This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: MvepqIgGW4bgS/4o3a4c16gCvUGrMIibL3EfKAnYVpA= Subject key identifier: 39:F2:D2:D9:5B:F7:78:86:00:AD:31:51:51:2F:DE:51:EC:87:F1:D3 Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 60F0B1D4F8FEE5D6CDADB95F77F2BFEDB50CF404 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: B4 Signing time: Wed 03 Dec 2025 02:12:04 +0000 Manifest this update: Wed 03 Dec 2025 02:07:04 +0000 Manifest next update: Sat 06 Dec 2025 04:54:04 +0000 Files and hashes: 1: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: /rrVT8+7vMAShEA29/a83w5natJXQZ8dbakSMPveJCo=) 2: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: qP5p1JtLajQU4tMkK8i4H4Q7vMTKK0pWmbujRAH0CW4=) 3: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: AOnRqDp4ZZG6MeL31QNIRGlUH7YS4vSZnuEr0CDSBEc=) 4: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: R0jNeZREOH7PdH08cIX9FXJ07BU9g/y14/QiKIW3zDQ=) 5: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: D1j1lCivRx4MpFMf1wJtpmY2c2+VbcHJ9Y4DtgTsc+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f0:b1:d4:f8:fe:e5:d6:cd:ad:b9:5f:77:f2:bf:ed:b5:0c:f4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Dec 3 02:07:04 2025 GMT Not After : Dec 6 04:54:04 2025 GMT Subject: CN=39F2D2D95BF7788600AD3151512FDE51EC87F1D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:6d:0d:10:17:7b:2b:09:c0:99:fa:b6:37: d1:e3:88:00:3a:41:6f:86:43:c2:8d:2d:ea:d0:27: 1c:1e:2b:76:d4:bb:77:d7:72:c3:cb:32:3d:92:5c: 1a:02:4f:16:a2:a8:53:5a:b8:f5:0d:dd:46:74:f3: b6:bb:37:2a:7b:01:c5:fb:cd:ac:e4:d0:7d:3a:56: 90:fd:7a:3d:4f:05:ea:b0:37:c3:da:1a:87:22:f8: 1e:5a:9d:9e:de:e2:b7:e6:11:69:df:7c:57:d6:76: a1:17:1a:3a:96:c3:41:74:50:07:c3:82:16:3e:32: 9e:57:88:2e:07:bd:e8:cb:7d:a0:52:36:97:46:48: 3f:ac:0b:c3:59:42:2c:20:57:dd:b4:79:3a:20:6f: 4f:c7:9c:f7:ea:31:3c:07:c1:0a:10:7a:5f:8f:af: 87:bb:36:7c:b3:21:86:91:b5:86:c7:17:c5:f7:69: 7a:20:c5:a6:51:c5:2a:0f:49:d5:ec:07:c2:94:6d: 84:c0:07:8f:17:bf:93:4a:16:ab:d2:fc:1a:0d:62: 85:e0:ee:0d:53:37:7f:cd:ae:16:a6:b1:93:b4:be: f8:1b:75:1e:ee:4c:f1:27:42:0d:97:ac:85:e3:e9: a3:ff:78:29:b4:bc:2c:f5:4e:4f:08:a5:17:17:38: 09:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F2:D2:D9:5B:F7:78:86:00:AD:31:51:51:2F:DE:51:EC:87:F1:D3 X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:9a:9c:8c:60:2a:6c:60:21:62:49:0d:00:70:dd:b1:35:4d: d0:b2:cd:ca:fe:91:a9:6d:a2:67:27:72:23:0c:fb:e1:00:a6: 70:d4:ff:90:d5:ab:26:71:c3:cb:97:24:55:7c:b2:89:a3:48: cd:00:44:d7:de:2c:e8:51:e5:59:39:9c:ef:12:b1:19:27:e4: 12:5e:eb:9d:03:3c:90:f4:85:3f:4b:37:fb:11:8b:c8:8e:3e: d8:e4:53:40:14:61:f1:39:5e:c9:15:75:56:63:c2:d7:d5:3e: 05:6a:b5:fa:06:1f:1f:00:f7:f8:85:74:ca:8d:e5:39:8f:73: d6:d4:64:2a:f8:77:e6:85:73:5d:0e:67:ff:ec:7d:ef:57:91: a0:15:3f:ff:94:28:18:3c:d5:83:8b:54:17:87:98:c3:b0:b9: 85:bc:5e:1f:ca:32:1d:46:a6:da:b6:c9:10:c4:cd:63:65:fe: a9:04:dc:5c:47:3f:25:df:a4:40:93:81:86:42:43:8b:8f:da: 6f:66:d9:38:eb:bb:24:d3:1a:bc:97:19:83:06:12:cf:d9:e1: b8:0c:94:18:6f:6c:2b:5c:64:06:96:15:58:8d:b6:1e:67:ae: f7:fa:42:fd:6b:00:08:e5:f9:19:9a:7b:12:2d:cb:cb:26:75: b5:e2:88:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPCx1Pj+5dbNrblfd/K/7bUM9AQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTEyMDMwMjA3MDRaFw0yNTEyMDYwNDU0MDRaMDMxMTAvBgNV BAMTKDM5RjJEMkQ5NUJGNzc4ODYwMEFEMzE1MTUxMkZERTUxRUM4N0YxRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQm0NEBd7KwnAmfq2N9HjiAA6 QW+GQ8KNLerQJxweK3bUu3fXcsPLMj2SXBoCTxaiqFNauPUN3UZ087a7Nyp7AcX7 zazk0H06VpD9ej1PBeqwN8PaGoci+B5anZ7e4rfmEWnffFfWdqEXGjqWw0F0UAfD ghY+Mp5XiC4HvejLfaBSNpdGSD+sC8NZQiwgV920eTogb0/HnPfqMTwHwQoQel+P r4e7NnyzIYaRtYbHF8X3aXogxaZRxSoPSdXsB8KUbYTAB48Xv5NKFqvS/BoNYoXg 7g1TN3/NrhamsZO0vvgbdR7uTPEnQg2XrIXj6aP/eCm0vCz1Tk8IpRcXOAnFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOfLS2Vv3eIYArTFRUS/eUeyH8dMwHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmanIxgKmxgIWJJDQBw3bE1TdCyzcr+kalt omcnciMM++EApnDU/5DVqyZxw8uXJFV8somjSM0ARNfeLOhR5Vk5nO8SsRkn5BJe 650DPJD0hT9LN/sRi8iOPtjkU0AUYfE5XskVdVZjwtfVPgVqtfoGHx8A9/iFdMqN 5TmPc9bUZCr4d+aFc10OZ//sfe9XkaAVP/+UKBg81YOLVBeHmMOwuYW8Xh/KMh1G ptq2yRDEzWNl/qkE3FxHPyXfpECTgYZCQ4uP2m9m2TjruyTTGryXGYMGEs/Z4bgM lBhvbCtcZAaWFViNth5nrvf6Qv1rAAjl+RmaexIty8smdbXiiPE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:32 2025 by rpki-client