This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json) Hash identifier: Sjn/2B934n2+INP25LqmzI3oZIbg2nJOMhoIraJK9F0= Subject key identifier: 48:9B:4D:CD:6C:0F:B1:25:16:0E:E5:F6:69:F8:84:08:98:6E:43:9E Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Certificate serial: 12098674B3082426F70F14A41A215162C7DB33F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft Manifest number: 02DD Signing time: Mon 01 Dec 2025 20:12:19 +0000 Manifest this update: Mon 01 Dec 2025 20:07:19 +0000 Manifest next update: Fri 05 Dec 2025 01:33:19 +0000 Files and hashes: 1: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: P+jsm+RJ6vjenhwmawVHZmz7AFSQ0gdSvnll3zBTR2o=) 2: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: S9fTdkfTps/6Q59nCYC/yJ1+TjRvCvo04elHUxM7Yz8=) 3: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: Vl/OOphd8TYP/hah6fsBqUcpI92+W6WBwIY9PUcjWfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:09:86:74:b3:08:24:26:f7:0f:14:a4:1a:21:51:62:c7:db:33:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Validity Not Before: Dec 1 20:07:19 2025 GMT Not After : Dec 5 01:33:19 2025 GMT Subject: CN=489B4DCD6C0FB125160EE5F669F88408986E439E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:ef:08:3a:ca:7a:f6:6c:e4:7e:c9:6a:ca: fa:a6:cf:95:09:10:0c:f1:ad:66:e9:bf:3d:c5:78: 7f:7c:f6:9e:aa:25:31:3d:b2:cc:d8:19:34:2a:ca: 0e:79:0b:7f:8e:43:cc:cb:fc:6b:28:81:37:fa:15: a3:08:cf:dd:e3:cf:6b:18:fc:41:13:6c:88:7e:dd: 3d:97:fe:fb:c3:af:14:d7:b0:30:94:db:c4:81:fc: f1:8a:db:b4:2c:f3:3e:ac:0d:c3:b7:af:bc:bc:87: 2a:0e:32:ce:65:be:c5:1a:3f:11:c4:d8:5a:33:79: e6:13:bf:81:24:fe:b5:ed:9e:8e:28:b4:cd:9b:ae: 95:4f:e1:48:10:2f:5b:1d:77:0b:02:d9:01:99:74: 4f:b4:90:c0:e0:57:54:05:23:ae:83:b4:48:82:4c: 1c:5f:1c:48:44:c0:f3:15:8f:1d:61:bd:e3:60:42: 21:69:75:b7:1a:01:1b:3b:e4:c9:32:01:03:14:3e: f2:51:fd:57:99:0b:45:d4:74:57:bc:2a:5a:32:cb: a1:47:42:86:dd:e6:94:f6:5b:38:6e:4a:b5:d0:dc: 0a:a1:79:d5:d5:d0:15:e3:26:56:74:37:af:36:06: b2:e5:27:d8:08:0b:63:6a:0b:c8:de:cc:77:4a:a2: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9B:4D:CD:6C:0F:B1:25:16:0E:E5:F6:69:F8:84:08:98:6E:43:9E X509v3 Authority Key Identifier: keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d4:54:3e:88:d1:59:08:55:ff:25:dd:68:6f:78:b4:51:34: b1:7f:63:63:2d:e9:8e:11:2c:8e:33:7b:27:97:de:da:69:00: 71:ee:5f:01:55:ac:ff:f2:23:75:f2:6d:8d:6e:2f:1d:6d:62: 89:94:25:b8:cd:e9:e0:9e:56:17:52:7a:3e:a4:dc:6c:19:b6: 73:2c:5f:19:4b:5d:e8:02:e2:13:2c:42:42:a8:b2:c7:15:81: f3:20:d4:9e:ef:26:46:50:f1:71:dc:a2:81:62:70:9c:f0:a5: 1e:fe:1c:90:32:6e:62:8e:b5:ac:91:f4:77:3d:e3:9a:b1:76: b2:9a:88:f8:ef:f9:4d:4d:08:3e:4e:14:9c:57:77:f1:15:be: 0d:9c:ef:e5:44:bf:54:a6:10:b1:ee:04:50:0a:ea:31:37:cc: 7e:44:9b:8e:e4:e8:d4:90:66:63:82:d0:46:93:5b:49:ac:18: 2e:e1:76:ba:7b:fd:f3:63:25:f4:79:ce:41:bf:43:3a:45:e1: 8e:3a:ff:70:c5:1b:38:72:88:f2:da:f8:05:3b:40:8e:70:89: 9f:68:8b:b9:ea:42:b5:92:69:b4:91:26:1f:90:29:03:bd:3a: 1a:45:0e:6c:b1:54:9e:6d:cf:0a:3a:8d:48:86:f0:b3:2c:36: fb:6f:3f:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgmGdLMIJCb3DxSkGiFRYsfbM/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3 NzM5REYxODAeFw0yNTEyMDEyMDA3MTlaFw0yNTEyMDUwMTMzMTlaMDMxMTAvBgNV BAMTKDQ4OUI0RENENkMwRkIxMjUxNjBFRTVGNjY5Rjg4NDA4OTg2RTQzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDO8IOsp69mzkfslqyvqmz5UJ EAzxrWbpvz3FeH989p6qJTE9sszYGTQqyg55C3+OQ8zL/GsogTf6FaMIz93jz2sY /EETbIh+3T2X/vvDrxTXsDCU28SB/PGK27Qs8z6sDcO3r7y8hyoOMs5lvsUaPxHE 2FozeeYTv4Ek/rXtno4otM2brpVP4UgQL1sddwsC2QGZdE+0kMDgV1QFI66DtEiC TBxfHEhEwPMVjx1hveNgQiFpdbcaARs75MkyAQMUPvJR/VeZC0XUdFe8Kloyy6FH Qobd5pT2WzhuSrXQ3AqhedXV0BXjJlZ0N682BrLlJ9gIC2NqC8jezHdKoiRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJtNzWwPsSUWDuX2afiECJhuQ54wHwYDVR0j BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1 Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5 REYxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTcz NDU3NzM5REYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzUVD6I0VkIVf8l3WhveLRRNLF/Y2Mt6Y4R LI4zeyeX3tppAHHuXwFVrP/yI3XybY1uLx1tYomUJbjN6eCeVhdSej6k3GwZtnMs XxlLXegC4hMsQkKosscVgfMg1J7vJkZQ8XHcooFicJzwpR7+HJAybmKOtayR9Hc9 45qxdrKaiPjv+U1NCD5OFJxXd/EVvg2c7+VEv1SmELHuBFAK6jE3zH5Em47k6NSQ ZmOC0EaTW0msGC7hdrp7/fNjJfR5zkG/QzpF4Y46/3DFGzhyiPLa+AU7QI5wiZ9o i7nqQrWSabSRJh+QKQO9OhpFDmyxVJ5tzwo6jUiG8LMsNvtvP38= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:53 2025 by rpki-client