This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: EQ/pnLQarh75lfjdEiDN/Zg1kIslHhh2v3HCNb2G0Wo= Subject key identifier: DF:42:EC:9A:47:0A:CB:E7:F3:51:EA:2B:89:CC:B6:D0:D7:6C:88:64 Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 759EE8C8A96A30E9A6F6D64086989C374AC89FC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: F2 Signing time: Mon 01 Dec 2025 12:50:48 +0000 Manifest this update: Mon 01 Dec 2025 12:45:48 +0000 Manifest next update: Thu 04 Dec 2025 23:27:48 +0000 Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=) 2: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: GN+9XRLP8q2dPQz2O9XdJ6da8mKWbB/0rbPGbx6nj3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9e:e8:c8:a9:6a:30:e9:a6:f6:d6:40:86:98:9c:37:4a:c8:9f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Dec 1 12:45:48 2025 GMT Not After : Dec 4 23:27:48 2025 GMT Subject: CN=DF42EC9A470ACBE7F351EA2B89CCB6D0D76C8864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:5b:8e:f2:65:8d:6a:a0:f8:75:af:04:e2: 43:eb:62:36:e2:49:f7:19:ea:69:88:2f:c3:2a:b4: c3:83:97:18:a8:85:51:3c:f4:7d:c5:08:be:fc:ca: 86:3f:e3:7b:47:ee:52:72:da:c3:85:2d:75:57:c2: 85:bb:0c:22:7a:c6:7f:7a:4b:ae:62:cd:35:2b:d9: 34:15:63:91:dd:91:31:70:c2:70:f8:2d:c7:f0:f8: 7b:2d:9c:ac:57:fa:ab:47:06:73:f5:b1:4f:89:47: 53:22:ab:e7:d7:e2:34:7f:bc:8b:38:06:c8:51:ab: 3c:5b:1b:d9:b5:a5:9d:3a:1d:2c:ec:ce:c0:17:f2: 42:6e:e5:bf:1b:0e:8a:76:f5:b8:69:84:18:fd:6b: 03:1f:16:90:ca:d5:a8:79:d4:27:48:80:c9:5c:58: ac:cb:cf:53:ab:42:6d:cb:81:3c:24:ce:49:2f:2d: 46:6f:62:35:0f:34:8c:a0:64:ec:87:85:34:c3:cd: 56:35:1b:ff:98:ce:c6:f4:6f:29:4e:14:3d:9c:25: 86:80:bb:d3:bb:a5:e0:84:26:29:45:5d:4b:b9:01: db:23:53:a7:61:db:0c:8d:a1:00:26:ce:ae:fd:54: 08:f6:c4:44:7c:2e:fd:d6:e7:04:c7:08:a1:af:48: f4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:42:EC:9A:47:0A:CB:E7:F3:51:EA:2B:89:CC:B6:D0:D7:6C:88:64 X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:71:fe:97:d8:85:c3:e0:90:32:2c:40:e2:db:71:85:26:c8: 42:f2:ed:12:af:32:30:99:59:7b:92:db:ee:cf:21:2c:4c:8f: e1:74:9e:5e:dd:89:f5:c9:4b:02:40:53:ad:b3:82:07:7d:1d: 47:5b:fb:69:4a:ff:ba:68:b8:6e:80:c3:0c:bd:aa:eb:2b:69: d4:7b:2a:50:bc:fc:73:24:74:f0:f9:d5:ff:79:4f:21:b6:85: df:c0:4a:ce:46:ea:81:84:a5:d4:b1:61:09:33:9c:bb:8b:23: 27:93:9c:8f:0e:ef:7e:55:48:81:07:6e:d3:29:1e:7e:4c:c3: 37:b5:e0:20:15:e6:0e:d9:f6:43:20:d3:83:91:a0:30:55:55: 4a:77:76:29:4d:b9:47:a8:69:29:5d:96:39:99:8e:65:97:28: 90:4c:61:15:9b:ff:15:be:4a:b4:7c:a8:71:1f:9d:ed:96:a9: 4c:6e:f8:47:8f:cd:79:2e:ff:fc:76:64:f0:d5:2d:fe:06:f2: af:bf:ba:94:83:49:38:99:84:0a:6f:de:60:63:76:f1:9b:55: e3:a2:a1:6c:8f:1c:63:0e:6c:e4:d0:f5:20:8a:f8:b3:50:ef: 1e:51:ab:78:47:4b:09:7a:31:24:91:dc:18:06:81:1a:1d:ab: 2e:03:89:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZ7oyKlqMOmm9tZAhpicN0rIn8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNTEyMDExMjQ1NDhaFw0yNTEyMDQyMzI3NDhaMDMxMTAvBgNV BAMTKERGNDJFQzlBNDcwQUNCRTdGMzUxRUEyQjg5Q0NCNkQwRDc2Qzg4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjluO8mWNaqD4da8E4kPrYjbi SfcZ6mmIL8MqtMODlxiohVE89H3FCL78yoY/43tH7lJy2sOFLXVXwoW7DCJ6xn96 S65izTUr2TQVY5HdkTFwwnD4Lcfw+HstnKxX+qtHBnP1sU+JR1Miq+fX4jR/vIs4 BshRqzxbG9m1pZ06HSzszsAX8kJu5b8bDop29bhphBj9awMfFpDK1ah51CdIgMlc WKzLz1OrQm3LgTwkzkkvLUZvYjUPNIygZOyHhTTDzVY1G/+Yzsb0bylOFD2cJYaA u9O7peCEJilFXUu5AdsjU6dh2wyNoQAmzq79VAj2xER8Lv3W5wTHCKGvSPRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU30LsmkcKy+fzUeoricy20NdsiGQwHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdx/pfYhcPgkDIsQOLbcYUmyELy7RKvMjCZ WXuS2+7PISxMj+F0nl7difXJSwJAU62zggd9HUdb+2lK/7pouG6Awwy9qusradR7 KlC8/HMkdPD51f95TyG2hd/ASs5G6oGEpdSxYQkznLuLIyeTnI8O735VSIEHbtMp Hn5Mwze14CAV5g7Z9kMg04ORoDBVVUp3dilNuUeoaSldljmZjmWXKJBMYRWb/xW+ SrR8qHEfne2WqUxu+EePzXku//x2ZPDVLf4G8q+/upSDSTiZhApv3mBjdvGbVeOi oWyPHGMObOTQ9SCK+LNQ7x5Rq3hHSwl6MSSR3BgGgRodqy4DiaY= -----END CERTIFICATE-----Generated at Wed Dec 3 16:11:31 2025 by rpki-client