This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft (raw, json) Hash identifier: DAEAuuRjSurVaFgw2LQy02S0lO23WRhRhQLa6bswCbs= Subject key identifier: FA:3E:07:06:08:0C:16:EB:55:59:F3:06:5B:82:1A:6B:51:FB:60:11 Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Certificate issuer: /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Certificate serial: 50FDF633CDD21B6E452BA5F6A666B50F71597477 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft Manifest number: 02AF Signing time: Wed 03 Dec 2025 10:52:18 +0000 Manifest this update: Wed 03 Dec 2025 10:47:18 +0000 Manifest next update: Sat 06 Dec 2025 15:53:18 +0000 Files and hashes: 1: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl (hash: 2ixNRzr8xJAXRE2WcqY5ejOj3rlz7Juh53HlmyckJpw=) 2: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: h1Tx5XQe9PTjaWSuT2kvzlzqF3kndx9Hsu7Upo8uOTc=) 3: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: qWtnu+D2OJjgUIAZhBWqF4N8kzQJfxmKrFVqp2H/d+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fd:f6:33:cd:d2:1b:6e:45:2b:a5:f6:a6:66:b5:0f:71:59:74:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Validity Not Before: Dec 3 10:47:18 2025 GMT Not After : Dec 6 15:53:18 2025 GMT Subject: CN=FA3E0706080C16EB5559F3065B821A6B51FB6011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:bb:94:ba:06:2c:90:bf:c8:15:10:b9:aa: 15:1e:18:86:f8:c5:ae:ef:99:57:ea:89:38:04:db: 74:27:6b:cd:51:30:97:9a:3d:92:e4:a2:23:f3:48: d8:22:29:0d:76:56:87:6d:ab:fd:b2:ea:3d:b6:8c: f4:f2:70:b8:a5:de:39:70:3c:5d:f5:16:cd:95:fb: a8:95:79:a5:e3:c5:03:d8:07:ea:31:dd:2e:c7:64: e4:5e:3a:76:46:13:dd:65:12:bb:6e:c8:6e:00:0d: ff:b6:ad:f8:44:9f:0a:57:45:16:d8:33:7c:31:89: a9:27:0a:c5:82:25:63:5e:b9:e5:24:e4:79:b7:9e: 2b:69:16:93:f7:4b:aa:4f:de:14:15:b6:50:e7:9a: 82:fc:94:c5:65:3b:6b:b5:57:d2:20:d7:11:a4:cd: 48:d2:c3:69:6e:7e:40:9d:e7:ab:5a:8c:6e:f4:f7: af:b0:50:1c:82:97:7a:b8:81:ef:28:92:d8:bd:d3: b1:d1:b2:a3:b6:71:e3:ad:88:30:f9:16:70:cb:1b: 40:33:13:cd:38:63:82:fc:c1:59:0a:61:d1:28:cc: 5b:f2:8d:03:76:c8:02:78:7a:ae:5d:05:47:e9:5b: 8d:71:fa:57:e5:e3:62:dc:0b:89:f4:a0:0e:ec:8d: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3E:07:06:08:0C:16:EB:55:59:F3:06:5B:82:1A:6B:51:FB:60:11 X509v3 Authority Key Identifier: keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:81:93:78:00:03:9a:03:fd:e7:6c:3e:d2:af:38:64:ce:b8: 96:12:f6:73:ec:51:c6:74:30:c0:a6:9a:67:ee:73:82:dd:f6: 05:a8:14:db:22:a7:8c:3e:2a:99:b6:4d:c7:16:7a:6c:64:60: 5d:b5:e2:90:dd:9b:02:26:40:fb:c5:1d:d9:6c:25:0a:18:9c: e4:85:32:52:e6:dd:49:df:95:05:9e:92:bb:f0:35:9e:dc:d1: aa:03:2a:c0:46:6f:f0:97:17:0d:18:b5:fa:b7:20:14:84:6a: 03:11:6b:02:77:58:ca:f7:88:34:6e:5e:7d:87:9f:98:4b:a7: a0:af:09:32:13:11:6c:97:ad:00:71:6e:d1:f2:c6:98:e6:75: 2b:1b:c9:06:ec:f0:4c:6f:a3:f8:26:aa:63:f0:5c:27:d5:4e: 3e:82:93:4a:4b:65:26:5f:4c:24:b1:fc:fc:7e:c9:59:93:92: 91:49:6b:ce:17:f4:e9:6e:bb:7b:ec:a0:df:16:38:37:9b:93: 8e:4d:59:40:95:c1:a8:08:86:0c:a3:dc:2d:42:48:bd:fb:b9: d3:8f:49:72:ea:4b:77:8e:cf:26:0d:ec:d5:31:3f:25:2e:a0: ed:a9:dc:e4:80:41:dc:50:0c:8e:a3:d8:9b:0e:a4:34:a4:1e: 49:ca:8d:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUP32M83SG25FK6X2pma1D3FZdHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBE MDIyNDZGMTAeFw0yNTEyMDMxMDQ3MThaFw0yNTEyMDYxNTUzMThaMDMxMTAvBgNV BAMTKEZBM0UwNzA2MDgwQzE2RUI1NTU5RjMwNjVCODIxQTZCNTFGQjYwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75LuUugYskL/IFRC5qhUeGIb4 xa7vmVfqiTgE23Qna81RMJeaPZLkoiPzSNgiKQ12Vodtq/2y6j22jPTycLil3jlw PF31Fs2V+6iVeaXjxQPYB+ox3S7HZOReOnZGE91lErtuyG4ADf+2rfhEnwpXRRbY M3wxiaknCsWCJWNeueUk5Hm3nitpFpP3S6pP3hQVtlDnmoL8lMVlO2u1V9Ig1xGk zUjSw2lufkCd56tajG7096+wUByCl3q4ge8okti907HRsqO2ceOtiDD5FnDLG0Az E804Y4L8wVkKYdEozFvyjQN2yAJ4eq5dBUfpW41x+lfl42LcC4n0oA7sjS3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+j4HBggMFutVWfMGW4Iaa1H7YBEwHwYDVR0j BBgwFoAU4J0OHSY9vZFNDE4Mqn5eUNAiRvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMC9FMDlEMEUxRDI2 M0RCRDkxNEQwQzRFMENBQTdFNUU1MEQwMjI0NkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBEMDIy NDZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVF NTBEMDIyNDZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESBk3gAA5oD/edsPtKvOGTOuJYS9nPsUcZ0 MMCmmmfuc4Ld9gWoFNsip4w+Kpm2TccWemxkYF214pDdmwImQPvFHdlsJQoYnOSF MlLm3UnflQWekrvwNZ7c0aoDKsBGb/CXFw0Ytfq3IBSEagMRawJ3WMr3iDRuXn2H n5hLp6CvCTITEWyXrQBxbtHyxpjmdSsbyQbs8Exvo/gmqmPwXCfVTj6Ck0pLZSZf TCSx/Px+yVmTkpFJa84X9Oluu3vsoN8WODebk45NWUCVwagIhgyj3C1CSL37udOP SXLqS3eOzyYN7NUxPyUuoO2p3OSAQdxQDI6j2JsOpDSkHknKjY4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:37 2025 by rpki-client