This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft File: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft (raw, json) Hash identifier: czaAB3OzYgq38VCmDL1J3OElDnEOII2VUIqJo61JqYI= Subject key identifier: 08:1D:78:D2:55:41:53:DD:0D:AC:7B:A6:91:8C:AE:F5:74:78:78:AA Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C Certificate issuer: /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Certificate serial: 2B297F0DA070F3FEA23A6010F41549AB5DF2D037 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft Manifest number: 0533 Signing time: Thu 18 Dec 2025 07:31:33 +0000 Manifest this update: Thu 18 Dec 2025 07:26:33 +0000 Manifest next update: Sun 21 Dec 2025 19:12:33 +0000 Files and hashes: 1: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: gDwS3CZNot9PKNbXfgVaxRg3XKEAojqRRjZmWUnIieM=) 2: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: +hHtMHqrRgOxnxPgQ1JDtVaqmRcnzLdlLvloLKvOcZA=) 3: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl (hash: Lao/6tqBwihdOt1Fxu6CKbohzCQckwhJuizUhCk7Zrw=) 4: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: qJMxf0aJqdHPfbLPNvUiMxKhq3U6DmyX3ZCQXdLa44w=) 5: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: bj03wSoaB1PZHhqBBV4Wr4Sjs0onXCgWYauPl2mcWtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:29:7f:0d:a0:70:f3:fe:a2:3a:60:10:f4:15:49:ab:5d:f2:d0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Validity Not Before: Dec 18 07:26:33 2025 GMT Not After : Dec 21 19:12:33 2025 GMT Subject: CN=081D78D2554153DD0DAC7BA6918CAEF5747878AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:dc:f6:87:54:89:b8:da:7c:c3:ed:69:19: f9:75:a7:96:cd:a0:59:2b:d4:f7:dd:5b:a9:8f:8a: 32:ed:b7:73:6d:27:d6:ac:f8:9f:15:60:bb:ab:78: a2:f2:0d:93:d0:a1:cb:6b:6e:37:e1:d4:0c:b1:dd: ba:1f:55:cb:61:1a:50:d6:02:0d:43:a5:29:c1:b2: fa:fc:ab:62:9e:74:78:c9:f8:37:58:ec:e3:56:3b: 17:14:49:5a:0f:1e:17:e6:09:c0:36:3f:73:7a:37: 16:6f:b2:0a:ba:e5:58:4f:fa:3e:95:1c:22:0e:28: 66:a7:43:00:6c:f7:cd:61:4c:c0:29:49:b6:8d:61: ee:0b:f4:ef:74:63:50:2f:9d:fd:38:d7:bf:10:a6: 2a:b3:e2:49:ad:8e:d8:c9:9c:89:33:5e:38:c9:86: 80:e0:ab:dd:02:b1:7b:11:57:a4:03:dc:ec:a7:78: f7:e3:0f:b0:4d:90:0b:97:1b:66:a6:b1:72:88:6c: 29:b7:09:93:42:36:3f:4c:59:f0:ed:e2:ad:5e:1a: d2:60:83:12:f8:6f:0d:2b:00:4e:ec:b3:fb:81:23: e5:da:28:c5:25:b2:0b:e8:2a:ac:77:9a:a8:b3:96: 86:6a:e2:24:6f:26:ff:f2:e1:44:6b:4a:7f:70:e2: 5c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1D:78:D2:55:41:53:DD:0D:AC:7B:A6:91:8C:AE:F5:74:78:78:AA X509v3 Authority Key Identifier: keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a6:4a:f1:cc:57:46:01:26:91:cb:17:97:f1:ef:1e:15:a7: c7:8f:45:86:63:95:a5:94:db:aa:c2:6a:47:20:f5:c0:80:a1: bb:5f:42:7d:20:54:4c:40:0b:3d:91:6e:0a:c8:c6:38:6e:00: 78:72:53:25:45:59:9e:81:24:05:66:29:9d:84:1e:5e:08:48: 7d:40:10:7c:f4:5e:bb:12:e0:08:6f:79:a4:38:1c:0d:0d:81: 8e:4e:4e:1b:6c:cc:49:9b:e6:ed:b4:31:6b:a4:5e:f9:02:13: d1:19:18:65:36:63:fb:fe:68:41:aa:c0:4a:ef:9e:7d:fd:ea: e9:c3:99:1e:98:3d:a0:fa:e0:8b:46:7c:7c:9e:3e:09:e4:ce: 60:78:d5:21:b2:dc:bf:7a:7e:c6:25:30:7d:a8:04:00:54:bf: 07:bf:2d:49:9c:46:24:39:0c:0d:7d:35:a8:46:be:b0:e2:71: be:62:df:58:d0:52:99:fd:dc:e4:0d:bc:e0:e6:54:37:9f:f1: 30:c7:c7:a9:74:b2:21:99:f0:d7:30:6a:db:c6:ee:71:19:7d: 08:6f:15:e0:a4:f9:cf:c4:a6:97:9c:7c:c8:ce:4e:33:90:97: 92:b9:fe:f3:14:19:3c:9f:a9:15:9c:b4:cd:6f:34:94:38:94: 02:6d:6f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyl/DaBw8/6iOmAQ9BVJq13y0DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcw MzEyQUQ1QzAeFw0yNTEyMTgwNzI2MzNaFw0yNTEyMjExOTEyMzNaMDMxMTAvBgNV BAMTKDA4MUQ3OEQyNTU0MTUzREQwREFDN0JBNjkxOENBRUY1NzQ3ODc4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuAtz2h1SJuNp8w+1pGfl1p5bN oFkr1PfdW6mPijLtt3NtJ9as+J8VYLureKLyDZPQoctrbjfh1Ayx3bofVcthGlDW Ag1DpSnBsvr8q2KedHjJ+DdY7ONWOxcUSVoPHhfmCcA2P3N6NxZvsgq65VhP+j6V HCIOKGanQwBs981hTMApSbaNYe4L9O90Y1Avnf04178Qpiqz4kmtjtjJnIkzXjjJ hoDgq90CsXsRV6QD3OynePfjD7BNkAuXG2amsXKIbCm3CZNCNj9MWfDt4q1eGtJg gxL4bw0rAE7ss/uBI+XaKMUlsgvoKqx3mqizloZq4iRvJv/y4URrSn9w4lx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCB140lVBU90NrHumkYyu9XR4eKowHwYDVR0j BBgwFoAUzqA6B5iRB/VHorKrqmrU5wMSrVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTNhZTQ4NS1hNjU4LTRjNWMtYWJlMi0xZTdmZDhiMDM4YTAvMC9DRUEwM0EwNzk4 OTEwN0Y1NDdBMkIyQUJBQTZBRDRFNzAzMTJBRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcwMzEy QUQ1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0 RTcwMzEyQUQ1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEemSvHMV0YBJpHLF5fx7x4Vp8ePRYZjlaWU 26rCakcg9cCAobtfQn0gVExACz2RbgrIxjhuAHhyUyVFWZ6BJAVmKZ2EHl4ISH1A EHz0XrsS4AhveaQ4HA0NgY5OThtszEmb5u20MWukXvkCE9EZGGU2Y/v+aEGqwErv nn396unDmR6YPaD64ItGfHyePgnkzmB41SGy3L96fsYlMH2oBABUvwe/LUmcRiQ5 DA19NahGvrDicb5i31jQUpn93OQNvODmVDef8TDHx6l0siGZ8NcwatvG7nEZfQhv FeCk+c/EppecfMjOTjOQl5K5/vMUGTyfqRWctM1vNJQ4lAJtbyQ= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:18 2025 by rpki-client