This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: EYHO6a22Ncw1/i0OQV13rCEcR2zgsMvD0Ftk1rbaFwc= Subject key identifier: 8F:A9:75:F7:04:F6:70:7B:F9:20:01:7C:21:97:72:E8:8B:91:B7:EA Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 6F6F42164F5525B6A05465A5DCA4318FD935D0BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 01A2 Signing time: Wed 03 Dec 2025 09:41:17 +0000 Manifest this update: Wed 03 Dec 2025 09:36:17 +0000 Manifest next update: Sat 06 Dec 2025 12:38:17 +0000 Files and hashes: 1: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 2: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: QyK6lQKft4Lv+bm+E1CgYTGy7SPqisnj0nCFz5UJHtk=) 3: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 4: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 5: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) 6: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6f:42:16:4f:55:25:b6:a0:54:65:a5:dc:a4:31:8f:d9:35:d0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Dec 3 09:36:17 2025 GMT Not After : Dec 6 12:38:17 2025 GMT Subject: CN=8FA975F704F6707BF920017C219772E88B91B7EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ef:46:04:7c:c3:89:9a:7a:82:81:77:10:dc: b5:90:6f:54:d1:84:a7:52:02:61:41:3f:3c:79:b7: 38:2d:9c:2e:d2:3f:98:4d:59:43:ea:5b:8b:bf:a3: ba:59:88:4b:75:ca:27:d3:49:b3:2d:d8:5c:bb:4b: 1a:d2:67:4a:26:11:e3:9b:e1:15:cb:0a:d0:2a:dc: 29:ab:10:fc:20:47:8a:76:16:e7:e8:33:96:69:e2: 10:e8:12:cf:83:00:1c:df:ce:36:c4:0e:48:c7:b9: 7b:e2:d6:3f:c3:0f:af:5f:4f:31:b6:83:de:be:8d: a5:87:b0:70:e5:74:ea:33:da:d6:27:54:9d:7e:db: 47:f3:37:80:e9:10:94:51:e2:3b:60:a5:d3:32:3c: 8b:9f:d8:8f:f5:bb:a6:51:e0:2c:e4:50:9b:ff:78: a0:99:55:96:ab:43:8e:59:d4:31:70:29:38:7a:24: ee:49:3b:9d:27:80:55:2d:6e:0a:75:df:c1:79:e0: e2:10:e4:ce:c2:c7:f3:18:49:bb:20:1c:27:d5:a4: 47:2f:34:7a:07:0c:cf:45:19:80:19:3f:7e:7e:7d: 66:8c:6b:13:f0:34:09:16:d2:0b:90:f9:67:e2:2a: 93:a8:94:fb:11:ea:dc:3e:76:35:89:74:4b:47:39: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A9:75:F7:04:F6:70:7B:F9:20:01:7C:21:97:72:E8:8B:91:B7:EA X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:72:48:dc:9f:d0:5a:bd:19:5f:60:5e:a5:38:f0:a6:b2:57: 16:69:8e:8c:60:c6:04:d4:f3:4b:c6:55:48:d6:0b:c1:31:ef: ea:d3:28:3e:d5:84:4c:01:35:46:51:55:da:80:db:05:3a:56: ba:c5:83:90:1b:d0:d2:fb:1c:4a:2c:1b:7d:f2:6d:24:44:eb: fa:1d:81:d0:4e:5f:5b:ca:b3:09:51:a2:9f:59:62:46:87:1a: 09:05:4d:cd:a8:1c:35:ea:8b:97:ed:61:f6:03:e2:7c:73:af: fd:9f:0a:33:a5:95:3f:3e:fe:32:8c:38:1b:c3:33:fc:e1:1f: cd:84:40:67:b3:9d:73:66:63:a5:b4:17:53:aa:94:9f:0c:6b: dc:6f:ef:e3:74:29:24:21:cf:f6:58:53:42:60:b0:d1:e2:ca: c4:0b:4f:0d:d8:cd:3b:8f:ab:5d:21:91:99:19:1b:c6:8c:c5: f4:98:ca:98:d1:d9:fe:aa:29:6c:ec:f7:6f:ba:33:4d:5f:09: d0:f9:fa:a6:59:f5:c9:de:14:0a:54:80:3b:29:85:29:41:ac: 32:5c:ea:bb:f4:5c:8c:f3:23:18:c4:6c:6d:11:1a:d3:4e:04: 10:b3:54:33:65:e8:57:e4:a2:e6:df:53:53:0d:26:fe:ff:ba: ad:1b:0b:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb29CFk9VJbagVGWl3KQxj9k10LswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTEyMDMwOTM2MTdaFw0yNTEyMDYxMjM4MTdaMDMxMTAvBgNV BAMTKDhGQTk3NUY3MDRGNjcwN0JGOTIwMDE3QzIxOTc3MkU4OEI5MUI3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc70YEfMOJmnqCgXcQ3LWQb1TR hKdSAmFBPzx5tzgtnC7SP5hNWUPqW4u/o7pZiEt1yifTSbMt2Fy7SxrSZ0omEeOb 4RXLCtAq3CmrEPwgR4p2FufoM5Zp4hDoEs+DABzfzjbEDkjHuXvi1j/DD69fTzG2 g96+jaWHsHDldOoz2tYnVJ1+20fzN4DpEJRR4jtgpdMyPIuf2I/1u6ZR4CzkUJv/ eKCZVZarQ45Z1DFwKTh6JO5JO50ngFUtbgp138F54OIQ5M7Cx/MYSbsgHCfVpEcv NHoHDM9FGYAZP35+fWaMaxPwNAkW0guQ+WfiKpOolPsR6tw+djWJdEtHOWrPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj6l19wT2cHv5IAF8IZdy6IuRt+owHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFySNyf0Fq9GV9gXqU48KayVxZpjoxgxgTU 80vGVUjWC8Ex7+rTKD7VhEwBNUZRVdqA2wU6VrrFg5Ab0NL7HEosG33ybSRE6/od gdBOX1vKswlRop9ZYkaHGgkFTc2oHDXqi5ftYfYD4nxzr/2fCjOllT8+/jKMOBvD M/zhH82EQGeznXNmY6W0F1OqlJ8Ma9xv7+N0KSQhz/ZYU0JgsNHiysQLTw3YzTuP q10hkZkZG8aMxfSYypjR2f6qKWzs92+6M01fCdD5+qZZ9cneFApUgDsphSlBrDJc 6rv0XIzzIxjEbG0RGtNOBBCzVDNl6FfkoubfU1MNJv7/uq0bC/I= -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:03 2025 by rpki-client