMDUxNTQ1NDlaFw0yNTEyMDgyMTU5NDlaMDMxMTAvBgNV BAMTKEM4MjRCNEQwMTVGNzQzNDUwQjQxRTI0MDExRjlBRkNBM0E2Q0U1QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKINnLp31u9oQZ2wfO52MPVTuX N2jnGtLt1yEW3z6X7nHZar4yvxYKBH3lIEaSCiweLGU3vchbybLIsHe64zdLso5n T3HxcdVVusi/JQ6V3g0fvAaW2j4qmC5coDRknxmAWydoMrk1af7pNT/6w01t1fuL 8I4hHHruKK+8Zm5J2oLmVNy3KvahXF1MH+rTxqt3UAskEOF1RqZ0C+MsDQeAP2RO GLUCrnaYxAv4r3rE+TLezU86i8ZluMXI+AiK+qYZYMM4tI1RVtDvJN6qUCRoU4o/ ojonaEtVW4rgOlaTtryHskODfJCrQzvaosSy+99P7ANoMg8qrY2MGUrlrv7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyCS00BX3Q0ULQeJAEfmvyjps5bgwHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+f9Ow8htsdrLp+p/z/kxvKXz1boSWopv6D 336I4laTZdMvr5tl0I1EwbREEOAY2SH20yemIo8PlhWD8X+p+nUX3W0fdpmR0JwL Adsj0nGPhEhsmtPTzxykFD6ilgN7yLXN9CqttVoqOPoJQ9jz97BeM00+k3F5RJCJ pRPZvN2cMJpL/Dbk0JrKSP2wqdp+k6o5ypvJrN6iZF2C1uvvJc5I1OoYDih+sCYK 5HZUz5jOKJEJtEgboZiLJFyWMnHUJboG5xz0+d30AUrXGx7lMztN6Uk74h4tIV9T xhDoL51Zy70Kai9JKJSSUeHKJYiC8KL9dbJSdwPb3okI4ND8cd0= -----END CERTIFICATE-----Generated at Sun Dec 7 04:55:46 2025 by rpki-client