This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft File: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft (raw, json) Hash identifier: u9rMGCUbuVEQUuM3/TOu1gGnPTlVAhYfdUUWg4IcGAM= Subject key identifier: CA:9E:AE:CB:96:79:70:15:C7:E4:DF:72:50:FF:AE:AC:21:86:FC:EC Authority key identifier: 1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE Certificate issuer: /CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Certificate serial: 0AD91D74DE254E529939F6B2381FB180253311E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft Manifest number: 052B Signing time: Wed 03 Dec 2025 07:02:18 +0000 Manifest this update: Wed 03 Dec 2025 06:57:18 +0000 Manifest next update: Sat 06 Dec 2025 12:31:18 +0000 Files and hashes: 1: 3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa (hash: ivixgTI+bD3oZFKOSl+IC3pWvOMcPxvLBq04R8ayQa4=) 2: 323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (hash: sqlbIIr/3B92d510dnWRSBB/lQtkjQSBObhW88AnQqI=) 3: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl (hash: tos9S95X6sHIkSm3Zjy+SFhZEaBT1eA0dawlnSKSO2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d9:1d:74:de:25:4e:52:99:39:f6:b2:38:1f:b1:80:25:33:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Validity Not Before: Dec 3 06:57:18 2025 GMT Not After : Dec 6 12:31:18 2025 GMT Subject: CN=CA9EAECB96797015C7E4DF7250FFAEAC2186FCEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:7b:31:bd:98:a7:44:53:1c:2d:7b:9c:5b: 90:12:c0:61:e4:04:a4:32:21:df:3a:e2:52:95:82: d3:2e:0a:95:2d:f3:e3:e7:d1:83:d7:be:1c:f6:c8: ee:69:26:78:a5:62:9a:fc:aa:37:6a:01:a0:44:98: f7:20:85:07:1d:da:5f:46:b1:1e:54:a9:1c:6c:55: e8:b0:b9:5c:f6:a1:aa:75:26:a9:df:c4:a4:e3:bc: f8:54:26:14:4e:f5:82:ff:9c:d1:88:15:92:06:36: 12:44:aa:f2:1d:15:17:02:00:ca:26:40:b9:33:28: a8:8b:f8:ed:c8:4a:78:20:6d:58:0a:0c:4a:4a:d0: 0f:92:64:1e:77:e1:fc:dc:cc:92:99:2f:68:e2:d8: 0f:9f:ba:5e:b8:24:9c:29:d1:ab:41:ae:5b:5c:aa: f2:5c:51:15:58:5e:5a:68:65:03:69:f3:21:ef:31: da:d7:e0:e1:18:dc:56:6c:f2:86:ab:75:6b:a5:96: 20:af:1a:88:0e:e0:b7:bf:e9:5a:48:14:53:79:b6: af:6a:f0:38:34:ce:ee:c0:c9:eb:8e:ee:77:29:70: d0:9c:ec:58:c8:55:8d:58:95:82:74:c2:2b:72:68: e7:82:82:25:7d:c4:b3:7c:22:3d:61:c7:9f:7a:05: be:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9E:AE:CB:96:79:70:15:C7:E4:DF:72:50:FF:AE:AC:21:86:FC:EC X509v3 Authority Key Identifier: keyid:1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0f:0f:96:f0:4d:a6:f6:14:92:69:40:e7:b5:1d:8c:d3:db: 4a:4e:f5:b6:25:cc:48:eb:93:4a:1a:d9:73:2f:9b:d5:3a:57: 66:ab:aa:45:45:f1:ca:e8:cd:29:41:87:ef:72:a3:f0:3a:37: 24:a3:d1:98:93:ea:de:86:73:dd:50:ef:3d:fe:07:9d:f2:9f: ea:9c:b2:9d:41:c3:a4:fa:88:2c:a4:bc:d0:17:47:b1:3c:af: ec:bc:c2:4f:16:14:17:78:dc:90:f1:c5:c7:b1:4e:39:25:29: 9b:49:77:f8:3b:0e:81:84:07:7d:86:fd:25:8a:c8:19:a2:1b: ea:1e:f7:5f:46:d2:75:a7:86:9f:78:79:dd:3d:3f:12:c6:41: 0f:71:5a:85:69:3f:22:e1:6d:5d:52:0d:0d:8d:83:fe:6b:00: cc:ba:3d:38:36:d3:74:9b:af:57:ff:1d:a0:f7:bd:3b:69:12: 6c:1f:7d:4d:35:b1:ed:8f:19:bd:ea:67:e8:72:48:0c:43:de: 96:64:1d:fb:3f:73:42:22:f2:8e:70:c8:3f:fa:91:73:2d:f1: 7e:cc:a1:d7:fb:b8:5a:c0:5d:bb:dc:fa:12:57:43:2e:eb:cd: 08:8f:29:50:74:78:0c:2c:48:9c:09:be:82:26:1a:da:5a:9c: 52:d9:e9:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtkddN4lTlKZOfayOB+xgCUzEeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRG NDRDNzJBRTAeFw0yNTEyMDMwNjU3MThaFw0yNTEyMDYxMjMxMThaMDMxMTAvBgNV BAMTKENBOUVBRUNCOTY3OTcwMTVDN0U0REY3MjUwRkZBRUFDMjE4NkZDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsXsxvZinRFMcLXucW5ASwGHk BKQyId864lKVgtMuCpUt8+Pn0YPXvhz2yO5pJnilYpr8qjdqAaBEmPcghQcd2l9G sR5UqRxsVeiwuVz2oap1JqnfxKTjvPhUJhRO9YL/nNGIFZIGNhJEqvIdFRcCAMom QLkzKKiL+O3ISnggbVgKDEpK0A+SZB534fzczJKZL2ji2A+ful64JJwp0atBrltc qvJcURVYXlpoZQNp8yHvMdrX4OEY3FZs8oardWulliCvGogO4Le/6VpIFFN5tq9q 8Dg0zu7AyeuO7ncpcNCc7FjIVY1YlYJ0wityaOeCgiV9xLN8Ij1hx596Bb4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyp6uy5Z5cBXH5N9yUP+urCGG/OwwHwYDVR0j BBgwFoAUHgdHZWzMXUu724W43nNabfRMcq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmVhZDJmNS04YjY1LTQ4MjktODg0Yi1kN2MwNmRkMGY4M2EvMC8xRTA3NDc2NTZD Q0M1RDRCQkJEQjg1QjhERTczNUE2REY0NEM3MkFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRGNDRD NzJBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZlYWQyZjUtOGI2NS00ODI5LTg4 NGItZDdjMDZkZDBmODNhLzAvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVB NkRGNDRDNzJBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkPD5bwTab2FJJpQOe1HYzT20pO9bYlzEjr k0oa2XMvm9U6V2arqkVF8crozSlBh+9yo/A6NySj0ZiT6t6Gc91Q7z3+B53yn+qc sp1Bw6T6iCykvNAXR7E8r+y8wk8WFBd43JDxxcexTjklKZtJd/g7DoGEB32G/SWK yBmiG+oe919G0nWnhp94ed09PxLGQQ9xWoVpPyLhbV1SDQ2Ng/5rAMy6PTg203Sb r1f/HaD3vTtpEmwffU01se2PGb3qZ+hySAxD3pZkHfs/c0Ii8o5wyD/6kXMt8X7M odf7uFrAXbvc+hJXQy7rzQiPKVB0eAwsSJwJvoImGtpanFLZ6WU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:49 2025 by rpki-client