This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: 8yekr5CvQ26GHs8y3Ioudnbk4DlLYlbest2/H/eUsLY= Subject key identifier: 58:E4:23:27:66:8A:38:01:9D:F2:AA:CE:66:71:7F:4B:26:0D:43:B0 Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 5D6A898F0528F0A265EFEA1301B4CA0DE23E20B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: 0109 Signing time: Tue 02 Dec 2025 17:22:12 +0000 Manifest this update: Tue 02 Dec 2025 17:17:12 +0000 Manifest next update: Sat 06 Dec 2025 04:00:12 +0000 Files and hashes: 1: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) 2: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: jd7Ib0AG0mCZqzrza4/Fg1gYSEG5K8BBE/AgZcAjktw=) 3: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) 4: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6a:89:8f:05:28:f0:a2:65:ef:ea:13:01:b4:ca:0d:e2:3e:20:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Dec 2 17:17:12 2025 GMT Not After : Dec 6 04:00:12 2025 GMT Subject: CN=58E42327668A38019DF2AACE66717F4B260D43B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:08:9d:80:7d:c3:ec:58:df:83:ed:b2:fe: 5d:59:69:34:77:d9:df:98:5c:1a:e7:06:44:e7:a3: db:64:67:94:ee:a6:ff:48:44:df:62:9f:32:67:94: 35:04:52:3b:da:91:b0:64:60:6d:f5:24:4e:e4:2e: c6:64:3c:68:0c:bb:17:02:76:73:e5:f5:bd:32:70: 82:c2:95:e0:0e:05:9f:31:26:8b:f3:8c:e1:f2:a7: 2e:b4:af:b2:f3:e1:74:5f:da:91:27:2d:29:88:46: 46:b8:a0:29:8b:99:aa:e1:49:a0:4c:3e:47:37:64: 2f:bf:84:a4:24:30:f1:45:67:30:a3:dd:8d:6d:5a: 39:b8:56:c4:17:0f:d9:4b:cf:e4:ce:f4:bb:5b:ce: fa:94:59:6d:cc:71:9d:02:da:49:1e:7b:0f:a8:0d: 7e:93:d7:b8:13:0c:72:8c:ba:39:0a:a4:e0:cf:9d: 1c:99:d1:3f:02:99:25:31:96:07:68:a1:c5:58:5e: 43:8a:1d:5b:92:61:7f:63:85:ec:a0:29:2a:ed:4e: 64:fc:9f:1d:18:8c:79:66:c0:c4:9f:bf:bd:81:4e: 69:c4:ef:d9:07:7f:42:cf:a6:16:51:10:37:c6:7c: 3d:15:fa:b2:34:88:8b:73:53:5c:87:0e:90:a7:6a: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E4:23:27:66:8A:38:01:9D:F2:AA:CE:66:71:7F:4B:26:0D:43:B0 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d1:2b:8a:77:eb:c3:52:b1:76:d7:b3:0c:35:4b:e2:80:1a: ff:69:f0:0d:d3:05:c5:77:97:ba:71:7c:f1:81:7b:69:fd:4f: be:b6:28:4c:ce:e6:ed:99:59:fb:4f:10:4d:4d:c0:b8:99:42: 0f:0b:bd:ad:db:14:fa:a4:65:2e:e2:86:a0:6c:bc:d2:83:5b: 97:fa:ce:ee:7a:5e:e3:24:9e:17:b2:ef:1f:46:6e:3c:04:29: 83:b8:44:bd:c4:4f:16:ab:72:15:8f:95:ea:24:b9:10:f7:85: 3d:0f:44:b9:9a:c1:07:9c:fc:7c:1a:85:97:81:95:9f:6d:1e: 1d:73:48:0f:13:60:a7:31:f2:8f:6e:b8:2a:89:1a:5f:ed:52: 7f:b9:21:5c:9b:ca:3e:89:6c:d8:9c:1b:9e:a5:3c:51:15:9e: d9:9f:50:8d:aa:f0:b8:82:09:36:56:ec:74:56:b7:9a:85:99: 60:54:f5:21:68:50:5a:b6:55:36:5f:2d:9e:04:56:59:33:6f: 1a:49:0e:a0:b8:ec:27:c4:86:3f:4a:cf:3e:62:e4:01:b3:58: 47:53:47:19:9b:e1:b4:29:fd:24:34:a8:ba:6e:f8:4f:a5:8a: 2e:d0:cf:fa:85:1a:23:da:af:ed:04:3b:c1:1c:27:05:b7:b2: bd:13:d4:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWqJjwUo8KJl7+oTAbTKDeI+ILYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTEyMDIxNzE3MTJaFw0yNTEyMDYwNDAwMTJaMDMxMTAvBgNV BAMTKDU4RTQyMzI3NjY4QTM4MDE5REYyQUFDRTY2NzE3RjRCMjYwRDQzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcwidgH3D7Fjfg+2y/l1ZaTR3 2d+YXBrnBkTno9tkZ5Tupv9IRN9inzJnlDUEUjvakbBkYG31JE7kLsZkPGgMuxcC dnPl9b0ycILCleAOBZ8xJovzjOHypy60r7Lz4XRf2pEnLSmIRka4oCmLmarhSaBM Pkc3ZC+/hKQkMPFFZzCj3Y1tWjm4VsQXD9lLz+TO9LtbzvqUWW3McZ0C2kkeew+o DX6T17gTDHKMujkKpODPnRyZ0T8CmSUxlgdoocVYXkOKHVuSYX9jheygKSrtTmT8 nx0YjHlmwMSfv72BTmnE79kHf0LPphZREDfGfD0V+rI0iItzU1yHDpCnavKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWOQjJ2aKOAGd8qrOZnF/SyYNQ7AwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArRK4p368NSsXbXsww1S+KAGv9p8A3TBcV3 l7pxfPGBe2n9T762KEzO5u2ZWftPEE1NwLiZQg8Lva3bFPqkZS7ihqBsvNKDW5f6 zu56XuMknhey7x9GbjwEKYO4RL3ETxarchWPleokuRD3hT0PRLmawQec/HwahZeB lZ9tHh1zSA8TYKcx8o9uuCqJGl/tUn+5IVybyj6JbNicG56lPFEVntmfUI2q8LiC CTZW7HRWt5qFmWBU9SFoUFq2VTZfLZ4EVlkzbxpJDqC47CfEhj9Kzz5i5AGzWEdT Rxmb4bQp/SQ0qLpu+E+lii7Qz/qFGiPar+0EO8EcJwW3sr0T1PQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:47 2025 by rpki-client