This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft File: EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft (raw, json) Hash identifier: ZzQ1RtlsGywcGBmyh5+z6XN+t6yn6s24QoS1wtl0drE= Subject key identifier: F9:2F:08:85:89:DB:4E:3D:0F:90:D0:28:39:C7:CA:2C:FA:BD:1A:09 Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 Certificate issuer: /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Certificate serial: 42ECC01C7F405A72F1ABA022A209B476360FADA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft Manifest number: 04B8 Signing time: Tue 02 Dec 2025 13:12:04 +0000 Manifest this update: Tue 02 Dec 2025 13:07:04 +0000 Manifest next update: Fri 05 Dec 2025 23:02:04 +0000 Files and hashes: 1: EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl (hash: 0vXaMRimACsSmeTOrfwDuw0UPvLP76ArusppYByD9EE=) 2: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: aO5GUOOYzWayE1+nuqtYCqJb6iqD3aY2aScclOaaV0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ec:c0:1c:7f:40:5a:72:f1:ab:a0:22:a2:09:b4:76:36:0f:ad:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Validity Not Before: Dec 2 13:07:04 2025 GMT Not After : Dec 5 23:02:04 2025 GMT Subject: CN=F92F088589DB4E3D0F90D02839C7CA2CFABD1A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:fe:b3:48:b9:1a:09:5f:2e:37:c0:04:fd: 70:15:e6:23:16:3b:68:0d:fa:88:8a:55:f6:cb:4b: b6:be:4d:91:98:cc:d8:4b:f6:eb:d4:d9:34:91:79: 37:41:b7:f2:9b:22:1a:0b:2b:52:d4:86:1c:33:dc: a1:82:67:5f:19:3f:c0:35:c5:55:63:a2:5b:a1:a2: ca:9f:17:a2:04:a6:be:13:13:b5:f2:97:45:a9:e1: 85:23:4c:18:45:1d:f9:cf:3c:a5:f8:1b:b7:b8:a1: 9a:cb:5f:39:c1:09:95:54:a2:37:9c:6a:9b:b8:da: 00:2a:4c:43:e9:05:12:c6:18:40:e2:7e:06:95:54: 35:65:f7:26:5a:45:f4:a1:6b:39:84:27:f4:6e:f3: 86:6b:e3:49:71:92:33:8e:de:77:16:99:11:45:e9: f0:97:35:81:36:28:04:59:7d:01:9f:63:5e:0a:b1: 96:24:c8:46:29:e0:87:e9:21:f8:97:f8:d1:d4:ac: c0:e7:e1:6d:56:86:cb:59:4f:53:37:70:17:72:e4: 45:68:57:87:58:08:c1:5b:33:53:ff:a7:cf:15:ed: b1:50:6b:4e:65:2b:cc:27:3f:30:88:05:3d:a5:1f: eb:a0:4e:40:54:8c:45:f7:ed:29:dc:36:13:32:05: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2F:08:85:89:DB:4E:3D:0F:90:D0:28:39:C7:CA:2C:FA:BD:1A:09 X509v3 Authority Key Identifier: keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f6:15:8a:5f:b2:26:2a:9a:7a:21:ff:5a:d8:3d:13:06:73: d7:60:69:10:0e:69:40:f0:a9:ad:44:89:f9:29:7f:83:e1:e8: dd:68:e2:ce:18:28:c8:d7:50:4b:3b:ea:40:37:3b:63:63:32: 8b:24:27:ad:2a:90:9f:d2:5d:36:ae:43:0d:b1:35:7e:6e:18: fa:c2:8a:17:75:d9:95:6f:79:2c:fc:85:0d:6a:24:cd:ec:f1: e0:11:1d:2f:39:73:74:69:f8:61:6d:ac:53:e8:e5:ba:9c:d4: d3:3a:63:05:73:c7:b2:87:79:f9:f3:54:6c:68:19:40:3f:68: a0:4f:4e:a0:82:0f:c7:41:00:39:12:c6:41:55:ba:58:97:c2: dc:c8:ab:ec:71:d0:8e:41:80:94:0a:a8:a3:aa:87:d3:a1:88: f9:b3:9a:74:b1:a0:71:85:6a:78:e2:31:d9:89:16:0b:5e:2e: 35:e6:3d:52:16:1c:91:58:05:94:9b:cb:fd:55:4c:81:0f:fa: 70:c4:cd:84:94:fe:55:1b:4e:bc:4d:7a:6c:0a:f9:a6:3f:ed: bc:76:17:04:34:d8:0b:5d:28:5e:ab:78:52:22:06:f1:de:3b: ee:d3:a2:6e:ad:0d:a2:c1:9b:41:92:b4:e8:86:76:c1:ce:d2: 00:a6:76:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuzAHH9AWnLxq6Aiogm0djYPraEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0 OTJFNjE1NzAeFw0yNTEyMDIxMzA3MDRaFw0yNTEyMDUyMzAyMDRaMDMxMTAvBgNV BAMTKEY5MkYwODg1ODlEQjRFM0QwRjkwRDAyODM5QzdDQTJDRkFCRDFBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoG/6zSLkaCV8uN8AE/XAV5iMW O2gN+oiKVfbLS7a+TZGYzNhL9uvU2TSReTdBt/KbIhoLK1LUhhwz3KGCZ18ZP8A1 xVVjoluhosqfF6IEpr4TE7Xyl0Wp4YUjTBhFHfnPPKX4G7e4oZrLXznBCZVUojec apu42gAqTEPpBRLGGEDifgaVVDVl9yZaRfShazmEJ/Ru84Zr40lxkjOO3ncWmRFF 6fCXNYE2KARZfQGfY14KsZYkyEYp4IfpIfiX+NHUrMDn4W1WhstZT1M3cBdy5EVo V4dYCMFbM1P/p88V7bFQa05lK8wnPzCIBT2lH+ugTkBUjEX37SncNhMyBXI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+S8IhYnbTj0PkNAoOcfKLPq9GgkwHwYDVR0j BBgwFoAU6h/yGDTOJUa5P/er16JCMUkuYVcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjExOGYyYi05Zjk0LTQxOTktYTI0MS04ZmM1MWQxN2UwYzUvMC9FQTFGRjIxODM0 Q0UyNTQ2QjkzRkY3QUJEN0EyNDIzMTQ5MkU2MTU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0OTJF NjE1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYxMThmMmItOWY5NC00MTk5LWEy NDEtOGZjNTFkMTdlMGM1LzAvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQy MzE0OTJFNjE1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFL2FYpfsiYqmnoh/1rYPRMGc9dgaRAOaUDw qa1Eifkpf4Ph6N1o4s4YKMjXUEs76kA3O2NjMoskJ60qkJ/SXTauQw2xNX5uGPrC ihd12ZVveSz8hQ1qJM3s8eARHS85c3Rp+GFtrFPo5bqc1NM6YwVzx7KHefnzVGxo GUA/aKBPTqCCD8dBADkSxkFVuliXwtzIq+xx0I5BgJQKqKOqh9OhiPmzmnSxoHGF anjiMdmJFgteLjXmPVIWHJFYBZSby/1VTIEP+nDEzYSU/lUbTrxNemwK+aY/7bx2 FwQ02AtdKF6reFIiBvHeO+7Tom6tDaLBm0GStOiGdsHO0gCmdo0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:32 2025 by rpki-client