This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: jdk5tgr4ozvOY2kDoL78519+Nf1aRPPpYJABeS4BJWU= Subject key identifier: C5:E3:A1:D3:68:C8:9A:09:87:F1:FC:7C:9A:1F:D5:52:D2:E1:10:F2 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 4332E5BEE59B051FA63CF9C8015B060A9F8430ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 0384 Signing time: Fri 19 Dec 2025 13:12:32 +0000 Manifest this update: Fri 19 Dec 2025 13:07:32 +0000 Manifest next update: Mon 22 Dec 2025 23:26:32 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) 2: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) 3: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 4: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: Qn1Bmb1+LDsZUo1pC87OsGS+wDGa61bAaCx0BGeg84k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 23:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:32:e5:be:e5:9b:05:1f:a6:3c:f9:c8:01:5b:06:0a:9f:84:30:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Dec 19 13:07:32 2025 GMT Not After : Dec 22 23:26:32 2025 GMT Subject: CN=C5E3A1D368C89A0987F1FC7C9A1FD552D2E110F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:e5:c3:42:e0:c7:15:62:74:75:88:80:8b: dc:58:e4:b9:48:09:d7:ab:4e:b6:75:87:17:41:db: d8:d6:99:83:aa:70:6b:64:b2:10:4e:70:29:81:38: 01:6c:b5:4f:8b:5f:36:ac:30:0a:13:82:bc:0e:77: 50:02:bf:38:d1:27:96:2b:9a:f0:a8:3e:42:f0:b6: 8f:12:be:26:b8:60:aa:2f:69:d6:8c:0f:ac:54:f8: cb:8b:56:7b:42:71:f2:36:2f:8d:64:ce:d2:d9:94: c0:ca:2e:2f:7d:bd:57:da:7b:51:c8:0e:77:89:81: 0f:26:65:29:8f:1a:92:7f:fb:9e:b3:e9:7e:fd:4f: 4c:a8:56:5d:0f:9b:8b:0d:c8:6b:9f:18:4a:7f:29: e8:e0:05:66:a5:76:96:cf:a1:eb:00:e0:c6:71:dc: d4:23:87:b7:cb:2b:b6:d3:be:f2:e5:e3:10:62:a5: 49:e3:72:26:2b:40:cd:44:af:a2:75:8d:10:22:72: 51:30:c6:cb:79:55:bc:8e:ff:a2:a3:37:0a:40:31: 87:86:09:bd:cd:d1:2a:72:8e:3d:27:1a:dd:b1:58: e7:08:85:52:56:3e:62:d9:1a:f6:33:b2:1b:05:fc: 05:68:cc:3f:7e:33:0b:ba:25:db:30:28:f5:bc:32: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E3:A1:D3:68:C8:9A:09:87:F1:FC:7C:9A:1F:D5:52:D2:E1:10:F2 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5d:60:c2:2a:90:d0:2b:47:6b:52:a0:8c:49:d0:04:ab:82: 64:59:7e:56:96:81:09:ab:0d:66:65:c6:b2:7c:06:2e:23:c5: 80:dc:6e:6e:c4:06:13:cc:4d:eb:59:ff:32:d7:59:3a:5d:14: 76:09:6d:3f:00:03:2e:ef:bb:99:4c:13:8b:07:88:91:7e:d6: 7f:ac:69:4b:75:47:42:06:ec:e5:e3:2a:7f:12:bb:07:59:1f: 33:ed:7e:6e:4e:58:05:f5:2b:1b:e7:15:12:53:01:c8:bc:b8: be:f9:83:a4:49:1d:dc:07:50:b7:03:e6:65:c5:b0:70:c6:7d: 83:b5:4e:19:0f:90:00:fa:0a:9e:30:6c:97:a8:9c:97:bf:75: 1a:43:93:d7:a5:de:36:63:f8:c4:9c:25:5b:a4:16:e6:a0:8c: f7:c4:e9:5e:e0:ab:55:7c:ed:db:19:4f:37:ac:40:25:69:ca: 7f:38:e3:16:34:51:5f:8b:0c:9f:68:4a:34:bb:b8:5a:f4:bb: cf:a7:36:dd:54:29:2e:4d:1b:53:2a:7f:90:4f:53:7c:44:58: de:73:3b:2c:7a:f4:ee:31:b6:0b:b6:8d:98:65:32:a5:7b:a3: 8b:b3:c4:d5:d9:d8:10:7e:ee:7f:d8:d9:3a:1b:04:23:21:9c: b9:33:66:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzLlvuWbBR+mPPnIAVsGCp+EMO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTEyMTkxMzA3MzJaFw0yNTEyMjIyMzI2MzJaMDMxMTAvBgNV BAMTKEM1RTNBMUQzNjhDODlBMDk4N0YxRkM3QzlBMUZENTUyRDJFMTEwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCeXDQuDHFWJ0dYiAi9xY5LlI CderTrZ1hxdB29jWmYOqcGtkshBOcCmBOAFstU+LXzasMAoTgrwOd1ACvzjRJ5Yr mvCoPkLwto8Svia4YKovadaMD6xU+MuLVntCcfI2L41kztLZlMDKLi99vVfae1HI DneJgQ8mZSmPGpJ/+56z6X79T0yoVl0Pm4sNyGufGEp/KejgBWaldpbPoesA4MZx 3NQjh7fLK7bTvvLl4xBipUnjciYrQM1Er6J1jRAiclEwxst5VbyO/6KjNwpAMYeG Cb3N0Spyjj0nGt2xWOcIhVJWPmLZGvYzshsF/AVozD9+Mwu6JdswKPW8Mj6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxeOh02jImgmH8fx8mh/VUtLhEPIwHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZdYMIqkNArR2tSoIxJ0ASrgmRZflaWgQmr DWZlxrJ8Bi4jxYDcbm7EBhPMTetZ/zLXWTpdFHYJbT8AAy7vu5lME4sHiJF+1n+s aUt1R0IG7OXjKn8SuwdZHzPtfm5OWAX1KxvnFRJTAci8uL75g6RJHdwHULcD5mXF sHDGfYO1ThkPkAD6Cp4wbJeonJe/dRpDk9el3jZj+MScJVukFuagjPfE6V7gq1V8 7dsZTzesQCVpyn844xY0UV+LDJ9oSjS7uFr0u8+nNt1UKS5NG1Mqf5BPU3xEWN5z Oyx69O4xtgu2jZhlMqV7o4uzxNXZ2BB+7n/Y2TobBCMhnLkzZt4= -----END CERTIFICATE-----Generated at Sat Dec 20 12:39:01 2025 by rpki-client