This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft File: E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json) Hash identifier: qIJ1pb/399hNVyeH/3tmHN7hQvWeZAYj5jC+UsE0lE0= Subject key identifier: 7E:A9:F4:6C:DC:39:B1:59:D7:5B:66:7E:6C:99:BD:55:73:E7:5E:A2 Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 3FCE5BB4906A69BBB5A51FA2B86110FD8D6A516E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft Manifest number: 03B8 Signing time: Tue 02 Dec 2025 15:20:45 +0000 Manifest this update: Tue 02 Dec 2025 15:15:45 +0000 Manifest next update: Sat 06 Dec 2025 02:51:45 +0000 Files and hashes: 1: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: wa+1RTscgoKKgYWFX2arn9cWcToBF6A/kXjZvyHLVV8=) 2: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: ILlvOWLN9Xs8cUbwHU8Z2NUUNxyuB2q6+J4DPU9EvmQ=) 3: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: VoMnlv1vt+phfoqqSj3NlhfZbmojrA8l7T65WTVbYMM=) 4: 3131372e3130332e36342e302f32322d3234203d3e203435373138.roa (hash: dcaXEHmtpvgdp2B+61+9NSsaEhu3dJ+pR5a99XJxHq0=) 5: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: CLLVV/zafw21CNwWbatk8Biw5navousMk3GSpmnuOzY=) 6: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: w1mWD70iTqDZcL+qWJT3UxUlTEt3Oeyv9uC8w3hj0HU=) 7: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: goKqtOANx7qYkuYC16JMyOMD7wMXtPJ41zk+xa8C7PI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ce:5b:b4:90:6a:69:bb:b5:a5:1f:a2:b8:61:10:fd:8d:6a:51:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Dec 2 15:15:45 2025 GMT Not After : Dec 6 02:51:45 2025 GMT Subject: CN=7EA9F46CDC39B159D75B667E6C99BD5573E75EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:47:63:1a:07:03:3f:a5:f1:37:8b:7d:18: a5:41:ee:e9:16:63:dd:a3:f5:93:7a:9e:0c:e1:25: cc:60:74:cb:ea:3c:36:b5:55:be:de:8b:7b:f1:6a: 87:e6:18:c5:67:ca:b3:1d:cf:86:8f:fe:24:a3:e1: f7:aa:0e:48:ce:ac:59:44:94:b8:a4:94:12:a7:60: 9d:ba:9d:d9:75:53:72:0c:a9:6c:de:ff:99:94:ed: 20:7b:13:d4:ba:b7:e8:5e:e1:70:aa:30:27:5a:c6: 84:7c:a5:3a:07:ad:c3:a1:ed:16:ea:83:c4:e5:c4: 64:ba:9d:e6:db:9c:bd:f8:29:4a:38:be:83:33:eb: 60:a4:eb:9f:5d:3a:69:e1:93:73:04:6b:05:db:4c: be:81:5c:09:0d:7b:1e:86:e5:1a:90:26:98:8d:f8: cb:b1:62:6f:de:17:ae:bc:9d:69:2c:30:82:ac:fb: a1:29:82:b3:c9:dc:5b:0e:b2:89:9a:e3:8b:ce:b3: 30:ac:67:d5:56:ac:e4:31:c6:9e:09:35:30:35:a0: cb:02:99:70:f1:b0:21:5b:f9:fc:65:4a:b3:00:55: d4:9e:39:ed:4a:ae:83:5d:9b:ad:ce:4f:6e:c7:e3: 6f:db:58:eb:0a:7c:39:f0:1f:c4:d2:1b:0c:e5:36: 39:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A9:F4:6C:DC:39:B1:59:D7:5B:66:7E:6C:99:BD:55:73:E7:5E:A2 X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:dc:4b:ee:0c:bc:5e:92:6d:e3:04:d2:36:5c:90:2e:b2:cc: be:c6:be:18:50:3f:80:d6:b3:02:b3:32:a1:fb:04:4d:ee:a4: 91:21:87:03:d1:55:85:ae:05:c9:6b:6e:fc:e8:d3:29:17:70: 39:cb:22:b6:94:94:b9:b9:ee:0f:45:90:89:4e:73:d5:ef:df: 2f:32:64:3f:87:71:d1:88:73:fa:dd:0d:13:e2:a5:a1:bb:d5: 42:20:62:e0:b4:6c:f3:2c:19:0e:5c:fc:f3:2a:d9:07:99:1a: 33:65:81:1d:fa:96:02:52:98:5c:94:d4:8c:9f:6e:fe:06:88: 68:1f:59:5f:f0:4b:f9:e9:22:3f:5c:d8:f8:fa:7f:b9:f5:80: ad:a6:87:33:e2:f0:53:aa:58:f6:84:f9:0d:bc:5d:54:e2:23: 3d:42:5e:37:c7:e8:a9:3a:ca:2a:b9:71:1d:72:43:5a:c2:b3: fe:a1:f0:72:4b:37:76:d2:8d:3e:a8:59:c5:eb:f8:b3:b7:fc: 5a:95:25:9b:40:6b:15:58:d0:d3:1d:e4:f1:83:13:24:b4:5e: de:af:97:65:b4:a0:ed:9b:7e:13:b9:9b:9f:87:37:4b:35:4e: a6:37:4d:6e:da:9d:84:5a:db:6e:d0:90:6d:ce:e6:68:6b:b8: 17:d3:85:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP85btJBqabu1pR+iuGEQ/Y1qUW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNTEyMDIxNTE1NDVaFw0yNTEyMDYwMjUxNDVaMDMxMTAvBgNV BAMTKDdFQTlGNDZDREMzOUIxNTlENzVCNjY3RTZDOTlCRDU1NzNFNzVFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbnkdjGgcDP6XxN4t9GKVB7ukW Y92j9ZN6ngzhJcxgdMvqPDa1Vb7ei3vxaofmGMVnyrMdz4aP/iSj4feqDkjOrFlE lLiklBKnYJ26ndl1U3IMqWze/5mU7SB7E9S6t+he4XCqMCdaxoR8pToHrcOh7Rbq g8TlxGS6nebbnL34KUo4voMz62Ck659dOmnhk3MEawXbTL6BXAkNex6G5RqQJpiN +MuxYm/eF668nWksMIKs+6EpgrPJ3FsOsoma44vOszCsZ9VWrOQxxp4JNTA1oMsC mXDxsCFb+fxlSrMAVdSeOe1KroNdm63OT27H42/bWOsKfDnwH8TSGwzlNjllAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfqn0bNw5sVnXW2Z+bJm9VXPnXqIwHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0 MkIzQkQzMUQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXcS+4MvF6SbeME0jZckC6yzL7GvhhQP4DW swKzMqH7BE3upJEhhwPRVYWuBclrbvzo0ykXcDnLIraUlLm57g9FkIlOc9Xv3y8y ZD+HcdGIc/rdDRPipaG71UIgYuC0bPMsGQ5c/PMq2QeZGjNlgR36lgJSmFyU1Iyf bv4GiGgfWV/wS/npIj9c2Pj6f7n1gK2mhzPi8FOqWPaE+Q28XVTiIz1CXjfH6Kk6 yiq5cR1yQ1rCs/6h8HJLN3bSjT6oWcXr+LO3/FqVJZtAaxVY0NMd5PGDEyS0Xt6v l2W0oO2bfhO5m5+HN0s1TqY3TW7anYRa227QkG3O5mhruBfThXU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:14 2025 by rpki-client