This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: Cpldzt1p8qrcg/C5Nw49oZMYBwA1yY19q/69aj7GDXM= Subject key identifier: 08:42:8B:95:20:69:10:99:4F:42:C8:E5:95:FC:F6:DD:0D:6A:09:CD Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 45A2C1CC526CBF6CAF620C4539CBFC1C847CCF49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 01C4 Signing time: Tue 02 Dec 2025 05:31:04 +0000 Manifest this update: Tue 02 Dec 2025 05:26:04 +0000 Manifest next update: Fri 05 Dec 2025 10:49:04 +0000 Files and hashes: 1: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: AgLvlSE1smWWR/jE1YysJDc3mDL4n9sETXp5KZ0HtjU=) 2: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: zNhXn21f8uJy/aWJTOfz4SAnrFDlMHgCrlX6oTO10W8=) 3: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: uICRVqRri8R1EgyBPUsLQp4TscukJjiepoiJFR6/Ibc=) 4: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: IgBk8nUZZ29ZSChbWhRLqEMkR6u+A1fqdcf9ejFY80Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a2:c1:cc:52:6c:bf:6c:af:62:0c:45:39:cb:fc:1c:84:7c:cf:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Dec 2 05:26:04 2025 GMT Not After : Dec 5 10:49:04 2025 GMT Subject: CN=08428B95206910994F42C8E595FCF6DD0D6A09CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:e0:6c:23:08:34:43:85:7a:ad:e9:79:9b: 1f:14:00:49:83:34:c5:60:43:c3:38:58:9c:7b:fe: cf:d6:85:da:95:d7:65:19:49:9d:61:78:ea:73:15: 55:bc:b7:fb:2a:3f:26:6c:6e:2d:d5:40:0c:77:7f: d1:99:2d:12:df:5f:f1:5b:71:a0:42:23:f4:c1:6c: ad:f7:89:ac:62:e3:69:4f:3f:4f:86:96:fe:c8:08: db:ab:3e:a6:cd:5a:47:00:72:de:3d:d2:6a:f6:7a: cf:0a:ef:bb:e4:36:ee:00:d2:42:89:cb:27:b4:45: 87:04:17:0c:9e:f2:38:47:e0:47:52:8e:f2:68:52: da:e9:88:16:a5:1c:a9:40:62:11:bb:66:96:6c:92: 14:06:a8:d2:f3:c7:a7:58:a2:8d:15:43:be:35:62: a4:fc:86:72:e0:6b:9d:88:bb:9d:45:bf:c0:61:b2: c4:15:ea:e0:11:cb:bf:fd:35:0a:1b:59:17:ae:a3: 9b:2a:b0:c4:81:31:b5:b6:6f:1b:cf:ae:7a:a7:49: 92:b0:b7:66:4e:98:2a:1c:18:d2:ec:69:24:96:59: a5:7a:8e:c7:ef:33:10:6f:d7:59:9d:8e:8f:e1:05: a6:e3:63:41:bf:60:12:4a:93:57:cb:ff:2a:71:38: 0a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:42:8B:95:20:69:10:99:4F:42:C8:E5:95:FC:F6:DD:0D:6A:09:CD X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:61:81:ae:40:c2:ff:a4:5d:fb:d4:7d:a2:48:8d:13:a2:1d: d6:ca:65:03:2e:97:0d:9d:ce:20:63:dc:2e:17:8d:bb:be:e5: 9c:93:86:13:48:ce:36:ae:09:b1:04:1c:12:33:44:85:f7:60: 51:8d:8e:df:e8:21:2d:ab:a2:f0:05:46:29:60:07:9f:68:71: e1:3e:6d:91:99:77:43:b6:0a:30:c8:72:9e:70:57:a6:9b:c8: a3:2a:72:1f:cb:e2:8d:66:90:a2:9a:b8:db:85:21:1a:0a:c3: b0:66:14:6c:57:e8:a7:23:f7:b1:6e:91:1c:9b:62:21:12:ef: bf:c8:ba:03:cc:04:a0:c1:ed:8e:88:8c:4e:03:80:0e:88:4e: ab:c3:85:6e:cb:5f:e4:36:f9:0c:af:f8:28:06:b8:55:0f:9b: d0:a5:d5:ad:5d:4f:4e:75:09:53:c1:fc:bf:47:a7:ff:c7:f3: d0:e4:7e:3c:50:02:03:40:06:50:a1:d9:93:55:c7:59:18:2b: ba:18:c8:ed:21:df:a0:66:a2:72:43:0d:5d:96:3e:2b:ae:a5: 68:99:44:d7:eb:87:c8:fa:3d:f4:96:88:6a:49:e4:c0:b4:83: 3b:b2:7d:1d:36:03:63:ea:e9:85:48:0c:5f:6a:74:cc:9c:37: 2d:38:c0:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURaLBzFJsv2yvYgxFOcv8HIR8z0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNTEyMDIwNTI2MDRaFw0yNTEyMDUxMDQ5MDRaMDMxMTAvBgNV BAMTKDA4NDI4Qjk1MjA2OTEwOTk0RjQyQzhFNTk1RkNGNkREMEQ2QTA5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGuBsIwg0Q4V6rel5mx8UAEmD NMVgQ8M4WJx7/s/WhdqV12UZSZ1heOpzFVW8t/sqPyZsbi3VQAx3f9GZLRLfX/Fb caBCI/TBbK33iaxi42lPP0+Glv7ICNurPqbNWkcAct490mr2es8K77vkNu4A0kKJ yye0RYcEFwye8jhH4EdSjvJoUtrpiBalHKlAYhG7ZpZskhQGqNLzx6dYoo0VQ741 YqT8hnLga52Iu51Fv8BhssQV6uARy7/9NQobWReuo5sqsMSBMbW2bxvPrnqnSZKw t2ZOmCocGNLsaSSWWaV6jsfvMxBv11mdjo/hBabjY0G/YBJKk1fL/ypxOAqNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCEKLlSBpEJlPQsjllfz23Q1qCc0wHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhhga5Awv+kXfvUfaJIjROiHdbKZQMulw2d ziBj3C4Xjbu+5ZyThhNIzjauCbEEHBIzRIX3YFGNjt/oIS2rovAFRilgB59oceE+ bZGZd0O2CjDIcp5wV6abyKMqch/L4o1mkKKauNuFIRoKw7BmFGxX6Kcj97FukRyb YiES77/IugPMBKDB7Y6IjE4DgA6ITqvDhW7LX+Q2+Qyv+CgGuFUPm9Cl1a1dT051 CVPB/L9Hp//H89DkfjxQAgNABlCh2ZNVx1kYK7oYyO0h36BmonJDDV2WPiuupWiZ RNfrh8j6PfSWiGpJ5MC0gzuyfR02A2Pq6YVIDF9qdMycNy04wDs= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:39 2025 by rpki-client