This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft File: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json) Hash identifier: vxtRlaucmTouQs7LpeeG2bttHixC6GGaVLyaf3zqiv4= Subject key identifier: 8E:2F:95:4F:C1:68:29:8A:D0:6F:0E:71:28:92:79:9D:A1:1D:07:DE Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Certificate serial: 774421CBF2642A8A7B3A004887DAC06C9BCD1E4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft Manifest number: 0217 Signing time: Wed 03 Dec 2025 09:41:58 +0000 Manifest this update: Wed 03 Dec 2025 09:36:58 +0000 Manifest next update: Sat 06 Dec 2025 09:48:58 +0000 Files and hashes: 1: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: y74Fq7xBwrLrVODxse6nlkhCY30YnX30/QirS55B+HU=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: ztOieajHr1k+CIYjNgErkUbe6vEvP2EXx+nQ8S+WL90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:44:21:cb:f2:64:2a:8a:7b:3a:00:48:87:da:c0:6c:9b:cd:1e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Validity Not Before: Dec 3 09:36:58 2025 GMT Not After : Dec 6 09:48:58 2025 GMT Subject: CN=8E2F954FC168298AD06F0E712892799DA11D07DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:59:14:ba:ed:e4:59:96:ae:b9:e7:94:73: c3:be:6a:37:4f:e5:39:b0:81:25:52:3b:8c:23:d8: 68:02:85:fd:68:8d:cb:b6:5f:4d:a8:88:41:44:7b: 6e:8a:92:15:64:1f:d3:69:4b:63:ab:0d:3b:ce:c7: 83:6f:22:4f:a8:97:71:c1:a5:2d:db:ae:82:28:e6: b9:ae:b2:b1:db:57:65:d8:1d:5d:38:9c:c9:49:f6: 70:36:7f:42:f0:1b:d0:9a:d5:b8:14:84:06:3b:85: 1b:91:09:92:34:43:d7:f0:28:b9:21:27:2e:de:c7: 16:57:a6:48:73:97:3d:23:26:13:a0:05:a2:5f:e4: 50:f3:95:61:03:f5:2a:46:50:7f:18:24:64:02:cf: f3:1f:5e:d1:93:22:98:0c:e6:a4:ad:17:95:d1:52: 3d:3e:ab:32:df:40:e0:e4:e7:71:3a:97:fb:94:37: ce:07:17:72:d5:7e:5b:be:ff:8a:e0:8f:89:13:c9: 31:5d:1c:5f:88:bc:f2:a6:5b:6d:4c:1b:6e:53:ef: 93:10:13:3f:d8:df:ab:04:6d:60:e5:96:ef:96:32: d8:c2:49:6c:88:af:ca:66:25:cc:37:9d:c8:0e:de: 73:55:82:9a:23:cd:c8:f5:ca:9f:66:97:fe:ab:3c: 1a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2F:95:4F:C1:68:29:8A:D0:6F:0E:71:28:92:79:9D:A1:1D:07:DE X509v3 Authority Key Identifier: keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d8:ee:62:d1:13:cc:6d:3b:22:00:59:f1:d7:f5:7d:7c:eb: 4c:c2:58:af:50:22:b2:23:de:05:4c:f9:17:eb:e4:8e:73:c1: c4:b0:6c:be:57:1c:e8:20:e2:4f:77:40:41:eb:d8:33:f3:df: b5:9b:a8:e2:fc:6f:9b:22:b0:8f:6c:72:52:d3:b2:fc:43:81: 1a:d4:f4:28:66:fd:2a:75:6e:b5:05:74:f7:84:b5:c6:de:aa: 8c:ec:cc:4f:ee:d5:04:3e:66:53:64:f0:28:0f:5b:53:b5:0a: 8e:43:66:06:28:df:9b:1c:c1:64:53:40:d0:c5:d7:db:ca:4a: fe:b6:bb:14:96:28:f1:ff:bc:80:20:73:a5:9c:49:ee:58:fe: 84:87:73:69:29:93:dc:78:8b:55:ed:4a:59:70:06:0e:cd:86: 4c:16:ed:79:1f:9f:db:88:bd:78:a6:c2:fe:e3:e9:d0:8e:f5: 03:aa:b4:e4:91:19:ef:d6:3b:22:45:9f:c2:fe:92:01:e3:8a: 1e:cd:85:fc:c2:8e:b7:dc:5b:b3:1f:8c:53:ec:4e:ad:5d:14: b9:ef:ee:40:6f:ed:f7:ad:11:54:46:5a:47:f5:eb:4a:4f:27: 77:b7:d5:db:bd:86:37:0d:c9:f9:b0:24:48:51:79:e5:27:92: ab:4d:1c:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0Qhy/JkKop7OgBIh9rAbJvNHkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG ODdGM0VDODAeFw0yNTEyMDMwOTM2NThaFw0yNTEyMDYwOTQ4NThaMDMxMTAvBgNV BAMTKDhFMkY5NTRGQzE2ODI5OEFEMDZGMEU3MTI4OTI3OTlEQTExRDA3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMVkUuu3kWZauueeUc8O+ajdP 5TmwgSVSO4wj2GgChf1ojcu2X02oiEFEe26KkhVkH9NpS2OrDTvOx4NvIk+ol3HB pS3broIo5rmusrHbV2XYHV04nMlJ9nA2f0LwG9Ca1bgUhAY7hRuRCZI0Q9fwKLkh Jy7exxZXpkhzlz0jJhOgBaJf5FDzlWED9SpGUH8YJGQCz/MfXtGTIpgM5qStF5XR Uj0+qzLfQODk53E6l/uUN84HF3LVflu+/4rgj4kTyTFdHF+IvPKmW21MG25T75MQ Ez/Y36sEbWDllu+WMtjCSWyIr8pmJcw3ncgO3nNVgpojzcj1yp9ml/6rPBq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUji+VT8FoKYrQbw5xKJJ5naEdB94wHwYDVR0j BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG M0VDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBB MjhGODdGM0VDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjY7mLRE8xtOyIAWfHX9X1860zCWK9QIrIj 3gVM+Rfr5I5zwcSwbL5XHOgg4k93QEHr2DPz37WbqOL8b5sisI9sclLTsvxDgRrU 9Chm/Sp1brUFdPeEtcbeqozszE/u1QQ+ZlNk8CgPW1O1Co5DZgYo35scwWRTQNDF 19vKSv62uxSWKPH/vIAgc6WcSe5Y/oSHc2kpk9x4i1XtSllwBg7NhkwW7Xkfn9uI vXimwv7j6dCO9QOqtOSRGe/WOyJFn8L+kgHjih7NhfzCjrfcW7MfjFPsTq1dFLnv 7kBv7fetEVRGWkf160pPJ3e31du9hjcNyfmwJEhReeUnkqtNHPc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:05 2025 by rpki-client