This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: mhseZSkR17vEN62gwo8YYSAqPHvUJorXO4P0y61+svY= Subject key identifier: EA:6D:89:5B:EC:23:91:22:17:EC:96:FD:B8:2E:DF:06:0A:00:21:BA Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 08CA45E9768B3C47B20DAC594DB7F7EE93952646 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: 010E Signing time: Tue 02 Dec 2025 01:21:57 +0000 Manifest this update: Tue 02 Dec 2025 01:16:57 +0000 Manifest next update: Fri 05 Dec 2025 10:01:57 +0000 Files and hashes: 1: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: XUfdPybgV0Xa/+v3Fn66tR3Tr9TQIwrJJvyq8p81eoA=) 2: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) 4: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ca:45:e9:76:8b:3c:47:b2:0d:ac:59:4d:b7:f7:ee:93:95:26:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Dec 2 01:16:57 2025 GMT Not After : Dec 5 10:01:57 2025 GMT Subject: CN=EA6D895BEC23912217EC96FDB82EDF060A0021BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:73:ad:fc:25:4a:7a:2b:30:08:61:67:30:dd: 74:64:30:27:6f:26:79:ee:ec:b3:92:40:3e:4b:3d: 20:aa:59:c1:93:46:94:7e:c4:b7:82:06:14:95:96: 95:32:b7:8b:80:b8:a2:3e:09:34:bc:f3:1d:3b:7b: d4:77:97:48:82:09:be:f0:4a:e1:06:4f:07:01:6e: 3a:d1:8f:15:31:7a:1c:f6:4a:bf:2e:d9:96:cb:bc: 28:89:f4:86:6b:74:0b:9b:5f:e4:49:5f:ac:6b:4a: 58:05:a5:83:b4:d9:c5:a3:3a:7f:2f:15:fa:22:53: c6:41:c5:de:a6:a0:ee:c9:48:de:85:b7:ac:67:99: e8:73:17:08:1b:34:28:ce:79:94:1c:a2:6a:41:29: 70:61:4d:25:f6:88:2c:be:eb:f2:b9:42:97:2f:a1: db:59:d7:ec:4b:ef:90:2d:ff:93:3e:5e:94:d9:a9: db:62:cc:bb:66:61:99:6b:2b:75:bb:54:09:d0:10: 0f:ea:6f:0d:b7:0e:b3:fc:08:52:00:50:f3:6e:2d: eb:68:b2:24:37:a2:df:26:54:7a:e1:29:84:cc:15: d4:8a:d5:eb:bb:0a:9f:7e:d3:00:c2:e1:e7:46:2d: da:89:ba:2a:a7:5f:ec:b8:f6:3f:0a:59:79:30:69: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6D:89:5B:EC:23:91:22:17:EC:96:FD:B8:2E:DF:06:0A:00:21:BA X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5d:39:84:e8:3b:a0:2f:09:77:62:80:62:df:1e:a4:eb:22: 4a:64:36:7c:6d:ff:22:4b:0e:d8:1a:b8:f1:0c:ee:9c:9c:d2: 70:db:92:42:2f:4c:fc:7d:f4:80:66:58:92:da:1d:e1:d4:73: 87:93:7b:70:5e:27:c9:56:06:1e:dd:2f:b1:69:09:ff:7a:34: f1:60:dd:53:76:67:6b:f7:13:c2:f6:4d:b3:e8:b1:61:fe:e6: 93:49:4f:e9:7f:44:83:01:60:1a:80:c7:0c:98:c3:c5:4d:8f: 1e:ec:b0:bf:67:81:f2:fc:5f:2c:4c:32:5e:90:cc:19:9f:fa: 0a:c6:ea:14:61:e1:f1:7f:64:81:77:2b:96:ef:f7:30:41:32: fb:41:6d:18:a4:5a:12:07:4a:d4:fb:ec:e0:e1:6d:f4:19:1b: ef:ea:ae:65:0f:3d:27:89:86:f1:ec:2f:c9:56:cd:f4:ad:16: cd:e3:fe:57:fe:5a:3b:26:c1:ff:ec:ad:46:10:f5:6e:10:6f: 8a:70:6b:3e:f3:85:a0:9d:bb:f6:d1:15:54:31:22:6a:05:bf: 98:96:f4:82:a2:3a:d8:71:f2:ee:46:47:c9:4f:aa:59:56:b1: 8b:62:68:59:e3:e7:77:3a:2f:91:12:bf:2c:d5:bb:67:a7:3a: cb:67:d5:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMpF6XaLPEeyDaxZTbf37pOVJkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTEyMDIwMTE2NTdaFw0yNTEyMDUxMDAxNTdaMDMxMTAvBgNV BAMTKEVBNkQ4OTVCRUMyMzkxMjIxN0VDOTZGREI4MkVERjA2MEEwMDIxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5c638JUp6KzAIYWcw3XRkMCdv Jnnu7LOSQD5LPSCqWcGTRpR+xLeCBhSVlpUyt4uAuKI+CTS88x07e9R3l0iCCb7w SuEGTwcBbjrRjxUxehz2Sr8u2ZbLvCiJ9IZrdAubX+RJX6xrSlgFpYO02cWjOn8v FfoiU8ZBxd6moO7JSN6Ft6xnmehzFwgbNCjOeZQcompBKXBhTSX2iCy+6/K5Qpcv odtZ1+xL75At/5M+XpTZqdtizLtmYZlrK3W7VAnQEA/qbw23DrP8CFIAUPNuLeto siQ3ot8mVHrhKYTMFdSK1eu7Cp9+0wDC4edGLdqJuiqnX+y49j8KWXkwaRQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6m2JW+wjkSIX7Jb9uC7fBgoAIbowHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIldOYToO6AvCXdigGLfHqTrIkpkNnxt/yJL DtgauPEM7pyc0nDbkkIvTPx99IBmWJLaHeHUc4eTe3BeJ8lWBh7dL7FpCf96NPFg 3VN2Z2v3E8L2TbPosWH+5pNJT+l/RIMBYBqAxwyYw8VNjx7ssL9ngfL8XyxMMl6Q zBmf+grG6hRh4fF/ZIF3K5bv9zBBMvtBbRikWhIHStT77ODhbfQZG+/qrmUPPSeJ hvHsL8lWzfStFs3j/lf+Wjsmwf/srUYQ9W4Qb4pwaz7zhaCdu/bRFVQxImoFv5iW 9IKiOthx8u5GR8lPqllWsYtiaFnj53c6L5ESvyzVu2enOstn1fM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:36 2025 by rpki-client