This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: RRjbcSA0G3hLa8miVbtUbGeaJ4v8gbhEmio5zoKQLEM= Subject key identifier: 0F:F0:38:45:B6:9D:9F:E0:BE:86:75:43:4B:A4:AB:23:8D:AD:13:75 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 6E1881DFD79D334C973E1EE1FA6A80544047440A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 037C Signing time: Tue 02 Dec 2025 00:51:57 +0000 Manifest this update: Tue 02 Dec 2025 00:46:57 +0000 Manifest next update: Fri 05 Dec 2025 06:53:57 +0000 Files and hashes: 1: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 2: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) 3: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: qdX1oFyKHyS/XBQ+MMNTMJ4y87aJJG+rNoqy48VTJvQ=) 4: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:18:81:df:d7:9d:33:4c:97:3e:1e:e1:fa:6a:80:54:40:47:44:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Dec 2 00:46:57 2025 GMT Not After : Dec 5 06:53:57 2025 GMT Subject: CN=0FF03845B69D9FE0BE8675434BA4AB238DAD1375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:2b:ea:c2:bd:dc:9d:56:ca:7c:65:35:e6: 48:db:cf:67:a9:61:80:9a:a9:a2:26:ed:83:0e:7d: de:ae:03:bb:3a:0a:b6:0b:52:9c:ce:29:d9:a8:a0: 34:f9:bf:84:66:09:15:e3:c8:bf:54:57:73:88:af: 3e:b5:f6:5b:52:c9:ac:0d:a2:6e:e6:91:e0:87:f8: 46:3d:1e:6c:6a:97:94:36:ce:6d:cf:10:8c:d6:9c: c1:67:df:5d:3f:86:ab:8a:2b:6c:dc:4f:97:37:2b: db:2c:ca:4e:bc:d1:93:5f:fb:49:b5:a2:a6:83:e4: 97:e1:ab:4e:e8:1e:d4:87:e0:5c:4c:8a:96:6d:15: 29:6d:d2:8d:59:8b:fc:1b:cb:d8:a2:5a:54:db:8b: a1:04:a3:1d:ba:9a:a7:32:9e:cd:dc:05:92:ac:d3: 7a:5b:92:3f:98:47:bf:ef:f1:c2:12:ce:5d:00:b2: f9:b0:bf:23:62:eb:65:81:cf:7c:2d:9e:7c:f5:fe: e5:3c:8a:2d:0a:03:60:c3:05:03:9c:9c:c4:93:b6: 87:63:3c:2d:14:60:92:df:52:3a:9d:d1:5e:09:80: 99:7c:1a:6c:22:12:72:ac:72:42:e6:07:5a:fe:3b: 8f:1c:b7:48:a5:a6:57:ee:d4:ee:72:0e:67:9f:17: 5e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F0:38:45:B6:9D:9F:E0:BE:86:75:43:4B:A4:AB:23:8D:AD:13:75 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a4:cb:65:d9:f0:27:b1:84:94:42:9d:29:93:a2:1d:4c:cf: bb:46:b4:cf:f9:ee:c7:45:1f:ba:82:22:0d:56:ea:d8:96:62: 4f:a6:57:1f:f0:a0:e6:57:eb:15:c4:5c:c3:59:b5:ed:6e:58: e3:49:11:b1:4a:42:86:f4:e7:08:38:f1:8f:e3:20:8b:97:b2: 89:54:e4:7f:5a:a6:5c:bf:48:46:30:70:30:6f:a5:27:7f:2a: 93:f4:a6:c7:f0:8c:d6:3d:ca:bf:4c:d3:d9:dc:07:1f:b4:ea: 52:d3:ea:03:c6:b7:91:2d:11:b3:1a:92:29:c0:fc:f6:0b:4b: 81:28:6d:57:f0:82:85:fa:c8:aa:e6:35:ab:06:e9:72:ef:12: 0c:8b:d1:16:97:8c:38:85:28:16:60:73:5f:a6:ad:64:02:3c: 86:5d:07:99:f9:32:70:02:05:61:75:cf:b5:21:15:eb:47:72: cf:9e:05:91:e9:8b:03:88:5e:06:2a:c2:13:7f:35:36:8c:42: f1:4e:64:ea:85:30:1a:96:fe:6e:60:9a:bd:f5:e5:a0:69:a3: 7d:00:69:a5:8f:55:4d:3e:e0:36:09:f9:f4:29:fe:eb:c8:84: 21:3a:16:ab:eb:72:81:1d:f1:5a:b8:97:3b:37:cf:41:5b:5e: 2b:5c:e5:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhiB39edM0yXPh7h+mqAVEBHRAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTEyMDIwMDQ2NTdaFw0yNTEyMDUwNjUzNTdaMDMxMTAvBgNV BAMTKDBGRjAzODQ1QjY5RDlGRTBCRTg2NzU0MzRCQTRBQjIzOERBRDEzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9Cvqwr3cnVbKfGU15kjbz2ep YYCaqaIm7YMOfd6uA7s6CrYLUpzOKdmooDT5v4RmCRXjyL9UV3OIrz619ltSyawN om7mkeCH+EY9Hmxql5Q2zm3PEIzWnMFn310/hquKK2zcT5c3K9ssyk680ZNf+0m1 oqaD5Jfhq07oHtSH4FxMipZtFSlt0o1Zi/wby9iiWlTbi6EEox26mqcyns3cBZKs 03pbkj+YR7/v8cISzl0AsvmwvyNi62WBz3wtnnz1/uU8ii0KA2DDBQOcnMSTtodj PC0UYJLfUjqd0V4JgJl8GmwiEnKsckLmB1r+O48ct0ilplfu1O5yDmefF14ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD/A4Rbadn+C+hnVDS6SrI42tE3UwHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWky2XZ8CexhJRCnSmToh1Mz7tGtM/57sdF H7qCIg1W6tiWYk+mVx/woOZX6xXEXMNZte1uWONJEbFKQob05wg48Y/jIIuXsolU 5H9aply/SEYwcDBvpSd/KpP0psfwjNY9yr9M09ncBx+06lLT6gPGt5EtEbMakinA /PYLS4EobVfwgoX6yKrmNasG6XLvEgyL0RaXjDiFKBZgc1+mrWQCPIZdB5n5MnAC BWF1z7UhFetHcs+eBZHpiwOIXgYqwhN/NTaMQvFOZOqFMBqW/m5gmr315aBpo30A aaWPVU0+4DYJ+fQp/uvIhCE6FqvrcoEd8Vq4lzs3z0FbXitc5Yg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:33 2025 by rpki-client