This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: PRZMEqWlUpbDUfYFE20QyRHn2JLWZ7zdaV7ZlM5umkI= Subject key identifier: D2:EB:C3:34:6C:79:1F:36:E1:BD:7D:A3:27:D7:56:02:89:59:0D:01 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 39ADE7A742DEBAD44178636A813F00794E4A3378 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 01FF Signing time: Sun 14 Dec 2025 14:30:48 +0000 Manifest this update: Sun 14 Dec 2025 14:25:48 +0000 Manifest next update: Wed 17 Dec 2025 19:15:48 +0000 Files and hashes: 1: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=) 2: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=) 3: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: RsekN913j4DD7aiKGaIqtTdHPwoI6eazlbM2V15iqfc=) 4: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 19:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ad:e7:a7:42:de:ba:d4:41:78:63:6a:81:3f:00:79:4e:4a:33:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Dec 14 14:25:48 2025 GMT Not After : Dec 17 19:15:48 2025 GMT Subject: CN=D2EBC3346C791F36E1BD7DA327D7560289590D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f5:96:2e:ef:6b:7b:13:a7:9f:b2:af:49:74: b1:dd:8c:ce:39:13:3f:bc:ad:4f:1b:b7:12:10:4a: 21:87:7d:c5:0c:35:83:c1:a9:38:a6:cc:86:44:17: e3:34:48:93:f0:09:5b:c3:37:30:60:b2:41:47:92: 10:90:35:03:05:7d:8e:07:1a:f7:2e:1b:23:b2:2d: ff:0e:3e:df:32:ab:9f:53:ef:32:f4:dd:a8:ef:c0: ab:cf:74:d5:01:f4:63:35:be:62:79:c3:b6:b4:24: 24:fb:63:fd:73:b2:a1:bc:8a:a7:00:c3:e2:ba:7d: 8e:0a:b8:e6:97:31:8d:80:b9:fa:bc:11:8e:2a:a2: 87:a4:60:34:b4:eb:a6:2a:aa:b6:b9:ac:88:9a:2a: 0a:f9:1d:c0:41:63:68:de:75:f7:79:cf:85:df:ab: 7b:e5:e2:3f:8d:d9:12:72:90:0f:53:b4:ca:48:79: d1:63:30:dd:3b:8d:23:81:ed:3f:bc:f8:bd:b8:88: c2:a7:95:7e:fe:f3:21:ae:04:83:52:f2:45:b1:21: 87:a8:47:38:50:3f:f9:18:a5:52:be:29:cb:ff:d1: 54:cd:39:1c:06:2a:25:02:08:8b:ed:4b:c3:e9:96: 3b:6d:65:5a:11:91:b8:69:1b:54:c9:8f:ec:9c:21: ed:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EB:C3:34:6C:79:1F:36:E1:BD:7D:A3:27:D7:56:02:89:59:0D:01 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f2:6f:cf:6b:80:53:6b:89:3a:6a:5d:40:af:67:08:e1:d2: e2:65:68:1d:20:1f:3e:e7:be:84:ce:17:0a:da:66:93:8a:e9: ec:7b:a4:ac:8c:dd:b7:f3:84:46:9b:e8:e6:56:01:e4:c7:a7: 80:dd:41:58:b5:35:39:69:ae:2d:f1:98:51:38:70:54:32:fc: 9d:f0:48:f7:68:6d:8d:91:49:0b:ff:7a:36:1e:14:72:d9:3b: 5f:8f:e6:ad:f6:02:af:fb:d5:4f:06:cb:5c:ad:9f:3b:26:69: bc:52:a7:55:2f:87:6c:6a:31:b3:51:6a:dc:b5:e8:43:1b:32: 3a:a3:a3:90:8e:ce:a2:ca:a0:13:09:94:09:c7:cb:ec:73:21: d1:66:33:2c:99:3e:04:1b:7e:db:34:b8:78:fb:52:f2:3e:3b: c0:5c:6e:09:bf:da:4d:86:2a:17:3f:3d:2f:39:cb:90:33:60: c8:9a:78:72:a8:71:d2:d6:3e:5f:e3:0f:8f:c4:3f:77:e0:b6: f4:3f:c9:6c:fa:c1:25:81:20:6d:6d:63:6a:b7:06:2b:4f:c1: 4b:ce:52:91:07:04:c5:37:47:2d:f1:f4:d9:c7:79:a7:dd:9e: ab:f1:dc:90:37:5f:5e:83:e1:c1:65:f2:41:1a:71:01:22:69: 14:d4:fe:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOa3np0LeutRBeGNqgT8AeU5KM3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNTEyMTQxNDI1NDhaFw0yNTEyMTcxOTE1NDhaMDMxMTAvBgNV BAMTKEQyRUJDMzM0NkM3OTFGMzZFMUJEN0RBMzI3RDc1NjAyODk1OTBEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV9ZYu72t7E6efsq9JdLHdjM45 Ez+8rU8btxIQSiGHfcUMNYPBqTimzIZEF+M0SJPwCVvDNzBgskFHkhCQNQMFfY4H GvcuGyOyLf8OPt8yq59T7zL03ajvwKvPdNUB9GM1vmJ5w7a0JCT7Y/1zsqG8iqcA w+K6fY4KuOaXMY2Aufq8EY4qooekYDS066Yqqra5rIiaKgr5HcBBY2jedfd5z4Xf q3vl4j+N2RJykA9TtMpIedFjMN07jSOB7T+8+L24iMKnlX7+8yGuBINS8kWxIYeo RzhQP/kYpVK+Kcv/0VTNORwGKiUCCIvtS8PpljttZVoRkbhpG1TJj+ycIe0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0uvDNGx5HzbhvX2jJ9dWAolZDQEwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPyb89rgFNriTpqXUCvZwjh0uJlaB0gHz7n voTOFwraZpOK6ex7pKyM3bfzhEab6OZWAeTHp4DdQVi1NTlpri3xmFE4cFQy/J3w SPdobY2RSQv/ejYeFHLZO1+P5q32Aq/71U8Gy1ytnzsmabxSp1Uvh2xqMbNRaty1 6EMbMjqjo5COzqLKoBMJlAnHy+xzIdFmMyyZPgQbfts0uHj7UvI+O8Bcbgm/2k2G Khc/PS85y5AzYMiaeHKocdLWPl/jD4/EP3fgtvQ/yWz6wSWBIG1tY2q3BitPwUvO UpEHBMU3Ry3x9NnHeafdnqvx3JA3X16D4cFl8kEacQEiaRTU/ko= -----END CERTIFICATE-----Generated at Mon Dec 15 21:52:24 2025 by rpki-client