This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft File: E3FB5E3343EC63D705FF51B645113F74C7965236.mft (raw, json) Hash identifier: NGYqDreEQ3r8rctMBpakNxmIVt4rli40mW4sFs8qqXo= Subject key identifier: CB:36:41:3A:FC:A8:2A:F4:E6:9E:A9:88:0D:A1:3A:AA:1D:62:A9:3E Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Certificate serial: 60614193952AAD2BFAB6846CB430820F09F99A66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft Manifest number: DA Signing time: Tue 02 Dec 2025 19:31:33 +0000 Manifest this update: Tue 02 Dec 2025 19:26:33 +0000 Manifest next update: Fri 05 Dec 2025 21:48:33 +0000 Files and hashes: 1: E3FB5E3343EC63D705FF51B645113F74C7965236.crl (hash: tq771Hu6J08UDUJ04EZPDjMIMPu+Tglo/EE3NqUKhiw=) 2: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: pcP51KVAYXagtYkUaOdwTyhCZXZM5gMNbSSkIN9xwSo=) 3: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: 4O9lmpHneuudT9xjvw5LwULxiETAfGvFoNCP2XYgoOQ=) 4: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: KzwY0iiHcJ5O0UVPUHPKtH6yEpVlgjbtPe1xq08+n3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:61:41:93:95:2a:ad:2b:fa:b6:84:6c:b4:30:82:0f:09:f9:9a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Validity Not Before: Dec 2 19:26:33 2025 GMT Not After : Dec 5 21:48:33 2025 GMT Subject: CN=CB36413AFCA82AF4E69EA9880DA13AAA1D62A93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:99:7d:4e:47:5f:87:fd:a1:6f:64:92:ed: ce:74:0d:27:9f:24:41:18:f8:4b:18:31:66:1d:0b: 12:90:33:da:cf:fd:17:26:8e:5d:c3:91:ed:72:6f: b3:05:57:d8:a3:17:f3:1a:0f:67:f5:92:0b:ce:6f: e6:6a:99:f0:3d:8f:bc:c8:23:d5:c0:9e:95:79:e2: 8a:54:09:0b:a2:73:dd:f0:c4:ed:8b:27:71:eb:c8: 82:a7:1a:98:55:df:73:93:72:e6:48:a5:36:b5:43: e6:e3:bd:47:1c:fd:da:dd:be:45:aa:5b:be:05:ab: c6:1c:40:4e:9c:ee:f9:9e:ac:af:25:bc:25:be:c9: e4:63:71:86:2b:73:f9:2b:12:b5:1a:58:f6:e4:92: 92:15:fb:d6:b3:a5:fe:1d:24:1c:3b:26:a2:83:d1: f7:6f:73:bd:01:7e:91:39:b1:d9:96:28:88:d1:27: be:0c:a2:11:fd:df:06:c1:35:79:fb:03:ee:6a:74: d1:15:bb:52:80:ad:bc:25:0d:cd:3d:73:b4:6f:a2: 62:5f:09:3d:89:b2:79:d2:57:81:4a:69:39:03:1a: 91:00:01:c8:e2:1f:42:ac:90:6f:e2:98:d6:ae:5e: 61:6d:52:2e:22:44:85:1c:35:3c:8c:b0:03:e4:f6: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:36:41:3A:FC:A8:2A:F4:E6:9E:A9:88:0D:A1:3A:AA:1D:62:A9:3E X509v3 Authority Key Identifier: keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b5:e2:9a:f1:9f:19:e0:9f:1a:07:7b:60:f8:04:d6:3a:c4: 72:a9:61:a6:64:36:8d:08:d0:30:9b:34:c8:54:d9:1b:b2:e1: d7:e4:de:20:e7:23:38:cf:d4:04:90:0a:37:bc:e1:9d:ce:56: 0c:38:5a:ea:15:4c:24:41:b0:68:a7:64:b5:ce:cf:fa:a9:bf: 78:63:35:14:7b:89:1a:1a:3d:28:17:5e:9f:d3:1f:aa:c0:66: ba:2b:ce:79:53:a2:f9:3f:39:c9:f7:34:00:eb:ca:3f:0b:36: 6a:8b:b7:ed:96:ad:d3:2b:be:37:77:54:ea:77:fc:08:9b:f4: d2:12:a6:ac:24:63:ef:37:ea:52:2b:c1:a9:fd:d9:0b:3f:be: 25:70:56:ca:f7:79:77:82:8e:65:f6:f3:9b:82:0f:78:a6:f4: 50:98:c3:67:e8:92:04:92:83:f3:8e:b8:3d:2e:a3:fb:b8:0d: 4e:da:cb:07:00:6a:93:f2:75:fb:94:2f:4c:22:78:a7:d5:e9: 73:c2:fe:e9:dd:72:32:6e:f0:6d:a4:d6:ea:d6:1f:a7:89:5b: dd:c1:e2:e4:77:e1:ac:c8:e9:24:b8:b8:b0:f2:6a:f9:0c:42: b4:9a:bf:6d:48:af:9b:00:3d:5a:32:80:ad:f6:bb:61:75:fd: 42:52:f9:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGFBk5UqrSv6toRstDCCDwn5mmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD Nzk2NTIzNjAeFw0yNTEyMDIxOTI2MzNaFw0yNTEyMDUyMTQ4MzNaMDMxMTAvBgNV BAMTKENCMzY0MTNBRkNBODJBRjRFNjlFQTk4ODBEQTEzQUFBMUQ2MkE5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfJl9Tkdfh/2hb2SS7c50DSef JEEY+EsYMWYdCxKQM9rP/Rcmjl3Dke1yb7MFV9ijF/MaD2f1kgvOb+ZqmfA9j7zI I9XAnpV54opUCQuic93wxO2LJ3HryIKnGphV33OTcuZIpTa1Q+bjvUcc/drdvkWq W74Fq8YcQE6c7vmerK8lvCW+yeRjcYYrc/krErUaWPbkkpIV+9azpf4dJBw7JqKD 0fdvc70BfpE5sdmWKIjRJ74MohH93wbBNXn7A+5qdNEVu1KArbwlDc09c7RvomJf CT2JsnnSV4FKaTkDGpEAAcjiH0KskG/imNauXmFtUi4iRIUcNTyMsAPk9pE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyzZBOvyoKvTmnqmIDaE6qh1iqT4wHwYDVR0j BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2 NTIzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzAvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNG NzRDNzk2NTIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJS14prxnxngnxoHe2D4BNY6xHKpYaZkNo0I 0DCbNMhU2Ruy4dfk3iDnIzjP1ASQCje84Z3OVgw4WuoVTCRBsGinZLXOz/qpv3hj NRR7iRoaPSgXXp/TH6rAZrorznlTovk/Ocn3NADryj8LNmqLt+2WrdMrvjd3VOp3 /Aib9NISpqwkY+836lIrwan92Qs/viVwVsr3eXeCjmX285uCD3im9FCYw2fokgSS g/OOuD0uo/u4DU7aywcAapPydfuUL0wieKfV6XPC/undcjJu8G2k1urWH6eJW93B 4uR34azI6SS4uLDyavkMQrSav21Ir5sAPVoygK32u2F1/UJS+bo= -----END CERTIFICATE-----Generated at Wed Dec 3 19:33:51 2025 by rpki-client