This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json) Hash identifier: q5kq6lEkFWGxMIhn9OjQH2yqB2/tYg8VaMyoqRTEyvk= Subject key identifier: 2D:CD:4D:15:A0:A0:90:E4:4C:4A:63:64:D9:72:A5:AD:7F:CD:A5:CF Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Certificate serial: 05C4AA6F4402CC506949DB87A7E122A9AB058629 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft Manifest number: 0251 Signing time: Mon 01 Dec 2025 21:22:28 +0000 Manifest this update: Mon 01 Dec 2025 21:17:28 +0000 Manifest next update: Fri 05 Dec 2025 06:19:28 +0000 Files and hashes: 1: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: iEYGnP79TgkRQQKGMVdWn4+ijE/gRR2CYRrjKED47jI=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: LFOqzDAyDWWdrBcQS4m60ydnXXk+fQv19GMLbDiq/ow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c4:aa:6f:44:02:cc:50:69:49:db:87:a7:e1:22:a9:ab:05:86:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Validity Not Before: Dec 1 21:17:28 2025 GMT Not After : Dec 5 06:19:28 2025 GMT Subject: CN=2DCD4D15A0A090E44C4A6364D972A5AD7FCDA5CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:7a:8a:1f:33:f8:c7:cb:98:27:11:bf:fc: ae:bb:10:f8:e3:9f:90:69:47:0d:df:13:77:49:02: 47:6d:14:24:43:33:1a:f8:a1:bd:3c:2b:82:00:5b: b5:89:d4:30:dc:3b:a8:da:6c:39:a6:10:3e:3e:fd: f8:71:9e:c8:23:6a:c2:df:d8:6e:0a:a6:c6:51:6e: be:fd:b6:97:7f:1a:7a:4d:09:73:ae:db:e7:b5:22: ea:6f:9f:06:f2:61:c4:e5:99:f1:02:d4:a6:74:22: f9:30:b1:af:cf:f6:2d:5c:12:97:31:4b:7d:dc:6c: 35:6f:85:b0:b0:f4:50:0c:d8:0d:ae:0b:f7:fb:4f: ec:cb:2e:46:72:23:86:1f:29:e8:38:fd:43:9e:1c: 8b:85:b6:e4:d6:b9:4e:fa:e3:6d:61:30:bf:56:d6: fa:fb:40:52:2e:7d:05:21:11:3b:15:ad:48:96:05: 66:fe:d6:b0:72:9c:fc:2f:7b:94:2d:8a:19:be:cd: a5:25:b7:98:ef:b7:3d:a1:2e:95:89:b4:d0:83:44: ff:3e:0f:f4:c3:9e:2a:ed:f5:d5:9b:39:c5:ff:ec: 84:ce:7b:c0:05:b3:86:ca:f2:80:0a:76:d7:6d:6e: ae:00:96:5c:af:6a:57:ce:9b:c6:33:e2:51:df:3f: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:4D:15:A0:A0:90:E4:4C:4A:63:64:D9:72:A5:AD:7F:CD:A5:CF X509v3 Authority Key Identifier: keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b1:45:b5:6b:6e:89:6c:b6:41:86:81:d3:09:c5:6f:ed:a1: 56:5c:40:85:d5:30:51:6e:54:3c:9d:0c:ab:48:ec:a9:fd:ac: ae:ee:1e:40:fe:da:57:6c:1c:28:0a:30:05:c5:4a:59:9f:9f: b7:5e:f4:00:ef:ae:15:38:8e:e9:b4:71:bb:85:85:c4:8c:cc: 66:f3:c4:ba:da:d8:ae:45:4a:08:3d:04:b5:b1:55:bd:15:de: 00:bc:fc:21:08:e4:4c:df:d2:96:1f:28:3e:23:f6:d0:70:ee: e2:35:0a:18:e6:f0:29:63:da:bc:88:26:d9:9c:f3:9c:7c:b6: 1e:10:80:e3:71:d9:de:e6:17:17:98:85:2c:1c:ac:eb:ae:3f: 26:8f:30:42:1f:ae:ef:2d:15:cd:c1:9c:c9:cf:2e:e1:32:d3: d8:a1:f7:52:5e:51:bb:05:61:f5:01:8d:ad:b7:17:02:8d:a8: 7a:2f:7d:28:89:bd:15:d7:8e:52:c9:ee:93:65:f6:3f:54:98: f5:97:e5:04:de:81:de:31:19:0e:cc:dc:a3:e0:52:40:2b:06: 0d:c2:b4:75:ea:26:f4:e8:24:fb:25:c5:16:6f:82:df:36:37: 55:f8:5a:af:76:80:22:a0:29:30:b0:c6:4c:2a:1d:0a:27:cf: df:89:2f:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcSqb0QCzFBpSduHp+EiqasFhikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1 OTI1MzVFNjAeFw0yNTEyMDEyMTE3MjhaFw0yNTEyMDUwNjE5MjhaMDMxMTAvBgNV BAMTKDJEQ0Q0RDE1QTBBMDkwRTQ0QzRBNjM2NEQ5NzJBNUFEN0ZDREE1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9anqKHzP4x8uYJxG//K67EPjj n5BpRw3fE3dJAkdtFCRDMxr4ob08K4IAW7WJ1DDcO6jabDmmED4+/fhxnsgjasLf 2G4KpsZRbr79tpd/GnpNCXOu2+e1IupvnwbyYcTlmfEC1KZ0Ivkwsa/P9i1cEpcx S33cbDVvhbCw9FAM2A2uC/f7T+zLLkZyI4YfKeg4/UOeHIuFtuTWuU76421hML9W 1vr7QFIufQUhETsVrUiWBWb+1rBynPwve5Qtihm+zaUlt5jvtz2hLpWJtNCDRP8+ D/TDnirt9dWbOcX/7ITOe8AFs4bK8oAKdtdtbq4AllyvalfOm8Yz4lHfPzxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULc1NFaCgkORMSmNk2XKlrX/Npc8wHwYDVR0j BBgwFoAU6fx68/+6AJhj0QTt4bRdoFklNeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjRjNzBhMS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9FOUZDN0FGM0ZG QkEwMDk4NjNEMTA0RURFMUI0NURBMDU5MjUzNUU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1OTI1 MzVFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVE QTA1OTI1MzVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGxRbVrbolstkGGgdMJxW/toVZcQIXVMFFu VDydDKtI7Kn9rK7uHkD+2ldsHCgKMAXFSlmfn7de9ADvrhU4jum0cbuFhcSMzGbz xLra2K5FSgg9BLWxVb0V3gC8/CEI5Ezf0pYfKD4j9tBw7uI1Chjm8Clj2ryIJtmc 85x8th4QgONx2d7mFxeYhSwcrOuuPyaPMEIfru8tFc3BnMnPLuEy09ih91JeUbsF YfUBja23FwKNqHovfSiJvRXXjlLJ7pNl9j9UmPWX5QTegd4xGQ7M3KPgUkArBg3C tHXqJvToJPslxRZvgt82N1X4Wq92gCKgKTCwxkwqHQonz9+JL6Q= -----END CERTIFICATE-----Generated at Wed Dec 3 16:11:31 2025 by rpki-client