This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: QAUVJ6a6mMEHQbOL6IdO7FQ4qDTo9Mn1GaVbQnLgzEk= Subject key identifier: 82:DA:D4:60:4D:58:F1:EA:9F:18:7F:EE:E7:A7:ED:FF:DE:81:19:C8 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 2705733FEFCD78C7903C37BAE6B99357DE9BB3FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 0226 Signing time: Tue 02 Dec 2025 02:31:05 +0000 Manifest this update: Tue 02 Dec 2025 02:26:05 +0000 Manifest next update: Fri 05 Dec 2025 03:58:05 +0000 Files and hashes: 1: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) 2: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: 3cUUmwA/28Y5Bh3nYyLf6B8Y9I1rv7MWlD8RAepnUsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:05:73:3f:ef:cd:78:c7:90:3c:37:ba:e6:b9:93:57:de:9b:b3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Dec 2 02:26:05 2025 GMT Not After : Dec 5 03:58:05 2025 GMT Subject: CN=82DAD4604D58F1EA9F187FEEE7A7EDFFDE8119C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:96:01:73:60:ac:d7:cd:36:f6:f4:26:74: 31:45:05:e2:38:c6:a5:62:fa:78:c0:ea:e6:df:1a: 85:7a:99:e1:a7:40:f1:6c:5f:bf:96:8a:5b:af:0c: e3:64:8b:79:ac:90:3a:55:c7:d9:a6:39:e6:4e:29: 69:d4:42:28:77:dc:1f:b3:b6:9a:00:92:b8:ee:f7: 9f:48:7f:64:c2:89:3b:a4:02:9d:1e:c3:ef:af:04: 0a:45:f4:ac:ff:ea:e1:48:20:47:fc:71:5a:4a:69: 30:75:ff:70:f9:27:d8:f8:8c:de:ec:90:86:90:6f: 84:5c:11:e8:32:c7:95:05:fd:7b:e1:62:5c:85:da: 9b:a1:3a:06:c8:49:d5:e2:89:22:0a:1e:72:87:21: 18:57:ba:0a:bd:8f:7d:a5:e6:29:36:0a:ef:e4:b0: 8f:fc:7d:b0:17:23:1d:94:30:80:7f:80:7f:dd:b5: 73:28:8a:f1:8e:7e:64:e3:b9:31:45:0d:c7:fa:b0: 1d:49:da:1b:3d:f0:80:f9:9e:06:ca:95:3e:5c:50: a0:7c:3f:77:7d:0e:80:21:54:07:1e:26:d3:80:e1: b6:bf:d8:b7:b8:d3:6a:73:92:8a:1a:8a:64:2b:4d: 12:13:b5:2c:1d:3e:70:00:17:18:ae:ce:36:a8:ba: 55:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DA:D4:60:4D:58:F1:EA:9F:18:7F:EE:E7:A7:ED:FF:DE:81:19:C8 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e7:2d:be:15:c8:cb:2f:10:0d:c1:cb:d2:5d:2c:6b:47:95: 81:82:d4:f6:6d:7a:03:20:42:ae:5f:a6:d8:7f:4a:b0:25:77: ca:3f:bf:f2:11:dc:a7:a7:9a:19:f6:e1:ce:10:b3:6a:47:23: c0:de:38:27:bf:c3:ce:ce:cc:d7:68:78:d9:af:c8:d3:45:91: 42:3c:3a:54:38:4b:c6:f4:d5:89:7e:79:a8:02:54:86:d8:6d: 42:5c:fa:be:ac:1f:7b:03:9f:16:79:2a:a1:63:bc:e0:57:16: a9:ba:1d:e8:9e:10:60:78:45:8c:e5:7c:4e:54:bc:47:59:46: eb:d3:2e:e5:81:38:ac:53:be:6b:4b:70:55:e9:ae:f1:d5:2f: 43:8d:6b:a7:ba:40:42:7e:8f:e1:31:51:2e:94:e1:b3:78:78: 34:0c:57:ab:12:94:65:58:da:43:80:fe:6f:3d:d0:cb:74:f1: 26:30:a4:be:d4:7b:c7:64:27:da:11:72:63:f0:55:3c:05:44: df:95:44:4b:65:54:54:b3:3b:62:a4:0b:f4:e6:83:f2:30:aa: e7:29:ec:f4:a6:4e:55:8e:69:f6:0b:fa:2d:6a:51:92:4c:ce: 5f:00:6f:3e:7c:e4:e7:34:66:74:61:d4:c6:3f:6c:ab:eb:bf: fd:81:8d:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwVzP+/NeMeQPDe65rmTV96bs/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTEyMDIwMjI2MDVaFw0yNTEyMDUwMzU4MDVaMDMxMTAvBgNV BAMTKDgyREFENDYwNEQ1OEYxRUE5RjE4N0ZFRUU3QTdFREZGREU4MTE5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFA5YBc2Cs18029vQmdDFFBeI4 xqVi+njA6ubfGoV6meGnQPFsX7+WiluvDONki3mskDpVx9mmOeZOKWnUQih33B+z tpoAkrju959If2TCiTukAp0ew++vBApF9Kz/6uFIIEf8cVpKaTB1/3D5J9j4jN7s kIaQb4RcEegyx5UF/XvhYlyF2puhOgbISdXiiSIKHnKHIRhXugq9j32l5ik2Cu/k sI/8fbAXIx2UMIB/gH/dtXMoivGOfmTjuTFFDcf6sB1J2hs98ID5ngbKlT5cUKB8 P3d9DoAhVAceJtOA4ba/2Le402pzkooaimQrTRITtSwdPnAAFxiuzjaoulWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgtrUYE1Y8eqfGH/u56ft/96BGcgwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLnLb4VyMsvEA3By9JdLGtHlYGC1PZtegMg Qq5fpth/SrAld8o/v/IR3Kenmhn24c4Qs2pHI8DeOCe/w87OzNdoeNmvyNNFkUI8 OlQ4S8b01Yl+eagCVIbYbUJc+r6sH3sDnxZ5KqFjvOBXFqm6HeieEGB4RYzlfE5U vEdZRuvTLuWBOKxTvmtLcFXprvHVL0ONa6e6QEJ+j+ExUS6U4bN4eDQMV6sSlGVY 2kOA/m890Mt08SYwpL7Ue8dkJ9oRcmPwVTwFRN+VREtlVFSzO2KkC/Tmg/Iwqucp 7PSmTlWOafYL+i1qUZJMzl8Abz585Oc0ZnRh1MY/bKvrv/2BjWs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:25 2025 by rpki-client