This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft File: EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft (raw, json) Hash identifier: 1aiWf0zLFAfsbIjeMgQgUqI79cYyMP0X0zIOT5BC7lw= Subject key identifier: CA:A2:51:7E:25:8B:BA:CF:98:17:38:CF:34:AA:4C:3A:CC:F9:32:D2 Authority key identifier: EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F Certificate issuer: /CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F Certificate serial: 490BB6BDA711D737F5171E3DE47FD525A42E8A5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft Manifest number: 052B Signing time: Tue 02 Dec 2025 07:20:48 +0000 Manifest this update: Tue 02 Dec 2025 07:15:48 +0000 Manifest next update: Fri 05 Dec 2025 15:07:48 +0000 Files and hashes: 1: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: mguZPFd0yEF7BbBBd2+SDugjtQLZV2wjK9kQOQsORjM=) 2: EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl (hash: j5q5/Rc56hR4aCLl943Rav5NVL0jmybkIaTs85xHGPo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0b:b6:bd:a7:11:d7:37:f5:17:1e:3d:e4:7f:d5:25:a4:2e:8a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F Validity Not Before: Dec 2 07:15:48 2025 GMT Not After : Dec 5 15:07:48 2025 GMT Subject: CN=CAA2517E258BBACF981738CF34AA4C3ACCF932D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:53:15:3c:26:51:e8:89:f5:83:45:c4:a8: a8:60:0d:aa:53:c6:c3:02:59:7d:ad:15:ff:75:ba: d4:bb:2d:f4:7a:62:4d:88:fb:a8:51:3d:fc:f7:62: aa:ae:eb:8c:c9:64:e6:67:09:4c:ac:ec:eb:c5:0a: b1:a1:91:dc:86:fd:7e:cb:20:97:24:d2:9a:6e:5b: 86:53:fd:2c:60:0d:d3:db:ad:ce:f5:d0:c1:07:76: 55:47:2e:fd:cb:42:4e:29:17:be:8b:49:b0:3a:b2: 04:ec:61:0d:1b:41:09:b9:db:e2:f6:d1:ee:23:b8: b5:a2:a4:b7:0c:2b:e6:ac:a0:83:87:e2:d2:aa:8a: 70:17:a8:61:15:e9:5c:1c:c1:67:b2:76:47:83:91: 26:88:3e:22:5a:d8:08:14:8a:e3:48:b6:d0:1d:d7: 2b:48:e1:56:6f:3a:4f:81:ec:06:a3:b9:e8:61:55: 6b:02:f0:c7:c7:e8:e4:f7:56:1a:93:0e:62:3a:80: 36:59:63:19:5b:b7:6e:f9:71:2c:88:f9:3b:90:b6: d9:41:5a:f5:6c:4c:64:0c:f6:a6:93:90:ab:fb:91: c2:de:61:d5:65:4d:50:83:87:dd:a1:9c:fb:27:a9: ac:f8:fa:bf:5c:e4:b3:4a:26:c0:84:96:e1:d8:9a: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A2:51:7E:25:8B:BA:CF:98:17:38:CF:34:AA:4C:3A:CC:F9:32:D2 X509v3 Authority Key Identifier: keyid:EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8c:ca:b9:fa:fd:91:22:b2:60:27:30:71:76:06:0a:c0:11: cb:ed:8a:c0:40:9b:e5:ee:6f:81:c1:76:72:e3:22:0b:5f:a1: 4a:3f:ef:9f:d6:d9:8f:55:93:04:cc:21:2a:33:85:18:d1:98: 16:56:eb:2e:a0:53:c5:6b:75:39:b8:fe:bb:d9:cd:92:dc:a0: b8:0e:08:86:7c:95:6a:3d:d5:c3:6e:94:73:ee:14:2c:66:d3: 11:35:33:c6:73:a8:69:2f:e9:10:9e:77:18:85:f2:ef:c8:59: b2:0c:a1:7a:06:04:95:19:99:e6:06:c6:86:2c:a3:78:98:ae: bb:6d:5d:b6:1f:69:c5:94:15:93:6b:5e:56:15:74:1b:04:02: 54:84:58:51:6b:6f:f2:36:2a:e2:d1:e3:b2:b8:3e:7b:d5:bd: 17:b7:4b:d9:69:b8:3e:bb:a6:cc:6c:27:5f:b9:ff:ea:52:22: 6e:68:95:b1:6b:cc:f8:99:2d:ad:98:82:27:1e:24:1b:b4:ba: 1e:cc:23:07:a6:ad:33:41:9d:f6:c4:54:75:7a:61:e0:85:5f: b5:09:2e:ef:f3:21:6b:0b:cf:af:a1:73:7d:00:b0:7a:8c:cd: 3b:ff:48:cb:97:8a:11:6a:e4:53:f5:6b:c8:c2:e9:a3:47:1a: c9:ff:c7:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQu2vacR1zf1Fx495H/VJaQuilwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVEOEE5NDc1RTQwMjBEQTBGMkJFRjU4OUQxNTEwMkVC MDZCNjU4RjAeFw0yNTEyMDIwNzE1NDhaFw0yNTEyMDUxNTA3NDhaMDMxMTAvBgNV BAMTKENBQTI1MTdFMjU4QkJBQ0Y5ODE3MzhDRjM0QUE0QzNBQ0NGOTMyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25FMVPCZR6In1g0XEqKhgDapT xsMCWX2tFf91utS7LfR6Yk2I+6hRPfz3Yqqu64zJZOZnCUys7OvFCrGhkdyG/X7L IJck0ppuW4ZT/SxgDdPbrc710MEHdlVHLv3LQk4pF76LSbA6sgTsYQ0bQQm52+L2 0e4juLWipLcMK+asoIOH4tKqinAXqGEV6VwcwWeydkeDkSaIPiJa2AgUiuNIttAd 1ytI4VZvOk+B7AajuehhVWsC8MfH6OT3VhqTDmI6gDZZYxlbt275cSyI+TuQttlB WvVsTGQM9qaTkKv7kcLeYdVlTVCDh92hnPsnqaz4+r9c5LNKJsCEluHYmkVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyqJRfiWLus+YFzjPNKpMOsz5MtIwHwYDVR0j BBgwFoAU7tipR15AINoPK+9YnRUQLrBrZY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjAzMWZkMC01ODQwLTRhYzEtYmZiMS0zNWY3MWZkMjQwNGMvMC9FRUQ4QTk0NzVF NDAyMERBMEYyQkVGNTg5RDE1MTAyRUIwNkI2NThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUVEOEE5NDc1RTQwMjBEQTBGMkJFRjU4OUQxNTEwMkVCMDZC NjU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYwMzFmZDAtNTg0MC00YWMxLWJm YjEtMzVmNzFmZDI0MDRjLzAvRUVEOEE5NDc1RTQwMjBEQTBGMkJFRjU4OUQxNTEw MkVCMDZCNjU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6Myrn6/ZEismAnMHF2BgrAEcvtisBAm+Xu b4HBdnLjIgtfoUo/75/W2Y9VkwTMISozhRjRmBZW6y6gU8VrdTm4/rvZzZLcoLgO CIZ8lWo91cNulHPuFCxm0xE1M8ZzqGkv6RCedxiF8u/IWbIMoXoGBJUZmeYGxoYs o3iYrrttXbYfacWUFZNrXlYVdBsEAlSEWFFrb/I2KuLR47K4PnvVvRe3S9lpuD67 psxsJ1+5/+pSIm5olbFrzPiZLa2YgiceJBu0uh7MIwemrTNBnfbEVHV6YeCFX7UJ Lu/zIWsLz6+hc30AsHqMzTv/SMuXihFq5FP1a8jC6aNHGsn/xzg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:56 2025 by rpki-client