This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: 2AXXWU7RJhL5W4FF+O+Da6RZaVQiWILvtTI/iSXTd0U= Subject key identifier: 47:64:94:5B:2A:56:1C:28:7D:D6:70:FC:98:FB:74:6C:E9:40:8D:20 Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 149B5B9ED92161A6C6F908F4C748F36D2A77E2AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 5D Signing time: Tue 02 Dec 2025 11:32:39 +0000 Manifest this update: Tue 02 Dec 2025 11:27:39 +0000 Manifest next update: Fri 05 Dec 2025 16:31:39 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: aEdwS0s5mQZMrsAhlaXSsx/vdE96aO0GfGhU3QW7hpQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9b:5b:9e:d9:21:61:a6:c6:f9:08:f4:c7:48:f3:6d:2a:77:e2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Dec 2 11:27:39 2025 GMT Not After : Dec 5 16:31:39 2025 GMT Subject: CN=4764945B2A561C287DD670FC98FB746CE9408D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:5f:68:a8:d7:f9:d4:46:31:46:e4:28:67: 5f:0e:3e:f9:13:6b:1e:e0:f8:bc:0b:21:ce:a0:da: 9c:27:43:a2:86:a0:98:d9:68:03:98:6c:63:55:49: 68:0d:38:c6:cf:68:4a:65:ae:59:6b:01:ad:a6:38: 69:5a:23:60:f3:7a:31:7f:b4:6e:b0:08:49:d3:ff: a7:8e:20:89:26:6b:55:dd:33:e8:c6:4a:03:80:a6: c4:c1:eb:8f:2f:e0:05:67:66:76:9c:36:34:16:c0: fa:9a:c8:4e:72:9e:27:8d:19:c8:df:64:06:cf:52: 42:d6:18:b3:a8:1d:8d:99:e4:82:ec:62:57:9e:1e: 8f:bf:80:d0:01:e2:01:1f:48:34:19:53:45:6e:9c: 03:c7:0e:49:55:61:20:90:c0:06:11:c2:a5:7c:51: da:03:62:45:b6:e4:04:30:2a:d7:c4:44:00:e1:40: c0:ef:1c:24:8d:9c:38:91:ee:f8:db:74:5e:9d:61: c1:8a:08:eb:c9:86:2c:08:97:62:8e:4e:fc:49:e9: 4f:6a:b9:38:cd:7b:13:58:0e:5a:27:6d:5c:9f:98: 2e:e6:4c:97:26:1f:19:6c:e1:9e:61:8d:40:1a:6b: 62:82:ff:90:4f:94:7c:c4:47:6e:90:56:83:7f:ba: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:64:94:5B:2A:56:1C:28:7D:D6:70:FC:98:FB:74:6C:E9:40:8D:20 X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:a4:a4:c1:d1:99:c3:c8:4b:00:22:49:ba:89:7d:78:ce:b3: 04:9f:bd:45:ff:c8:b1:74:43:e1:cd:92:70:fc:36:05:d7:58: 94:1b:94:ec:8a:1a:d7:b5:ee:7e:b4:23:ab:0c:53:b0:c0:7f: 5a:40:7c:1f:75:58:60:f7:75:45:8e:0b:ab:51:93:91:c7:e3: 65:50:0e:d6:87:31:54:45:45:03:64:ec:1d:d9:8d:f1:b9:6c: 89:16:4f:46:e7:f0:bd:29:ff:61:c1:09:a5:ea:4c:ba:18:f4: df:80:76:02:2a:77:85:bd:fc:be:20:e8:1b:51:ff:8f:f9:6e: a7:bd:fc:97:e2:48:ee:92:db:a5:c0:5d:cc:45:c0:6b:d1:ac: de:bf:a8:d0:ec:b4:cb:1b:5d:fb:e0:60:03:3a:2b:af:72:48: e0:5e:fb:97:e2:9a:2b:ec:97:f8:34:8f:b5:d8:36:28:55:0b: e2:b3:a2:73:7c:b6:e6:0c:d9:d6:83:f1:bc:f6:9f:6b:2b:15: 11:af:8b:be:54:42:c9:15:e6:d3:a6:75:b6:77:c8:52:c8:31: 2b:52:9d:16:7d:b5:1d:77:80:66:d0:26:d1:83:a9:68:9c:9a: ad:f2:88:20:92:fb:70:9e:df:2b:54:a4:a9:4e:07:62:f0:d6: e3:54:4f:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJtbntkhYabG+Qj0x0jzbSp34q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNTEyMDIxMTI3MzlaFw0yNTEyMDUxNjMxMzlaMDMxMTAvBgNV BAMTKDQ3NjQ5NDVCMkE1NjFDMjg3REQ2NzBGQzk4RkI3NDZDRTk0MDhEMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChF9oqNf51EYxRuQoZ18OPvkT ax7g+LwLIc6g2pwnQ6KGoJjZaAOYbGNVSWgNOMbPaEplrllrAa2mOGlaI2DzejF/ tG6wCEnT/6eOIIkma1XdM+jGSgOApsTB648v4AVnZnacNjQWwPqayE5ynieNGcjf ZAbPUkLWGLOoHY2Z5ILsYleeHo+/gNAB4gEfSDQZU0VunAPHDklVYSCQwAYRwqV8 UdoDYkW25AQwKtfERADhQMDvHCSNnDiR7vjbdF6dYcGKCOvJhiwIl2KOTvxJ6U9q uTjNexNYDlonbVyfmC7mTJcmHxls4Z5hjUAaa2KC/5BPlHzER26QVoN/uqY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2SUWypWHCh91nD8mPt0bOlAjSAwHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSkpMHRmcPISwAiSbqJfXjOswSfvUX/yLF0 Q+HNknD8NgXXWJQblOyKGte17n60I6sMU7DAf1pAfB91WGD3dUWOC6tRk5HH42VQ DtaHMVRFRQNk7B3ZjfG5bIkWT0bn8L0p/2HBCaXqTLoY9N+AdgIqd4W9/L4g6BtR /4/5bqe9/JfiSO6S26XAXcxFwGvRrN6/qNDstMsbXfvgYAM6K69ySOBe+5fimivs l/g0j7XYNihVC+KzonN8tuYM2daD8bz2n2srFRGvi75UQskV5tOmdbZ3yFLIMStS nRZ9tR13gGbQJtGDqWicmq3yiCCS+3Ce3ytUpKlOB2Lw1uNUT9Q= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:08 2025 by rpki-client