This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: 1c4yOEf1hwY5PZxxggi2bev4vl+sQshZbD9DKQFp1AY= Subject key identifier: BD:F8:08:B6:3E:1B:99:AA:EF:3D:73:FA:17:4F:FD:61:EC:54:7B:95 Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 27D5E975167F4B47CB144A34ADCC00DFE629542B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: EB Signing time: Mon 01 Dec 2025 15:32:12 +0000 Manifest this update: Mon 01 Dec 2025 15:27:12 +0000 Manifest next update: Fri 05 Dec 2025 01:36:12 +0000 Files and hashes: 1: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: nDxMTHRQf61d1oZ4ae8Exmkhdi72eylFC1M/8mKA2VM=) 2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (hash: qxwzYie9RBuV/7W0nohtPX4U19ZjLN0Jy/HLrDrkfAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d5:e9:75:16:7f:4b:47:cb:14:4a:34:ad:cc:00:df:e6:29:54:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Dec 1 15:27:12 2025 GMT Not After : Dec 5 01:36:12 2025 GMT Subject: CN=BDF808B63E1B99AAEF3D73FA174FFD61EC547B95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fa:88:4e:a9:f6:3c:16:5d:92:05:9d:e0:2d: 20:4a:0a:4f:37:3d:d5:66:7a:30:b4:96:1f:df:76: 62:21:4c:49:ea:75:f8:92:6a:ae:cb:be:ba:18:df: 3a:d7:1c:35:d8:97:98:2d:65:86:73:28:21:e1:98: 3a:af:20:31:ef:95:67:66:5f:5d:e4:b9:cd:42:c6: 67:d6:90:e3:08:5d:bd:c6:a8:9a:af:fb:3e:bf:ae: 68:71:6a:67:82:36:dd:b5:c8:03:fd:ad:99:78:05: fc:a6:ae:52:82:ab:d7:10:58:46:1e:bd:10:07:bf: a3:4a:77:0e:77:5b:ae:d1:4b:78:a7:97:5a:2f:07: ba:34:ba:17:b6:28:07:38:b7:57:4a:a9:06:a2:f9: 17:18:ec:0b:6e:52:7f:aa:27:f4:2f:31:1d:93:1f: fd:e3:ae:ee:e9:02:6e:8b:4f:93:49:c7:aa:5b:d6: cc:6c:b2:96:01:43:b2:4c:cd:f8:44:7c:7b:83:0c: 81:5d:21:2c:f7:fe:ea:bc:5f:02:94:cb:3f:a0:72: aa:ad:d3:24:3c:6a:c8:ca:27:bb:29:e5:6b:bd:30: 30:5b:34:bd:76:1d:44:2e:e1:78:53:da:bc:02:11: 83:8a:6c:9e:c3:84:30:47:cf:f8:e6:46:40:bc:36: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F8:08:B6:3E:1B:99:AA:EF:3D:73:FA:17:4F:FD:61:EC:54:7B:95 X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:36:ed:3a:fd:d2:46:12:aa:08:ee:f3:ee:37:3a:30:4e:7d: ca:39:42:bd:1c:fb:59:da:bc:92:49:9a:cc:b8:15:8b:0a:88: 4a:aa:98:f7:cb:f5:65:44:57:08:64:2b:30:82:00:57:1f:05: 13:77:3f:74:91:56:c4:87:ba:d6:4c:20:24:81:83:3b:93:1a: f7:5d:56:5e:3e:81:01:76:c3:3b:e3:63:42:dd:b9:d8:ec:fe: e7:69:59:6b:ed:61:1c:c3:a4:65:91:68:89:ca:b7:63:5b:b7: 8c:18:95:02:d0:79:17:91:61:ad:a7:76:d6:7b:39:ac:00:f2: 52:e9:ba:7e:c5:ae:77:ca:5e:e7:31:d1:23:80:2e:a1:fc:2b: 61:90:3e:81:6e:ce:e7:9a:b6:e9:7a:d8:74:7b:08:9d:9a:f7: d0:38:0b:6f:a3:91:bb:4e:d8:7b:51:3c:c6:91:5f:ef:0e:ee: 54:53:32:4d:86:7f:fe:1b:cf:bf:47:a5:de:df:9a:af:f3:38: c8:b1:94:e9:6e:fe:17:47:ec:75:34:7d:41:85:24:04:f6:2f: ff:4f:b2:bc:91:47:5e:12:fa:c4:e2:b3:bc:03:76:71:c5:85: 86:79:02:4a:12:c8:3a:17:b5:cb:b6:71:8e:74:ae:94:5c:4d: 74:e4:9b:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9XpdRZ/S0fLFEo0rcwA3+YpVCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTEyMDExNTI3MTJaFw0yNTEyMDUwMTM2MTJaMDMxMTAvBgNV BAMTKEJERjgwOEI2M0UxQjk5QUFFRjNENzNGQTE3NEZGRDYxRUM1NDdCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc+ohOqfY8Fl2SBZ3gLSBKCk83 PdVmejC0lh/fdmIhTEnqdfiSaq7LvroY3zrXHDXYl5gtZYZzKCHhmDqvIDHvlWdm X13kuc1CxmfWkOMIXb3GqJqv+z6/rmhxameCNt21yAP9rZl4BfymrlKCq9cQWEYe vRAHv6NKdw53W67RS3inl1ovB7o0uhe2KAc4t1dKqQai+RcY7AtuUn+qJ/QvMR2T H/3jru7pAm6LT5NJx6pb1sxsspYBQ7JMzfhEfHuDDIFdISz3/uq8XwKUyz+gcqqt 0yQ8asjKJ7sp5Wu9MDBbNL12HUQu4XhT2rwCEYOKbJ7DhDBHz/jmRkC8NtkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvfgItj4bmarvPXP6F0/9YexUe5UwHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL827Tr90kYSqgju8+43OjBOfco5Qr0c+1na vJJJmsy4FYsKiEqqmPfL9WVEVwhkKzCCAFcfBRN3P3SRVsSHutZMICSBgzuTGvdd Vl4+gQF2wzvjY0Ldudjs/udpWWvtYRzDpGWRaInKt2Nbt4wYlQLQeReRYa2ndtZ7 OawA8lLpun7FrnfKXucx0SOALqH8K2GQPoFuzueatul62HR7CJ2a99A4C2+jkbtO 2HtRPMaRX+8O7lRTMk2Gf/4bz79Hpd7fmq/zOMixlOlu/hdH7HU0fUGFJAT2L/9P sryRR14S+sTis7wDdnHFhYZ5AkoSyDoXtcu2cY50rpRcTXTkmyU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:47 2025 by rpki-client