This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft File: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft (raw, json) Hash identifier: J/jVOng+eQTzsl701gZCyLceqgefaf+5Tu3WVytR3io= Subject key identifier: 44:49:2A:BF:22:78:E7:94:D3:DC:DC:C6:06:22:C2:F2:76:5E:3A:D2 Authority key identifier: E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 Certificate issuer: /CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Certificate serial: 528752453039D66B5CAB1DBA19C73938D24932E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft Manifest number: 0204 Signing time: Mon 01 Dec 2025 10:51:25 +0000 Manifest this update: Mon 01 Dec 2025 10:46:25 +0000 Manifest next update: Thu 04 Dec 2025 13:19:25 +0000 Files and hashes: 1: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: ajl2EFm0qBhjAXALIOJlI8I7dBianNhiyu03BfEHE4I=) 2: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl (hash: RiirXd7AwhcTzY0iEJ/tWnMxDVfpyqYVOxJaMM4jeMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 13:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:87:52:45:30:39:d6:6b:5c:ab:1d:ba:19:c7:39:38:d2:49:32:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Validity Not Before: Dec 1 10:46:25 2025 GMT Not After : Dec 4 13:19:25 2025 GMT Subject: CN=44492ABF2278E794D3DCDCC60622C2F2765E3AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:e6:41:e4:8c:40:96:56:50:ec:21:ad:6c: df:35:b7:68:3c:63:0e:b3:61:9d:f5:98:00:4c:3c: 2a:ec:28:8f:c4:cb:0e:50:92:12:ba:79:d7:43:c8: 07:3f:a6:fa:b9:77:69:a1:6e:a3:6f:11:88:56:e1: 78:2b:63:73:af:b0:ba:c8:09:71:38:32:40:e7:60: 0e:ae:98:d2:fb:c2:ef:54:34:e5:bb:b5:2d:40:d7: 61:45:da:3c:33:da:a4:eb:84:4e:00:a9:0c:56:d3: 27:91:f1:af:f8:73:ec:b4:05:1f:27:77:9a:fe:08: 59:40:07:a4:79:18:dc:2a:95:4f:3a:3e:70:20:bf: 01:12:6b:09:6d:a2:cd:d7:55:9f:3b:cf:af:9d:cb: b7:37:9b:86:b3:0f:73:a4:9d:df:a7:9f:87:9b:3e: 1e:2e:54:d6:fa:82:ea:1a:4e:c9:1a:37:f9:f9:63: 0f:49:cf:75:be:c2:42:94:d9:0c:a0:0e:32:e0:15: f9:b7:14:09:be:ab:ad:ef:e4:8c:1c:e1:ba:e0:ee: 4e:01:37:f0:31:ad:e2:0b:cf:7f:34:3c:b2:07:2e: 24:0e:8b:55:b3:25:d2:09:a1:28:d1:0d:31:9b:53: b3:0e:60:c2:53:05:cd:39:65:ff:06:4f:49:24:5f: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:49:2A:BF:22:78:E7:94:D3:DC:DC:C6:06:22:C2:F2:76:5E:3A:D2 X509v3 Authority Key Identifier: keyid:E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d5:f6:40:2f:98:06:e8:6b:9a:59:04:fd:0a:db:ca:05:db: a7:92:d1:7a:db:66:72:30:3f:8d:dd:c4:91:b3:c8:d0:f2:b2: d4:4a:a8:3a:0c:07:7d:30:ac:78:25:38:74:5c:b8:cb:3e:28: 12:f8:8b:a8:24:75:89:06:98:5d:ca:cc:38:91:2f:7e:9f:dc: e8:05:50:0d:d2:01:51:cc:89:02:0e:f0:30:37:69:73:0f:e8: 65:f7:96:aa:90:32:64:1e:32:3f:8d:ec:ee:ca:4b:fd:8d:30: e5:7f:f6:28:66:a2:91:98:e7:3b:c2:ad:43:34:38:bf:67:3f: 8a:b1:8a:78:24:86:43:c9:61:33:86:21:11:ac:44:77:09:67: c7:04:ed:8d:90:af:55:98:cd:4d:5c:fa:2a:db:06:cc:cf:34: e8:c4:ba:2d:58:96:33:38:3d:85:7e:23:f2:1f:63:15:fa:38: e0:fb:0b:94:de:b9:55:76:b1:f0:81:c6:78:01:c6:b8:83:5e: 00:7a:ac:0b:84:99:13:c8:14:b0:68:77:8e:52:c9:82:81:17: e8:51:20:42:ab:e2:67:54:d6:46:c5:05:a9:95:23:4b:16:86: f1:86:0d:f9:56:89:7d:c9:70:09:f0:4f:e2:74:3e:79:d5:e7: 72:58:d9:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUodSRTA51mtcqx26Gcc5ONJJMuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVC MjEzMjc3MTAeFw0yNTEyMDExMDQ2MjVaFw0yNTEyMDQxMzE5MjVaMDMxMTAvBgNV BAMTKDQ0NDkyQUJGMjI3OEU3OTREM0RDRENDNjA2MjJDMkYyNzY1RTNBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KOZB5IxAllZQ7CGtbN81t2g8 Yw6zYZ31mABMPCrsKI/Eyw5QkhK6eddDyAc/pvq5d2mhbqNvEYhW4XgrY3OvsLrI CXE4MkDnYA6umNL7wu9UNOW7tS1A12FF2jwz2qTrhE4AqQxW0yeR8a/4c+y0BR8n d5r+CFlAB6R5GNwqlU86PnAgvwESawltos3XVZ87z6+dy7c3m4azD3Oknd+nn4eb Ph4uVNb6guoaTskaN/n5Yw9Jz3W+wkKU2QygDjLgFfm3FAm+q63v5Iwc4brg7k4B N/AxreILz380PLIHLiQOi1WzJdIJoSjRDTGbU7MOYMJTBc05Zf8GT0kkXwT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUREkqvyJ455TT3NzGBiLC8nZeOtIwHwYDVR0j BBgwFoAU5MUXi9u973t91BuvWOs9JbITJ3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmRiZDc4NS02YmNhLTQ5M2ItOGE2NS0zYjUyNzcwMDdmZWQvMC9FNEM1MTc4QkRC QkRFRjdCN0RENDFCQUY1OEVCM0QyNUIyMTMyNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVCMjEz Mjc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNE MjVCMjEzMjc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbV9kAvmAboa5pZBP0K28oF26eS0XrbZnIw P43dxJGzyNDystRKqDoMB30wrHglOHRcuMs+KBL4i6gkdYkGmF3KzDiRL36f3OgF UA3SAVHMiQIO8DA3aXMP6GX3lqqQMmQeMj+N7O7KS/2NMOV/9ihmopGY5zvCrUM0 OL9nP4qxingkhkPJYTOGIRGsRHcJZ8cE7Y2Qr1WYzU1c+irbBszPNOjEui1YljM4 PYV+I/IfYxX6OOD7C5TeuVV2sfCBxngBxriDXgB6rAuEmRPIFLBod45SyYKBF+hR IEKr4mdU1kbFBamVI0sWhvGGDflWiX3JcAnwT+J0PnnV53JY2ZQ= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:07 2025 by rpki-client