This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: aLIvSOySBmuXuMcfdbLFAsySsGGY6KlGZ7Z+Ss24baM= Subject key identifier: 4E:FE:1B:E2:FB:69:71:AB:9E:72:2E:5E:0F:0F:28:BF:AD:6A:0D:ED Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 50547ACD1264C3241F855B592BF4249CF842169B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 04F1 Signing time: Wed 03 Dec 2025 07:21:39 +0000 Manifest this update: Wed 03 Dec 2025 07:16:39 +0000 Manifest next update: Sat 06 Dec 2025 09:49:39 +0000 Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: Q8AiVS513YZaJstY9RUzjxicepMe2vYlP+usoxO41hE=) 2: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FLALrXW88OdyfJgNAdKbgu+otxNBlGdrwAiQnaIoTaE=) 3: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: enhzpXVVNQP+NL/95W+DcRKO9h2Zt+gBnS9XUMRE/K4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:54:7a:cd:12:64:c3:24:1f:85:5b:59:2b:f4:24:9c:f8:42:16:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Dec 3 07:16:39 2025 GMT Not After : Dec 6 09:49:39 2025 GMT Subject: CN=4EFE1BE2FB6971AB9E722E5E0F0F28BFAD6A0DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:1e:a3:65:d4:89:c5:6e:6a:2e:1e:b1:fe: d2:56:ac:7c:c8:f9:c5:e6:80:10:3e:57:48:90:df: 6a:05:b4:bd:e9:4f:bd:95:d7:a4:26:c4:fa:8c:ea: 10:03:ff:62:9f:67:2c:27:d8:59:ff:63:da:98:dc: 0b:dc:56:83:2a:e2:17:5c:7e:bc:91:c3:a9:0d:92: 66:51:22:90:82:73:48:41:60:ad:6e:d7:9b:fc:1c: a2:9f:f5:2e:94:6f:37:ed:89:d6:47:d5:22:f2:e8: e0:31:84:4a:40:d4:f3:dd:95:8a:a4:2d:25:66:6e: 81:20:72:c4:f7:f2:5f:1d:af:87:c5:7b:1e:9c:5c: 9d:ce:0a:8d:aa:c7:a0:d0:3a:a9:30:7b:a1:f8:ca: c6:0a:a4:f5:eb:29:6c:ee:0e:7a:f7:70:be:32:08: 1e:33:23:fa:09:f6:3b:30:6f:48:32:99:cf:a7:d6: 32:a0:2c:9c:86:a7:b9:b5:96:3b:d4:13:73:0f:74: 47:32:b7:81:0a:4d:04:0f:43:91:70:1e:54:37:e4: fd:10:16:79:14:5d:d1:83:4f:a8:13:be:e3:9a:c4: 17:56:69:07:7e:70:ad:31:01:55:90:89:6e:ad:f3: 3e:97:14:27:24:67:ee:cc:0b:1e:58:66:d1:87:08: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FE:1B:E2:FB:69:71:AB:9E:72:2E:5E:0F:0F:28:BF:AD:6A:0D:ED X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:09:19:32:d9:51:f9:08:a2:47:24:a6:f4:5c:51:71:fa:1d: bc:81:60:15:15:37:31:6a:b9:d1:c3:07:cf:86:a5:14:c3:94: de:87:ce:8c:b6:23:3f:04:f3:51:90:90:b2:53:85:2c:bd:d4: e0:0b:e3:39:c9:44:b5:f2:85:a4:47:7f:d7:00:20:02:6e:cf: 7b:e8:f1:7b:76:1a:3a:e1:b6:f4:2f:86:90:13:f0:52:66:b8: 23:bb:5f:24:bb:e0:04:12:14:00:66:2d:4b:fb:b6:51:b7:b8: 5a:8b:79:1c:fa:0c:b0:0c:0c:8d:b6:57:27:16:bc:63:ca:ec: 4d:b7:cb:b7:cc:fb:80:d0:bf:c1:1b:95:28:09:a3:b5:fc:15: 79:d1:7a:ab:9a:74:d7:7b:af:f3:1f:7c:db:33:b4:13:0c:e0: 03:04:4e:a2:a8:4d:5e:5b:f0:3b:68:a6:e2:5c:d6:e6:8e:eb: 29:d7:12:31:ad:03:f6:f3:c3:14:1e:b1:51:b9:eb:49:eb:cc: 6f:5b:90:94:2f:9b:b9:a2:82:e2:ed:10:34:51:30:58:66:18: ba:9c:5b:8a:f6:bb:8e:ea:99:cf:53:e0:87:e7:63:7a:ab:88: 86:3b:1c:0d:55:a0:0b:c9:f1:19:c9:f7:8d:63:5e:64:85:37: dd:6d:1a:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFR6zRJkwyQfhVtZK/QknPhCFpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNTEyMDMwNzE2MzlaFw0yNTEyMDYwOTQ5MzlaMDMxMTAvBgNV BAMTKDRFRkUxQkUyRkI2OTcxQUI5RTcyMkU1RTBGMEYyOEJGQUQ2QTBERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCh6jZdSJxW5qLh6x/tJWrHzI +cXmgBA+V0iQ32oFtL3pT72V16QmxPqM6hAD/2KfZywn2Fn/Y9qY3AvcVoMq4hdc fryRw6kNkmZRIpCCc0hBYK1u15v8HKKf9S6UbzftidZH1SLy6OAxhEpA1PPdlYqk LSVmboEgcsT38l8dr4fFex6cXJ3OCo2qx6DQOqkwe6H4ysYKpPXrKWzuDnr3cL4y CB4zI/oJ9jswb0gymc+n1jKgLJyGp7m1ljvUE3MPdEcyt4EKTQQPQ5FwHlQ35P0Q FnkUXdGDT6gTvuOaxBdWaQd+cK0xAVWQiW6t8z6XFCckZ+7MCx5YZtGHCKZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTv4b4vtpcaueci5eDw8ov61qDe0wHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAJGTLZUfkIokckpvRcUXH6HbyBYBUVNzFq udHDB8+GpRTDlN6Hzoy2Iz8E81GQkLJThSy91OAL4znJRLXyhaRHf9cAIAJuz3vo 8Xt2GjrhtvQvhpAT8FJmuCO7XyS74AQSFABmLUv7tlG3uFqLeRz6DLAMDI22VycW vGPK7E23y7fM+4DQv8EblSgJo7X8FXnRequadNd7r/MffNsztBMM4AMETqKoTV5b 8DtopuJc1uaO6ynXEjGtA/bzwxQesVG560nrzG9bkJQvm7miguLtEDRRMFhmGLqc W4r2u47qmc9T4IfnY3qriIY7HA1VoAvJ8RnJ941jXmSFN91tGl4= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:20 2025 by rpki-client