This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: YEcK2K5TM+9e3MhU1ZPiER0uz+KSGhGYydL9rYE5l9s= Subject key identifier: B0:6F:BB:EE:74:25:7B:8A:72:78:12:12:CD:73:84:84:6E:72:B6:13 Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 113D0687FD16DEFE48672D3F6CE75D9D33019263 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 01D0 Signing time: Wed 03 Dec 2025 10:00:53 +0000 Manifest this update: Wed 03 Dec 2025 09:55:53 +0000 Manifest next update: Sat 06 Dec 2025 17:23:53 +0000 Files and hashes: 1: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: pXiat5cVR/zQiXMPR8p2OzTzmsABSvFL/7kQltYi2vg=) 2: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) 3: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: 3IPWWkSr+CRIxbooLiHD2sYaMVl9ZCy+eS+fZpZLV/I=) 4: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: fibpaoWLGLqVlSh+YVe38FiOvASMtn5m89vjXOwhkBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:3d:06:87:fd:16:de:fe:48:67:2d:3f:6c:e7:5d:9d:33:01:92:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Dec 3 09:55:53 2025 GMT Not After : Dec 6 17:23:53 2025 GMT Subject: CN=B06FBBEE74257B8A72781212CD7384846E72B613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3f:54:bf:16:0c:51:25:a3:21:ef:1b:de:da: 40:e5:0c:18:e6:ac:53:59:77:fd:e9:eb:b3:0e:8d: b1:0b:c9:72:f8:99:72:c5:5e:68:3e:ed:2d:cd:59: 96:81:60:24:1c:bc:b4:24:39:bf:30:a6:cc:ea:d5: 6c:ba:fe:89:51:21:0e:d3:5f:30:90:f9:ec:fe:ac: e2:68:c1:dc:11:b4:0c:20:b9:89:db:64:c6:ec:05: 8e:2b:48:61:99:f5:34:e7:d9:73:5b:83:47:d1:e2: d7:0a:91:b9:cc:e1:ec:96:a1:3c:91:b4:73:ad:90: 34:aa:3e:4b:b0:6a:24:8e:b9:0e:03:b3:87:b2:88: 0e:61:1f:29:1c:91:c4:5f:e1:b6:70:b6:20:cb:42: 60:cf:e6:16:95:6f:a7:96:92:6b:e8:6a:2d:db:5d: d0:f4:ee:16:18:db:01:1c:d4:9c:a4:1f:a4:90:5b: a9:08:ca:48:5a:b5:17:58:ed:9d:31:73:3b:0d:87: 8e:2e:95:10:73:4e:32:ce:3e:b8:11:56:e2:06:4b: a3:d1:c2:57:0e:69:87:a4:3f:2d:cf:00:85:e9:a7: 55:68:fb:87:fe:08:6a:79:ae:d1:f5:ff:78:9b:90: 12:b9:b8:34:b7:ff:ce:af:d8:e4:7d:dc:b6:0b:64: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6F:BB:EE:74:25:7B:8A:72:78:12:12:CD:73:84:84:6E:72:B6:13 X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c6:61:34:16:1b:fd:74:9f:69:56:98:d6:16:2f:18:da:71: f8:da:e5:6a:b0:39:b2:22:68:12:97:a2:ac:9c:2b:d9:3f:78: 75:2d:28:73:b7:42:03:13:14:41:30:f2:4c:0f:8e:91:e8:73: 1f:dd:d7:bd:4d:98:2b:b2:0c:ee:5c:d0:11:79:4f:00:fb:85: 95:34:42:01:ce:8d:5b:61:bd:ed:07:35:b2:7e:e3:19:fb:5a: 0d:a3:a9:0c:c1:67:21:eb:61:d2:b3:0b:46:38:c5:5a:fc:87: 83:2a:68:9c:cb:e8:ba:2b:26:58:58:57:43:34:4c:2c:1e:b4: 7f:e4:42:13:62:12:74:65:f8:7c:8b:14:e4:73:6e:25:27:15: 4a:b0:cd:57:8b:71:d7:35:5c:9c:aa:7f:ce:e3:1c:41:38:ba: 25:44:b9:37:77:cf:e7:71:43:d1:15:50:32:ea:26:87:44:70: 5b:6d:e7:58:15:25:49:65:c2:e9:b5:f1:08:c7:14:81:e3:39: 35:e8:14:12:21:5e:b2:59:fc:b0:a9:3b:84:45:cd:ef:7a:81: 7f:e8:bc:d1:e0:47:ae:f7:6c:bf:d7:f7:e1:37:30:63:d3:5d: f0:85:a4:94:10:4f:35:52:60:54:e0:a8:8d:83:9b:ce:38:c6: f7:48:c1:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUET0Gh/0W3v5IZy0/bOddnTMBkmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTEyMDMwOTU1NTNaFw0yNTEyMDYxNzIzNTNaMDMxMTAvBgNV BAMTKEIwNkZCQkVFNzQyNTdCOEE3Mjc4MTIxMkNENzM4NDg0NkU3MkI2MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYP1S/FgxRJaMh7xve2kDlDBjm rFNZd/3p67MOjbELyXL4mXLFXmg+7S3NWZaBYCQcvLQkOb8wpszq1Wy6/olRIQ7T XzCQ+ez+rOJowdwRtAwguYnbZMbsBY4rSGGZ9TTn2XNbg0fR4tcKkbnM4eyWoTyR tHOtkDSqPkuwaiSOuQ4Ds4eyiA5hHykckcRf4bZwtiDLQmDP5haVb6eWkmvoai3b XdD07hYY2wEc1JykH6SQW6kIykhatRdY7Z0xczsNh44ulRBzTjLOPrgRVuIGS6PR wlcOaYekPy3PAIXpp1Vo+4f+CGp5rtH1/3ibkBK5uDS3/86v2OR93LYLZCg9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsG+77nQle4pyeBISzXOEhG5ythMwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbGYTQWG/10n2lWmNYWLxjacfja5WqwObIi aBKXoqycK9k/eHUtKHO3QgMTFEEw8kwPjpHocx/d171NmCuyDO5c0BF5TwD7hZU0 QgHOjVthve0HNbJ+4xn7Wg2jqQzBZyHrYdKzC0Y4xVr8h4MqaJzL6LorJlhYV0M0 TCwetH/kQhNiEnRl+HyLFORzbiUnFUqwzVeLcdc1XJyqf87jHEE4uiVEuTd3z+dx Q9EVUDLqJodEcFtt51gVJUllwum18QjHFIHjOTXoFBIhXrJZ/LCpO4RFze96gX/o vNHgR673bL/X9+E3MGPTXfCFpJQQTzVSYFTgqI2Dm844xvdIwT4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:21 2025 by rpki-client