This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: gOt3vJNnKwubmjYE0P/ZZgdV3cmvF0asO0zv5hPuhZg= Subject key identifier: BF:61:85:81:6E:EE:36:42:12:FD:80:90:01:9E:9E:3C:8D:15:C0:41 Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 5D048E9A3F5F9BB886005082FA760DACB9BF2FD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: 010E Signing time: Sun 14 Dec 2025 04:22:12 +0000 Manifest this update: Sun 14 Dec 2025 04:17:12 +0000 Manifest next update: Wed 17 Dec 2025 14:30:12 +0000 Files and hashes: 1: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) 2: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) 3: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) 4: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: /DXtqwOz1j7uVIgqMKUzmY1vWvEDZeFr25pfw2eq9Bo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 08:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:04:8e:9a:3f:5f:9b:b8:86:00:50:82:fa:76:0d:ac:b9:bf:2f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Dec 14 04:17:12 2025 GMT Not After : Dec 17 14:30:12 2025 GMT Subject: CN=BF6185816EEE364212FD8090019E9E3C8D15C041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:59:5f:5d:a0:c1:a9:74:5d:b6:70:3f:97: 71:5d:14:5f:cb:03:38:3c:0c:25:49:82:f1:5f:1f: c2:34:8a:ed:e8:9d:fe:25:75:4c:ab:06:1e:b5:85: 68:73:f8:ee:58:20:51:74:53:79:52:72:e6:5b:9c: d6:5b:68:09:42:e2:0a:ff:c3:2b:88:92:38:3b:62: 7d:9a:1b:9e:c5:93:4c:6b:9e:8f:c0:b2:77:5a:24: 80:ec:28:63:f5:24:08:ef:64:3c:a2:2b:8f:57:0f: 5c:8f:28:c1:dc:98:fe:1d:8b:97:15:16:f4:d7:ae: c1:94:63:11:91:6f:5f:1e:79:17:5d:42:d2:3a:91: a7:8c:31:63:9d:d4:30:46:bf:0c:22:95:28:b5:0d: 7e:b4:a6:22:60:fe:ec:33:66:e4:a8:77:62:19:75: 66:7b:70:df:a9:4b:04:46:bd:ec:ff:dc:e7:04:fe: b3:7d:c5:ac:56:39:a6:1f:28:f6:c5:22:a8:2b:2b: d0:30:0d:94:f4:e8:cc:60:8f:cf:05:95:83:bf:0a: 13:9e:a2:f1:40:d6:28:db:89:6d:0e:f7:ad:d2:a5: 33:98:96:49:7b:ee:eb:a9:5c:4f:5a:0c:5b:df:2e: 2e:65:2c:76:6f:45:15:c0:da:d4:1f:5d:7e:af:56: 92:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:61:85:81:6E:EE:36:42:12:FD:80:90:01:9E:9E:3C:8D:15:C0:41 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:da:bd:10:99:47:b8:1d:d1:8a:ce:24:1d:be:27:5c:87:10: 92:f6:ab:bb:58:4b:7e:64:a1:67:20:2c:2c:71:5c:62:f5:e3: 8e:80:76:6c:8d:24:73:d3:95:ae:ef:d6:af:0f:b0:61:cc:b6: 73:81:fe:65:81:2c:f5:d1:7e:f0:8d:3e:17:99:2d:a2:63:42: ab:81:d5:66:a2:1e:b7:31:9e:1b:d7:a1:dd:8b:27:2e:04:13: 98:6f:16:7a:4d:0c:37:eb:54:df:3a:71:d1:a9:f0:39:1b:6a: bc:1b:8c:6d:af:62:f5:8c:7d:e2:15:73:59:26:a8:e1:ba:b7: d8:9f:15:d1:0e:3c:56:d0:a1:5e:b3:2e:3b:ec:da:35:c9:de: 51:04:85:79:75:46:61:b7:d1:ff:e4:e2:c9:79:87:73:c8:9a: 79:0c:19:66:e3:35:dc:90:7f:ab:10:52:92:09:98:d6:1d:e0: 36:46:93:b3:ea:ea:b9:f9:c5:51:cc:80:2a:d7:90:9f:87:74: 78:5b:04:5c:8c:8d:8d:b1:75:e3:38:82:bd:54:11:3c:e3:92: 3a:4f:ae:4b:2e:ed:29:85:4e:af:23:73:13:95:b0:e2:d3:92: c0:73:6c:09:50:f5:72:00:b7:b6:63:47:32:1f:9c:29:ba:6e: 5b:7a:c8:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQSOmj9fm7iGAFCC+nYNrLm/L9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTEyMTQwNDE3MTJaFw0yNTEyMTcxNDMwMTJaMDMxMTAvBgNV BAMTKEJGNjE4NTgxNkVFRTM2NDIxMkZEODA5MDAxOUU5RTNDOEQxNUMwNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVFlfXaDBqXRdtnA/l3FdFF/L Azg8DCVJgvFfH8I0iu3onf4ldUyrBh61hWhz+O5YIFF0U3lScuZbnNZbaAlC4gr/ wyuIkjg7Yn2aG57Fk0xrno/AsndaJIDsKGP1JAjvZDyiK49XD1yPKMHcmP4di5cV FvTXrsGUYxGRb18eeRddQtI6kaeMMWOd1DBGvwwilSi1DX60piJg/uwzZuSod2IZ dWZ7cN+pSwRGvez/3OcE/rN9xaxWOaYfKPbFIqgrK9AwDZT06Mxgj88FlYO/ChOe ovFA1ijbiW0O963SpTOYlkl77uupXE9aDFvfLi5lLHZvRRXA2tQfXX6vVpLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv2GFgW7uNkIS/YCQAZ6ePI0VwEEwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3avRCZR7gd0YrOJB2+J1yHEJL2q7tYS35k oWcgLCxxXGL1446AdmyNJHPTla7v1q8PsGHMtnOB/mWBLPXRfvCNPheZLaJjQquB 1WaiHrcxnhvXod2LJy4EE5hvFnpNDDfrVN86cdGp8DkbarwbjG2vYvWMfeIVc1km qOG6t9ifFdEOPFbQoV6zLjvs2jXJ3lEEhXl1RmG30f/k4sl5h3PImnkMGWbjNdyQ f6sQUpIJmNYd4DZGk7Pq6rn5xVHMgCrXkJ+HdHhbBFyMjY2xdeM4gr1UETzjkjpP rksu7SmFTq8jcxOVsOLTksBzbAlQ9XIAt7ZjRzIfnCm6blt6yDU= -----END CERTIFICATE-----Generated at Sun Dec 14 09:32:54 2025 by rpki-client