This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: w96qp5yIfrPgZfUvIcekskGvOTDsWc0CVNLpI78ndZU= Subject key identifier: 76:45:F9:E6:E2:05:27:83:63:CB:04:95:DC:35:8B:6E:92:9C:D4:64 Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 560AFA0A4EC5E7D43B9948B625E045C033969A8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 01B7 Signing time: Tue 02 Dec 2025 13:31:44 +0000 Manifest this update: Tue 02 Dec 2025 13:26:44 +0000 Manifest next update: Sat 06 Dec 2025 01:11:44 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: MMunj8eedH3nBkUCmjCgb0YTfEfLvH2GnXYTHDk3sZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0a:fa:0a:4e:c5:e7:d4:3b:99:48:b6:25:e0:45:c0:33:96:9a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Dec 2 13:26:44 2025 GMT Not After : Dec 6 01:11:44 2025 GMT Subject: CN=7645F9E6E205278363CB0495DC358B6E929CD464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:a6:4e:74:f1:43:77:d7:56:56:b4:10:ab: 12:be:23:c0:9e:88:c6:fe:ed:62:82:13:10:60:81: e5:39:84:76:da:46:20:7f:6c:16:43:25:36:81:24: d6:5f:55:f5:35:ea:08:28:7a:2b:b4:b4:ab:25:5c: d5:0c:ba:eb:81:7f:75:65:bd:db:80:0f:6f:c2:79: 40:8b:5b:f6:e8:d7:cf:7e:20:c9:78:2c:40:1b:41: 5a:9d:1b:bc:48:78:b2:fe:9b:d5:5d:bf:5a:5c:25: 41:7c:ca:8a:f2:36:02:ca:eb:4e:4e:7a:56:34:c5: f8:b4:c3:23:11:1f:dd:ea:bb:5a:5c:09:09:0c:1f: 36:75:87:f6:1e:be:b8:99:a7:b7:66:3d:a9:30:89: 71:5c:0b:11:24:f2:5c:3a:e1:bd:9b:c2:19:d3:f5: b8:0b:9e:e2:87:40:ad:bd:13:ef:0a:6b:43:0b:ea: 06:16:a1:fc:70:66:e4:31:4a:d0:6b:d7:5f:b3:6d: a1:e4:a9:78:36:53:52:e3:da:b6:a4:d4:fc:a2:e9: 35:42:c6:38:0b:0d:a0:ca:54:52:8c:19:0e:63:ac: 30:df:d4:c6:b2:f0:35:fb:0d:42:ca:13:32:4e:25: 4c:32:67:bb:1f:7f:e6:48:b0:a3:34:f5:cb:3a:c7: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:45:F9:E6:E2:05:27:83:63:CB:04:95:DC:35:8B:6E:92:9C:D4:64 X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:03:32:f5:81:da:e3:c3:35:1a:16:59:9f:39:e8:15:ab:f2: 1b:28:a1:a4:41:fd:09:03:84:7c:66:a2:12:ba:81:de:59:88: 14:53:c3:ea:6e:dd:e7:22:66:fd:ba:20:00:4c:e1:3a:33:0b: 47:ee:8d:ce:57:53:e3:49:83:c7:14:75:6a:50:2d:11:00:db: 13:a8:31:78:c4:1c:ab:04:f2:05:bc:ad:41:d8:ef:47:4f:ee: ab:3e:1e:af:0b:91:96:21:c9:1d:d7:02:68:5d:06:a8:88:9f: 77:7b:90:61:3b:f9:21:de:07:40:79:dc:dd:ae:9c:80:99:cf: 3a:4e:94:34:0b:79:1d:52:39:a2:96:da:a1:1c:d1:b9:ed:c2: 93:f1:2e:05:57:26:cb:7c:a7:0f:49:3c:26:67:dc:6b:d6:34: 27:54:b1:e8:36:a5:ca:91:a0:c7:48:da:79:cc:55:6a:67:5d: 99:8f:e0:0f:f7:16:8e:21:8e:b2:72:cf:ff:19:94:ef:04:ef: d9:09:9a:d5:69:27:d4:2a:0e:50:26:64:e6:af:0f:de:f3:d6: 9e:01:c0:01:c6:55:23:74:c5:ea:42:00:91:7c:ce:90:d8:43: 6a:df:36:a8:c7:d4:fe:a9:a4:52:fc:8b:b7:22:2b:16:64:31: 71:69:4c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgr6Ck7F59Q7mUi2JeBFwDOWmowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTEyMDIxMzI2NDRaFw0yNTEyMDYwMTExNDRaMDMxMTAvBgNV BAMTKDc2NDVGOUU2RTIwNTI3ODM2M0NCMDQ5NURDMzU4QjZFOTI5Q0Q0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxaZOdPFDd9dWVrQQqxK+I8Ce iMb+7WKCExBggeU5hHbaRiB/bBZDJTaBJNZfVfU16ggoeiu0tKslXNUMuuuBf3Vl vduAD2/CeUCLW/bo189+IMl4LEAbQVqdG7xIeLL+m9Vdv1pcJUF8yoryNgLK605O elY0xfi0wyMRH93qu1pcCQkMHzZ1h/YevriZp7dmPakwiXFcCxEk8lw64b2bwhnT 9bgLnuKHQK29E+8Ka0ML6gYWofxwZuQxStBr11+zbaHkqXg2U1Lj2rak1Pyi6TVC xjgLDaDKVFKMGQ5jrDDf1May8DX7DULKEzJOJUwyZ7sff+ZIsKM09cs6xyctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdkX55uIFJ4NjywSV3DWLbpKc1GQwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0DMvWB2uPDNRoWWZ856BWr8hsooaRB/QkD hHxmohK6gd5ZiBRTw+pu3eciZv26IABM4TozC0fujc5XU+NJg8cUdWpQLREA2xOo MXjEHKsE8gW8rUHY70dP7qs+Hq8LkZYhyR3XAmhdBqiIn3d7kGE7+SHeB0B53N2u nICZzzpOlDQLeR1SOaKW2qEc0bntwpPxLgVXJst8pw9JPCZn3GvWNCdUseg2pcqR oMdI2nnMVWpnXZmP4A/3Fo4hjrJyz/8ZlO8E79kJmtVpJ9QqDlAmZOavD97z1p4B wAHGVSN0xepCAJF8zpDYQ2rfNqjH1P6ppFL8i7ciKxZkMXFpTOU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:18 2025 by rpki-client