This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: rlpQ3pVVb8nmUs89Svxdrs/Gib5G6HxsnDQPfp3bvIs= Subject key identifier: BA:26:6F:C1:FC:2A:61:F7:EF:6F:9B:14:A4:57:14:26:6C:DC:26:09 Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 48D5713CF346853A0861FFCF313EE47A519752EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 01E5 Signing time: Fri 05 Dec 2025 11:41:33 +0000 Manifest this update: Fri 05 Dec 2025 11:36:33 +0000 Manifest next update: Mon 08 Dec 2025 13:54:33 +0000 Files and hashes: 1: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: xYpr0f3xFWkRyxtLzro9JzdVPTPEERDdGo9OFxxZuXg=) 2: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=) 3: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=) 4: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d5:71:3c:f3:46:85:3a:08:61:ff:cf:31:3e:e4:7a:51:97:52:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Dec 5 11:36:33 2025 GMT Not After : Dec 8 13:54:33 2025 GMT Subject: CN=BA266FC1FC2A61F7EF6F9B14A45714266CDC2609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:73:ed:64:e5:e6:14:9f:2b:b3:88:46:c4: eb:53:c7:b8:be:b1:ff:e2:70:90:7b:1e:7e:fa:cf: 0b:fa:a9:19:2c:9c:01:ff:63:ef:4f:3a:33:e4:14: 34:d2:d7:e5:92:7e:6c:39:c2:76:30:15:4f:3c:8c: 68:d8:69:3f:39:9c:b8:29:2e:be:86:a1:c7:f7:fd: 4c:ed:67:c3:93:b1:13:a0:84:e9:2d:dc:e3:24:81: 6f:7f:6d:e8:77:8d:9e:68:c8:9d:fe:ad:19:df:ff: 02:ad:47:71:30:ef:4f:9b:6a:a8:aa:09:80:2e:93: 30:7a:8f:d2:60:0c:a8:18:6e:fb:70:95:a3:88:da: db:6a:73:13:9f:de:ce:e5:20:fe:f8:d7:61:c6:7b: 21:21:3a:05:c6:53:35:6f:1f:f2:a6:d0:0f:af:f3: 5c:c9:92:50:c4:16:10:ce:76:c0:2c:aa:b1:38:a7: c9:b3:8d:9a:3e:bb:e6:fa:b5:25:a0:95:00:45:89: 6f:1a:0a:3b:64:f7:8e:5e:fd:c3:32:d3:fb:8f:cb: b6:b7:a8:f5:6a:e6:9b:f7:1a:66:a2:b5:e6:e7:9c: bb:08:e3:b6:0e:3b:f5:43:54:79:90:a4:12:68:10: b3:72:db:aa:9c:09:bc:90:2a:00:a3:7a:23:e6:ac: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:26:6F:C1:FC:2A:61:F7:EF:6F:9B:14:A4:57:14:26:6C:DC:26:09 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:18:3d:16:fb:6d:c3:ca:b5:fc:01:d5:52:be:e8:4d:a1:f2: 4b:5b:5e:87:ea:04:f0:06:bc:52:a2:5c:39:22:46:8b:72:f8: 7d:8f:41:4f:7b:b6:46:51:c7:22:d8:45:44:28:a2:c9:e8:d0: 11:3c:ba:53:da:de:3c:fe:a9:e4:a1:9a:b3:08:76:a4:46:f1: d1:ff:5b:9c:d1:01:4a:f9:08:a9:6b:46:17:bf:91:e4:0d:84: 57:9f:bb:41:29:d0:d2:5a:7e:6e:83:61:6b:6f:09:cc:7a:52: 24:2a:03:41:50:c2:be:f1:22:22:ec:ca:58:5c:f3:40:04:14: 04:9a:59:c6:3a:cc:65:74:d6:47:4c:f7:20:ac:ad:94:a4:d6: 56:a2:9f:a5:50:f6:a6:97:4b:f2:64:ab:a4:60:e4:d3:ac:6d: 8c:98:51:e6:1d:60:11:cc:88:c3:8c:3a:12:19:08:77:b8:6c: 34:4b:21:c6:b4:28:57:bf:88:88:ba:da:0c:8a:66:b3:cd:75: a0:48:d5:4c:f2:78:43:2e:5d:79:db:11:32:bf:96:e0:97:9a: 9e:55:b5:3f:5e:58:96:7f:fa:18:28:87:12:09:6f:e8:88:53: 66:f0:ca:4d:62:a8:0a:2a:09:d3:f6:44:6d:e2:69:64:b7:f0: 5d:8e:4c:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNVxPPNGhToIYf/PMT7kelGXUuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNTEyMDUxMTM2MzNaFw0yNTEyMDgxMzU0MzNaMDMxMTAvBgNV BAMTKEJBMjY2RkMxRkMyQTYxRjdFRjZGOUIxNEE0NTcxNDI2NkNEQzI2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm3HPtZOXmFJ8rs4hGxOtTx7i+ sf/icJB7Hn76zwv6qRksnAH/Y+9POjPkFDTS1+WSfmw5wnYwFU88jGjYaT85nLgp Lr6Gocf3/UztZ8OTsROghOkt3OMkgW9/beh3jZ5oyJ3+rRnf/wKtR3Ew70+baqiq CYAukzB6j9JgDKgYbvtwlaOI2ttqcxOf3s7lIP7412HGeyEhOgXGUzVvH/Km0A+v 81zJklDEFhDOdsAsqrE4p8mzjZo+u+b6tSWglQBFiW8aCjtk945e/cMy0/uPy7a3 qPVq5pv3GmaitebnnLsI47YOO/VDVHmQpBJoELNy26qcCbyQKgCjeiPmrNXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuiZvwfwqYffvb5sUpFcUJmzcJgkwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkYPRb7bcPKtfwB1VK+6E2h8ktbXofqBPAG vFKiXDkiRoty+H2PQU97tkZRxyLYRUQoosno0BE8ulPa3jz+qeShmrMIdqRG8dH/ W5zRAUr5CKlrRhe/keQNhFefu0Ep0NJafm6DYWtvCcx6UiQqA0FQwr7xIiLsylhc 80AEFASaWcY6zGV01kdM9yCsrZSk1lain6VQ9qaXS/Jkq6Rg5NOsbYyYUeYdYBHM iMOMOhIZCHe4bDRLIca0KFe/iIi62gyKZrPNdaBI1UzyeEMuXXnbETK/luCXmp5V tT9eWJZ/+hgohxIJb+iIU2bwyk1iqAoqCdP2RG3iaWS38F2OTDk= -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:46 2025 by rpki-client