This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: 9bfRNXE60NcyDO7GNk7Ketfmb/JrnABj09JCXETPGyI= Subject key identifier: 4B:BB:9B:C8:11:25:C3:D6:14:1F:B2:F1:99:AD:5C:F1:B5:BB:A8:22 Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 459AFFD937DA87DE699EDE6E458F2B63C49E0BFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 01D6 Signing time: Mon 01 Dec 2025 22:40:02 +0000 Manifest this update: Mon 01 Dec 2025 22:35:02 +0000 Manifest next update: Fri 05 Dec 2025 06:09:02 +0000 Files and hashes: 1: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: GfoRbCqzzEwM+JaSR+jL9jpyyrybmpGlShF5wsNuV5w=) 2: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: i6OOxTzURjZK+0rsjizGdb+kygjg9gRKRpOFgEUWGF0=) 3: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: XXDfIIYOEglBKxR32q76DP0xk41MtlD2sFhZIbxce4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9a:ff:d9:37:da:87:de:69:9e:de:6e:45:8f:2b:63:c4:9e:0b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Dec 1 22:35:02 2025 GMT Not After : Dec 5 06:09:02 2025 GMT Subject: CN=4BBB9BC81125C3D6141FB2F199AD5CF1B5BBA822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:1c:86:ed:13:69:28:9f:ea:b6:f1:3d:5f: 74:ed:f6:ac:c1:e7:7d:49:88:b1:b6:f9:90:74:fe: 28:46:8d:6d:34:36:c1:30:43:87:b3:a8:64:05:ef: 14:62:6d:93:10:0e:48:e4:b9:c9:54:f2:cb:0d:c0: 70:17:d8:84:24:f8:8f:e3:b0:80:21:58:52:32:15: e6:69:92:50:94:fe:ff:68:e3:f5:0a:58:b4:71:84: 22:16:2b:4b:43:fb:21:bd:ef:ff:50:58:34:0c:91: e2:3e:47:f9:fb:23:c2:d0:78:64:ad:25:d8:c2:1f: 39:c7:45:b5:99:e6:2f:3f:61:3b:b0:43:a3:4e:3f: 33:00:74:27:68:03:54:c6:dd:17:30:0a:79:fe:11: 56:22:ff:70:f0:a0:4b:88:a2:1d:ff:ce:3a:61:cd: 48:d1:42:ef:33:3e:a8:49:c2:ee:d5:31:6b:02:1f: 8d:b7:0c:76:f0:a7:00:ba:1c:48:a0:01:0e:8d:44: 42:33:54:0b:82:3b:15:8b:b6:7e:02:d9:82:8a:4f: c3:b3:d9:02:6a:2d:0e:cb:10:42:6e:13:d4:f6:30: 83:7c:f8:b3:47:66:1e:bb:47:92:2c:3d:e8:32:09: 59:81:ae:33:f3:fd:34:74:7a:e5:82:b8:c7:3e:64: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BB:9B:C8:11:25:C3:D6:14:1F:B2:F1:99:AD:5C:F1:B5:BB:A8:22 X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2f:d2:50:a4:37:f8:23:26:1c:dc:df:d2:c7:ae:ee:aa:95: fa:7d:ba:40:43:06:11:77:c1:89:75:d4:b6:2e:13:e5:3a:3c: 3e:31:2b:2c:b4:57:c0:5d:b2:5c:8f:33:b7:70:fb:c6:c9:64: 75:5d:14:71:48:f6:55:3b:89:24:6e:2a:cd:a1:78:79:9f:45: d4:c9:fc:2f:6e:d0:a2:ab:f2:76:85:3b:22:ea:a1:4a:b8:72: df:7f:94:a9:6c:9c:0c:ac:13:3a:69:43:29:90:aa:b7:e9:a6: 01:a4:a8:d1:de:60:2b:c9:91:99:99:de:ad:22:7c:19:fe:51: 44:ec:b9:d9:9d:b1:4d:a5:95:29:42:df:0c:10:ff:53:91:36: 82:0c:8f:dd:25:94:b6:1b:30:3e:94:04:ee:0e:d5:d0:a5:de: cd:29:58:fc:85:25:51:7f:3a:00:31:60:fc:d8:98:18:0d:91: 8f:d0:dd:a4:38:8f:3b:76:6c:58:22:46:eb:56:3c:bd:2b:5f: 83:41:4a:c1:20:b5:14:60:31:2a:f5:4a:b6:4c:6b:10:06:4b: d8:22:2b:7e:f9:9b:20:5c:fc:4a:4e:b5:6e:85:78:3c:8e:11: 4b:d3:6b:ba:ee:e1:bf:d9:ef:c6:0b:82:b0:a2:46:8c:3d:f4: 4d:d0:ea:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZr/2Tfah95pnt5uRY8rY8SeC/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTEyMDEyMjM1MDJaFw0yNTEyMDUwNjA5MDJaMDMxMTAvBgNV BAMTKDRCQkI5QkM4MTEyNUMzRDYxNDFGQjJGMTk5QUQ1Q0YxQjVCQkE4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBxyG7RNpKJ/qtvE9X3Tt9qzB 531JiLG2+ZB0/ihGjW00NsEwQ4ezqGQF7xRibZMQDkjkuclU8ssNwHAX2IQk+I/j sIAhWFIyFeZpklCU/v9o4/UKWLRxhCIWK0tD+yG97/9QWDQMkeI+R/n7I8LQeGSt JdjCHznHRbWZ5i8/YTuwQ6NOPzMAdCdoA1TG3RcwCnn+EVYi/3DwoEuIoh3/zjph zUjRQu8zPqhJwu7VMWsCH423DHbwpwC6HEigAQ6NREIzVAuCOxWLtn4C2YKKT8Oz 2QJqLQ7LEEJuE9T2MIN8+LNHZh67R5IsPegyCVmBrjPz/TR0euWCuMc+ZEENAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS7ubyBElw9YUH7Lxma1c8bW7qCIwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4v0lCkN/gjJhzc39LHru6qlfp9ukBDBhF3 wYl11LYuE+U6PD4xKyy0V8BdslyPM7dw+8bJZHVdFHFI9lU7iSRuKs2heHmfRdTJ /C9u0KKr8naFOyLqoUq4ct9/lKlsnAysEzppQymQqrfppgGkqNHeYCvJkZmZ3q0i fBn+UUTsudmdsU2llSlC3wwQ/1ORNoIMj90llLYbMD6UBO4O1dCl3s0pWPyFJVF/ OgAxYPzYmBgNkY/Q3aQ4jzt2bFgiRutWPL0rX4NBSsEgtRRgMSr1SrZMaxAGS9gi K375myBc/EpOtW6FeDyOEUvTa7ru4b/Z78YLgrCiRow99E3Q6pU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:38 2025 by rpki-client