This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: E5uppkRyLLkmuslQ5w2jLFQRNQymdbBIDeBl0udvwCs= Subject key identifier: 60:64:07:DF:10:75:B4:6A:A2:86:BF:0A:EE:9B:F9:F9:50:E9:8E:2C Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 0182CB648927CC49330A0CF27BE0266118318013 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 0110 Signing time: Wed 03 Dec 2025 07:54:33 +0000 Manifest this update: Wed 03 Dec 2025 07:49:33 +0000 Manifest next update: Sat 06 Dec 2025 15:13:33 +0000 Files and hashes: 1: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 2: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 3: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) 4: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: 8ntw7kbD60J35Vu+abYEJaW34c36UoSX7yuevlQai6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:82:cb:64:89:27:cc:49:33:0a:0c:f2:7b:e0:26:61:18:31:80:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Dec 3 07:49:33 2025 GMT Not After : Dec 6 15:13:33 2025 GMT Subject: CN=606407DF1075B46AA286BF0AEE9BF9F950E98E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:9f:c5:23:3a:6f:1e:f0:9c:61:39:5b:4a: 2c:20:95:75:03:e5:4a:16:36:db:11:e3:55:48:a3: 35:6d:a0:b2:5b:a3:0f:9b:6f:4e:93:cf:28:bc:61: 7e:74:ba:41:22:67:36:0d:da:d8:4f:36:b9:e2:ab: 52:d2:10:ce:2f:a7:b7:3c:93:40:a1:b1:54:ad:a8: 37:3b:23:9d:51:86:ef:3a:04:ff:3c:16:fe:af:59: 36:de:75:5d:95:c3:f6:51:60:27:71:ba:cd:6b:1f: 1e:06:a4:3f:53:9a:15:1b:f6:5e:40:ac:cb:6a:7d: 87:2f:ff:33:89:7d:50:f3:81:5c:7e:02:02:a7:a8: 78:26:8b:43:df:27:f1:c8:0c:34:5c:49:09:e3:3d: 82:cf:c0:f9:31:59:0c:91:86:92:e2:06:1f:01:bd: d6:29:6c:13:dc:c6:f8:81:0b:a1:84:a0:1e:4b:d8: cb:35:99:61:63:10:87:56:c0:77:98:d6:f9:0a:4e: 9e:fe:41:4f:18:c6:3b:b3:6d:e5:44:b3:98:ca:ff: 64:21:09:0a:e9:77:41:7c:7b:d1:e5:09:f7:7c:5b: 97:84:be:40:b3:80:7d:9b:e2:b2:40:71:7e:82:d3: be:0c:79:a7:7c:23:51:4a:03:3e:aa:d6:bb:69:a1: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:64:07:DF:10:75:B4:6A:A2:86:BF:0A:EE:9B:F9:F9:50:E9:8E:2C X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:7c:2f:02:cd:c8:7f:56:48:eb:2a:1e:52:29:d7:05:34:1b: 25:a5:3f:d5:19:b8:ff:a9:ff:0b:3d:bf:98:93:69:88:15:34: 28:54:f9:1d:e4:21:49:66:39:62:f6:4f:d1:9a:9a:e8:86:09: e6:43:0c:28:a7:b7:e9:21:12:57:17:2a:f2:d7:2b:eb:fa:16: 69:6e:7d:62:9b:63:ea:82:f0:52:34:8f:50:88:4c:cc:28:7d: 59:13:8d:73:59:0e:e5:42:dc:f1:ba:af:26:73:e8:3b:b3:7f: 59:53:e6:5f:4f:f7:98:78:6f:3d:ab:59:f3:ff:16:bb:e1:c7: 86:ef:a6:f8:1d:67:19:91:15:fb:98:bb:e9:a7:d1:db:47:95: d8:91:92:60:14:5e:dd:d3:bd:a0:c5:d5:bd:11:64:57:9a:94: c9:fb:ad:f9:31:36:38:26:4a:22:5f:42:94:87:11:2b:6c:4b: 81:1a:3e:42:9e:17:da:85:91:cb:bb:68:41:2d:ed:b1:56:2a: 15:bb:ff:2b:57:0a:9e:b4:9b:8f:b9:a5:c2:de:38:e2:59:89: 14:23:f3:90:31:d0:74:86:86:59:0b:18:16:2c:36:ef:e4:0c: d7:02:44:2b:42:33:e4:4f:75:22:3b:e8:59:df:cc:aa:21:a3: 67:c0:1b:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYLLZIknzEkzCgzye+AmYRgxgBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTEyMDMwNzQ5MzNaFw0yNTEyMDYxNTEzMzNaMDMxMTAvBgNV BAMTKDYwNjQwN0RGMTA3NUI0NkFBMjg2QkYwQUVFOUJGOUY5NTBFOThFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpJ/FIzpvHvCcYTlbSiwglXUD 5UoWNtsR41VIozVtoLJbow+bb06Tzyi8YX50ukEiZzYN2thPNrniq1LSEM4vp7c8 k0ChsVStqDc7I51Rhu86BP88Fv6vWTbedV2Vw/ZRYCdxus1rHx4GpD9TmhUb9l5A rMtqfYcv/zOJfVDzgVx+AgKnqHgmi0PfJ/HIDDRcSQnjPYLPwPkxWQyRhpLiBh8B vdYpbBPcxviBC6GEoB5L2Ms1mWFjEIdWwHeY1vkKTp7+QU8YxjuzbeVEs5jK/2Qh CQrpd0F8e9HlCfd8W5eEvkCzgH2b4rJAcX6C074Mead8I1FKAz6q1rtpoc2TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGQH3xB1tGqihr8K7pv5+VDpjiwwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK98LwLNyH9WSOsqHlIp1wU0GyWlP9UZuP+p /ws9v5iTaYgVNChU+R3kIUlmOWL2T9GamuiGCeZDDCint+khElcXKvLXK+v6Fmlu fWKbY+qC8FI0j1CITMwofVkTjXNZDuVC3PG6ryZz6Duzf1lT5l9P95h4bz2rWfP/ Frvhx4bvpvgdZxmRFfuYu+mn0dtHldiRkmAUXt3TvaDF1b0RZFealMn7rfkxNjgm SiJfQpSHEStsS4EaPkKeF9qFkcu7aEEt7bFWKhW7/ytXCp60m4+5pcLeOOJZiRQj 85Ax0HSGhlkLGBYsNu/kDNcCRCtCM+RPdSI76FnfzKoho2fAG7A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:13 2025 by rpki-client