This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: sHsl8wki1G839aK379h9Zh2+HvlgVgSsH3smrXdqDL4= Subject key identifier: 8E:62:56:9A:C3:DE:EC:32:C4:9B:2F:B2:A4:A2:10:42:C1:5C:EE:30 Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 25D3194AA6B93B4A38FBC3EE4CBEE92D5911F65F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 04F1 Signing time: Mon 01 Dec 2025 14:31:12 +0000 Manifest this update: Mon 01 Dec 2025 14:26:12 +0000 Manifest next update: Thu 04 Dec 2025 20:48:12 +0000 Files and hashes: 1: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=) 2: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: Ig0/h+1DH+jwpGDJToWl5ItpTa7BKS+qE7rKa0Ym1qI=) 3: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d3:19:4a:a6:b9:3b:4a:38:fb:c3:ee:4c:be:e9:2d:59:11:f6:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Dec 1 14:26:12 2025 GMT Not After : Dec 4 20:48:12 2025 GMT Subject: CN=8E62569AC3DEEC32C49B2FB2A4A21042C15CEE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7f:d3:5d:64:9e:4a:ca:f3:98:b0:d0:f9:98: 49:d5:02:a8:c0:5a:ec:68:4b:c1:1c:3d:ea:04:72: 6c:39:bd:0f:43:42:a7:f1:6b:1d:56:4d:b5:0e:93: 54:84:0b:59:af:b1:2a:34:c4:5d:9f:ec:b9:ba:d9: 40:20:3e:98:8e:35:21:3f:a4:05:b0:10:63:3f:29: 93:9a:a2:68:b7:ef:3c:40:fe:d8:7e:4f:e7:c6:e4: 60:f3:4f:9f:51:54:21:4b:ae:4b:76:4f:66:37:84: fc:2a:bd:79:25:87:93:56:52:bd:f7:9a:a8:e1:c8: f3:2b:35:38:c9:94:cc:a7:b7:1c:77:61:73:2b:92: fe:76:27:b8:b8:2e:66:fb:32:51:58:19:f3:6c:74: 8e:65:cf:66:ba:b9:4e:88:8b:42:6e:79:ba:19:b6: 37:09:46:86:0a:58:8a:af:1b:fa:82:30:5c:7d:b4: e0:60:f2:97:16:ae:c8:27:ed:f0:93:87:d0:9a:1e: 4f:c2:90:c8:0d:4f:e2:0e:ad:87:00:f3:c4:24:59: ae:a5:34:62:78:7f:00:b9:18:bc:f1:a5:c2:3e:26: 7c:2c:a8:75:3e:d1:8d:90:c4:2b:cd:fe:45:36:53: e2:ec:e5:e2:c9:34:12:63:f5:3a:87:0d:3d:67:47: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:62:56:9A:C3:DE:EC:32:C4:9B:2F:B2:A4:A2:10:42:C1:5C:EE:30 X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:15:01:39:b9:20:11:3a:c7:fb:9e:a6:77:b8:05:75:37:a2: a9:12:f1:ab:a8:02:db:08:a0:25:6e:9e:30:b6:9e:35:19:1a: 4c:ac:d4:da:9c:f9:fd:6c:e3:89:06:2c:c3:d0:8e:67:5d:2e: 9d:2a:b3:b0:73:0d:d4:10:d9:a0:a5:64:13:b2:fb:f7:af:8a: dd:e1:c6:d4:16:1b:84:6e:33:23:04:87:58:6c:bd:61:36:9b: a8:59:66:57:72:5b:e8:4d:ab:92:47:16:e2:02:53:6c:cf:8a: 0b:52:39:d8:27:1d:c3:03:91:f8:af:26:bc:e1:47:78:76:b9: c5:58:1f:a8:19:00:49:24:b6:8f:d9:09:b9:e0:d6:49:9e:ef: 03:9e:9e:a2:83:17:30:0a:b0:61:51:82:bd:d5:83:a9:fb:74: 59:54:12:33:74:bb:e8:19:69:13:62:8e:d9:8c:e2:32:17:9e: 43:b2:c8:d7:d4:ee:ca:37:f4:89:84:34:1c:9b:40:a8:2a:55: bc:96:a7:f7:ed:33:7c:7c:3c:7c:c6:bd:30:a8:7e:a5:90:fc: 6b:57:a7:fd:69:e0:e1:55:f5:eb:29:25:1c:e4:bb:a9:3e:a3: d9:a9:84:60:e2:3d:95:fc:a1:67:70:9f:74:0f:8f:57:57:f5: d8:3b:6b:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdMZSqa5O0o4+8PuTL7pLVkR9l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNTEyMDExNDI2MTJaFw0yNTEyMDQyMDQ4MTJaMDMxMTAvBgNV BAMTKDhFNjI1NjlBQzNERUVDMzJDNDlCMkZCMkE0QTIxMDQyQzE1Q0VFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgf9NdZJ5KyvOYsND5mEnVAqjA WuxoS8EcPeoEcmw5vQ9DQqfxax1WTbUOk1SEC1mvsSo0xF2f7Lm62UAgPpiONSE/ pAWwEGM/KZOaomi37zxA/th+T+fG5GDzT59RVCFLrkt2T2Y3hPwqvXklh5NWUr33 mqjhyPMrNTjJlMyntxx3YXMrkv52J7i4Lmb7MlFYGfNsdI5lz2a6uU6Ii0JueboZ tjcJRoYKWIqvG/qCMFx9tOBg8pcWrsgn7fCTh9CaHk/CkMgNT+IOrYcA88QkWa6l NGJ4fwC5GLzxpcI+JnwsqHU+0Y2QxCvN/kU2U+Ls5eLJNBJj9TqHDT1nR1S3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjmJWmsPe7DLEmy+ypKIQQsFc7jAwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4VATm5IBE6x/uepne4BXU3oqkS8auoAtsI oCVunjC2njUZGkys1Nqc+f1s44kGLMPQjmddLp0qs7BzDdQQ2aClZBOy+/evit3h xtQWG4RuMyMEh1hsvWE2m6hZZldyW+hNq5JHFuICU2zPigtSOdgnHcMDkfivJrzh R3h2ucVYH6gZAEkkto/ZCbng1kme7wOenqKDFzAKsGFRgr3Vg6n7dFlUEjN0u+gZ aRNijtmM4jIXnkOyyNfU7so39ImENBybQKgqVbyWp/ftM3x8PHzGvTCofqWQ/GtX p/1p4OFV9espJRzku6k+o9mphGDiPZX8oWdwn3QPj1dX9dg7awg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:29 2025 by rpki-client