This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft File: E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json) Hash identifier: GauZk8Genj33e3jb6T3aHxr1yXdA0Hc1w5CMOpLJheU= Subject key identifier: F7:85:6F:F6:A4:C2:BB:6C:E6:2D:1B:14:EF:82:E6:32:AB:22:E0:56 Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Certificate serial: 37001C911AF86DB0BE952DC98F545C8CDABFA3C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft Manifest number: 015F Signing time: Mon 01 Dec 2025 11:50:39 +0000 Manifest this update: Mon 01 Dec 2025 11:45:39 +0000 Manifest next update: Thu 04 Dec 2025 14:49:39 +0000 Files and hashes: 1: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: QgnmDufc+/3FcboDDXCwjjLZ4fCHLn3hD1V4YgVuyvM=) 2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: pWyEMJB2NECQjGD21jXFIhV6AewDgUPpxcuSNxlavYI=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: p909d8VjhDkob+UXRoZRxJtZcS/lf4G9yDRtU4iVWWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:00:1c:91:1a:f8:6d:b0:be:95:2d:c9:8f:54:5c:8c:da:bf:a3:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Validity Not Before: Dec 1 11:45:39 2025 GMT Not After : Dec 4 14:49:39 2025 GMT Subject: CN=F7856FF6A4C2BB6CE62D1B14EF82E632AB22E056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:8d:f3:3b:1e:4a:27:e9:fb:31:4a:87:2d: e3:88:5a:e9:3b:b5:cf:08:0b:24:c9:f6:89:6a:be: 3a:c4:0b:8d:9d:db:f8:dc:d5:d2:da:75:b7:cd:81: 31:71:f7:1e:ba:7a:9d:63:02:7c:c2:db:54:5b:2a: 58:3d:39:3b:91:10:81:61:d7:c1:f1:45:84:a7:c1: 75:f0:10:f8:b5:1c:26:79:13:08:4e:bd:d1:55:c6: 8e:9d:b4:34:3f:f8:ec:d4:66:67:65:f1:1c:e5:89: 14:49:6c:87:a0:fa:c6:8d:6c:a3:2e:82:ce:d6:6b: b9:8a:f0:a7:69:93:bc:05:f2:a0:75:26:53:60:70: df:18:6c:52:ef:78:4d:fa:ba:1f:37:ca:d7:d6:8e: 4f:b5:2a:0a:ed:19:94:5a:aa:da:10:a4:0d:34:bc: 3b:fe:67:f4:47:8c:0b:19:79:b9:4b:01:1c:81:28: 54:2a:e1:0f:6c:48:77:4d:aa:d4:95:2f:c3:8e:9e: cf:72:c0:f4:a5:ab:c7:e0:7c:2b:3f:6c:8c:83:b6: 6e:84:6c:96:29:52:40:8d:32:76:fd:f1:a2:e8:4c: 32:14:c5:2e:67:14:d1:da:cd:10:26:6c:e5:c3:2c: 17:34:92:5f:c2:bc:86:35:0f:5a:c7:d8:d6:54:82: 55:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:85:6F:F6:A4:C2:BB:6C:E6:2D:1B:14:EF:82:E6:32:AB:22:E0:56 X509v3 Authority Key Identifier: keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0d:27:70:64:10:af:57:8b:47:d9:b8:f2:b0:9f:38:8a:4a: b8:83:54:b5:c0:35:a7:90:fe:63:89:a7:ca:c8:44:ef:85:0e: 6c:65:cb:2b:3b:00:78:70:c7:72:e9:ef:63:c0:7a:42:06:2f: 2e:54:02:60:6a:96:e8:77:71:b6:b6:1b:06:9c:59:ab:c9:ec: 52:1d:ea:50:77:71:de:ee:31:cb:f7:13:59:79:a3:44:fc:48: 38:8a:bb:08:f2:55:a1:2b:f8:29:cb:6c:60:70:92:77:d0:4d: 3d:d7:30:b7:24:11:ab:e9:b5:55:24:4d:9a:53:83:22:22:00: 90:2c:59:47:cf:b9:03:d6:48:6e:20:db:e6:13:fa:82:65:fd: ab:9d:64:49:c0:dc:5e:f0:63:9b:8f:62:07:64:94:b3:00:02: e6:f1:ec:c3:00:fc:0d:4b:95:ec:a3:00:1d:c7:5f:43:10:0a: c1:fb:15:45:22:70:3d:d6:7b:c3:a1:8d:52:e8:10:2f:a0:16: 20:c5:6a:57:1a:5b:d5:28:8e:01:6d:af:89:4c:b6:e5:cc:a8: 0a:12:73:65:6b:89:f8:ce:e6:05:b9:52:d9:4d:e5:26:ad:76: e1:2e:49:d1:a4:eb:21:23:c2:54:28:8d:eb:c6:73:e2:fe:55: 8b:4f:04:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwAckRr4bbC+lS3Jj1RcjNq/o8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5 NTU4NTcxRDAeFw0yNTEyMDExMTQ1MzlaFw0yNTEyMDQxNDQ5MzlaMDMxMTAvBgNV BAMTKEY3ODU2RkY2QTRDMkJCNkNFNjJEMUIxNEVGODJFNjMyQUIyMkUwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8V43zOx5KJ+n7MUqHLeOIWuk7 tc8ICyTJ9olqvjrEC42d2/jc1dLadbfNgTFx9x66ep1jAnzC21RbKlg9OTuREIFh 18HxRYSnwXXwEPi1HCZ5EwhOvdFVxo6dtDQ/+OzUZmdl8RzliRRJbIeg+saNbKMu gs7Wa7mK8Kdpk7wF8qB1JlNgcN8YbFLveE36uh83ytfWjk+1KgrtGZRaqtoQpA00 vDv+Z/RHjAsZeblLARyBKFQq4Q9sSHdNqtSVL8OOns9ywPSlq8fgfCs/bIyDtm6E bJYpUkCNMnb98aLoTDIUxS5nFNHazRAmbOXDLBc0kl/CvIY1D1rH2NZUglWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU94Vv9qTCu2zmLRsU74LmMqsi4FYwHwYDVR0j BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4 NTcxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3 ODU5NTU4NTcxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEANJ3BkEK9Xi0fZuPKwnziKSriDVLXANaeQ /mOJp8rIRO+FDmxlyys7AHhwx3Lp72PAekIGLy5UAmBqluh3cba2GwacWavJ7FId 6lB3cd7uMcv3E1l5o0T8SDiKuwjyVaEr+CnLbGBwknfQTT3XMLckEavptVUkTZpT gyIiAJAsWUfPuQPWSG4g2+YT+oJl/audZEnA3F7wY5uPYgdklLMAAubx7MMA/A1L leyjAB3HX0MQCsH7FUUicD3We8OhjVLoEC+gFiDFalcaW9UojgFtr4lMtuXMqAoS c2VrifjO5gW5UtlN5SatduEuSdGk6yEjwlQojevGc+L+VYtPBDU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:19 2025 by rpki-client