This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: wratJ0aHpxrHs97J66p1g8aW5cH9/qhx5kodlrgix+I= Subject key identifier: 4E:65:CD:F1:2F:FE:3C:91:94:93:21:B7:EB:0A:40:31:A7:75:69:7F Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 67C7F0259BA5C0F3EF725C9F224F440D015DBEDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 02DA Signing time: Wed 17 Dec 2025 15:32:11 +0000 Manifest this update: Wed 17 Dec 2025 15:27:11 +0000 Manifest next update: Sat 20 Dec 2025 23:40:11 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=) 2: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: 2FQh89nKt/hfjShSdaSUzAdBc+omchCrg309FhlFFJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c7:f0:25:9b:a5:c0:f3:ef:72:5c:9f:22:4f:44:0d:01:5d:be:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Dec 17 15:27:11 2025 GMT Not After : Dec 20 23:40:11 2025 GMT Subject: CN=4E65CDF12FFE3C91949321B7EB0A4031A775697F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:bc:69:2f:78:96:7a:20:1a:fe:e0:36:c6: e3:51:01:95:d7:c8:20:a4:74:9b:fd:70:5e:ce:6c: b4:60:70:db:97:68:3f:6a:42:57:eb:74:42:3e:e7: 31:8c:c4:a2:09:b9:9c:0b:93:00:9f:c0:9b:92:15: fe:08:21:95:80:7b:47:04:48:fa:39:d9:82:f2:2c: f0:4d:24:1a:29:9f:b3:4d:7d:7b:d7:48:be:96:77: d7:7f:c5:14:93:9f:45:73:f0:30:e8:07:e2:c7:d0: 45:c0:7d:6b:a2:7c:a7:b6:2c:e3:3d:5a:75:16:f5: 51:d0:d6:0e:1f:93:2e:db:d9:a0:c5:42:08:f1:cf: ff:ea:a4:52:97:42:84:15:fd:83:0b:ba:cb:69:95: 9b:d6:05:c1:5a:5c:3a:c8:4d:ff:de:9d:9f:9d:15: f6:bd:80:ca:cc:cf:30:af:1b:c7:80:af:f5:c8:62: d0:9e:9b:67:56:f7:ce:14:ca:4e:4f:6a:0f:3a:46: fe:99:5a:9c:6b:53:20:5f:ad:36:9c:01:29:ae:f2: 62:89:03:07:8e:45:15:b7:be:dc:e2:69:93:db:f4: a1:30:7a:49:bf:24:b7:16:48:70:cb:09:9c:07:41: 4f:de:ec:f1:03:08:ea:89:02:34:fc:38:f2:db:93: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:65:CD:F1:2F:FE:3C:91:94:93:21:B7:EB:0A:40:31:A7:75:69:7F X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ac:67:d8:e0:2b:f4:fe:97:4d:98:81:a5:50:2c:3a:d0:be: 32:09:ff:00:18:22:4a:c4:82:01:4e:5f:cb:72:0f:40:57:aa: 71:07:66:58:0f:3c:8c:e4:89:8b:43:aa:f7:5f:a0:c8:24:5f: 6c:30:99:17:55:ed:f8:b4:a8:58:86:b6:61:b4:33:17:39:f4: 85:7d:d9:91:67:68:01:40:a7:8b:cc:5d:f8:b8:f5:eb:41:0d: 66:0f:90:89:75:31:05:3a:dd:bb:3a:d8:a2:fb:64:09:b3:ee: 9c:fd:ed:dd:3f:9a:35:17:1c:17:e0:d0:a5:14:e7:ff:b2:61: 0c:75:0d:cf:53:ab:61:f0:c2:eb:89:f4:cc:61:b4:e8:5f:37: 5a:e5:c3:89:8b:48:cb:3b:37:3a:ba:56:f9:76:b0:cf:85:d3: ac:bf:7e:95:ef:a5:8d:ed:4a:d2:15:06:a7:c6:3b:27:fc:be: ac:62:9e:e1:f0:a6:0c:8a:b9:30:32:ba:70:27:0a:cc:26:a8: be:da:95:16:3d:56:35:7d:e5:f8:22:60:ad:61:1f:24:8b:75: a1:54:0b:8a:fa:50:88:74:72:eb:b8:6c:56:24:9b:f4:4d:2e: 13:1e:6a:53:51:58:d5:d4:9b:10:23:0d:2f:a2:f5:b5:44:11: 29:ec:93:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8fwJZulwPPvclyfIk9EDQFdvtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTEyMTcxNTI3MTFaFw0yNTEyMjAyMzQwMTFaMDMxMTAvBgNV BAMTKDRFNjVDREYxMkZGRTNDOTE5NDkzMjFCN0VCMEE0MDMxQTc3NTY5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC577xpL3iWeiAa/uA2xuNRAZXX yCCkdJv9cF7ObLRgcNuXaD9qQlfrdEI+5zGMxKIJuZwLkwCfwJuSFf4IIZWAe0cE SPo52YLyLPBNJBopn7NNfXvXSL6Wd9d/xRSTn0Vz8DDoB+LH0EXAfWuifKe2LOM9 WnUW9VHQ1g4fky7b2aDFQgjxz//qpFKXQoQV/YMLustplZvWBcFaXDrITf/enZ+d Ffa9gMrMzzCvG8eAr/XIYtCem2dW984Uyk5Pag86Rv6ZWpxrUyBfrTacASmu8mKJ AweORRW3vtziaZPb9KEwekm/JLcWSHDLCZwHQU/e7PEDCOqJAjT8OPLbk/xvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTmXN8S/+PJGUkyG36wpAMad1aX8wHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6sZ9jgK/T+l02YgaVQLDrQvjIJ/wAYIkrE ggFOX8tyD0BXqnEHZlgPPIzkiYtDqvdfoMgkX2wwmRdV7fi0qFiGtmG0Mxc59IV9 2ZFnaAFAp4vMXfi49etBDWYPkIl1MQU63bs62KL7ZAmz7pz97d0/mjUXHBfg0KUU 5/+yYQx1Dc9Tq2HwwuuJ9MxhtOhfN1rlw4mLSMs7Nzq6Vvl2sM+F06y/fpXvpY3t StIVBqfGOyf8vqxinuHwpgyKuTAyunAnCswmqL7alRY9VjV95fgiYK1hHySLdaFU C4r6UIh0cuu4bFYkm/RNLhMealNRWNXUmxAjDS+i9bVEESnsk5A= -----END CERTIFICATE-----Generated at Thu Dec 18 12:24:04 2025 by rpki-client