This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json) Hash identifier: 6jbtFCmBh0Jt+jpUi8nJJcQwp9Vku8mQ4kR5ZLzm+7Q= Subject key identifier: AC:14:C0:07:D4:74:2D:22:3C:7A:9D:AB:5D:F3:5F:E1:20:52:5F:7B Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Certificate serial: 33B7702DA597E5E7FEDB11F63BEF8B3101BB18E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft Manifest number: 02F2 Signing time: Mon 01 Dec 2025 17:42:27 +0000 Manifest this update: Mon 01 Dec 2025 17:37:27 +0000 Manifest next update: Fri 05 Dec 2025 03:23:27 +0000 Files and hashes: 1: 3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa (hash: UUOaSFdZB1gNgfcBiLfpj8+sysFmMb8lGgAOYylAanI=) 2: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=) 3: 3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa (hash: joRtsTzluk9HUnqI3+6HvaybpCq3OAhZ2eSjEhqFFeA=) 4: 3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa (hash: uShV8vRhK/SDVf3Twj+hPuhHAzUhqQGJIQPtkavd13M=) 5: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: xdL7T+SgW6wvFkEXqTZ/5KCfhOjTgC6nnpRxGj/TZ3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b7:70:2d:a5:97:e5:e7:fe:db:11:f6:3b:ef:8b:31:01:bb:18:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Validity Not Before: Dec 1 17:37:27 2025 GMT Not After : Dec 5 03:23:27 2025 GMT Subject: CN=AC14C007D4742D223C7A9DAB5DF35FE120525F7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:0d:14:5a:d4:8c:d7:60:3a:b1:cf:0a:41: 57:ab:56:14:33:39:5b:33:1a:79:bb:d8:85:ba:86: 4a:67:8d:f2:05:4c:2b:92:f1:f4:9c:1d:b9:ba:8d: a3:15:7e:32:b0:14:cb:af:57:e4:33:e7:66:75:c3: e9:35:e2:a3:9c:3c:fd:1d:22:71:61:c4:80:34:ba: 07:0a:70:34:34:99:42:23:7e:a2:6f:52:df:dc:7b: 46:36:f9:cc:c2:63:1c:58:5c:5c:ef:87:5d:a7:c1: 13:02:32:78:16:3a:50:3e:a4:1f:3c:fb:68:24:75: 8e:fa:d5:bc:97:e3:56:c9:21:c0:3c:ea:e1:00:83: 62:21:a4:2a:d7:c8:c9:cd:e0:f9:4c:bf:aa:12:41: 9e:a4:70:45:cc:e4:07:d8:59:39:f8:f0:0f:b4:fb: 21:fa:61:79:7d:c1:bb:dd:5e:05:33:5d:e9:6f:ee: f1:37:a3:25:87:45:1b:8d:ac:f2:54:f9:2d:97:8d: 9e:10:e6:8e:fa:db:c5:51:1d:a2:57:35:fe:c9:1f: b5:dd:e6:1f:d1:44:2d:7e:fa:d5:dd:86:c6:62:63: ac:41:48:0c:a6:23:c0:bf:7c:f6:e2:f8:db:3a:37: ea:50:5a:a9:e4:78:cb:0e:b0:8d:96:3d:4b:66:8c: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:C0:07:D4:74:2D:22:3C:7A:9D:AB:5D:F3:5F:E1:20:52:5F:7B X509v3 Authority Key Identifier: keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3b:55:be:01:29:2b:95:6c:99:a4:62:59:a0:c7:dc:71:db: aa:e1:aa:96:50:08:2b:42:32:84:1b:53:1a:c5:47:13:9f:e1: 1b:bc:b9:54:ca:26:ba:2a:c4:b3:23:76:e3:f6:75:d5:92:c7: a4:f7:79:ea:ab:56:26:7b:97:24:29:39:bd:7c:23:8b:b8:14: 24:fb:55:1d:ec:07:61:a9:ec:2c:8c:f6:b9:59:f5:9d:76:f4: fb:8f:80:a7:59:e2:c9:e0:79:c0:bf:b1:de:a9:e7:af:bd:9b: 0d:e2:6c:63:cb:40:db:7d:f1:c0:9d:4d:64:e4:e0:53:b1:2b: 40:ae:a8:03:01:27:fd:33:24:60:f9:5e:70:d3:6b:6c:c7:ab: 8d:09:da:cd:1f:4d:57:62:68:ee:a0:8d:a0:b2:f4:cb:79:97: 2e:5c:2c:e6:86:a2:25:b7:48:15:af:ec:f2:13:47:2b:6d:61: 99:56:7b:55:51:ea:5e:67:e2:ff:cc:ce:7f:2e:73:ed:dc:40: ba:af:ff:68:63:39:6d:57:71:0f:3a:be:77:fe:62:81:ad:d4: c0:1c:f7:57:22:22:97:14:e1:29:ba:2b:46:43:a8:6c:bd:66: d5:98:e8:89:14:32:f4:c7:9e:03:2c:68:1d:0b:c7:0a:55:06: 69:aa:1e:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7dwLaWX5ef+2xH2O++LMQG7GOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4 QTA1MjVBMTAeFw0yNTEyMDExNzM3MjdaFw0yNTEyMDUwMzIzMjdaMDMxMTAvBgNV BAMTKEFDMTRDMDA3RDQ3NDJEMjIzQzdBOURBQjVERjM1RkUxMjA1MjVGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZQ0UWtSM12A6sc8KQVerVhQz OVszGnm72IW6hkpnjfIFTCuS8fScHbm6jaMVfjKwFMuvV+Qz52Z1w+k14qOcPP0d InFhxIA0ugcKcDQ0mUIjfqJvUt/ce0Y2+czCYxxYXFzvh12nwRMCMngWOlA+pB88 +2gkdY761byX41bJIcA86uEAg2IhpCrXyMnN4PlMv6oSQZ6kcEXM5AfYWTn48A+0 +yH6YXl9wbvdXgUzXelv7vE3oyWHRRuNrPJU+S2XjZ4Q5o7628VRHaJXNf7JH7Xd 5h/RRC1++tXdhsZiY6xBSAymI8C/fPbi+Ns6N+pQWqnkeMsOsI2WPUtmjO3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrBTAB9R0LSI8ep2rXfNf4SBSX3swHwYDVR0j BBgwFoAU4BTm7QNTfkU1ZdBue4oxqooFJaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMC9FMDE0RTZFRDAz NTM3RTQ1MzU2NUQwNkU3QjhBMzFBQThBMDUyNUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4QTA1 MjVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMx QUE4QTA1MjVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB87Vb4BKSuVbJmkYlmgx9xx26rhqpZQCCtC MoQbUxrFRxOf4Ru8uVTKJroqxLMjduP2ddWSx6T3eeqrViZ7lyQpOb18I4u4FCT7 VR3sB2Gp7CyM9rlZ9Z129PuPgKdZ4sngecC/sd6p56+9mw3ibGPLQNt98cCdTWTk 4FOxK0CuqAMBJ/0zJGD5XnDTa2zHq40J2s0fTVdiaO6gjaCy9Mt5ly5cLOaGoiW3 SBWv7PITRyttYZlWe1VR6l5n4v/Mzn8uc+3cQLqv/2hjOW1XcQ86vnf+YoGt1MAc 91ciIpcU4Sm6K0ZDqGy9ZtWY6IkUMvTHngMsaB0LxwpVBmmqHgU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:01 2025 by rpki-client