This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft File: E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json) Hash identifier: PdqWPt9BDPJRwlGLDDoCK0tOHvTORMa5JsQi4pJoK+g= Subject key identifier: A0:45:B0:16:1C:4D:01:32:AB:A0:7A:98:C5:9A:3C:99:8E:81:31:BD Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03 Certificate serial: 5D9843E53CF4B56E2F0D886EE18CDF1D269A8390 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft Manifest number: E1 Signing time: Wed 03 Dec 2025 14:42:18 +0000 Manifest this update: Wed 03 Dec 2025 14:37:18 +0000 Manifest next update: Sat 06 Dec 2025 23:54:18 +0000 Files and hashes: 1: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: plP5mL28VXQIjEN0DYOENmsRxd6SgfmhFUHewT00m3I=) 2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 23:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:98:43:e5:3c:f4:b5:6e:2f:0d:88:6e:e1:8c:df:1d:26:9a:83:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03 Validity Not Before: Dec 3 14:37:18 2025 GMT Not After : Dec 6 23:54:18 2025 GMT Subject: CN=A045B0161C4D0132ABA07A98C59A3C998E8131BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:3b:18:f6:27:57:0c:ef:4e:e6:bd:7d:cb: e7:4b:0b:1b:7a:b6:80:b0:33:02:94:1f:09:d2:ac: ae:93:5e:42:26:66:9b:02:38:70:5f:3e:ac:40:25: 97:8c:b6:06:3b:f2:80:4f:30:7d:d5:53:f5:50:f6: 4f:49:da:74:e2:aa:08:48:82:2c:e4:9b:ab:f0:93: 81:e2:15:b5:71:fd:06:8f:28:7d:21:99:29:78:50: 72:d0:a1:41:ed:c5:c8:0b:24:bc:3a:c4:e8:4f:b0: bf:56:06:5a:40:b7:8a:79:e7:08:72:87:c0:b7:ac: 1c:e9:b8:20:8f:b1:78:b0:73:db:17:b6:0c:b1:57: 05:b1:b6:09:dd:f6:1b:61:9c:8f:4f:47:86:f8:67: ec:21:5f:f4:bd:3a:fb:1d:73:33:dc:e1:21:ff:35: a1:1c:33:e2:60:4f:f7:2e:4a:bc:e3:b5:78:7b:dd: 56:f2:bf:20:0b:21:83:9c:32:b1:0e:61:7b:66:22: aa:81:7f:7b:64:0d:5d:31:53:d5:56:10:ec:89:9a: ff:76:11:38:18:2a:1b:09:fd:d0:93:46:58:88:31: b6:4e:45:4a:9d:3e:3c:a8:e6:ca:16:38:0a:5d:85: 33:c6:e9:00:56:6d:5f:a2:c9:24:15:71:a9:7d:cc: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:45:B0:16:1C:4D:01:32:AB:A0:7A:98:C5:9A:3C:99:8E:81:31:BD X509v3 Authority Key Identifier: keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c6:c2:95:ce:8c:8c:de:38:4f:37:83:85:6f:92:42:2b:bf: 8a:2f:6d:f4:bd:c7:ea:d5:97:69:59:9c:6c:91:1a:6e:05:c0: 7e:92:bf:22:7d:4c:61:51:8b:77:43:a5:4f:21:ca:e7:e5:82: 82:05:eb:5b:33:14:18:ca:ec:69:7a:90:93:d3:e2:3c:e8:e6: e1:e3:f1:6b:4b:af:ec:60:b4:fd:a6:8b:c2:bc:f4:9f:34:6d: 4e:7b:f0:93:b4:08:d7:64:a4:4d:0d:2f:7e:fb:e5:c0:86:35: 0c:bb:76:53:80:0a:eb:02:5b:41:77:4c:19:8e:a3:20:6d:61: 63:43:e8:ee:b8:89:7f:20:20:57:4a:38:14:44:3c:27:92:48: 13:f2:b9:4b:22:b3:7b:7c:ad:5b:d4:f1:a3:96:38:bc:76:3d: d4:03:df:29:44:a6:31:c4:62:da:3b:9e:26:8b:cb:ca:4c:87: 76:98:1b:ed:67:aa:65:a4:e2:e2:3b:45:ce:18:4f:03:62:fa: 84:04:62:9f:1c:9f:1d:49:0c:b5:7b:a0:1c:02:99:46:1c:a7: 51:c0:83:d3:21:e6:8d:5d:2e:34:28:75:3f:4f:38:a0:20:7d: 48:27:e1:87:3d:69:39:eb:d5:97:6d:92:e7:51:05:aa:1f:10: 44:92:70:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZhD5Tz0tW4vDYhu4YzfHSaag5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2 MzZFNkMwMzAeFw0yNTEyMDMxNDM3MThaFw0yNTEyMDYyMzU0MThaMDMxMTAvBgNV BAMTKEEwNDVCMDE2MUM0RDAxMzJBQkEwN0E5OEM1OUEzQzk5OEU4MTMxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrzjsY9idXDO9O5r19y+dLCxt6 toCwMwKUHwnSrK6TXkImZpsCOHBfPqxAJZeMtgY78oBPMH3VU/VQ9k9J2nTiqghI gizkm6vwk4HiFbVx/QaPKH0hmSl4UHLQoUHtxcgLJLw6xOhPsL9WBlpAt4p55why h8C3rBzpuCCPsXiwc9sXtgyxVwWxtgnd9hthnI9PR4b4Z+whX/S9OvsdczPc4SH/ NaEcM+JgT/cuSrzjtXh73VbyvyALIYOcMrEOYXtmIqqBf3tkDV0xU9VWEOyJmv92 ETgYKhsJ/dCTRliIMbZORUqdPjyo5soWOApdhTPG6QBWbV+iySQVcal9zBIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoEWwFhxNATKroHqYxZo8mY6BMb0wHwYDVR0j BBgwFoAU45KGI0CcHBDikvg4+DCOEWNubAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMS9FMzkyODYyMzQw OUMxQzEwRTI5MkY4MzhGODMwOEUxMTYzNkU2QzAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2MzZF NkMwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhF MTE2MzZFNkMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHGwpXOjIzeOE83g4VvkkIrv4ovbfS9x+rV l2lZnGyRGm4FwH6SvyJ9TGFRi3dDpU8hyuflgoIF61szFBjK7Gl6kJPT4jzo5uHj 8WtLr+xgtP2mi8K89J80bU578JO0CNdkpE0NL3775cCGNQy7dlOACusCW0F3TBmO oyBtYWND6O64iX8gIFdKOBREPCeSSBPyuUsis3t8rVvU8aOWOLx2PdQD3ylEpjHE Yto7niaLy8pMh3aYG+1nqmWk4uI7Rc4YTwNi+oQEYp8cnx1JDLV7oBwCmUYcp1HA g9Mh5o1dLjQodT9POKAgfUgn4Yc9aTnr1ZdtkudRBaofEESScOY= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:30 2025 by rpki-client