This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: dv5B6vYlrj6IzTNZc8Or9soCjiaRH7oIzJ/spVIy8FA= Subject key identifier: 6F:76:64:43:9C:67:6B:35:A3:D3:EC:7B:42:89:C6:60:2E:0B:24:AB Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 76C692D2683F6E840CB78C6033E8580C92143192 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 024F Signing time: Tue 02 Dec 2025 09:31:03 +0000 Manifest this update: Tue 02 Dec 2025 09:26:03 +0000 Manifest next update: Fri 05 Dec 2025 12:46:03 +0000 Files and hashes: 1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: +MpZHy2+Wx9wRqQSmaHyh9sfjgZyW4D8AnJtpJVHJLA=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c6:92:d2:68:3f:6e:84:0c:b7:8c:60:33:e8:58:0c:92:14:31:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Dec 2 09:26:03 2025 GMT Not After : Dec 5 12:46:03 2025 GMT Subject: CN=6F7664439C676B35A3D3EC7B4289C6602E0B24AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:0b:c6:68:5a:01:72:67:9b:4f:00:20:66: bc:81:bb:c6:23:db:19:c1:ea:01:02:01:cd:cb:1a: 1b:1e:77:d6:84:f9:65:19:e8:1a:fb:1a:63:7f:27: 18:73:a4:b7:51:fd:76:3f:02:ac:43:fb:21:28:5f: bc:51:e6:1b:95:15:d0:7f:69:fb:fd:44:1d:ff:dc: 6d:aa:f7:78:62:8f:b0:32:2c:e2:cc:a3:f2:98:bc: ad:1e:7b:ab:28:59:39:d6:07:71:9a:3a:31:ae:da: e4:3c:07:31:a5:41:39:53:b9:1a:f2:62:49:a8:45: cb:2d:f0:d6:4a:44:67:64:3c:87:5c:67:54:a6:b4: db:27:eb:5d:ce:07:06:d3:d5:f7:c2:54:cf:d3:12: 84:67:1b:70:bb:a9:05:fb:06:fe:d0:2a:e7:2e:e2: 48:aa:af:b8:e3:4f:91:d7:4c:5b:0f:d6:b9:e7:dd: 6e:ee:3e:af:4c:7e:5e:43:c8:07:f3:f6:8b:f3:60: 2f:ce:65:d1:73:79:67:5c:fc:37:4c:4d:86:cf:fe: 43:62:3d:c9:ef:50:80:08:17:fe:e2:16:a5:31:34: 7c:2f:39:f4:5e:23:06:c5:d2:96:80:92:01:07:00: a2:52:c4:9a:59:e6:c4:e3:e6:fe:09:6a:a1:e8:b2: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:76:64:43:9C:67:6B:35:A3:D3:EC:7B:42:89:C6:60:2E:0B:24:AB X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b2:3d:9f:d0:44:bd:ab:cb:a2:95:51:3f:fd:8c:a0:e8:03: 76:3e:e7:fb:02:61:1f:b2:b1:a1:41:a4:62:25:d2:a1:99:d5: 6c:15:28:6c:f7:81:8c:1a:33:c8:92:3e:f9:45:ac:76:24:ad: f3:5b:eb:19:9c:33:04:27:95:45:86:1d:2e:20:45:d9:f7:b0: 5a:a5:54:42:6e:1d:8d:28:a0:4a:d6:77:56:42:8b:53:80:9b: 66:5a:6f:10:3c:86:c3:38:f5:b2:64:e0:ff:8c:63:65:d7:b2: 42:32:18:b1:3c:2e:a7:3e:ed:55:e7:62:fa:ed:a8:9f:a3:85: 0d:bb:d3:33:ed:dd:57:12:38:36:59:38:69:cb:21:63:39:71: 4a:5c:ae:b8:84:db:a8:94:f1:c5:eb:86:52:de:ac:90:4a:f1: d2:24:cf:3f:bd:ce:5e:70:33:7b:2a:e3:df:ec:9d:86:62:86: c4:8b:bb:bd:af:07:d8:e7:5d:ae:fa:4c:b8:ec:b3:35:66:f4: 3d:fa:30:ab:98:b1:eb:22:58:1f:c6:82:bd:40:17:ab:dc:1d: b1:3a:b1:1a:9b:93:ee:70:1e:bc:00:dc:0e:3d:3d:ff:24:6b: 4b:b9:4d:f8:5a:18:6b:28:4d:de:1c:01:37:c3:68:c4:17:69: e7:31:a7:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdsaS0mg/boQMt4xgM+hYDJIUMZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNTEyMDIwOTI2MDNaFw0yNTEyMDUxMjQ2MDNaMDMxMTAvBgNV BAMTKDZGNzY2NDQzOUM2NzZCMzVBM0QzRUM3QjQyODlDNjYwMkUwQjI0QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubQvGaFoBcmebTwAgZryBu8Yj 2xnB6gECAc3LGhsed9aE+WUZ6Br7GmN/JxhzpLdR/XY/AqxD+yEoX7xR5huVFdB/ afv9RB3/3G2q93hij7AyLOLMo/KYvK0ee6soWTnWB3GaOjGu2uQ8BzGlQTlTuRry YkmoRcst8NZKRGdkPIdcZ1SmtNsn613OBwbT1ffCVM/TEoRnG3C7qQX7Bv7QKucu 4kiqr7jjT5HXTFsP1rnn3W7uPq9Mfl5DyAfz9ovzYC/OZdFzeWdc/DdMTYbP/kNi PcnvUIAIF/7iFqUxNHwvOfReIwbF0paAkgEHAKJSxJpZ5sTj5v4JaqHosnYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb3ZkQ5xnazWj0+x7QonGYC4LJKswHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeyPZ/QRL2ry6KVUT/9jKDoA3Y+5/sCYR+y saFBpGIl0qGZ1WwVKGz3gYwaM8iSPvlFrHYkrfNb6xmcMwQnlUWGHS4gRdn3sFql VEJuHY0ooErWd1ZCi1OAm2ZabxA8hsM49bJk4P+MY2XXskIyGLE8Lqc+7VXnYvrt qJ+jhQ270zPt3VcSODZZOGnLIWM5cUpcrriE26iU8cXrhlLerJBK8dIkzz+9zl5w M3sq49/snYZihsSLu72vB9jnXa76TLjsszVm9D36MKuYsesiWB/Ggr1AF6vcHbE6 sRqbk+5wHrwA3A49Pf8ka0u5TfhaGGsoTd4cATfDaMQXaecxp4E= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:41 2025 by rpki-client