This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: p80fL2oOK8DtSQa7ZyuU2JXxmDAvdmmJvXUL/XrGHMw= Subject key identifier: 04:3B:8B:5F:06:EE:08:84:08:D4:89:9E:5E:C2:A7:32:3D:5C:9E:71 Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 74B25952320821460486F8C9DFF83A0459193FC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 01EA Signing time: Wed 03 Dec 2025 04:02:48 +0000 Manifest this update: Wed 03 Dec 2025 03:57:48 +0000 Manifest next update: Sat 06 Dec 2025 13:43:48 +0000 Files and hashes: 1: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: Q7pR6ilL7NIeH7Ar2fKNXOb+uGDdDJ03w+fD4C8x/q8=) 2: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: FYTnb6URKqil9v4UEaprZL6ZdMktcRy6nGXbNBxOe04=) 3: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: QQ3Rh44LarCBGGxrx2/AHtC6m0nt4l2HW31clE2Q/SY=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: R73yUQxsrQ2/QYaOv8BqS7ocOQns71iqOhL/AfjwD0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 13:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b2:59:52:32:08:21:46:04:86:f8:c9:df:f8:3a:04:59:19:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Dec 3 03:57:48 2025 GMT Not After : Dec 6 13:43:48 2025 GMT Subject: CN=043B8B5F06EE088408D4899E5EC2A7323D5C9E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a5:40:9a:3a:a1:98:e8:0f:93:3a:a0:03:86: a3:52:67:3d:82:3d:ea:d5:50:b6:e0:1e:76:bc:8c: 98:05:2b:09:77:b9:17:41:61:a5:c3:93:f7:d0:9a: 88:59:2a:e3:d1:bb:56:c0:5f:72:cb:ad:ea:a1:d5: 6e:b7:6d:32:19:31:f5:03:a3:65:73:39:a8:5c:65: c5:d0:4f:5f:49:16:9b:23:13:99:2b:9e:25:59:39: db:93:77:40:1d:6f:ce:88:b1:43:c2:87:06:fb:14: f1:47:89:1f:ab:14:dd:da:02:f9:fb:f7:4a:48:03: a2:99:f4:18:7e:ba:9b:2a:d4:63:23:58:ea:ec:79: 8b:ea:77:fc:bd:ba:a6:74:3d:b7:ca:e3:8e:a4:b2: e7:d4:70:15:4f:31:72:db:24:4f:13:6e:aa:44:a5: 60:91:16:62:f8:f1:7a:d6:5d:43:02:fb:83:3d:cc: c9:f9:44:d5:fe:0d:f7:87:0f:be:15:4f:08:44:7c: a6:38:54:71:5c:fa:40:97:cb:6f:1b:a0:5c:ba:77: 08:dc:1c:5f:b2:0b:f2:c5:32:04:b4:be:e0:06:13: e7:54:3f:70:a1:07:7d:aa:40:c2:24:0a:a9:85:e1: c3:c8:7a:74:f3:b0:72:c0:d0:d4:ac:61:b3:41:cd: ff:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:8B:5F:06:EE:08:84:08:D4:89:9E:5E:C2:A7:32:3D:5C:9E:71 X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e3:4a:36:7d:c5:62:ac:84:bc:a5:27:b3:54:0e:83:51:71: f2:71:17:1e:be:61:20:85:35:3b:c6:4d:3c:3d:3c:0b:52:19: 47:95:c0:8e:86:9f:6d:e5:e8:09:68:5b:04:f4:9a:75:5d:f8: 25:0b:d1:47:2e:47:f0:e9:23:fc:a4:c8:e1:09:76:de:04:c2: f0:47:46:a8:04:25:70:de:f5:d5:6e:cc:f1:e3:b9:e6:2e:b2: 8d:49:a8:51:e4:0a:8c:82:88:6c:f0:c6:74:5f:c8:f2:14:5e: 09:78:25:3c:de:d1:d1:53:6b:8d:a7:ec:d9:a8:0c:b5:0c:f0: a7:93:50:1f:43:ab:41:0f:81:3c:91:e3:b5:71:73:dc:3b:a7: af:e8:a0:83:2a:dd:f5:17:ff:63:7a:9c:18:93:51:c6:e1:e6: b8:d8:9f:5f:e3:93:f8:b5:fd:92:9d:e6:98:c9:01:e4:5a:dc: 4e:94:24:ce:7b:d8:b3:48:55:2f:41:72:77:21:84:f8:e5:52: 92:c2:88:7e:66:61:aa:4b:a3:c6:44:2a:83:ba:0d:8c:42:7c: 09:96:82:4b:66:85:08:dc:9b:05:a8:45:1a:58:6e:12:5d:01: 91:7a:82:99:08:fd:ee:74:e1:c1:c4:b8:63:49:84:07:43:0a: 94:23:53:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLJZUjIIIUYEhvjJ3/g6BFkZP8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTEyMDMwMzU3NDhaFw0yNTEyMDYxMzQzNDhaMDMxMTAvBgNV BAMTKDA0M0I4QjVGMDZFRTA4ODQwOEQ0ODk5RTVFQzJBNzMyM0Q1QzlFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkpUCaOqGY6A+TOqADhqNSZz2C PerVULbgHna8jJgFKwl3uRdBYaXDk/fQmohZKuPRu1bAX3LLreqh1W63bTIZMfUD o2VzOahcZcXQT19JFpsjE5krniVZOduTd0Adb86IsUPChwb7FPFHiR+rFN3aAvn7 90pIA6KZ9Bh+upsq1GMjWOrseYvqd/y9uqZ0PbfK446ksufUcBVPMXLbJE8TbqpE pWCRFmL48XrWXUMC+4M9zMn5RNX+DfeHD74VTwhEfKY4VHFc+kCXy28boFy6dwjc HF+yC/LFMgS0vuAGE+dUP3ChB32qQMIkCqmF4cPIenTzsHLA0NSsYbNBzf81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBDuLXwbuCIQI1ImeXsKnMj1cnnEwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrjSjZ9xWKshLylJ7NUDoNRcfJxFx6+YSCF NTvGTTw9PAtSGUeVwI6Gn23l6AloWwT0mnVd+CUL0UcuR/DpI/ykyOEJdt4EwvBH RqgEJXDe9dVuzPHjueYuso1JqFHkCoyCiGzwxnRfyPIUXgl4JTze0dFTa42n7Nmo DLUM8KeTUB9Dq0EPgTyR47Vxc9w7p6/ooIMq3fUX/2N6nBiTUcbh5rjYn1/jk/i1 /ZKd5pjJAeRa3E6UJM572LNIVS9BcnchhPjlUpLCiH5mYapLo8ZEKoO6DYxCfAmW gktmhQjcmwWoRRpYbhJdAZF6gpkI/e504cHEuGNJhAdDCpQjUwg= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:04 2025 by rpki-client