This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json) Hash identifier: sP0IdCyvL9OCjpOxK8MFspzzzOL9ggqwoBgJsvxuArI= Subject key identifier: 0C:9C:7A:43:C1:48:F2:3B:A9:48:84:A6:05:5E:3B:48:9C:FB:64:2C Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E Certificate serial: 3A19B04BADAC67E43C3E0B3A7666D0C74969DF59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft Manifest number: 01E3 Signing time: Fri 05 Dec 2025 10:12:09 +0000 Manifest this update: Fri 05 Dec 2025 10:07:09 +0000 Manifest next update: Mon 08 Dec 2025 10:16:09 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: fFWzPgou/ECKiXU5DKj/fTCFyECWSQWhIu1tavvJN+Q=) 2: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: H2hRlpXofBezp+NGBbiLRdlFFMv2mdNponuDNgApuD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:19:b0:4b:ad:ac:67:e4:3c:3e:0b:3a:76:66:d0:c7:49:69:df:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E Validity Not Before: Dec 5 10:07:09 2025 GMT Not After : Dec 8 10:16:09 2025 GMT Subject: CN=0C9C7A43C148F23BA94884A6055E3B489CFB642C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:7c:44:bf:1d:1a:2d:16:3a:42:eb:7d:53: a8:43:5d:7f:f2:e1:7e:0c:b2:ef:a0:c5:c5:31:68: 92:e4:d1:35:27:85:76:33:90:25:94:bd:7c:2f:d8: 02:f1:c9:f4:59:0a:51:8a:0c:ac:fe:01:ca:b7:34: c2:5a:83:b3:c5:c7:af:a7:f9:39:e1:16:b4:1d:65: e7:08:1a:ba:ed:98:be:53:04:c5:03:6d:d4:fe:21: 8e:b9:d4:7c:d5:74:c6:21:2c:2a:30:a4:ab:ef:61: cd:d2:ef:d5:b9:ae:41:4b:ae:f7:e3:9d:e8:e4:3b: df:e2:71:73:21:3f:e2:ff:d4:f3:64:9c:13:21:7f: 4b:20:80:ed:61:03:d1:00:01:dc:1a:82:3b:40:53: 3b:32:4d:14:6d:25:2f:b3:ba:be:97:d6:2d:b3:22: 28:6a:12:60:33:95:45:13:13:87:4f:b5:c8:bf:a1: d1:e1:23:8c:25:d7:d0:20:01:3c:54:82:e0:8b:7f: c6:2d:3c:6d:6c:14:d7:e9:3e:d5:15:ee:f0:a3:29: a7:32:4c:47:80:67:8d:7e:ac:4f:05:34:71:15:46: b6:6c:e4:7a:6e:86:cc:c4:38:28:8f:b6:3c:b4:99: 4a:39:5c:71:44:b5:e4:c8:f4:91:de:bd:e6:70:3e: ec:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9C:7A:43:C1:48:F2:3B:A9:48:84:A6:05:5E:3B:48:9C:FB:64:2C X509v3 Authority Key Identifier: keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e3:14:4f:5a:7a:42:07:ff:bb:02:24:4c:c6:e1:69:7e:cb: 3d:1e:7b:84:c8:c1:48:81:ac:bd:37:aa:8f:f2:7f:4b:8f:56: e2:22:d6:58:57:bf:1d:5c:15:14:9d:13:fb:61:71:54:a1:5e: e7:c8:9f:f7:6f:2e:be:dd:fe:a2:f4:9a:14:d9:a8:a5:da:79: 7d:58:8d:86:75:ff:ee:1d:b2:9d:09:51:bd:25:40:77:55:a2: 26:a5:d2:cf:9b:b0:8b:dc:19:b6:ab:ec:ea:98:47:9b:a7:b7: d3:60:aa:3d:9f:45:f7:8b:21:b1:66:4b:37:29:4f:a2:c6:c1: 4a:c4:31:8f:e4:8b:fa:1b:75:d9:71:e8:27:d7:f1:59:f1:82: f6:18:b7:19:40:b7:f4:0f:4e:b6:80:04:15:1b:42:8a:59:c1: 17:f1:c1:bc:f2:07:3f:39:c2:1d:a4:5e:1c:a6:9b:f8:ff:ed: 5b:20:e6:79:12:b3:57:3b:de:4c:31:c3:56:da:47:9b:14:51: e5:c4:0f:43:32:07:f6:1a:f0:ac:0a:c8:9c:6e:e3:2a:2d:c6: 4e:e7:63:f8:76:d9:12:64:45:a8:6b:84:4d:6d:6f:b0:9c:79: ef:5e:5e:30:1c:7f:00:97:ec:c6:97:f3:2b:c8:d5:44:fa:b3: 57:85:c9:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhmwS62sZ+Q8Pgs6dmbQx0lp31kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4 QkFGNzM5RTAeFw0yNTEyMDUxMDA3MDlaFw0yNTEyMDgxMDE2MDlaMDMxMTAvBgNV BAMTKDBDOUM3QTQzQzE0OEYyM0JBOTQ4ODRBNjA1NUUzQjQ4OUNGQjY0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6nxEvx0aLRY6Qut9U6hDXX/y 4X4Msu+gxcUxaJLk0TUnhXYzkCWUvXwv2ALxyfRZClGKDKz+Acq3NMJag7PFx6+n +TnhFrQdZecIGrrtmL5TBMUDbdT+IY651HzVdMYhLCowpKvvYc3S79W5rkFLrvfj nejkO9/icXMhP+L/1PNknBMhf0sggO1hA9EAAdwagjtAUzsyTRRtJS+zur6X1i2z IihqEmAzlUUTE4dPtci/odHhI4wl19AgATxUguCLf8YtPG1sFNfpPtUV7vCjKacy TEeAZ41+rE8FNHEVRrZs5HpuhszEOCiPtjy0mUo5XHFEteTI9JHeveZwPuw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDJx6Q8FI8jupSISmBV47SJz7ZCwwHwYDVR0j BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1 NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrjFE9aekIH/7sCJEzG4Wl+yz0ee4TIwUiB rL03qo/yf0uPVuIi1lhXvx1cFRSdE/thcVShXufIn/dvLr7d/qL0mhTZqKXaeX1Y jYZ1/+4dsp0JUb0lQHdVoial0s+bsIvcGbar7OqYR5unt9Ngqj2fRfeLIbFmSzcp T6LGwUrEMY/ki/obddlx6CfX8VnxgvYYtxlAt/QPTraABBUbQopZwRfxwbzyBz85 wh2kXhymm/j/7Vsg5nkSs1c73kwxw1baR5sUUeXED0MyB/Ya8KwKyJxu4yotxk7n Y/h22RJkRahrhE1tb7Ccee9eXjAcfwCX7MaX8yvI1UT6s1eFybE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:01 2025 by rpki-client