This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft File: ED4F41D4EBE684D523406475FAB471CE1B24E360.mft (raw, json) Hash identifier: ZjlrBjmjJ3mRjs8fvqF037lv9TsvHcn5W79yGo3Dy5U= Subject key identifier: C4:23:36:F7:8C:BA:54:D2:96:EF:DA:AE:33:A6:91:E8:6A:DE:71:99 Authority key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 Certificate issuer: /CN=ED4F41D4EBE684D523406475FAB471CE1B24E360 Certificate serial: 53994B31A622DFF266B2100B59FC37EEB4F1845C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft Manifest number: 01D3 Signing time: Wed 03 Dec 2025 12:00:45 +0000 Manifest this update: Wed 03 Dec 2025 11:55:45 +0000 Manifest next update: Sat 06 Dec 2025 17:22:45 +0000 Files and hashes: 1: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: 0zElYS8pYAdAq2zXe+2YefY+xTaQBq2KFhrk8AH5DcA=) 2: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: BXp0DiStVhZuRg84lCtQ4q7ZgVrjo+zScqcIWL6/IJE=) 3: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: a+I06nP5b+sG7uombRaO/A9VFiWnda28578PbtlGH3U=) 4: ED4F41D4EBE684D523406475FAB471CE1B24E360.crl (hash: NHumFGopvDNdumUrcannh1ZpakBgV4RY3+dZVUX72lY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 17:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:99:4b:31:a6:22:df:f2:66:b2:10:0b:59:fc:37:ee:b4:f1:84:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360 Validity Not Before: Dec 3 11:55:45 2025 GMT Not After : Dec 6 17:22:45 2025 GMT Subject: CN=C42336F78CBA54D296EFDAAE33A691E86ADE7199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:68:97:2c:cf:34:4d:ec:72:e9:93:57:61: c0:3c:e4:79:5e:7c:76:39:fa:c7:cb:c4:5d:c8:1e: 9d:ea:af:28:d5:0b:62:f2:ae:b8:f1:b7:af:75:a8: a2:2c:ea:25:e8:d0:55:bd:e0:8e:1f:65:a1:59:35: 48:5f:f0:b9:83:e8:9c:8d:ef:fb:2e:eb:01:9e:cb: 11:fe:98:fb:36:17:d4:22:d6:f9:4d:5e:5f:b5:21: 3f:c8:99:c3:8c:b4:7d:2a:6d:db:f0:1d:1c:a7:5e: a0:1c:40:26:d2:c2:22:ef:37:0f:d6:9e:62:58:1d: b1:a2:92:70:33:56:6f:cd:73:47:90:99:98:dc:af: 4a:43:46:2e:53:b7:94:e9:59:ec:63:07:7a:55:56: 15:58:03:09:17:d1:73:d9:78:06:4b:76:16:89:42: d1:b5:ce:16:1c:38:d1:f2:f3:27:e3:8f:ba:e6:04: 24:51:4a:32:9b:ce:c4:14:25:36:2a:2c:67:97:01: 9c:7e:a9:50:03:c2:49:76:fb:b5:2a:5e:a9:f4:ea: 1c:3e:af:b1:80:17:0a:7a:4a:85:2b:46:15:9a:ac: 72:a7:10:4a:41:af:f9:a6:d9:12:fa:2f:61:0b:ab: d7:0c:d7:ae:1e:b4:ca:c6:4c:16:cf:a0:40:35:aa: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:23:36:F7:8C:BA:54:D2:96:EF:DA:AE:33:A6:91:E8:6A:DE:71:99 X509v3 Authority Key Identifier: keyid:ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6f:c5:4c:ae:e5:f9:b4:72:b7:47:2f:e2:78:8c:8c:84:a9: ba:26:98:97:54:94:68:55:40:e6:c3:c9:e4:56:55:13:cc:7b: 65:c4:1a:1e:be:d6:22:3a:40:9a:a5:93:37:d8:4f:63:80:ac: 1d:4b:72:2a:a2:ad:fb:c3:30:f0:4f:5b:85:a6:14:93:17:01: 9f:ad:d7:03:27:c9:57:02:f8:2a:1f:12:be:96:bb:00:c4:54: 53:0e:52:e2:38:62:97:0a:fe:0f:30:ed:0c:35:c2:16:08:0c: 79:b2:18:24:58:1b:e6:de:00:21:77:4a:01:9b:ec:47:e4:44: 15:c5:89:4e:d2:bf:ca:45:0e:07:fc:09:a1:5e:e1:c5:8f:08: f4:87:6e:db:87:3c:be:44:b3:99:3b:a4:cf:5a:19:36:f7:dd: 3a:9b:71:eb:3f:be:1e:76:b5:18:3c:72:18:7b:47:a4:86:67: 92:e9:a6:2f:bf:5e:a7:71:3d:08:39:4f:4f:eb:8d:a3:57:6c: b7:3d:23:ea:d3:28:13:8a:63:33:62:a1:35:d8:9a:66:d2:b2: cd:ff:f6:75:2e:6b:e8:1f:ff:41:71:b2:66:ec:17:57:25:6b: 5e:9a:06:26:66:e3:d3:8b:be:14:0c:e5:1a:d5:96:31:73:01: 4a:12:ff:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5lLMaYi3/JmshALWfw37rTxhFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcxQ0Ux QjI0RTM2MDAeFw0yNTEyMDMxMTU1NDVaFw0yNTEyMDYxNzIyNDVaMDMxMTAvBgNV BAMTKEM0MjMzNkY3OENCQTU0RDI5NkVGREFBRTMzQTY5MUU4NkFERTcxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFt2iXLM80Texy6ZNXYcA85Hle fHY5+sfLxF3IHp3qryjVC2Lyrrjxt691qKIs6iXo0FW94I4fZaFZNUhf8LmD6JyN 7/su6wGeyxH+mPs2F9Qi1vlNXl+1IT/ImcOMtH0qbdvwHRynXqAcQCbSwiLvNw/W nmJYHbGiknAzVm/Nc0eQmZjcr0pDRi5Tt5TpWexjB3pVVhVYAwkX0XPZeAZLdhaJ QtG1zhYcONHy8yfjj7rmBCRRSjKbzsQUJTYqLGeXAZx+qVADwkl2+7UqXqn06hw+ r7GAFwp6SoUrRhWarHKnEEpBr/mm2RL6L2ELq9cM164etMrGTBbPoEA1qmATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxCM294y6VNKW79quM6aR6GrecZkwHwYDVR0j BBgwFoAU7U9B1OvmhNUjQGR1+rRxzhsk42AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmVlN2E1Zi01MTIxLTQxODEtYTYzNS0xMjFiNmU2OWFkNTkvMC9FRDRGNDFENEVC RTY4NEQ1MjM0MDY0NzVGQUI0NzFDRTFCMjRFMzYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcxQ0UxQjI0 RTM2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZlZTdhNWYtNTEyMS00MTgxLWE2 MzUtMTIxYjZlNjlhZDU5LzAvRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcx Q0UxQjI0RTM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdvxUyu5fm0crdHL+J4jIyEqbommJdUlGhV QObDyeRWVRPMe2XEGh6+1iI6QJqlkzfYT2OArB1LciqirfvDMPBPW4WmFJMXAZ+t 1wMnyVcC+CofEr6WuwDEVFMOUuI4YpcK/g8w7Qw1whYIDHmyGCRYG+beACF3SgGb 7EfkRBXFiU7Sv8pFDgf8CaFe4cWPCPSHbtuHPL5Es5k7pM9aGTb33Tqbces/vh52 tRg8chh7R6SGZ5Lppi+/XqdxPQg5T0/rjaNXbLc9I+rTKBOKYzNioTXYmmbSss3/ 9nUua+gf/0FxsmbsF1cla16aBiZm49OLvhQM5RrVljFzAUoS/x8= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:30 2025 by rpki-client