This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: hNiRNm8WVv4EmekWUbwQQ/mUBsGL7jOk+ZSq/ezG+ec= Subject key identifier: E9:4A:72:C4:C7:D5:37:8A:AA:7F:4A:EC:30:7E:F5:7D:7F:CE:E4:90 Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 2BC57B784EB8A4B63598FB1BFACFC6DE8A7990D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 024C Signing time: Thu 04 Dec 2025 23:51:46 +0000 Manifest this update: Thu 04 Dec 2025 23:46:46 +0000 Manifest next update: Mon 08 Dec 2025 02:09:46 +0000 Files and hashes: 1: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: +uanKrOlJ1inyxGrMVmi+UClp9vCCzs4JkeBJaqGWYc=) 2: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: H44QWmmNwvArdLJGp5PSUqBp7a13so/JWpml4r+vnUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c5:7b:78:4e:b8:a4:b6:35:98:fb:1b:fa:cf:c6:de:8a:79:90:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Dec 4 23:46:46 2025 GMT Not After : Dec 8 02:09:46 2025 GMT Subject: CN=E94A72C4C7D5378AAA7F4AEC307EF57D7FCEE490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:3c:0b:21:0d:24:1a:16:21:9e:59:96:3d: a7:e0:35:21:65:4b:28:8d:9e:f4:dc:5e:27:8d:7a: b4:a2:93:52:31:d9:d4:0e:7e:e6:92:06:a3:d9:60: 22:f2:0c:24:32:2b:91:30:f2:75:3a:fc:2e:99:93: 7c:dd:97:89:17:27:38:44:16:7b:78:f4:3c:54:93: f9:7a:b3:83:c0:74:35:5d:9c:2d:2a:76:df:54:a8: 5b:63:7d:20:74:61:06:d5:1c:e1:e6:be:5d:bd:5c: 4c:0a:20:ce:2f:b5:02:52:16:c3:57:de:d8:d6:51: fe:c8:2f:c1:5e:4c:c3:8a:c7:63:00:6c:1b:11:d8: 16:96:1e:2d:82:29:81:aa:76:4b:68:9d:9b:f3:81: f3:a9:80:8b:c5:26:55:b0:33:18:63:63:7c:3b:d9: c7:5a:26:95:25:78:c2:e9:bb:15:c3:51:4b:5a:44: 47:d7:b0:87:ec:79:8d:c6:30:31:ee:67:26:61:f1: 96:82:2f:79:18:46:dd:c2:e1:63:39:0c:70:57:88: dd:e7:63:e3:f2:38:4e:99:0f:73:a1:14:ca:e2:63: 65:88:39:e9:67:bb:b4:3c:4f:79:1f:99:fc:b8:d4: 6b:c2:9e:1e:26:04:df:ca:6f:8e:f2:89:5e:13:ee: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4A:72:C4:C7:D5:37:8A:AA:7F:4A:EC:30:7E:F5:7D:7F:CE:E4:90 X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5d:cf:ed:20:87:cc:69:96:a7:f7:78:bf:39:2b:95:4f:a7: 60:72:06:6d:4f:ec:e1:2c:9a:a3:46:cd:87:37:2e:8f:06:b4: 95:96:61:8d:83:29:c0:11:75:eb:3c:28:c6:00:94:ab:e2:5b: 60:fc:99:3a:3b:6d:82:7d:65:e5:64:85:39:60:85:bc:f3:2f: b9:db:de:90:48:d6:10:84:b0:6c:88:7c:85:fd:16:25:40:9e: 31:26:41:d5:ed:47:45:39:dd:00:51:1d:b2:fa:25:af:fa:c9: f6:bd:4b:56:d2:67:4e:f9:1e:88:10:8d:93:65:a2:a1:16:a2: af:29:3a:c0:1f:a6:c5:fb:70:93:94:f2:dc:8c:1f:13:91:e2: ab:51:6d:67:5d:07:be:6b:a4:3e:4f:59:40:94:f8:3f:3c:ee: 65:ae:d0:b3:c1:83:88:80:6c:da:8c:e9:4b:8f:0c:e5:78:62: 9b:c1:11:c0:d8:92:6f:0d:98:50:96:18:44:27:8c:98:e1:54: 41:74:d9:7d:b8:23:90:78:96:ab:55:e2:c7:f6:28:63:62:13: e6:82:36:ee:3f:0a:fd:0f:be:08:ee:2c:d5:46:c3:48:df:3e: c5:7b:3e:10:38:4c:a2:2a:89:1c:b1:18:0b:9c:d5:6d:d5:4d: 79:79:69:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8V7eE64pLY1mPsb+s/G3op5kNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNTEyMDQyMzQ2NDZaFw0yNTEyMDgwMjA5NDZaMDMxMTAvBgNV BAMTKEU5NEE3MkM0QzdENTM3OEFBQTdGNEFFQzMwN0VGNTdEN0ZDRUU0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+zwLIQ0kGhYhnlmWPafgNSFl SyiNnvTcXieNerSik1Ix2dQOfuaSBqPZYCLyDCQyK5Ew8nU6/C6Zk3zdl4kXJzhE Fnt49DxUk/l6s4PAdDVdnC0qdt9UqFtjfSB0YQbVHOHmvl29XEwKIM4vtQJSFsNX 3tjWUf7IL8FeTMOKx2MAbBsR2BaWHi2CKYGqdktonZvzgfOpgIvFJlWwMxhjY3w7 2cdaJpUleMLpuxXDUUtaREfXsIfseY3GMDHuZyZh8ZaCL3kYRt3C4WM5DHBXiN3n Y+PyOE6ZD3OhFMriY2WIOelnu7Q8T3kfmfy41GvCnh4mBN/Kb47yiV4T7sDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6UpyxMfVN4qqf0rsMH71fX/O5JAwHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5dz+0gh8xplqf3eL85K5VPp2ByBm1P7OEs mqNGzYc3Lo8GtJWWYY2DKcARdes8KMYAlKviW2D8mTo7bYJ9ZeVkhTlghbzzL7nb 3pBI1hCEsGyIfIX9FiVAnjEmQdXtR0U53QBRHbL6Ja/6yfa9S1bSZ075HogQjZNl oqEWoq8pOsAfpsX7cJOU8tyMHxOR4qtRbWddB75rpD5PWUCU+D887mWu0LPBg4iA bNqM6UuPDOV4YpvBEcDYkm8NmFCWGEQnjJjhVEF02X24I5B4lqtV4sf2KGNiE+aC Nu4/Cv0PvgjuLNVGw0jfPsV7PhA4TKIqiRyxGAuc1W3VTXl5acs= -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:08 2025 by rpki-client