This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft File: E377371E82C6C53C7A5796B49B085190AFB64B4C.mft (raw, json) Hash identifier: /MDVuxpG7moxS2u27yaP6QUrHAXtYrFvm9R6bqoyLn0= Subject key identifier: D9:59:B6:8E:A0:E7:1E:4B:62:F0:98:35:85:C1:B9:3D:32:84:1E:8A Authority key identifier: E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C Certificate issuer: /CN=E377371E82C6C53C7A5796B49B085190AFB64B4C Certificate serial: 3D434D55804A2A169FBEDA40715A4DEE8B941C38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft Manifest number: 01C0 Signing time: Mon 01 Dec 2025 12:41:48 +0000 Manifest this update: Mon 01 Dec 2025 12:36:48 +0000 Manifest next update: Thu 04 Dec 2025 15:40:48 +0000 Files and hashes: 1: E377371E82C6C53C7A5796B49B085190AFB64B4C.crl (hash: BTnlgNyKu3dQzilncQh98Y4+RcSzhaBs/5HN8l9hGx4=) 2: 3130332e38392e3234322e302f32342d3234203d3e20313530393133.roa (hash: Wq0HxmVMzepldSWl2tLo0jkVOCM3LQ2XSCQDbU6pmew=) 3: 3130332e38392e3234332e302f32342d3234203d3e20313530393133.roa (hash: otr3kFi0uUngcjSenFt7w7igUVSs51cTPJ2XyknCg2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.crl rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:43:4d:55:80:4a:2a:16:9f:be:da:40:71:5a:4d:ee:8b:94:1c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E377371E82C6C53C7A5796B49B085190AFB64B4C Validity Not Before: Dec 1 12:36:48 2025 GMT Not After : Dec 4 15:40:48 2025 GMT Subject: CN=D959B68EA0E71E4B62F0983585C1B93D32841E8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:30:d7:97:4a:10:b3:84:d5:f9:ab:dc:71: 9e:1c:dd:1b:ee:ba:ee:3e:17:c1:f6:85:a9:5d:55: 70:3d:6c:85:fc:bd:bc:2d:3a:97:60:c6:09:ed:da: 0b:37:1e:52:24:7d:a8:15:c1:36:59:3c:f2:16:85: 43:67:dc:4a:4a:fa:d2:39:bd:d0:d1:f8:8a:b4:32: c6:78:65:4d:03:23:3a:1d:8b:ba:ba:1f:31:bc:9f: eb:c4:cf:45:b5:33:96:fe:ff:f2:8c:6c:1f:19:4a: 7e:16:e8:45:87:c7:75:cf:9f:5b:a6:a2:ba:2e:9b: f9:2e:e4:f6:a1:c4:8c:16:ac:74:a7:c3:41:bd:51: 98:44:9f:55:cc:d3:14:72:c5:05:9c:04:bb:13:3e: b2:fa:94:76:2c:fb:cd:52:7b:70:e3:c1:11:aa:37: 67:fe:83:e2:99:30:3a:b5:1a:c3:7d:9f:76:ac:43: 8f:31:cf:5c:c7:76:8c:04:3f:ee:da:3b:39:b4:1d: 54:f5:3a:f1:51:6c:b5:00:62:cc:2a:0d:51:72:b9: cc:1c:e2:36:fb:9c:77:6b:b2:6c:d8:b8:55:dd:1e: 1e:35:f6:93:9a:03:49:d5:af:c6:14:0c:03:58:dc: 5c:e0:94:11:80:16:e9:eb:30:ff:b2:97:a8:2f:2f: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:59:B6:8E:A0:E7:1E:4B:62:F0:98:35:85:C1:B9:3D:32:84:1E:8A X509v3 Authority Key Identifier: keyid:E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7d:56:b1:24:15:18:06:45:9c:ea:da:05:77:ef:c4:eb:db: b6:ec:ff:85:02:5f:56:bd:75:a8:93:4b:ce:30:5d:89:65:2d: f6:b2:7f:24:2d:85:3e:73:3e:ef:f6:a5:95:d0:31:d6:a1:64: ae:e6:cd:97:c3:90:5f:49:a5:6f:2a:57:aa:ca:56:86:bd:01: 0b:3d:c7:85:bb:23:c9:2f:1c:b2:8b:68:71:96:94:54:c2:22: 58:8e:70:83:0d:67:65:93:66:ea:5a:29:d8:0d:e4:ed:1e:88: d6:14:88:0d:e4:d4:33:50:bb:1f:e6:e1:59:34:3c:e9:66:6a: 64:1b:a3:e9:6e:5b:bd:f6:f7:2f:57:22:65:62:ac:cb:e2:fa: 4c:d5:74:65:7b:0c:35:1d:7a:18:b6:51:51:7a:c7:6c:fb:77: 69:9d:e2:f0:7b:05:02:35:82:db:40:db:54:c9:67:63:fb:56: 4e:08:18:a4:f4:2c:46:08:3c:38:54:97:a2:0e:71:69:81:6b: 2e:1b:71:ca:c1:76:53:45:75:f5:f1:0a:33:cc:06:8e:8b:1a: c5:56:db:49:0f:b1:e0:bd:fe:80:7b:b8:6f:d7:1c:aa:b5:77: 19:24:49:f4:97:7f:a0:82:16:cb:ae:1f:4c:a9:bd:eb:f2:b8: 4a:1c:c4:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUNNVYBKKhafvtpAcVpN7ouUHDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUxOTBB RkI2NEI0QzAeFw0yNTEyMDExMjM2NDhaFw0yNTEyMDQxNTQwNDhaMDMxMTAvBgNV BAMTKEQ5NTlCNjhFQTBFNzFFNEI2MkYwOTgzNTg1QzFCOTNEMzI4NDFFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8zDXl0oQs4TV+avccZ4c3Rvu uu4+F8H2haldVXA9bIX8vbwtOpdgxgnt2gs3HlIkfagVwTZZPPIWhUNn3EpK+tI5 vdDR+Iq0MsZ4ZU0DIzodi7q6HzG8n+vEz0W1M5b+//KMbB8ZSn4W6EWHx3XPn1um oroum/ku5PahxIwWrHSnw0G9UZhEn1XM0xRyxQWcBLsTPrL6lHYs+81Se3DjwRGq N2f+g+KZMDq1GsN9n3asQ48xz1zHdowEP+7aOzm0HVT1OvFRbLUAYswqDVFyucwc 4jb7nHdrsmzYuFXdHh419pOaA0nVr8YUDANY3FzglBGAFunrMP+yl6gvL95TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Vm2jqDnHkti8Jg1hcG5PTKEHoowHwYDVR0j BBgwFoAU43c3HoLGxTx6V5a0mwhRkK+2S0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTMzMDg3Ni03ZTY4LTQ3MDctYTUzZC05MmJiZmRiMmYyM2MvMC9FMzc3MzcxRTgy QzZDNTNDN0E1Nzk2QjQ5QjA4NTE5MEFGQjY0QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUxOTBBRkI2 NEI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUzMzA4NzYtN2U2OC00NzA3LWE1 M2QtOTJiYmZkYjJmMjNjLzAvRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUx OTBBRkI2NEI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE19VrEkFRgGRZzq2gV378Tr27bs/4UCX1a9 daiTS84wXYllLfayfyQthT5zPu/2pZXQMdahZK7mzZfDkF9JpW8qV6rKVoa9AQs9 x4W7I8kvHLKLaHGWlFTCIliOcIMNZ2WTZupaKdgN5O0eiNYUiA3k1DNQux/m4Vk0 POlmamQbo+luW7329y9XImVirMvi+kzVdGV7DDUdehi2UVF6x2z7d2md4vB7BQI1 gttA21TJZ2P7Vk4IGKT0LEYIPDhUl6IOcWmBay4bccrBdlNFdfXxCjPMBo6LGsVW 20kPseC9/oB7uG/XHKq1dxkkSfSXf6CCFsuuH0ypvevyuEocxKA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:48 2025 by rpki-client