This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: V7xTL6MDVJ4K/AKXOH2fIlMs7mci5wIor4ntZmc4msc= Subject key identifier: 13:DF:E2:9D:37:38:7F:6B:24:74:47:38:AA:99:27:61:8A:57:D7:09 Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 70076931A5EDFB66A274132563A5EDE562DCB347 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 01CA Signing time: Mon 01 Dec 2025 14:20:55 +0000 Manifest this update: Mon 01 Dec 2025 14:15:55 +0000 Manifest next update: Thu 04 Dec 2025 18:01:55 +0000 Files and hashes: 1: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 3lqgIQzyR6/7cSCmR5iJslHIsmApf6ImpEqOGdjCApk=) 2: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: PNsGrsunNYvLcLEfdpgZYxKAz1Ra4qJ7YYKHTqQZiJg=) 3: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: 5fQ4ez4AmjZ+HTF97jHBLIRxzwPSK4GK7pQCoFplRiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:07:69:31:a5:ed:fb:66:a2:74:13:25:63:a5:ed:e5:62:dc:b3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Dec 1 14:15:55 2025 GMT Not After : Dec 4 18:01:55 2025 GMT Subject: CN=13DFE29D37387F6B24744738AA9927618A57D709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:77:5e:aa:6b:2e:31:71:ef:0a:ce:ff:12: 46:73:9b:9b:cb:23:10:ac:26:ad:bd:59:42:6c:53: d6:92:cd:b3:0f:b8:61:98:71:40:93:5a:57:cb:71: bb:a0:31:2c:c3:3e:66:b6:e8:1e:de:bd:b0:9e:30: ec:10:ed:2e:67:ad:a1:0e:1e:6e:a2:27:6b:0f:0a: 93:f1:aa:80:e0:2a:e8:b4:c4:c3:e1:22:f7:b4:e3: 31:4d:71:8d:a4:4a:e7:43:ed:06:e9:24:72:c8:07: aa:05:63:cc:34:38:47:46:12:b3:70:6b:fc:17:4a: a7:72:76:aa:b3:0a:80:08:84:e2:47:3a:bf:00:12: 69:ad:9e:7b:2e:7a:f6:92:e3:bd:6d:78:9e:b8:25: 77:77:6d:8a:65:59:0e:c5:18:b9:f7:9d:db:0d:b7: 40:05:86:fb:eb:cb:2a:17:d4:88:5c:73:21:de:14: ae:7e:51:8f:fc:22:3c:5f:66:c7:39:d4:21:46:61: d4:7e:86:87:a9:30:b7:46:5b:45:ca:68:1e:7f:92: 5e:e3:7f:35:f3:ac:62:53:1a:10:51:ce:07:59:f1: dd:03:5d:e4:de:d4:ef:d1:dc:12:41:61:47:31:6e: ef:ee:46:ba:bb:8d:f9:88:3a:82:a4:32:00:f8:fb: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DF:E2:9D:37:38:7F:6B:24:74:47:38:AA:99:27:61:8A:57:D7:09 X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c0:5a:6d:43:f2:72:3e:b2:f1:73:ee:a7:0c:ca:9a:3e:81: 8d:8b:54:1f:03:d4:0f:c5:db:5b:9a:72:27:82:92:5a:bd:a3: 18:0b:06:17:ef:29:fd:8f:e7:b8:50:6a:98:bb:6e:32:8a:24: 9e:82:5e:1b:59:d2:88:76:1b:46:1a:bc:e0:40:4f:d0:f0:f2: 7f:34:57:a1:e0:d7:6e:f2:cc:eb:be:23:05:89:b9:67:1c:23: 84:7e:b6:24:b6:83:c7:15:91:a9:1a:a6:24:a0:fc:b3:d2:83: b2:a9:10:2e:36:2e:cc:14:b1:8a:f4:f7:7b:ee:1d:6c:5d:64: ad:c1:76:f3:a6:72:48:46:7b:d1:78:cc:c6:52:14:cf:14:cc: 52:b3:c4:86:0f:af:c3:88:d9:94:ac:7d:6b:24:b6:5c:ad:a2: c7:7b:93:ce:4e:48:ab:d8:e5:81:04:f8:ea:ef:2d:45:b2:d6: 99:74:ee:53:2c:f7:53:9c:58:2c:f5:1b:ee:37:ea:15:5d:5e: 7c:ed:b6:de:a4:7a:d8:04:5e:dc:ac:94:0e:24:ff:fc:d3:d6: 56:d5:43:78:27:bc:1c:e9:44:65:a7:97:d3:18:9e:00:34:72: 8c:da:68:05:f6:7e:c0:00:ed:c9:f1:76:3e:16:e8:93:39:e6: ec:f4:3a:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAdpMaXt+2aidBMlY6Xt5WLcs0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNTEyMDExNDE1NTVaFw0yNTEyMDQxODAxNTVaMDMxMTAvBgNV BAMTKDEzREZFMjlEMzczODdGNkIyNDc0NDczOEFBOTkyNzYxOEE1N0Q3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhHdeqmsuMXHvCs7/EkZzm5vL IxCsJq29WUJsU9aSzbMPuGGYcUCTWlfLcbugMSzDPma26B7evbCeMOwQ7S5nraEO Hm6iJ2sPCpPxqoDgKui0xMPhIve04zFNcY2kSudD7QbpJHLIB6oFY8w0OEdGErNw a/wXSqdydqqzCoAIhOJHOr8AEmmtnnsuevaS471teJ64JXd3bYplWQ7FGLn3ndsN t0AFhvvryyoX1IhccyHeFK5+UY/8IjxfZsc51CFGYdR+hoepMLdGW0XKaB5/kl7j fzXzrGJTGhBRzgdZ8d0DXeTe1O/R3BJBYUcxbu/uRrq7jfmIOoKkMgD4+5R9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE9/inTc4f2skdEc4qpknYYpX1wkwHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjAWm1D8nI+svFz7qcMypo+gY2LVB8D1A/F 21uacieCklq9oxgLBhfvKf2P57hQapi7bjKKJJ6CXhtZ0oh2G0YavOBAT9Dw8n80 V6Hg127yzOu+IwWJuWccI4R+tiS2g8cVkakapiSg/LPSg7KpEC42LswUsYr093vu HWxdZK3BdvOmckhGe9F4zMZSFM8UzFKzxIYPr8OI2ZSsfWsktlytosd7k85OSKvY 5YEE+OrvLUWy1pl07lMs91OcWCz1G+436hVdXnzttt6ketgEXtyslA4k//zT1lbV Q3gnvBzpRGWnl9MYngA0cozaaAX2fsAA7cnxdj4W6JM55uz0OgU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:21 2025 by rpki-client