This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft File: E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json) Hash identifier: Ht6xT58ETWNVqQfFU2JgUsaduaAbxqvRjUhfS0FjeGg= Subject key identifier: F8:CC:5F:7E:EE:47:5E:95:BC:71:E5:50:48:C6:0C:5A:91:CB:DA:71 Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Certificate serial: 2C37532DCA6C94CC7C6D15D4880BA218F9EEFB9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft Manifest number: 04B2 Signing time: Wed 03 Dec 2025 11:11:18 +0000 Manifest this update: Wed 03 Dec 2025 11:06:18 +0000 Manifest next update: Sat 06 Dec 2025 17:08:18 +0000 Files and hashes: 1: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: TiBDscIwDM8LXa+oZsdSozLCIgCynFE1SJZ86LD1GBs=) 2: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=) 3: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: eATlak9PZWioYqxGYL7l7hLnNrIBajFJaaOMCnqpdr0=) 4: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: U5G6WyuhUeeAyAkhv6VtLWLCxLc3eTUGqsMy7Fb3zes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:37:53:2d:ca:6c:94:cc:7c:6d:15:d4:88:0b:a2:18:f9:ee:fb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Validity Not Before: Dec 3 11:06:18 2025 GMT Not After : Dec 6 17:08:18 2025 GMT Subject: CN=F8CC5F7EEE475E95BC71E55048C60C5A91CBDA71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:5e:82:c8:b0:78:4f:8e:6f:7d:e2:24:56: f1:89:09:5c:8e:34:ea:43:6f:39:bf:60:67:21:ca: 3d:37:95:3b:84:33:06:4f:a8:3f:82:be:2d:fc:75: 46:38:99:24:8e:be:38:f2:92:ec:f7:11:0e:fc:a6: 4d:25:14:04:09:21:d3:3d:7e:55:05:cb:96:4b:fb: 52:f7:cf:12:bb:3a:65:b8:4f:6e:be:8f:07:69:16: 9e:97:e3:03:15:34:c3:61:3e:90:85:68:13:6c:8e: 66:23:95:0f:92:5c:8b:6a:1c:27:fe:5c:27:29:99: cb:1d:e9:07:36:fe:c8:38:17:55:8a:1c:de:c2:3e: 4f:70:19:c0:5b:62:e3:30:31:ff:95:f5:8b:92:b8: 97:ec:86:8a:1e:e4:c2:a0:13:2e:06:0d:c9:e3:e8: 1b:b6:3b:03:da:7f:90:fb:74:09:e5:ed:a9:1f:1e: 4f:ea:a8:d1:11:4a:55:39:70:5a:e8:39:41:4e:0f: 60:c4:42:19:29:a8:6f:e6:d2:7a:8e:6f:37:31:51: 91:a1:4d:33:01:c8:ad:5c:8c:a2:67:bb:3c:7b:f0: c3:d3:f2:56:32:66:68:93:9a:46:07:9a:51:9e:0a: ea:95:e6:e6:e3:2d:93:16:b0:99:60:b0:79:4e:61: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CC:5F:7E:EE:47:5E:95:BC:71:E5:50:48:C6:0C:5A:91:CB:DA:71 X509v3 Authority Key Identifier: keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:48:5e:db:29:8d:a8:ef:46:b0:01:f8:5b:77:a6:ad:48:52: b7:69:29:eb:02:b2:db:2e:e5:c6:f4:bb:7c:a4:20:a8:5b:71: f7:c5:54:b9:25:f0:56:6d:25:65:78:3d:63:b6:a7:fa:f9:87: 38:48:f9:08:61:cf:6a:38:d4:8e:ec:14:e3:0d:59:96:f0:ec: f5:ac:82:d9:e6:fd:7e:e7:47:24:a2:57:51:20:83:7d:1b:d6: df:f0:9a:d0:ae:62:57:bf:89:70:a2:d9:66:88:ba:85:3a:ae: cf:09:66:6d:5a:da:30:d0:ce:ca:61:bc:21:eb:b2:5e:6e:53: 86:33:f0:ef:2a:d5:9f:d1:85:df:36:62:9c:63:30:23:cf:e8: 58:0b:3d:c4:e4:f5:6a:06:6e:bc:37:05:6d:66:4b:61:75:d5: c8:22:01:7c:d0:ed:ef:99:55:97:2f:da:1b:b8:a2:59:aa:2a: d1:7c:d6:ff:ad:01:af:ab:f7:f8:46:80:b4:e8:77:6e:f1:a1: 1a:6d:ea:2a:6b:86:f0:64:62:b7:63:e8:65:ef:2c:09:8a:22: 3a:9c:48:4b:53:46:80:53:88:b5:98:f8:d3:13:f0:d3:98:64: 97:a9:35:0e:d2:64:5b:c8:0a:9e:02:8f:ab:fb:b0:e7:96:4a: 58:6f:ef:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDdTLcpslMx8bRXUiAuiGPnu+58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQy MDg3MEZFQjAeFw0yNTEyMDMxMTA2MThaFw0yNTEyMDYxNzA4MThaMDMxMTAvBgNV BAMTKEY4Q0M1RjdFRUU0NzVFOTVCQzcxRTU1MDQ4QzYwQzVBOTFDQkRBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLc16CyLB4T45vfeIkVvGJCVyO NOpDbzm/YGchyj03lTuEMwZPqD+Cvi38dUY4mSSOvjjykuz3EQ78pk0lFAQJIdM9 flUFy5ZL+1L3zxK7OmW4T26+jwdpFp6X4wMVNMNhPpCFaBNsjmYjlQ+SXItqHCf+ XCcpmcsd6Qc2/sg4F1WKHN7CPk9wGcBbYuMwMf+V9YuSuJfshooe5MKgEy4GDcnj 6Bu2OwPaf5D7dAnl7akfHk/qqNERSlU5cFroOUFOD2DEQhkpqG/m0nqObzcxUZGh TTMByK1cjKJnuzx78MPT8lYyZmiTmkYHmlGeCuqV5ubjLZMWsJlgsHlOYe2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Mxffu5HXpW8ceVQSMYMWpHL2nEwHwYDVR0j BBgwFoAU5CsHUtX/qyVMPw4iFJn2dCCHD+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzUxMjllNC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC9FNDJCMDc1MkQ1 RkZBQjI1NEMzRjBFMjIxNDk5RjY3NDIwODcwRkVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQyMDg3 MEZFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2 NzQyMDg3MEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9IXtspjajvRrAB+Ft3pq1IUrdpKesCstsu 5cb0u3ykIKhbcffFVLkl8FZtJWV4PWO2p/r5hzhI+Qhhz2o41I7sFOMNWZbw7PWs gtnm/X7nRySiV1Egg30b1t/wmtCuYle/iXCi2WaIuoU6rs8JZm1a2jDQzsphvCHr sl5uU4Yz8O8q1Z/Rhd82YpxjMCPP6FgLPcTk9WoGbrw3BW1mS2F11cgiAXzQ7e+Z VZcv2hu4olmqKtF81v+tAa+r9/hGgLTod27xoRpt6iprhvBkYrdj6GXvLAmKIjqc SEtTRoBTiLWY+NMT8NOYZJepNQ7SZFvICp4Cj6v7sOeWSlhv77g= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:08 2025 by rpki-client