This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft File: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft (raw, json) Hash identifier: R6uAqppgrKvh5nyYj2yOU4mGOArgp4Cz5uXn/WQKuFM= Subject key identifier: 3A:DF:B5:95:9F:67:14:EB:AC:49:33:8C:DF:1C:A8:EF:0D:AE:C3:8A Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: 3730428F1B985C2CF15C9E138C0E90917402D593 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft Manifest number: 01FF Signing time: Mon 01 Dec 2025 12:31:51 +0000 Manifest this update: Mon 01 Dec 2025 12:26:51 +0000 Manifest next update: Thu 04 Dec 2025 16:46:51 +0000 Files and hashes: 1: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: 16WvPyi38t5aKz8ZyY3F0kSDSMJ8HK1h7g9RnFd2LL0=) 2: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl (hash: U75T102cEwYN+iYtkaVph/KFrnI0XkgEuIZOdu/JdsM=) 3: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: RICXQj6rsugNHVh/wSozR+ATp/7OAGFCxt5pyTwldyU=) 4: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: c8FIGaCU0t2/B828bx0ZmZOFxlHPrYIwjNCfoYq4Eck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:30:42:8f:1b:98:5c:2c:f1:5c:9e:13:8c:0e:90:91:74:02:d5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Dec 1 12:26:51 2025 GMT Not After : Dec 4 16:46:51 2025 GMT Subject: CN=3ADFB5959F6714EBAC49338CDF1CA8EF0DAEC38A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:29:dd:4e:c4:d7:e2:f2:6c:25:17:f1:f9: bf:80:e2:d5:05:a6:17:d5:ce:b4:50:1b:81:0f:e0: 45:b4:62:b0:91:af:47:f3:4c:f2:00:83:1d:cc:24: d1:ba:c0:37:2f:59:97:2f:11:72:d6:eb:ab:70:38: 70:fd:f4:b7:16:5e:8e:51:6b:44:58:8c:5a:9c:04: 58:34:b8:7d:89:1c:2c:eb:f3:af:4c:96:4c:77:0e: e9:3f:c4:53:6b:98:d2:76:10:0f:c9:30:ad:dc:7e: e6:0f:73:ab:19:73:2e:dc:94:11:cb:2e:79:0d:18: 55:dd:33:ac:bd:59:ac:45:de:b5:2a:98:17:e4:f5: f6:71:62:70:1f:c1:a5:96:ee:41:c5:96:22:9b:be: 4d:32:6b:99:b7:bf:55:9d:92:07:f9:b6:39:96:95: b4:4d:73:b0:ed:51:c4:98:bb:40:57:95:8f:2f:a5: 27:58:e5:ca:2a:6a:c2:32:82:fa:46:a8:67:df:c4: 1e:52:9e:20:9f:f8:06:e1:17:1e:c1:b6:33:b8:f4: 2f:1e:df:ea:4b:8c:39:a8:47:95:b4:b3:09:26:f0: 4d:f5:75:a4:e3:ff:23:95:58:46:0e:67:e6:32:b0: fc:7c:58:a4:9f:63:26:07:36:86:a3:c8:8b:ed:0e: bd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DF:B5:95:9F:67:14:EB:AC:49:33:8C:DF:1C:A8:EF:0D:AE:C3:8A X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:da:3b:53:d5:b6:de:ec:fa:6b:d3:26:9d:d3:01:0f:f5:bc: d3:cc:83:54:bd:c2:76:ba:fd:2f:42:8b:23:77:c8:b6:e0:ad: 50:81:0f:ea:b6:3e:c9:74:36:2f:2b:04:6d:b1:d4:49:4a:10: 31:25:b0:22:3c:f3:5d:7b:53:74:83:cb:c0:ee:ed:6f:28:fb: be:c7:05:84:4c:82:a7:2d:e6:e4:2a:86:d3:d1:2b:da:98:7f: 4d:7f:3b:2f:23:6c:47:61:c9:62:fc:25:59:72:d3:65:cb:bc: 74:ad:05:ef:34:29:88:41:4e:6f:24:04:1b:d0:92:6a:ef:61: 8e:d5:f9:7a:0a:4e:fe:91:38:27:6b:e3:5a:0d:b8:a0:22:8f: 4f:1e:7d:62:f1:19:54:10:45:a8:e3:f5:66:5f:33:dd:f9:02: 9d:f2:d7:17:1c:b1:1d:1a:56:b3:e0:bc:27:b0:dc:93:8d:ac: dc:b6:28:36:d6:e1:97:8f:65:25:03:a0:96:d8:57:ec:bb:5b: be:83:49:ee:68:7d:4f:a6:c1:72:e5:c3:0e:06:f4:5f:d9:e5: 87:7e:c6:16:52:0b:c9:4e:51:13:2b:1b:8d:1e:97:a7:26:a4: e0:69:5e:09:b6:91:cd:a3:a1:07:45:1f:92:8e:00:e3:a8:c0: ea:4e:1a:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNzBCjxuYXCzxXJ4TjA6QkXQC1ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNTEyMDExMjI2NTFaFw0yNTEyMDQxNjQ2NTFaMDMxMTAvBgNV BAMTKDNBREZCNTk1OUY2NzE0RUJBQzQ5MzM4Q0RGMUNBOEVGMERBRUMzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DCndTsTX4vJsJRfx+b+A4tUF phfVzrRQG4EP4EW0YrCRr0fzTPIAgx3MJNG6wDcvWZcvEXLW66twOHD99LcWXo5R a0RYjFqcBFg0uH2JHCzr869Mlkx3Duk/xFNrmNJ2EA/JMK3cfuYPc6sZcy7clBHL LnkNGFXdM6y9WaxF3rUqmBfk9fZxYnAfwaWW7kHFliKbvk0ya5m3v1Wdkgf5tjmW lbRNc7DtUcSYu0BXlY8vpSdY5coqasIygvpGqGffxB5SniCf+AbhFx7BtjO49C8e 3+pLjDmoR5W0swkm8E31daTj/yOVWEYOZ+YysPx8WKSfYyYHNoajyIvtDr3RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOt+1lZ9nFOusSTOM3xyo7w2uw4owHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2 MDYxMUNDRjBEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfaO1PVtt7s+mvTJp3TAQ/1vNPMg1S9wna6 /S9CiyN3yLbgrVCBD+q2Psl0Ni8rBG2x1ElKEDElsCI88117U3SDy8Du7W8o+77H BYRMgqct5uQqhtPRK9qYf01/Oy8jbEdhyWL8JVly02XLvHStBe80KYhBTm8kBBvQ kmrvYY7V+XoKTv6ROCdr41oNuKAij08efWLxGVQQRajj9WZfM935Ap3y1xccsR0a VrPgvCew3JONrNy2KDbW4ZePZSUDoJbYV+y7W76DSe5ofU+mwXLlww4G9F/Z5Yd+ xhZSC8lOURMrG40el6cmpOBpXgm2kc2joQdFH5KOAOOowOpOGhc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:56 2025 by rpki-client