This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: 4mHCm5fQuwThU+hNRKQeweHd0fk+LAcU43RntoLfLd4= Subject key identifier: 31:4D:F9:7A:69:C1:EA:0A:C3:03:7C:50:C2:35:DA:E0:88:ED:05:5E Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 7D900263717BBBB7CBCB5EA1DA4B698A7586F594 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 0529 Signing time: Mon 01 Dec 2025 13:01:23 +0000 Manifest this update: Mon 01 Dec 2025 12:56:23 +0000 Manifest next update: Thu 04 Dec 2025 19:06:23 +0000 Files and hashes: 1: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) 2: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: UlUP8axtifEUfXAo23u1qDmbAslf7EI3qi462B+Yndk=) 3: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:90:02:63:71:7b:bb:b7:cb:cb:5e:a1:da:4b:69:8a:75:86:f5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Dec 1 12:56:23 2025 GMT Not After : Dec 4 19:06:23 2025 GMT Subject: CN=314DF97A69C1EA0AC3037C50C235DAE088ED055E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:28:22:d1:9f:60:63:af:18:bd:ac:7d:f0:ab: 93:9c:29:a7:53:24:28:15:e0:6c:17:32:c9:49:9e: 37:12:19:09:44:ab:81:84:5e:0c:a1:0e:9a:c3:52: 33:a5:6b:ed:80:b0:73:21:48:a5:41:bc:82:6f:aa: 98:21:02:75:5e:e9:51:7a:b3:0f:a0:b5:66:50:cd: 30:b2:44:0c:91:08:16:55:29:af:58:be:47:ec:a8: 81:0c:ab:d2:81:67:35:bc:af:b0:5a:be:fb:1c:3d: e2:c7:4b:c8:34:e7:7e:4d:07:a1:2a:7d:3f:2f:41: 54:62:93:25:84:06:79:98:6d:7b:bc:ab:2f:1f:d4: 91:a7:2d:d2:7d:02:89:61:42:69:55:cf:5e:40:71: 30:59:42:07:e3:dc:4d:b0:b8:5f:b5:6b:a0:8a:68: 8a:6a:c5:b7:42:3b:dd:a1:cf:08:26:1f:19:ba:30: a6:a6:83:df:09:0b:a7:9d:f3:3f:d4:86:f7:15:00: a3:96:48:de:4f:e1:b3:6b:5a:3e:8f:43:cf:31:7a: 90:c4:14:36:82:b8:bb:d6:4b:71:c7:f1:61:11:e7: bf:ec:be:5b:b7:0f:ee:ab:ac:16:d8:0e:e3:f6:31: 8f:64:d0:b4:51:0d:e7:4e:20:a9:18:ba:67:de:d5: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4D:F9:7A:69:C1:EA:0A:C3:03:7C:50:C2:35:DA:E0:88:ED:05:5E X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:37:8f:9b:f0:20:2b:8d:39:86:76:7f:4f:b4:23:d0:94:7d: 9c:d1:e1:6f:6f:b9:01:00:ff:3b:09:7a:7e:6a:23:bc:b8:cd: 7e:fa:a0:d1:a0:12:dd:47:cb:45:cb:fe:a3:85:0b:ce:29:b3: dc:70:58:2f:2f:82:d6:ca:5c:cb:ba:a1:c5:b2:1a:1c:2c:9f: fa:7c:4e:d9:c6:5e:f7:a6:a8:1d:7d:2a:f4:d3:be:11:35:d3: 40:7d:3d:f3:19:28:78:5e:6d:e7:ad:e3:07:ac:1c:32:f4:2e: c0:4a:ad:5f:05:72:38:c4:cc:ab:cf:9c:b1:06:a6:cd:68:99: 37:d2:44:43:21:d0:bd:76:a6:34:75:81:e3:9d:b0:b3:0f:56: ff:98:4d:5b:ca:97:ec:02:3c:45:3c:4b:82:a6:8b:84:2b:d1: 79:a1:86:54:9a:b2:f0:d5:00:92:87:82:3b:0b:cf:62:07:5c: 7e:b1:25:7f:93:ae:84:26:43:a1:cc:99:0c:39:77:ae:d0:0b: 3e:a0:44:33:f9:97:5e:03:82:b9:e2:6b:71:13:cb:e5:49:74: f6:fd:bf:d3:40:2a:93:d9:ee:f5:dd:89:47:50:04:cc:18:f7: b5:49:7a:62:6a:b9:d2:78:4e:59:7f:9c:a9:76:2c:33:d5:b3: 54:5b:e7:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZACY3F7u7fLy16h2ktpinWG9ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTEyMDExMjU2MjNaFw0yNTEyMDQxOTA2MjNaMDMxMTAvBgNV BAMTKDMxNERGOTdBNjlDMUVBMEFDMzAzN0M1MEMyMzVEQUUwODhFRDA1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKCLRn2Bjrxi9rH3wq5OcKadT JCgV4GwXMslJnjcSGQlEq4GEXgyhDprDUjOla+2AsHMhSKVBvIJvqpghAnVe6VF6 sw+gtWZQzTCyRAyRCBZVKa9YvkfsqIEMq9KBZzW8r7BavvscPeLHS8g0535NB6Eq fT8vQVRikyWEBnmYbXu8qy8f1JGnLdJ9AolhQmlVz15AcTBZQgfj3E2wuF+1a6CK aIpqxbdCO92hzwgmHxm6MKamg98JC6ed8z/UhvcVAKOWSN5P4bNrWj6PQ88xepDE FDaCuLvWS3HH8WER57/svlu3D+6rrBbYDuP2MY9k0LRRDedOIKkYumfe1f29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMU35emnB6grDA3xQwjXa4IjtBV4wHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI3j5vwICuNOYZ2f0+0I9CUfZzR4W9vuQEA /zsJen5qI7y4zX76oNGgEt1Hy0XL/qOFC84ps9xwWC8vgtbKXMu6ocWyGhwsn/p8 TtnGXvemqB19KvTTvhE100B9PfMZKHhebeet4wesHDL0LsBKrV8FcjjEzKvPnLEG ps1omTfSREMh0L12pjR1geOdsLMPVv+YTVvKl+wCPEU8S4Kmi4Qr0XmhhlSasvDV AJKHgjsLz2IHXH6xJX+TroQmQ6HMmQw5d67QCz6gRDP5l14Dgrnia3ETy+VJdPb9 v9NAKpPZ7vXdiUdQBMwY97VJemJqudJ4Tll/nKl2LDPVs1Rb5yg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:28 2025 by rpki-client