This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: jMgtODDMfobzzokxv8l+dfEeqdmbaUYAtM5rTPWqw4o= Subject key identifier: 69:E3:E8:FF:C7:AE:6C:B2:88:99:2F:F1:16:A7:86:D3:51:63:43:77 Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 6E43345570C9C59A109208F10099B6AAFF4EBE09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 02A9 Signing time: Mon 01 Dec 2025 18:11:40 +0000 Manifest this update: Mon 01 Dec 2025 18:06:40 +0000 Manifest next update: Fri 05 Dec 2025 00:59:40 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: MCH1qGXZCwWowQxEKXIydmk2YPtLRIR8huYTskysftI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:43:34:55:70:c9:c5:9a:10:92:08:f1:00:99:b6:aa:ff:4e:be:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Dec 1 18:06:40 2025 GMT Not After : Dec 5 00:59:40 2025 GMT Subject: CN=69E3E8FFC7AE6CB288992FF116A786D351634377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:55:32:aa:09:cb:4e:aa:a7:3c:93:53:13: c3:04:de:98:92:60:1c:b2:73:06:ee:eb:b4:7f:b8: 1d:08:a3:55:8b:6a:91:00:b2:5b:ff:ff:38:b3:3d: e5:ab:0e:82:ee:23:78:ef:93:11:a5:ec:77:57:99: 77:cf:61:b3:4b:78:85:27:24:85:57:b2:8a:c4:dd: 41:ea:3c:a5:56:69:97:2e:5e:e5:d7:eb:ed:a2:6f: 42:5b:c5:b5:a8:17:06:d0:f0:64:bc:17:6e:99:00: 20:db:d4:ce:47:2f:3d:54:20:68:22:36:37:62:45: f2:08:0c:6f:ae:b9:66:ab:af:b3:44:2f:4a:e0:c0: 34:ac:1b:9a:80:70:5e:62:55:74:b8:7e:98:32:ee: bd:73:fe:f0:27:61:ad:5d:ed:08:4a:e2:19:b6:b3: 5b:14:93:f0:e5:52:f6:8a:b7:f9:5e:35:ad:72:98: 4c:1f:c3:fd:30:60:f6:8f:12:e0:0d:4b:89:6e:f0: f5:f5:99:46:6a:6d:57:9b:46:f9:30:27:49:22:49: 81:53:d0:08:2a:d0:06:5e:f5:4e:a7:30:27:22:23: 5e:a4:5e:1b:d8:75:33:a9:90:de:05:67:23:d2:a5: a1:48:4e:bd:5a:1c:b0:9e:05:c1:eb:32:ab:a1:66: 5e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E3:E8:FF:C7:AE:6C:B2:88:99:2F:F1:16:A7:86:D3:51:63:43:77 X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f9:86:ee:36:fa:4e:10:69:1b:6b:68:c9:93:2b:e9:8a:7f: d2:7d:ed:80:76:3f:23:fe:07:38:9d:c1:60:4d:64:52:45:17: 6a:3d:2f:6c:99:50:9f:56:78:b9:bf:5a:fc:5c:b0:e5:74:15: 10:15:ed:c3:b9:9d:cd:37:6c:08:41:f5:ad:8b:a1:27:b5:29: c7:2d:ed:54:9a:a1:2c:ea:56:16:61:50:a6:e6:62:95:58:1c: 43:c7:d3:9f:48:2f:42:b3:0d:a5:9c:7d:c7:e9:dd:a2:2a:a1: 54:f4:7a:84:d6:80:35:2e:a9:7e:2d:00:e9:1b:a6:c1:41:a5: e9:76:67:86:fe:81:0c:a2:94:88:04:8e:9f:33:88:e8:73:7d: bc:d2:a9:4e:fe:e2:42:3e:21:67:6c:c3:9d:6b:8a:47:f7:19: 87:7d:de:b1:67:bf:27:fd:f7:36:a8:50:49:34:41:48:ec:ac: ab:1a:3f:b5:11:9a:97:4e:61:11:e0:18:a5:e0:31:c9:80:6b: 10:26:a2:7e:5b:90:79:bf:ff:17:aa:dc:71:63:73:d7:10:27: 57:3e:e6:79:0d:44:07:4d:4a:8c:19:e6:b6:57:46:e7:58:b7: dc:1b:f9:8f:dd:17:66:03:ce:72:33:ea:33:6d:5a:54:ab:31: f2:ca:85:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbkM0VXDJxZoQkgjxAJm2qv9OvgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTEyMDExODA2NDBaFw0yNTEyMDUwMDU5NDBaMDMxMTAvBgNV BAMTKDY5RTNFOEZGQzdBRTZDQjI4ODk5MkZGMTE2QTc4NkQzNTE2MzQzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHFUyqgnLTqqnPJNTE8ME3piS YByycwbu67R/uB0Io1WLapEAslv//zizPeWrDoLuI3jvkxGl7HdXmXfPYbNLeIUn JIVXsorE3UHqPKVWaZcuXuXX6+2ib0JbxbWoFwbQ8GS8F26ZACDb1M5HLz1UIGgi NjdiRfIIDG+uuWarr7NEL0rgwDSsG5qAcF5iVXS4fpgy7r1z/vAnYa1d7QhK4hm2 s1sUk/DlUvaKt/leNa1ymEwfw/0wYPaPEuANS4lu8PX1mUZqbVebRvkwJ0kiSYFT 0Agq0AZe9U6nMCciI16kXhvYdTOpkN4FZyPSpaFITr1aHLCeBcHrMquhZl4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaePo/8eubLKImS/xFqeG01FjQ3cwHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACr5hu42+k4QaRtraMmTK+mKf9J97YB2PyP+ BzidwWBNZFJFF2o9L2yZUJ9WeLm/WvxcsOV0FRAV7cO5nc03bAhB9a2LoSe1Kcct 7VSaoSzqVhZhUKbmYpVYHEPH059IL0KzDaWcfcfp3aIqoVT0eoTWgDUuqX4tAOkb psFBpel2Z4b+gQyilIgEjp8ziOhzfbzSqU7+4kI+IWdsw51rikf3GYd93rFnvyf9 9zaoUEk0QUjsrKsaP7URmpdOYRHgGKXgMcmAaxAmon5bkHm//xeq3HFjc9cQJ1c+ 5nkNRAdNSowZ5rZXRudYt9wb+Y/dF2YDznIz6jNtWlSrMfLKhQA= -----END CERTIFICATE-----Generated at Wed Dec 3 16:51:02 2025 by rpki-client