This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: Q4mZLn+J2tRiEVKFxbZ8K+uWxndkguDRO11FsvzT8Us= Subject key identifier: 18:B8:0D:38:6B:36:B7:36:93:1A:00:53:D9:4D:63:4A:18:08:40:2A Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 497239B2EB3FDBB1AB7C2DE0C6D3D7D82E7D65D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 0252 Signing time: Thu 18 Dec 2025 00:01:46 +0000 Manifest this update: Wed 17 Dec 2025 23:56:46 +0000 Manifest next update: Sun 21 Dec 2025 01:06:46 +0000 Files and hashes: 1: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: DRjre0YSMSudsxFmmw6XUxdeqwzNnndTE/SmTxak+MY=) 2: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: +uanKrOlJ1inyxGrMVmi+UClp9vCCzs4JkeBJaqGWYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:72:39:b2:eb:3f:db:b1:ab:7c:2d:e0:c6:d3:d7:d8:2e:7d:65:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Dec 17 23:56:46 2025 GMT Not After : Dec 21 01:06:46 2025 GMT Subject: CN=18B80D386B36B736931A0053D94D634A1808402A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:42:c4:4a:93:35:80:52:2a:65:8f:21:fe: 37:4d:fb:b5:b9:90:1e:e2:78:1e:86:b1:1e:88:fd: 44:49:ad:87:9f:1f:6c:45:fe:b6:62:ed:e7:e0:ee: 54:25:4e:73:a7:21:bf:37:e7:fd:03:fe:df:7c:62: 65:e6:1f:dd:8e:1c:ba:78:a1:e9:58:e6:fd:6c:2e: b5:b8:1e:99:82:d2:9e:a3:eb:2b:aa:da:89:d7:c8: df:e6:c5:56:04:1a:25:65:ce:62:c0:2a:5d:8f:b7: 6f:e3:4d:97:f0:89:98:6d:91:07:cf:c6:6e:e7:3b: 71:a3:df:bd:80:b0:35:7d:22:16:55:c6:2d:67:70: 40:0e:4a:c1:de:e5:4c:82:57:45:80:7b:2b:9b:7e: db:e6:fe:f6:4c:90:d3:7f:ad:9a:ed:0a:82:a7:de: cb:38:89:11:45:39:f9:bb:86:ff:3b:b2:f7:ff:13: 12:7d:78:81:b8:6c:c4:88:fb:a3:fd:cf:41:43:5e: 53:d9:6a:1d:25:a8:b4:55:c2:63:aa:df:3f:64:64: f2:43:67:03:bf:00:1d:22:be:51:62:10:56:24:62: ff:06:ab:4f:b8:b5:26:10:7e:7e:8d:8e:03:3b:e3: 6e:80:18:1d:97:b7:c0:56:7d:49:45:da:dd:7c:aa: 08:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B8:0D:38:6B:36:B7:36:93:1A:00:53:D9:4D:63:4A:18:08:40:2A X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:63:c9:2e:76:51:59:59:dc:68:a9:c3:40:2b:98:cc:95:f2: 1e:04:3f:a8:99:a3:08:4b:6c:b4:ad:44:6d:24:91:3a:93:54: 90:14:24:ba:72:3f:60:df:3d:37:7f:a6:ec:36:a1:8a:2f:ec: 9f:fa:de:2d:6c:06:70:ca:0e:72:b1:e2:98:78:87:ea:e8:db: 40:4f:2b:0b:ca:39:ba:4d:22:d8:81:7d:fb:26:39:f9:ae:bf: fa:ed:0a:38:03:e3:bf:31:8b:8c:5a:00:b8:7b:8d:3f:68:58: fb:25:a9:b8:bc:41:c2:47:b2:a0:aa:29:cf:4b:de:c1:c6:23: 55:b3:40:f2:bb:18:69:e4:9f:d1:d3:34:39:f6:ff:51:b9:cd: 65:ce:09:f6:be:72:19:18:30:09:b2:63:13:78:a3:19:6e:00: a9:e4:43:a6:97:60:d2:ef:11:42:94:90:80:7e:de:d2:0e:05: 2b:c3:e0:85:01:6d:b6:c0:95:0c:a2:1f:2c:01:d0:1d:4a:90: 35:f6:91:d2:93:02:51:2a:ad:d2:ae:40:10:c0:3f:27:c7:ea: 3c:cd:9d:e8:fa:6e:f0:84:e4:54:71:c7:63:4f:89:52:5c:a3: a6:ca:43:5d:6f:e7:b4:5d:05:a2:5f:ef:19:12:a3:7d:7f:5c: f7:0a:d1:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSXI5sus/27GrfC3gxtPX2C59ZdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNTEyMTcyMzU2NDZaFw0yNTEyMjEwMTA2NDZaMDMxMTAvBgNV BAMTKDE4QjgwRDM4NkIzNkI3MzY5MzFBMDA1M0Q5NEQ2MzRBMTgwODQwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrG0LESpM1gFIqZY8h/jdN+7W5 kB7ieB6GsR6I/URJrYefH2xF/rZi7efg7lQlTnOnIb835/0D/t98YmXmH92OHLp4 oelY5v1sLrW4HpmC0p6j6yuq2onXyN/mxVYEGiVlzmLAKl2Pt2/jTZfwiZhtkQfP xm7nO3Gj372AsDV9IhZVxi1ncEAOSsHe5UyCV0WAeyubftvm/vZMkNN/rZrtCoKn 3ss4iRFFOfm7hv87svf/ExJ9eIG4bMSI+6P9z0FDXlPZah0lqLRVwmOq3z9kZPJD ZwO/AB0ivlFiEFYkYv8Gq0+4tSYQfn6NjgM7426AGB2Xt8BWfUlF2t18qgj5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGLgNOGs2tzaTGgBT2U1jShgIQCowHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANRjyS52UVlZ3Gipw0ArmMyV8h4EP6iZowhL bLStRG0kkTqTVJAUJLpyP2DfPTd/puw2oYov7J/63i1sBnDKDnKx4ph4h+ro20BP KwvKObpNItiBffsmOfmuv/rtCjgD478xi4xaALh7jT9oWPslqbi8QcJHsqCqKc9L 3sHGI1WzQPK7GGnkn9HTNDn2/1G5zWXOCfa+chkYMAmyYxN4oxluAKnkQ6aXYNLv EUKUkIB+3tIOBSvD4IUBbbbAlQyiHywB0B1KkDX2kdKTAlEqrdKuQBDAPyfH6jzN nej6bvCE5FRxx2NPiVJco6bKQ11v57RdBaJf7xkSo31/XPcK0dc= -----END CERTIFICATE-----Generated at Thu Dec 18 20:31:20 2025 by rpki-client