This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: RMLxX7FCjsUo7xXYMMc6NEfqW55yYQRCFWmaX82sf/A= Subject key identifier: E1:87:7F:FF:CF:D6:82:2A:CF:A4:76:1B:C5:FC:64:D7:23:6E:AC:F9 Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 5CB9CD0A2FB3D6CC1079C6775973CFDF9F8907D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 04E7 Signing time: Tue 02 Dec 2025 15:01:50 +0000 Manifest this update: Tue 02 Dec 2025 14:56:50 +0000 Manifest next update: Fri 05 Dec 2025 21:57:50 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 1I55HZV9ASBX91G1gmKkN8XsoZ52BjLH6TscAGFfb1w=) 2: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: VKvXvb3BP6384nLUH1LdjT/mbF098hu6bIg7H4DeDLk=) 3: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: voGeHKK4ikA3uaKs2J+WeJLtpIfTnr3JdLSLAJpRJmc=) 4: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: CDEqVy3CfyipDingaPozP2wpdpLYQbpL+ef3EokTvr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b9:cd:0a:2f:b3:d6:cc:10:79:c6:77:59:73:cf:df:9f:89:07:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Dec 2 14:56:50 2025 GMT Not After : Dec 5 21:57:50 2025 GMT Subject: CN=E1877FFFCFD6822ACFA4761BC5FC64D7236EACF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:63:70:4b:ec:13:3e:77:6e:eb:ea:d8:55: 23:ad:51:72:da:e5:f4:2c:d4:39:de:56:5b:5f:4e: cd:e4:4b:68:01:35:e4:d1:aa:21:a8:62:f3:46:d5: 15:c9:84:4d:05:f5:d7:d6:90:30:2a:ba:a3:96:db: 3a:77:b0:de:23:2d:3d:13:57:e5:b9:97:60:0e:e0: 2e:a6:16:0b:cc:44:ad:26:3e:77:49:c0:86:af:12: 57:32:44:6e:61:bb:53:09:c2:9d:f1:22:4f:ae:85: 1b:ce:74:8b:03:69:ba:a4:cd:f9:fe:22:32:d1:8a: e2:f7:3c:7e:1d:c3:e1:b9:fd:bd:ed:6f:e4:a6:21: 6a:55:cc:84:2e:77:b3:d2:a1:3b:97:42:0b:9f:77: c1:ef:63:0c:66:f8:a9:53:76:15:fd:ea:d4:69:ef: ae:34:c6:a2:86:7c:e0:45:c6:44:b5:6c:0c:91:7e: 2a:0c:6b:ae:06:9a:e5:11:4b:76:2f:fd:b1:11:37: 59:d1:3b:95:aa:a1:cf:73:98:f9:1d:99:d9:c6:1f: 67:71:40:3f:b7:f4:fe:41:18:f7:03:92:a3:09:7c: f2:76:9f:df:71:54:0d:a9:db:48:77:64:07:55:22: 6f:b4:89:4f:13:47:15:74:bd:37:18:27:cc:a4:20: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:87:7F:FF:CF:D6:82:2A:CF:A4:76:1B:C5:FC:64:D7:23:6E:AC:F9 X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2f:cd:b9:8b:bf:19:fa:a6:b2:49:01:aa:c2:b8:63:4f:45: 31:e2:fc:d0:c0:68:a8:6e:3f:84:8f:ce:9e:9e:b2:ce:a9:68: 6f:e8:83:c1:c3:a2:fd:bf:40:bd:12:c7:ea:b3:ea:5c:88:84: 6d:1f:d9:62:84:88:46:7c:14:6a:2a:d3:17:5b:06:c8:dc:00: b2:87:0c:9f:27:cf:be:af:07:10:ac:61:31:49:9d:2d:a7:ac: 32:8f:a4:cb:70:aa:a7:21:61:a4:5f:d3:59:b5:52:83:3f:e6: e9:3f:21:44:7c:c2:d4:2d:f9:a6:5d:c6:f3:12:31:93:a4:fc: bc:d8:f9:be:7f:5b:da:40:bb:e1:2b:6a:98:2c:02:e5:c6:80: f6:4d:b6:4b:c3:ad:4e:4f:e7:96:72:1c:56:bf:2b:cd:f4:7d: 85:67:c3:6e:ec:ba:5b:2a:0e:55:cc:a6:84:3d:62:c1:8d:35: 52:72:3f:14:65:4a:37:1c:28:40:db:be:a3:72:41:15:23:fe: 2f:b6:ae:22:c7:89:65:5a:dc:37:12:41:01:42:de:ad:1a:ac: 88:95:1d:3a:84:c4:7b:55:8c:1b:89:bd:ff:9d:7c:4b:a4:47: f1:5d:db:64:86:6e:db:69:5c:f0:aa:98:96:2a:5a:6e:68:d5: 43:03:f5:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLnNCi+z1swQecZ3WXPP35+JB9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNTEyMDIxNDU2NTBaFw0yNTEyMDUyMTU3NTBaMDMxMTAvBgNV BAMTKEUxODc3RkZGQ0ZENjgyMkFDRkE0NzYxQkM1RkM2NEQ3MjM2RUFDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPX2NwS+wTPndu6+rYVSOtUXLa 5fQs1DneVltfTs3kS2gBNeTRqiGoYvNG1RXJhE0F9dfWkDAquqOW2zp3sN4jLT0T V+W5l2AO4C6mFgvMRK0mPndJwIavElcyRG5hu1MJwp3xIk+uhRvOdIsDabqkzfn+ IjLRiuL3PH4dw+G5/b3tb+SmIWpVzIQud7PSoTuXQgufd8HvYwxm+KlTdhX96tRp 7640xqKGfOBFxkS1bAyRfioMa64GmuURS3Yv/bERN1nRO5Wqoc9zmPkdmdnGH2dx QD+39P5BGPcDkqMJfPJ2n99xVA2p20h3ZAdVIm+0iU8TRxV0vTcYJ8ykILK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Yd//8/WgirPpHYbxfxk1yNurPkwHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0vzbmLvxn6prJJAarCuGNPRTHi/NDAaKhu P4SPzp6ess6paG/og8HDov2/QL0Sx+qz6lyIhG0f2WKEiEZ8FGoq0xdbBsjcALKH DJ8nz76vBxCsYTFJnS2nrDKPpMtwqqchYaRf01m1UoM/5uk/IUR8wtQt+aZdxvMS MZOk/LzY+b5/W9pAu+ErapgsAuXGgPZNtkvDrU5P55ZyHFa/K830fYVnw27sulsq DlXMpoQ9YsGNNVJyPxRlSjccKEDbvqNyQRUj/i+2riLHiWVa3DcSQQFC3q0arIiV HTqExHtVjBuJvf+dfEukR/Fd22SGbttpXPCqmJYqWm5o1UMD9ao= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:47 2025 by rpki-client