This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: z14esSGkINk7JpmwqvEMM0YyXVRrXTIpW/arAtoOCqY= Subject key identifier: 4B:6D:5F:4D:24:48:0A:D0:84:5C:09:EC:A6:1C:BA:A2:AA:F9:11:2C Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 580724DCC972418F447129ACFA6FE51A0E75C280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 01EE Signing time: Fri 12 Dec 2025 10:51:06 +0000 Manifest this update: Fri 12 Dec 2025 10:46:06 +0000 Manifest next update: Mon 15 Dec 2025 19:26:06 +0000 Files and hashes: 1: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: adGt9DHkn+J8+ZYOarff4AECDj73e8+5SrzdX+9/1ys=) 2: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: QQ3Rh44LarCBGGxrx2/AHtC6m0nt4l2HW31clE2Q/SY=) 3: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: FYTnb6URKqil9v4UEaprZL6ZdMktcRy6nGXbNBxOe04=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: R73yUQxsrQ2/QYaOv8BqS7ocOQns71iqOhL/AfjwD0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 19:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:07:24:dc:c9:72:41:8f:44:71:29:ac:fa:6f:e5:1a:0e:75:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Dec 12 10:46:06 2025 GMT Not After : Dec 15 19:26:06 2025 GMT Subject: CN=4B6D5F4D24480AD0845C09ECA61CBAA2AAF9112C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:db:56:30:6d:97:39:86:31:da:7b:8d:c0:88: 37:20:71:9a:8a:e2:19:70:31:48:c3:a3:f6:0f:b7: de:01:cc:31:14:d2:a1:db:89:11:e1:3b:b8:60:1d: c0:05:72:cb:23:f6:21:0b:7f:02:62:d7:14:7a:bc: f3:e1:62:ef:fb:09:f3:08:62:8e:cf:f9:9c:2f:d4: 25:40:a9:47:8b:7e:60:d7:ea:54:eb:af:75:6b:32: 7a:c0:ba:cd:bb:1d:85:ff:10:e6:d6:94:53:f4:47: a0:28:aa:cc:3f:50:a4:fd:95:d6:c6:24:94:14:7a: b5:66:1b:42:aa:36:af:b0:33:cd:a4:53:ff:33:f3: 06:b2:7a:72:e0:f3:8d:18:b8:28:2e:89:84:6d:21: 20:57:5e:59:64:b8:f5:ba:44:a6:56:62:65:9a:b2: 7c:b5:c6:54:f0:7f:08:93:85:dd:55:ec:bb:0b:93: f0:c8:c9:73:5a:88:4c:96:02:4a:6e:ab:20:b2:79: fb:33:09:84:fa:26:d3:57:b0:f3:ab:4d:a2:cd:c8: c6:7d:91:f1:e4:dd:68:7d:57:f4:34:50:78:a8:43: d7:df:08:da:68:3a:37:77:bd:e0:4a:f7:21:e1:48: 53:82:83:37:36:b9:82:31:ef:2e:57:95:04:ad:fc: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6D:5F:4D:24:48:0A:D0:84:5C:09:EC:A6:1C:BA:A2:AA:F9:11:2C X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:48:39:7e:93:6f:69:7a:8f:b6:00:37:47:ab:8b:09:66:14: cd:a1:a3:44:3d:25:48:76:69:85:a0:02:f8:79:0b:ab:de:0b: 9b:c9:72:dc:93:7e:e0:7f:72:a1:0b:39:9b:42:8b:77:41:12: 1f:12:20:d2:b6:39:8e:db:dd:22:bc:11:bf:35:b4:27:1f:b1: fa:1e:a5:4d:1f:94:ab:19:73:65:43:94:87:0b:2b:78:3f:49: 2e:68:08:6c:14:a0:9c:f2:d2:63:60:1e:cd:ba:88:9d:10:ee: ea:2b:6f:20:9f:de:bc:3d:e1:a5:46:70:ac:8f:4c:cd:0a:ba: 3c:59:cd:72:8c:b2:43:b6:65:31:d6:a4:f6:9d:a8:96:f8:16: d6:d3:88:53:f2:76:2d:15:19:e4:22:3c:9c:6e:f9:77:b8:5c: bf:19:ad:42:53:ac:f1:04:55:b1:03:6a:25:c6:cf:e0:e7:aa: c3:64:25:f7:33:e8:03:73:e4:ef:23:3f:f7:d1:d0:cd:87:a6: e1:a4:95:01:f4:4d:22:9e:04:68:a0:27:69:6b:57:af:6b:ba: 3e:f1:0f:71:40:0b:e8:b0:fb:2a:d4:5e:d6:17:14:ac:88:6e: 20:13:a7:b8:3f:d6:e6:23:c0:47:f6:39:3a:d6:e7:17:4e:72: 9b:e2:d6:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAck3MlyQY9EcSms+m/lGg51woAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTEyMTIxMDQ2MDZaFw0yNTEyMTUxOTI2MDZaMDMxMTAvBgNV BAMTKDRCNkQ1RjREMjQ0ODBBRDA4NDVDMDlFQ0E2MUNCQUEyQUFGOTExMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD721YwbZc5hjHae43AiDcgcZqK 4hlwMUjDo/YPt94BzDEU0qHbiRHhO7hgHcAFcssj9iELfwJi1xR6vPPhYu/7CfMI Yo7P+Zwv1CVAqUeLfmDX6lTrr3VrMnrAus27HYX/EObWlFP0R6Aoqsw/UKT9ldbG JJQUerVmG0KqNq+wM82kU/8z8wayenLg840YuCguiYRtISBXXllkuPW6RKZWYmWa sny1xlTwfwiThd1V7LsLk/DIyXNaiEyWAkpuqyCyefszCYT6JtNXsPOrTaLNyMZ9 kfHk3Wh9V/Q0UHioQ9ffCNpoOjd3veBK9yHhSFOCgzc2uYIx7y5XlQSt/GOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS21fTSRICtCEXAnsphy6oqr5ESwwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZIOX6Tb2l6j7YAN0eriwlmFM2ho0Q9JUh2 aYWgAvh5C6veC5vJctyTfuB/cqELOZtCi3dBEh8SINK2OY7b3SK8Eb81tCcfsfoe pU0flKsZc2VDlIcLK3g/SS5oCGwUoJzy0mNgHs26iJ0Q7uorbyCf3rw94aVGcKyP TM0KujxZzXKMskO2ZTHWpPadqJb4FtbTiFPydi0VGeQiPJxu+Xe4XL8ZrUJTrPEE VbEDaiXGz+DnqsNkJfcz6ANz5O8jP/fR0M2HpuGklQH0TSKeBGigJ2lrV69ruj7x D3FAC+iw+yrUXtYXFKyIbiATp7g/1uYjwEf2OTrW5xdOcpvi1ow= -----END CERTIFICATE-----Generated at Sun Dec 14 09:34:09 2025 by rpki-client