This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft File: ED137633BAEE661A0ACBBF277089F107CB59439A.mft (raw, json) Hash identifier: WDCFjrDT8lpbOo8aoNw5+j27oO0Z0kXLPSIthgNbPhA= Subject key identifier: BB:79:52:2C:0B:03:66:DB:47:62:88:C0:FF:C7:27:DA:A8:E9:B5:D0 Authority key identifier: ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A Certificate issuer: /CN=ED137633BAEE661A0ACBBF277089F107CB59439A Certificate serial: 7A5A0D342B3B6A9313FF0FCDA0134EDF97C4C749 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft Manifest number: 01D4 Signing time: Mon 01 Dec 2025 21:41:36 +0000 Manifest this update: Mon 01 Dec 2025 21:36:36 +0000 Manifest next update: Fri 05 Dec 2025 06:47:36 +0000 Files and hashes: 1: ED137633BAEE661A0ACBBF277089F107CB59439A.crl (hash: SWk+kMPkUvrY4PpHUYFfD/2yaX+zrr6i8GrwB36TIYE=) 2: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: lA0HvakrheoR+VMWrWjd7ZsfLODkGFiLcqbm8PHhQfs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:5a:0d:34:2b:3b:6a:93:13:ff:0f:cd:a0:13:4e:df:97:c4:c7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED137633BAEE661A0ACBBF277089F107CB59439A Validity Not Before: Dec 1 21:36:36 2025 GMT Not After : Dec 5 06:47:36 2025 GMT Subject: CN=BB79522C0B0366DB476288C0FFC727DAA8E9B5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:83:0d:9b:69:86:73:8a:0e:c1:53:24:9e: 54:a8:09:94:05:c8:f9:db:94:19:77:bc:d1:b8:ab: c6:b1:59:71:ee:37:7d:81:fe:0d:8f:e8:df:9a:92: 9f:aa:fb:70:2f:69:64:57:86:aa:0c:40:b5:11:b6: ad:8a:09:6d:1d:02:b2:30:d0:90:11:14:ee:e9:99: 81:2d:6a:e8:30:cd:6a:fd:15:a5:05:4b:f7:ea:a2: 4b:01:ef:a3:ac:65:8e:96:3b:1a:cf:f1:c4:92:46: 46:aa:b7:70:a6:60:d5:c1:21:3c:45:be:bd:b1:53: a3:3b:bd:3c:5b:2f:4e:dd:76:ad:a4:95:3c:0a:41: 31:e6:fe:64:dc:0c:b2:22:48:74:5b:a1:70:48:40: 93:a9:0e:76:7a:d1:f2:aa:60:5f:4e:be:93:31:34: d6:c5:47:dc:f1:8c:f6:a1:c6:40:46:69:63:9d:b4: 9a:a8:8d:e9:f8:b8:f4:56:7b:37:2d:e1:3e:e6:d2: 4d:d4:ff:d1:9c:38:37:53:9d:20:3c:1d:44:50:77: e0:39:a8:ae:14:c2:74:bc:3d:07:54:ab:19:59:cf: 2e:7c:ab:c0:da:bb:d9:6d:f8:11:de:c2:f9:f2:07: e6:27:91:62:9d:28:63:8c:0e:3b:3f:7d:2e:1f:f2: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:79:52:2C:0B:03:66:DB:47:62:88:C0:FF:C7:27:DA:A8:E9:B5:D0 X509v3 Authority Key Identifier: keyid:ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4c:68:2e:05:51:9c:35:57:ed:50:c1:c4:ce:79:77:3e:71: 65:52:d5:54:6d:d5:43:fc:d5:d0:ed:71:70:a3:fd:c1:e8:e0: a0:b0:26:98:fa:21:be:d0:3d:12:c9:bd:c1:05:a8:a0:7d:cf: c2:ee:a2:a0:aa:59:53:d4:dd:9b:ae:85:a5:3e:ae:d2:5b:36: b2:61:84:a7:28:91:7b:2a:0b:f0:d1:cd:d5:07:76:60:fa:64: b8:bc:8c:54:f4:a5:10:39:69:95:06:22:98:14:ae:88:71:30: 41:61:fa:dc:84:30:6c:63:b9:b7:64:d7:06:30:b6:48:8d:d4: 44:0f:1f:12:bb:e1:82:f7:e6:17:3c:f8:96:3c:fd:24:6a:25: c8:5f:04:c4:79:97:31:12:b2:31:a4:62:b1:e0:6a:67:37:55: 7d:26:1a:e6:b6:1f:d7:e7:48:29:56:a9:d1:3c:01:b4:ce:55: 91:17:b6:8d:20:45:e6:b1:25:cb:c7:6a:eb:ff:38:2c:fa:82: 96:f9:2a:19:a4:bc:7c:c5:ff:05:6d:33:28:6c:ad:00:a4:b1: 62:5a:3b:24:32:ab:bb:69:b2:1c:a2:95:3a:d6:ea:44:e6:4b: 86:bb:39:a0:41:d7:cf:47:16:72:90:37:8b:30:7e:14:c7:a6: 85:cc:3a:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeloNNCs7apMT/w/NoBNO35fEx0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYxMDdD QjU5NDM5QTAeFw0yNTEyMDEyMTM2MzZaFw0yNTEyMDUwNjQ3MzZaMDMxMTAvBgNV BAMTKEJCNzk1MjJDMEIwMzY2REI0NzYyODhDMEZGQzcyN0RBQThFOUI1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+roMNm2mGc4oOwVMknlSoCZQF yPnblBl3vNG4q8axWXHuN32B/g2P6N+akp+q+3AvaWRXhqoMQLURtq2KCW0dArIw 0JARFO7pmYEtaugwzWr9FaUFS/fqoksB76OsZY6WOxrP8cSSRkaqt3CmYNXBITxF vr2xU6M7vTxbL07ddq2klTwKQTHm/mTcDLIiSHRboXBIQJOpDnZ60fKqYF9OvpMx NNbFR9zxjPahxkBGaWOdtJqojen4uPRWezct4T7m0k3U/9GcODdTnSA8HURQd+A5 qK4UwnS8PQdUqxlZzy58q8Dau9lt+BHewvnyB+YnkWKdKGOMDjs/fS4f8mGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu3lSLAsDZttHYojA/8cn2qjptdAwHwYDVR0j BBgwFoAU7RN2M7ruZhoKy78ncInxB8tZQ5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzIyNDM2MC0yNDVkLTRhMWEtYWYzNi1mOWJlZmNkYjcwYjcvMC9FRDEzNzYzM0JB RUU2NjFBMEFDQkJGMjc3MDg5RjEwN0NCNTk0MzlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYxMDdDQjU5 NDM5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm MzYtZjliZWZjZGI3MGI3LzAvRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYx MDdDQjU5NDM5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJMaC4FUZw1V+1QwcTOeXc+cWVS1VRt1UP8 1dDtcXCj/cHo4KCwJpj6Ib7QPRLJvcEFqKB9z8LuoqCqWVPU3ZuuhaU+rtJbNrJh hKcokXsqC/DRzdUHdmD6ZLi8jFT0pRA5aZUGIpgUrohxMEFh+tyEMGxjubdk1wYw tkiN1EQPHxK74YL35hc8+JY8/SRqJchfBMR5lzESsjGkYrHgamc3VX0mGua2H9fn SClWqdE8AbTOVZEXto0gReaxJcvHauv/OCz6gpb5KhmkvHzF/wVtMyhsrQCksWJa OyQyq7tpshyilTrW6kTmS4a7OaBB189HFnKQN4swfhTHpoXMOv4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:25 2025 by rpki-client