This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft (raw, json) Hash identifier: vJFJwqkzP3c1RrJLhoO9f1/b/LTs5QbPwh3pa17Luc4= Subject key identifier: 16:1A:8A:A4:90:B6:A0:FD:3E:C5:97:57:47:C4:B2:E9:B7:5D:0E:D1 Authority key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C Certificate issuer: /CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Certificate serial: 1F3453F7F98DD6BE596925E61618B4BD0AA488F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft Manifest number: DE Signing time: Mon 01 Dec 2025 23:11:23 +0000 Manifest this update: Mon 01 Dec 2025 23:06:23 +0000 Manifest next update: Fri 05 Dec 2025 08:47:23 +0000 Files and hashes: 1: E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl (hash: LblSsikm5kxC45hwsE4aP9BGJpmY26sGbFvi24Y8k/c=) 2: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (hash: qYeddWCUDVszc7mZTW90CbBoRIOyBoY1LaUrZanAxXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:34:53:f7:f9:8d:d6:be:59:69:25:e6:16:18:b4:bd:0a:a4:88:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Validity Not Before: Dec 1 23:06:23 2025 GMT Not After : Dec 5 08:47:23 2025 GMT Subject: CN=161A8AA490B6A0FD3EC5975747C4B2E9B75D0ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:d5:09:9d:3c:5b:5b:54:50:7a:9f:d3:86: 21:df:a6:bb:12:d2:6c:e1:57:04:d7:f7:a3:3d:b2: b0:68:42:ff:05:05:ed:6c:3e:28:05:b3:6a:82:2b: d7:27:92:99:35:dc:23:a3:e7:11:95:0f:20:52:4b: 82:97:07:2f:58:69:85:a8:aa:f1:53:a5:03:ce:a5: 28:66:96:36:1b:11:c5:9b:d9:e2:cf:1b:37:f1:65: 88:bc:6e:2a:b6:25:f0:02:b9:11:6e:10:6e:4d:c9: 00:07:cf:b8:2c:54:e5:0a:89:2b:1f:a8:ba:9a:b0: 2b:aa:bd:d8:2d:e6:c6:89:ba:b9:26:8f:7f:8b:7a: 1e:77:de:4e:22:55:ae:d8:45:17:28:5b:bc:d1:83: fb:80:23:62:25:90:2c:6f:53:5d:5b:25:8f:64:99: 32:71:c0:ec:cd:11:c0:e6:15:f7:45:52:e2:bd:e9: c3:3c:88:b8:15:7d:e4:0c:0c:32:0d:ff:40:93:12: 78:1b:68:42:a9:30:ee:e7:84:85:ac:f0:14:f0:6c: de:fb:44:39:e3:22:4b:9f:d5:8e:8a:65:8a:77:22: e6:69:e1:0c:72:61:d3:56:97:5d:b7:e0:b1:6c:6e: 05:71:f5:97:dd:e9:2e:ec:40:4b:0f:0c:0b:43:2b: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1A:8A:A4:90:B6:A0:FD:3E:C5:97:57:47:C4:B2:E9:B7:5D:0E:D1 X509v3 Authority Key Identifier: keyid:E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3a:2b:42:e1:7d:eb:43:08:39:49:ea:fd:75:51:7f:0d:2f: d6:9c:fb:cb:69:29:36:e0:2c:32:6f:50:c6:e8:c5:b8:e8:1f: ee:9c:68:1d:98:50:a4:06:b4:27:53:ac:61:52:85:c8:11:ce: 09:10:0d:5e:85:02:87:c7:79:6d:b7:6d:7b:29:a8:1a:2f:cd: c9:89:08:60:4d:b9:65:fb:0d:c5:4e:2f:08:51:4c:23:09:5d: bb:2e:79:f8:c8:b8:a2:48:26:e2:71:dd:2f:b2:75:28:2e:70: 9f:e4:e1:91:8b:68:dc:9b:f1:5d:1d:fa:34:d6:08:30:8d:d8: 7e:c4:1e:43:39:93:6e:96:fe:30:d7:68:5f:41:1b:3a:86:15: fe:b1:7a:13:3f:b0:bb:70:8e:ca:bc:8b:85:e0:c3:29:55:0a: 58:91:85:24:2a:d1:8f:f6:35:02:32:87:af:88:94:5b:ca:c3: a4:7c:b7:7a:ee:3c:85:df:ac:18:7d:6e:12:40:57:cc:ee:6b: 0a:7c:ee:13:22:34:97:b2:5d:92:b1:13:8b:75:eb:3e:c0:95: b1:4f:7c:c2:3c:4d:af:88:20:7a:ca:16:21:80:6a:56:56:c7: 30:8c:fc:2b:0f:5e:c9:68:83:c2:13:ea:f2:28:f5:0a:80:09: be:d4:d1:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzRT9/mN1r5ZaSXmFhi0vQqkiPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUw MTkyRjU0QzAeFw0yNTEyMDEyMzA2MjNaFw0yNTEyMDUwODQ3MjNaMDMxMTAvBgNV BAMTKDE2MUE4QUE0OTBCNkEwRkQzRUM1OTc1NzQ3QzRCMkU5Qjc1RDBFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQv9UJnTxbW1RQep/ThiHfprsS 0mzhVwTX96M9srBoQv8FBe1sPigFs2qCK9cnkpk13COj5xGVDyBSS4KXBy9YaYWo qvFTpQPOpShmljYbEcWb2eLPGzfxZYi8biq2JfACuRFuEG5NyQAHz7gsVOUKiSsf qLqasCuqvdgt5saJurkmj3+Leh533k4iVa7YRRcoW7zRg/uAI2IlkCxvU11bJY9k mTJxwOzNEcDmFfdFUuK96cM8iLgVfeQMDDIN/0CTEngbaEKpMO7nhIWs8BTwbN77 RDnjIkuf1Y6KZYp3IuZp4QxyYdNWl1234LFsbgVx9Zfd6S7sQEsPDAtDK7hXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFhqKpJC2oP0+xZdXR8Sy6bddDtEwHwYDVR0j BBgwFoAU6caQxR6b8bWXgzL9W6lKhQGS9UwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDUzODhmNC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMC9FOUM2OTBDNTFF OUJGMUI1OTc4MzMyRkQ1QkE5NEE4NTAxOTJGNTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUwMTky RjU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA1Mzg4ZjQtMTA3Yi00NGE5LTlk OGYtMTYwM2ZlY2ZkZWU5LzAvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRB ODUwMTkyRjU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC06K0LhfetDCDlJ6v11UX8NL9ac+8tpKTbg LDJvUMboxbjoH+6caB2YUKQGtCdTrGFShcgRzgkQDV6FAofHeW23bXspqBovzcmJ CGBNuWX7DcVOLwhRTCMJXbsuefjIuKJIJuJx3S+ydSgucJ/k4ZGLaNyb8V0d+jTW CDCN2H7EHkM5k26W/jDXaF9BGzqGFf6xehM/sLtwjsq8i4XgwylVCliRhSQq0Y/2 NQIyh6+IlFvKw6R8t3ruPIXfrBh9bhJAV8zuawp87hMiNJeyXZKxE4t16z7AlbFP fMI8Ta+IIHrKFiGAalZWxzCM/CsPXslog8IT6vIo9QqACb7U0S0= -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:15 2025 by rpki-client