This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft File: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft (raw, json) Hash identifier: 89/aQSvDSqkIH4/kY5IKhCLvxkreEGbi+d9gCv/OXgU= Subject key identifier: 90:87:29:F5:E1:F7:C3:19:17:B1:90:FA:A2:6E:4B:B9:74:74:82:5B Authority key identifier: E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 Certificate issuer: /CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Certificate serial: 1F7BF5A008552D6E3712E35275A8E895ACA83C88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft Manifest number: 0538 Signing time: Thu 18 Dec 2025 14:22:30 +0000 Manifest this update: Thu 18 Dec 2025 14:17:30 +0000 Manifest next update: Sun 21 Dec 2025 18:41:30 +0000 Files and hashes: 1: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: hCqKQAmBft8A8taUBcT8sOYve7SjkWXpgzjj9NA6B/s=) 2: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl (hash: +qjxSgAe0DlEJgg+3fFoL0WuS1VEoX4e8WRlBZeHKVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 18:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7b:f5:a0:08:55:2d:6e:37:12:e3:52:75:a8:e8:95:ac:a8:3c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Validity Not Before: Dec 18 14:17:30 2025 GMT Not After : Dec 21 18:41:30 2025 GMT Subject: CN=908729F5E1F7C31917B190FAA26E4BB97474825B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:7f:18:dc:f9:b1:b7:c0:b3:34:22:d0:3a: 79:ae:fe:d9:44:34:00:0f:d4:e1:15:0b:13:67:c1: a9:36:f8:ce:00:2c:5c:f1:90:b0:84:d7:10:b8:04: 5a:66:42:db:88:76:2e:0a:ae:c2:9d:40:af:e4:d0: 72:36:2c:80:6e:5c:73:f0:81:b6:8f:08:fe:75:00: 86:1d:d5:cb:c1:4f:d3:bb:99:c4:8a:46:b4:89:b3: e0:2e:e8:2f:9b:7d:39:7c:a9:63:ca:58:ea:4b:de: 41:3b:24:c0:c3:31:4f:62:c7:53:89:b0:02:4c:05: 01:66:8a:a1:ea:29:e8:4d:89:3a:89:11:a8:a8:1a: 3c:f1:99:53:3c:44:14:3c:26:2d:25:f6:8b:3e:71: a6:2a:8c:65:e8:40:f6:ef:73:2c:ae:0d:e1:cd:d0: d4:e5:76:ab:4b:6c:95:47:eb:28:93:6e:b0:11:a8: a5:51:ff:25:c1:b0:13:5f:9f:e7:a2:7a:4f:18:49: 8f:e4:7e:89:de:16:46:5a:de:f0:ef:31:a7:49:aa: 6f:3f:75:c0:0c:b3:c6:ae:9e:25:6c:bf:78:9f:84: 88:99:a3:4f:9e:dd:71:83:8f:65:fa:e6:d8:1e:40: 16:42:4a:06:06:de:72:2d:94:be:42:f1:4a:3c:1a: 60:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:87:29:F5:E1:F7:C3:19:17:B1:90:FA:A2:6E:4B:B9:74:74:82:5B X509v3 Authority Key Identifier: keyid:E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:25:dd:89:fa:d4:d6:0d:9c:de:14:e9:26:20:81:54:38:e4: 4f:2a:69:f5:d4:ba:2f:d3:2f:f5:55:83:21:8a:41:fe:a6:f2: 9f:52:fa:e3:0b:1b:1c:76:e7:d2:d4:2c:64:71:15:fd:61:ab: 3e:3b:07:83:b3:89:77:5d:d7:0d:ed:63:1b:13:8a:27:11:17: 4a:b8:b6:eb:96:a0:6e:68:a6:09:c4:77:e4:20:75:f3:11:5c: 7a:cb:be:d4:90:4c:2e:8f:c6:cb:5b:01:a0:07:7b:47:f4:17: a6:3b:1b:11:77:73:54:fc:ad:e1:58:d6:4f:03:ee:3f:01:e9: 33:83:dc:c7:6e:f4:0d:f0:c6:47:fc:45:a1:fa:67:28:e0:97: d0:78:34:d3:88:31:95:50:c1:57:e8:85:6b:0f:e1:f5:0d:45: 08:bd:11:a3:50:6c:a7:37:2e:ec:26:80:7c:fd:05:c4:15:4f: b6:95:a5:94:36:15:c4:03:82:4d:2f:6d:7b:e1:a0:08:7b:a1: 00:c7:2d:bf:26:e5:59:4f:5b:cc:27:29:fe:5e:47:43:8c:e9: 3f:69:e6:4b:f6:a0:2b:ab:ec:62:e3:67:d9:86:3e:1e:86:b0: 32:00:3b:c4:33:e4:81:40:86:a2:9f:d8:df:76:f9:89:98:74: 8d:a4:a0:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3v1oAhVLW43EuNSdajolayoPIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYz RDE1MkFGNDAeFw0yNTEyMTgxNDE3MzBaFw0yNTEyMjExODQxMzBaMDMxMTAvBgNV BAMTKDkwODcyOUY1RTFGN0MzMTkxN0IxOTBGQUEyNkU0QkI5NzQ3NDgyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYRH8Y3Pmxt8CzNCLQOnmu/tlE NAAP1OEVCxNnwak2+M4ALFzxkLCE1xC4BFpmQtuIdi4KrsKdQK/k0HI2LIBuXHPw gbaPCP51AIYd1cvBT9O7mcSKRrSJs+Au6C+bfTl8qWPKWOpL3kE7JMDDMU9ix1OJ sAJMBQFmiqHqKehNiTqJEaioGjzxmVM8RBQ8Ji0l9os+caYqjGXoQPbvcyyuDeHN 0NTldqtLbJVH6yiTbrARqKVR/yXBsBNfn+eiek8YSY/kfoneFkZa3vDvMadJqm8/ dcAMs8auniVsv3ifhIiZo0+e3XGDj2X65tgeQBZCSgYG3nItlL5C8Uo8GmBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkIcp9eH3wxkXsZD6om5LuXR0glswHwYDVR0j BBgwFoAU59y7XpEsVqvInLvI+kK15j0VKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM1OGIwMC0zMWNkLTQxYTMtOTUzNi1kYmIxOTNlN2Y0ZDAvMC9FN0RDQkI1RTkx MkM1NkFCQzg5Q0JCQzhGQTQyQjVFNjNEMTUyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYzRDE1 MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzNThiMDAtMzFjZC00MWEzLTk1 MzYtZGJiMTkzZTdmNGQwLzAvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1 RTYzRDE1MkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkl3Yn61NYNnN4U6SYggVQ45E8qafXUui/T L/VVgyGKQf6m8p9S+uMLGxx259LULGRxFf1hqz47B4OziXdd1w3tYxsTiicRF0q4 tuuWoG5opgnEd+QgdfMRXHrLvtSQTC6PxstbAaAHe0f0F6Y7GxF3c1T8reFY1k8D 7j8B6TOD3Mdu9A3wxkf8RaH6Zyjgl9B4NNOIMZVQwVfohWsP4fUNRQi9EaNQbKc3 LuwmgHz9BcQVT7aVpZQ2FcQDgk0vbXvhoAh7oQDHLb8m5VlPW8wnKf5eR0OM6T9p 5kv2oCur7GLjZ9mGPh6GsDIAO8Qz5IFAhqKf2N92+YmYdI2koMc= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:25 2025 by rpki-client