This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: Vdt4kkz5y22QrnlFekbrj/YbwuiPAuV+YYc3fQHv8wc= Subject key identifier: 60:F1:91:45:A5:FC:F5:22:90:43:FD:1A:2F:EA:CE:C4:1A:83:C0:A1 Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 0F7B48980B94F8EA6BDEFD06402D6DFCE57446EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 020F Signing time: Tue 02 Dec 2025 05:11:35 +0000 Manifest this update: Tue 02 Dec 2025 05:06:35 +0000 Manifest next update: Fri 05 Dec 2025 07:48:35 +0000 Files and hashes: 1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: yz9DrhiZMU3eHWMSo1Oy5Cw6+/2sDeBXKj2G3NoDN0k=) 2: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: r4fgqA47qTlb3GhP6gzYmrPLdVv6QpS/f5hXYEC/f/k=) 3: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: 8NyXlo2pjHI91eTB8KcEB4k97TmyX7MjwVZv5ou6r3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:7b:48:98:0b:94:f8:ea:6b:de:fd:06:40:2d:6d:fc:e5:74:46:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Dec 2 05:06:35 2025 GMT Not After : Dec 5 07:48:35 2025 GMT Subject: CN=60F19145A5FCF5229043FD1A2FEACEC41A83C0A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6b:2c:33:9c:f4:b2:24:22:06:87:fe:fb:21: f4:6b:3f:85:91:ef:ba:8d:37:26:17:92:a3:dc:87: 70:7b:be:8f:1d:55:d5:a0:c5:31:37:84:57:a6:a4: ea:37:b9:2a:4f:54:bd:80:37:8e:b8:31:39:ad:dd: 88:29:b6:6f:0c:1f:19:96:ce:fb:53:3a:b5:df:5a: 51:e9:73:5e:12:5f:4d:47:a2:cf:74:2f:21:bc:a5: d8:12:59:cf:2a:77:91:e6:f2:9e:6c:51:dc:73:2d: 1e:16:6d:47:5b:fd:06:0a:83:79:99:96:2e:16:34: f3:44:b2:66:57:63:a3:54:59:ce:0c:95:71:cc:5b: 8b:1a:53:65:5d:cf:e4:a0:c8:87:2c:a8:99:5b:ff: 4f:26:33:ad:1b:53:64:95:bf:92:16:f4:05:f0:33: 0c:f7:83:e0:a3:05:d2:9a:f3:64:06:ae:32:07:25: 8f:92:f0:1e:77:6c:97:2c:27:d6:44:f6:e3:38:1f: 03:25:19:3e:28:d4:a0:a7:90:39:56:63:66:82:81: d5:40:fb:58:46:f4:c2:f0:c7:f8:0c:69:f4:e2:f0: b0:a7:45:64:69:9e:a6:c4:3a:fb:02:58:02:92:0b: ee:0b:34:e6:bf:8b:a0:10:15:94:ac:f3:10:e9:f8: 08:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F1:91:45:A5:FC:F5:22:90:43:FD:1A:2F:EA:CE:C4:1A:83:C0:A1 X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:2c:1f:88:a9:53:98:32:e4:35:65:e3:b5:ae:e8:de:fd:af: 87:a7:6e:b7:8b:d4:5a:ff:ac:47:ac:8a:28:a0:4e:d3:36:48: 45:73:03:bb:7b:9e:88:26:15:38:73:66:38:11:1f:13:99:ba: 28:eb:e7:0c:35:a0:fe:f3:04:89:a7:b0:84:8d:e8:1c:f2:b4: 1f:17:20:88:8b:d6:8d:76:ff:9e:6c:78:5d:ed:7b:d2:b8:61: 73:54:9e:99:09:5f:c0:cb:b1:0a:bc:53:19:d3:6b:25:fd:bc: 83:00:bc:ac:90:b7:09:c2:32:6d:85:38:3d:a8:6b:ba:84:59: 41:2e:75:00:22:49:ab:3a:a3:ab:95:73:7b:d4:63:2c:9b:99: 4e:78:80:d2:c7:63:dd:a0:75:26:c8:23:f5:f2:bb:03:7c:a7: 5b:2a:91:9d:52:69:2b:e6:a2:cf:9a:3e:72:4f:ac:e1:d8:80: 3b:05:93:fa:8b:0c:de:4c:b5:fc:8e:75:d6:5b:51:ea:c5:a5: 39:0a:35:9f:26:89:93:06:9c:61:53:b4:0f:4d:47:eb:7d:e6: 26:6a:83:a7:de:46:ac:23:ea:b4:ff:fe:a7:6d:dc:94:24:af: 75:35:20:4a:08:91:97:ab:17:50:02:92:8b:01:c0:97:13:a4: 17:bc:c6:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3tImAuU+Opr3v0GQC1t/OV0Ru8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNTEyMDIwNTA2MzVaFw0yNTEyMDUwNzQ4MzVaMDMxMTAvBgNV BAMTKDYwRjE5MTQ1QTVGQ0Y1MjI5MDQzRkQxQTJGRUFDRUM0MUE4M0MwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeaywznPSyJCIGh/77IfRrP4WR 77qNNyYXkqPch3B7vo8dVdWgxTE3hFempOo3uSpPVL2AN464MTmt3Ygptm8MHxmW zvtTOrXfWlHpc14SX01Hos90LyG8pdgSWc8qd5Hm8p5sUdxzLR4WbUdb/QYKg3mZ li4WNPNEsmZXY6NUWc4MlXHMW4saU2Vdz+SgyIcsqJlb/08mM60bU2SVv5IW9AXw Mwz3g+CjBdKa82QGrjIHJY+S8B53bJcsJ9ZE9uM4HwMlGT4o1KCnkDlWY2aCgdVA +1hG9MLwx/gMafTi8LCnRWRpnqbEOvsCWAKSC+4LNOa/i6AQFZSs8xDp+AhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYPGRRaX89SKQQ/0aL+rOxBqDwKEwHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJksH4ipU5gy5DVl47Wu6N79r4enbreL1Fr/ rEesiiigTtM2SEVzA7t7nogmFThzZjgRHxOZuijr5ww1oP7zBImnsISN6BzytB8X IIiL1o12/55seF3te9K4YXNUnpkJX8DLsQq8UxnTayX9vIMAvKyQtwnCMm2FOD2o a7qEWUEudQAiSas6o6uVc3vUYyybmU54gNLHY92gdSbII/XyuwN8p1sqkZ1SaSvm os+aPnJPrOHYgDsFk/qLDN5MtfyOddZbUerFpTkKNZ8miZMGnGFTtA9NR+t95iZq g6feRqwj6rT//qdt3JQkr3U1IEoIkZerF1ACkosBwJcTpBe8xnI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:59 2025 by rpki-client