This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft File: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft (raw, json) Hash identifier: pm7eqmBtb67ibA1jX+ZWITbg/2DEwlayMzRL/aJig3g= Subject key identifier: 92:8F:A3:8B:B7:E9:D6:C2:1B:1E:24:C6:F2:42:70:43:06:C8:E4:DD Authority key identifier: E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF Certificate issuer: /CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Certificate serial: 53F6994CA769945740BDAE3739BB7980D22DF905 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft Manifest number: 0230 Signing time: Thu 18 Dec 2025 13:22:13 +0000 Manifest this update: Thu 18 Dec 2025 13:17:13 +0000 Manifest next update: Sun 21 Dec 2025 20:12:13 +0000 Files and hashes: 1: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: AMV0DaoVzEpr6QFAmB1hobQPZBoR2MCCNocuQFbfT54=) 2: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: ++rnMg/cn38VB7ywZ7HTwbB2FOMWD3Zhtth2U6OPVoI=) 3: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl (hash: nKfaHqsAo4bwOd6jdXxSUAeczZAn+UQbHxRE8+AajtQ=) 4: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: N+b2Iu4VbSgstaUesFmQsFf6IU12aajq3e/wLuOvgLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f6:99:4c:a7:69:94:57:40:bd:ae:37:39:bb:79:80:d2:2d:f9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Validity Not Before: Dec 18 13:17:13 2025 GMT Not After : Dec 21 20:12:13 2025 GMT Subject: CN=928FA38BB7E9D6C21B1E24C6F242704306C8E4DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:d2:8f:f0:5c:8f:76:c2:b0:8c:33:34:49: 88:4a:fd:e6:91:4a:7a:e6:56:2e:33:2b:e1:d1:e8: 7b:de:e1:96:85:fa:e3:83:c6:0b:54:11:c3:de:be: 37:38:1d:48:ac:be:fe:33:7a:c2:a8:e4:44:66:3f: f1:45:44:5f:d0:f5:ea:82:eb:fd:ac:6f:1b:82:54: 21:d8:e4:23:f2:3c:ad:26:58:a2:43:1f:49:28:8c: 61:48:c0:54:d4:12:6b:d3:79:84:70:17:77:98:2d: bf:3a:0b:44:43:d5:77:6e:91:66:d0:f8:9f:aa:b2: fe:3b:2a:29:45:52:48:79:0c:b2:20:92:39:43:29: c6:04:f8:c9:8d:9a:20:fb:63:06:02:98:30:f8:93: a1:1b:cf:a8:b6:50:46:2a:10:30:c4:49:83:a6:b5: 89:b0:85:dd:d7:c0:0d:84:23:16:68:b7:79:d1:f5: 43:0d:82:7f:41:40:2c:bc:e8:82:72:ca:93:3f:06: e3:d1:7a:1c:21:66:f5:32:9f:08:26:f2:82:a8:65: c5:b9:83:b0:49:98:9d:c6:72:7b:a4:fd:40:78:a7: 45:aa:e3:2d:f3:48:aa:ce:f0:bb:9e:ee:e1:35:36: 5d:42:6a:22:8c:61:38:3c:86:de:b9:79:db:53:f0: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8F:A3:8B:B7:E9:D6:C2:1B:1E:24:C6:F2:42:70:43:06:C8:E4:DD X509v3 Authority Key Identifier: keyid:E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b3:4f:8c:81:8a:b5:da:8c:d7:c4:58:5e:fc:ec:97:8c:d4: a1:d6:a7:8c:15:3c:53:0d:61:fc:f6:4a:37:4c:17:34:63:b6: f6:b4:2e:19:74:13:92:1e:77:67:f5:17:33:1a:23:d2:9b:b0: c6:12:f7:64:24:c7:ed:be:1c:a8:e3:53:89:5d:fc:e6:92:4d: 3c:1d:1e:30:aa:94:b0:35:a7:f6:ef:89:a4:77:25:b2:7e:eb: 46:fe:d1:20:67:ee:8b:75:5a:2f:d2:f4:4f:06:cb:06:1b:4a: cc:9c:97:f1:14:2a:e5:c6:c2:33:7a:02:12:eb:4d:6a:24:15: 02:28:f7:5e:5e:4e:44:af:f8:b2:0a:a2:a7:3b:cc:2e:04:19: d8:b0:7f:7d:22:ba:cc:60:5a:66:b8:25:c4:48:06:66:45:42: 5d:6c:5a:1b:6a:53:bf:4c:7f:11:09:69:54:aa:4e:a7:39:06: 00:e6:04:57:05:9d:ed:04:c2:81:45:54:e7:2b:ff:68:b7:74: 3f:3f:6b:fc:90:ac:f2:4d:5f:1e:b7:11:a4:f7:4f:35:30:53: 44:c0:64:1e:2c:06:db:96:6c:81:d2:16:22:f1:67:8c:fe:cd: 78:78:2e:e2:ab:f1:45:2b:a9:0c:b2:e4:b7:f7:57:4f:bc:13: 53:f1:e2:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/aZTKdplFdAva43Obt5gNIt+QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNB OEJERjZERjAeFw0yNTEyMTgxMzE3MTNaFw0yNTEyMjEyMDEyMTNaMDMxMTAvBgNV BAMTKDkyOEZBMzhCQjdFOUQ2QzIxQjFFMjRDNkYyNDI3MDQzMDZDOEU0REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+otKP8FyPdsKwjDM0SYhK/eaR SnrmVi4zK+HR6Hve4ZaF+uODxgtUEcPevjc4HUisvv4zesKo5ERmP/FFRF/Q9eqC 6/2sbxuCVCHY5CPyPK0mWKJDH0kojGFIwFTUEmvTeYRwF3eYLb86C0RD1XdukWbQ +J+qsv47KilFUkh5DLIgkjlDKcYE+MmNmiD7YwYCmDD4k6Ebz6i2UEYqEDDESYOm tYmwhd3XwA2EIxZot3nR9UMNgn9BQCy86IJyypM/BuPRehwhZvUynwgm8oKoZcW5 g7BJmJ3Gcnuk/UB4p0Wq4y3zSKrO8Lue7uE1Nl1CaiKMYTg8ht65edtT8NJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUko+ji7fp1sIbHiTG8kJwQwbI5N0wHwYDVR0j BBgwFoAU4bA/nupxwA9p2Di8HarRE6i99t8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjNkMTRjYi1jY2MyLTQ2ZDItOGUzMS0xNmY1YmVjMGFjZDgvMC9FMUIwM0Y5RUVB NzFDMDBGNjlEODM4QkMxREFBRDExM0E4QkRGNkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNBOEJE RjZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQx MTNBOEJERjZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABizT4yBirXajNfEWF787JeM1KHWp4wVPFMN Yfz2SjdMFzRjtva0Lhl0E5Ied2f1FzMaI9KbsMYS92Qkx+2+HKjjU4ld/OaSTTwd HjCqlLA1p/bviaR3JbJ+60b+0SBn7ot1Wi/S9E8GywYbSsycl/EUKuXGwjN6AhLr TWokFQIo915eTkSv+LIKoqc7zC4EGdiwf30iusxgWma4JcRIBmZFQl1sWhtqU79M fxEJaVSqTqc5BgDmBFcFne0EwoFFVOcr/2i3dD8/a/yQrPJNXx63EaT3TzUwU0TA ZB4sBtuWbIHSFiLxZ4z+zXh4LuKr8UUrqQyy5Lf3V0+8E1Px4nc= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:41 2025 by rpki-client