This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: Jj0eqPktkfK9Iqclp3bJU+GVJSa1gE5Cxuaum2mt8I8= Subject key identifier: DB:AA:B9:FF:26:EA:67:30:54:19:28:69:D9:63:42:E6:31:BA:9C:FE Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 17904647E72AE48B8806743DA599CF2A2B159E95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 02B0 Signing time: Wed 17 Dec 2025 03:01:41 +0000 Manifest this update: Wed 17 Dec 2025 02:56:41 +0000 Manifest next update: Sat 20 Dec 2025 12:43:41 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: 7cVPZRj2yOvB7m6GavAQtJWpONpqUwDuE7CydrLp0Ic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:90:46:47:e7:2a:e4:8b:88:06:74:3d:a5:99:cf:2a:2b:15:9e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Dec 17 02:56:41 2025 GMT Not After : Dec 20 12:43:41 2025 GMT Subject: CN=DBAAB9FF26EA673054192869D96342E631BA9CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:1e:ac:37:b1:4c:bc:4e:f9:1d:ab:23:7f: 34:06:02:7f:ce:f1:a1:a5:54:44:b4:d1:3a:51:ad: 9c:30:40:94:74:49:a1:5f:dc:63:d1:8a:cf:6a:52: af:08:ac:10:a0:c6:22:b5:10:60:00:a2:69:8e:d2: dc:59:61:33:91:78:ce:0f:81:5d:78:76:b0:33:b5: 4b:02:18:f9:83:43:07:60:f5:8b:f0:6c:8a:f5:0c: 62:71:d4:6e:55:6b:f6:9d:3b:97:bc:47:19:3f:93: 03:95:a3:c9:bd:d5:86:af:7a:1b:38:2d:73:40:42: 91:00:de:38:2d:1f:c7:3c:79:1d:81:37:7a:35:c5: 5a:72:70:97:3e:2b:eb:08:6a:39:aa:67:15:e7:57: 7e:41:41:d8:95:dc:33:04:f9:a0:71:dc:f1:e2:c4: bc:de:cb:9d:29:bb:f6:d9:f8:45:7f:f9:27:8d:b4: 33:51:3d:cf:12:d8:26:fe:02:cb:ea:ed:23:b0:7c: c2:e5:19:e5:87:18:11:54:4b:b1:57:93:37:5f:0b: 4c:d8:69:ec:5d:72:5a:2d:ab:a9:54:d7:60:7e:d1: 87:a6:56:cf:8d:00:ae:95:60:a2:17:58:86:02:ba: b0:15:06:6b:8c:e3:ef:72:e8:b0:a8:0f:54:39:d1: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AA:B9:FF:26:EA:67:30:54:19:28:69:D9:63:42:E6:31:BA:9C:FE X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cd:ab:aa:8b:cf:25:f6:4b:d9:09:b5:58:0f:31:ce:5e:fc: 21:2a:14:0c:ab:f6:90:26:31:de:25:65:0d:4c:01:8d:87:47: d8:0b:1a:40:46:66:c5:0a:74:e7:a7:6b:e3:8a:06:b0:69:9f: a4:a5:78:6d:df:d2:ad:af:89:78:41:fe:70:09:d5:23:cd:16: 9c:83:e9:29:3e:34:36:3a:ff:13:bf:04:d1:de:8a:42:c8:96: a0:11:b8:a7:2f:0c:6c:e3:61:fa:ff:fa:c0:1f:7c:63:6c:6d: 71:92:35:59:d0:9d:e0:f9:47:57:4b:22:7e:92:27:6c:eb:04: 1f:b2:72:d9:e9:11:fa:c0:fe:2d:f8:09:a8:4a:7e:84:84:1d: 9d:b3:04:a5:f3:d4:22:ef:35:66:37:ee:05:92:e6:b9:7b:13: 07:a0:01:36:3b:c6:61:d3:d0:b1:28:aa:b1:81:d3:13:7b:57: 06:19:aa:9d:26:ed:c9:90:69:04:5a:07:bc:d6:cb:fe:fc:f4: 16:c8:cf:68:2c:e7:c0:f3:c7:b7:57:78:cd:41:d9:72:52:94: dc:ec:66:41:20:d4:13:5b:4f:de:82:31:76:cc:48:58:c8:91: d1:99:47:47:2b:20:7d:41:d0:0e:27:8f:90:cd:44:59:95:ef: 83:e2:d6:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5BGR+cq5IuIBnQ9pZnPKisVnpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTEyMTcwMjU2NDFaFw0yNTEyMjAxMjQzNDFaMDMxMTAvBgNV BAMTKERCQUFCOUZGMjZFQTY3MzA1NDE5Mjg2OUQ5NjM0MkU2MzFCQTlDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvh6sN7FMvE75HasjfzQGAn/O 8aGlVES00TpRrZwwQJR0SaFf3GPRis9qUq8IrBCgxiK1EGAAommO0txZYTOReM4P gV14drAztUsCGPmDQwdg9YvwbIr1DGJx1G5Va/adO5e8Rxk/kwOVo8m91Yavehs4 LXNAQpEA3jgtH8c8eR2BN3o1xVpycJc+K+sIajmqZxXnV35BQdiV3DME+aBx3PHi xLzey50pu/bZ+EV/+SeNtDNRPc8S2Cb+Asvq7SOwfMLlGeWHGBFUS7FXkzdfC0zY aexdclotq6lU12B+0YemVs+NAK6VYKIXWIYCurAVBmuM4+9y6LCoD1Q50fptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU26q5/ybqZzBUGShp2WNC5jG6nP4wHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrNq6qLzyX2S9kJtVgPMc5e/CEqFAyr9pAm Md4lZQ1MAY2HR9gLGkBGZsUKdOena+OKBrBpn6SleG3f0q2viXhB/nAJ1SPNFpyD 6Sk+NDY6/xO/BNHeikLIlqARuKcvDGzjYfr/+sAffGNsbXGSNVnQneD5R1dLIn6S J2zrBB+yctnpEfrA/i34CahKfoSEHZ2zBKXz1CLvNWY37gWS5rl7EwegATY7xmHT 0LEoqrGB0xN7VwYZqp0m7cmQaQRaB7zWy/789BbIz2gs58Dzx7dXeM1B2XJSlNzs ZkEg1BNbT96CMXbMSFjIkdGZR0crIH1B0A4nj5DNRFmV74Pi1oU= -----END CERTIFICATE-----Generated at Fri Dec 19 01:10:46 2025 by rpki-client