This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: 0CY0KfUNNDmcrJundgBmuRt31PFvn8U6fPMGnKUqpcs= Subject key identifier: 22:F1:43:21:9D:91:56:A2:5D:2A:01:B2:A6:DF:18:2F:59:3D:78:93 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 168F29E1D74CCFC0EE61F5D8F2FDF8E307D9B02F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 0142 Signing time: Tue 02 Dec 2025 00:22:04 +0000 Manifest this update: Tue 02 Dec 2025 00:17:04 +0000 Manifest next update: Fri 05 Dec 2025 09:21:04 +0000 Files and hashes: 1: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: VplOBLaXlcKJuXzC/kYMwYe44pXvcuZNrI/g2VUmZTU=) 2: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: 17S1NzRw5+8IP/n/zFRvAJ9ydBwiGj1bRmgVr44VYpQ=) 3: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: cziExQNbsC9slbA6+8SWM0R0EDsOLwLtgTBqDttdfO0=) 4: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: ZLSq3heG8ckrKJtWqORohOTRxDz1B3DjJ8uDlaUa8/o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8f:29:e1:d7:4c:cf:c0:ee:61:f5:d8:f2:fd:f8:e3:07:d9:b0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Dec 2 00:17:04 2025 GMT Not After : Dec 5 09:21:04 2025 GMT Subject: CN=22F143219D9156A25D2A01B2A6DF182F593D7893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:4b:20:53:cd:e5:c3:72:94:65:3b:07:17: 97:76:a6:b8:4e:90:dd:8d:1c:d4:dc:db:08:44:69: a9:78:60:c9:40:7e:73:04:a3:7e:e6:ea:55:31:2d: 78:89:be:5e:46:3d:ad:95:a1:aa:b2:fb:b2:ee:a0: 21:0d:8a:41:ff:7d:0b:4e:af:9b:cf:fe:00:6f:11: 03:16:e2:bc:37:6f:38:c6:ed:e8:87:d4:59:c8:b9: 16:c0:e8:ea:76:85:b4:d6:2a:a6:8c:79:9f:3a:6b: ca:f1:1d:d5:48:d7:19:b6:94:0e:c5:a2:6f:52:85: 4e:de:d3:76:0c:67:83:82:44:8f:93:42:80:75:22: ae:31:45:4e:63:fa:e9:98:4b:75:4f:45:63:0a:34: 64:cd:da:f9:ec:75:21:78:a2:20:cb:64:37:d1:f7: f7:c5:d7:a5:52:2e:1e:24:71:44:21:e9:f6:ec:7d: 5f:d7:f6:5b:35:8e:da:aa:81:52:ac:c0:01:96:42: 5b:8d:5e:cd:16:3f:74:7d:ae:64:b2:ce:b7:35:f3: cf:00:7a:45:dc:b8:83:26:b9:66:58:bf:ad:ab:7a: 8a:e0:06:1a:44:44:f8:42:94:6a:4f:81:dd:38:4c: b4:5f:c6:44:97:83:d3:ef:96:0c:13:e8:c4:8b:1a: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F1:43:21:9D:91:56:A2:5D:2A:01:B2:A6:DF:18:2F:59:3D:78:93 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5f:eb:97:89:84:eb:e1:07:db:df:31:85:c2:af:68:ae:6d: 36:5f:07:b7:0b:a0:9d:b8:b7:53:ca:f0:20:6c:77:aa:26:7b: e1:4a:d7:5c:25:ec:ba:a3:96:35:99:17:cb:84:41:af:7b:2f: e6:4c:d6:a2:f2:39:df:eb:13:aa:93:af:5e:97:13:5d:f0:f4: 58:77:a2:c0:87:77:b1:f0:9a:4b:f8:09:31:3f:a5:41:ba:f3: 8a:93:6f:33:c3:16:fc:02:50:82:26:cf:7a:0d:ec:8e:15:09: bc:28:5c:a3:46:0c:2d:5a:3f:04:9a:82:08:8e:6f:bd:c4:ed: 02:ea:6f:04:71:6b:5c:c6:5a:1c:a1:bc:c8:13:0f:95:d0:c0: db:e1:0d:02:ac:1a:4d:ea:73:2d:06:bc:9e:1a:a1:ac:d0:5c: e5:54:fd:b7:be:fb:4b:86:61:c6:d7:8c:67:83:d4:ef:b1:90: bb:51:6a:47:0d:09:31:85:13:42:af:0b:71:ae:4f:ab:8c:e6: 94:ea:89:57:17:15:93:a0:28:42:f8:a8:53:4a:cc:60:4a:3b: 15:92:28:ef:78:42:a0:26:41:31:d1:1f:3d:12:24:56:9b:4d: 8d:51:c5:18:04:6e:f7:e6:16:f5:34:f6:39:0e:b6:ae:e5:a0: bb:bd:83:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFo8p4ddMz8DuYfXY8v344wfZsC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTEyMDIwMDE3MDRaFw0yNTEyMDUwOTIxMDRaMDMxMTAvBgNV BAMTKDIyRjE0MzIxOUQ5MTU2QTI1RDJBMDFCMkE2REYxODJGNTkzRDc4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GEsgU83lw3KUZTsHF5d2prhO kN2NHNTc2whEaal4YMlAfnMEo37m6lUxLXiJvl5GPa2Voaqy+7LuoCENikH/fQtO r5vP/gBvEQMW4rw3bzjG7eiH1FnIuRbA6Op2hbTWKqaMeZ86a8rxHdVI1xm2lA7F om9ShU7e03YMZ4OCRI+TQoB1Iq4xRU5j+umYS3VPRWMKNGTN2vnsdSF4oiDLZDfR 9/fF16VSLh4kcUQh6fbsfV/X9ls1jtqqgVKswAGWQluNXs0WP3R9rmSyzrc1888A ekXcuIMmuWZYv62reorgBhpERPhClGpPgd04TLRfxkSXg9PvlgwT6MSLGhR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIvFDIZ2RVqJdKgGypt8YL1k9eJMwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhf65eJhOvhB9vfMYXCr2iubTZfB7cLoJ24 t1PK8CBsd6ome+FK11wl7LqjljWZF8uEQa97L+ZM1qLyOd/rE6qTr16XE13w9Fh3 osCHd7Hwmkv4CTE/pUG684qTbzPDFvwCUIImz3oN7I4VCbwoXKNGDC1aPwSaggiO b73E7QLqbwRxa1zGWhyhvMgTD5XQwNvhDQKsGk3qcy0GvJ4aoazQXOVU/be++0uG YcbXjGeD1O+xkLtRakcNCTGFE0KvC3GuT6uM5pTqiVcXFZOgKEL4qFNKzGBKOxWS KO94QqAmQTHRHz0SJFabTY1RxRgEbvfmFvU09jkOtq7loLu9g54= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:32 2025 by rpki-client