This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: XfB/xRXhdNXnRdjaH0u4SliTJyA3DZE+7F8jXta0UxE= Subject key identifier: 5F:FB:DF:EA:00:6C:81:21:D5:63:38:B4:9E:A7:B8:09:87:9F:A9:CA Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 7133196667DAAAFBAA008D5A2DECD9A2003535AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 022D Signing time: Wed 24 Dec 2025 02:31:52 +0000 Manifest this update: Wed 24 Dec 2025 02:26:52 +0000 Manifest next update: Sat 27 Dec 2025 13:27:52 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) 2: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: MYEv0Gg3UUA8TgO8zzQbBZvIWaXlLpJr2wKG9owlqQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:33:19:66:67:da:aa:fb:aa:00:8d:5a:2d:ec:d9:a2:00:35:35:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Dec 24 02:26:52 2025 GMT Not After : Dec 27 13:27:52 2025 GMT Subject: CN=5FFBDFEA006C8121D56338B49EA7B809879FA9CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:05:a0:ed:d9:81:bc:15:28:61:a2:a3:40: 07:c4:ba:25:2e:ab:af:de:d2:c2:72:a1:96:25:86: b3:e0:7f:2b:21:25:e1:ad:24:bc:36:99:bb:d1:bc: e8:b3:34:a8:fe:c0:90:7a:06:cb:23:ee:79:59:41: 6b:d8:4b:fb:e4:95:03:5c:08:b2:31:76:ec:82:a1: 6d:80:ac:9b:8e:43:56:fb:ed:25:a8:3c:06:10:d5: ea:9c:ee:e4:07:9a:bb:d3:e8:ea:d7:08:f1:be:e6: 9b:6d:3f:3d:4b:42:9f:ed:90:9a:9e:77:48:f4:45: 12:68:13:52:d1:58:1f:bf:18:7d:0e:af:20:40:5c: 18:c4:46:44:73:e2:65:21:ce:bd:21:5e:d9:c8:74: 11:01:c5:ca:eb:8e:8c:4c:f7:3b:56:c5:88:5e:9e: 33:af:ff:bd:9e:d8:49:e1:5a:13:b7:e8:ad:76:29: c0:09:a9:a6:aa:7e:c8:8b:46:5a:e7:6d:d5:e0:80: f6:2e:d5:20:3a:5c:cf:05:f0:87:4c:25:83:34:42: 13:1e:91:22:eb:03:4d:b3:dd:91:b0:0a:ac:d9:c1: 6f:21:67:18:d4:26:c9:a2:34:45:06:3a:f6:3a:aa: 74:0f:53:57:8d:6a:e5:51:9a:3d:8d:3b:6c:6e:ba: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FB:DF:EA:00:6C:81:21:D5:63:38:B4:9E:A7:B8:09:87:9F:A9:CA X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:28:50:a0:ed:76:81:1c:ce:09:2a:06:44:df:7e:b2:f4:10: 00:b0:24:d2:f0:ec:ee:96:a4:17:0e:46:06:f7:28:ea:64:e2: 04:3f:f1:ea:d8:63:6a:0a:d9:66:6b:24:62:2b:fe:94:76:c2: 2b:a0:ae:fd:6b:43:86:c3:05:a0:94:70:3f:47:d6:de:b8:7d: ed:c4:d6:7c:63:31:c1:d2:c0:20:d5:b0:56:04:df:ff:10:c9: a3:e2:7f:ab:48:9f:fd:66:b5:fa:61:6e:1e:2c:a4:21:a5:99: 1a:04:16:e0:78:0e:2d:0e:76:71:f0:f2:04:82:4b:be:97:5f: 2a:84:46:6c:32:d9:fa:60:16:be:bc:b7:7e:52:0a:93:e8:e0: c0:42:f3:b9:d9:86:5d:60:aa:92:3c:79:6e:34:9d:88:23:a1: 42:1c:9b:33:70:9b:b2:35:4d:99:7b:49:d1:f1:75:06:1e:07: d1:d0:08:ba:36:bb:7f:bd:36:d3:aa:fa:90:3a:df:3c:96:00: 9a:5b:0c:46:df:cf:21:97:c4:6e:48:55:62:3e:a9:00:48:d7: 06:b1:9f:5d:84:4d:49:ca:27:6b:82:d4:8d:12:0c:99:21:59: ad:9a:40:78:4e:6d:a9:6d:1a:7e:a0:2e:fa:ad:b7:ca:f5:40: da:52:d0:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTMZZmfaqvuqAI1aLezZogA1NaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTEyMjQwMjI2NTJaFw0yNTEyMjcxMzI3NTJaMDMxMTAvBgNV BAMTKDVGRkJERkVBMDA2QzgxMjFENTYzMzhCNDlFQTdCODA5ODc5RkE5Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65wWg7dmBvBUoYaKjQAfEuiUu q6/e0sJyoZYlhrPgfyshJeGtJLw2mbvRvOizNKj+wJB6Bssj7nlZQWvYS/vklQNc CLIxduyCoW2ArJuOQ1b77SWoPAYQ1eqc7uQHmrvT6OrXCPG+5pttPz1LQp/tkJqe d0j0RRJoE1LRWB+/GH0OryBAXBjERkRz4mUhzr0hXtnIdBEBxcrrjoxM9ztWxYhe njOv/72e2EnhWhO36K12KcAJqaaqfsiLRlrnbdXggPYu1SA6XM8F8IdMJYM0QhMe kSLrA02z3ZGwCqzZwW8hZxjUJsmiNEUGOvY6qnQPU1eNauVRmj2NO2xuuqz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX/vf6gBsgSHVYzi0nqe4CYefqcowHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYoUKDtdoEczgkqBkTffrL0EACwJNLw7O6W pBcORgb3KOpk4gQ/8erYY2oK2WZrJGIr/pR2wiugrv1rQ4bDBaCUcD9H1t64fe3E 1nxjMcHSwCDVsFYE3/8QyaPif6tIn/1mtfphbh4spCGlmRoEFuB4Di0OdnHw8gSC S76XXyqERmwy2fpgFr68t35SCpPo4MBC87nZhl1gqpI8eW40nYgjoUIcmzNwm7I1 TZl7SdHxdQYeB9HQCLo2u3+9NtOq+pA63zyWAJpbDEbfzyGXxG5IVWI+qQBI1wax n12ETUnKJ2uC1I0SDJkhWa2aQHhObaltGn6gLvqtt8r1QNpS0FA= -----END CERTIFICATE-----Generated at Fri Dec 26 06:37:10 2025 by rpki-client