This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: 5xUwx1uVneHcmVjKLVRNNRDOf0CosjA+VQGnjHhPOVY= Subject key identifier: F6:C7:8C:30:1D:95:79:91:10:EE:D3:91:F3:FE:B1:45:3D:C1:31:D8 Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 60209DA9BBFD69414460E4DA86FB42DC4FE4FEC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: 0125 Signing time: Mon 01 Dec 2025 13:51:15 +0000 Manifest this update: Mon 01 Dec 2025 13:46:15 +0000 Manifest next update: Thu 04 Dec 2025 22:29:15 +0000 Files and hashes: 1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: geAKj9+TOtyfNH9PasUiph/Br+j89slGEUwYIqBnSpQ=) 2: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: lyPglnxU+q+H5SAc74op7tkmdjv8ATvZAxrpEzf72ok=) 3: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:20:9d:a9:bb:fd:69:41:44:60:e4:da:86:fb:42:dc:4f:e4:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Dec 1 13:46:15 2025 GMT Not After : Dec 4 22:29:15 2025 GMT Subject: CN=F6C78C301D95799110EED391F3FEB1453DC131D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4a:eb:e4:13:56:95:37:d1:39:7e:b2:61:b6: ea:6e:5b:72:f5:ec:4b:d1:3d:99:5b:20:95:97:64: cc:32:7e:e9:0e:3d:eb:07:d0:f0:b1:ec:f3:73:6e: ff:ae:b3:c2:17:84:fa:0c:73:16:e9:75:89:4e:8c: 61:7a:6c:9a:fa:42:f4:21:b4:3e:79:a3:74:d5:a0: ec:1d:56:da:5c:0d:d5:c4:55:ae:7b:91:a7:cc:7b: e3:f3:56:56:89:3a:a0:f1:57:94:c1:b0:82:d8:af: c4:f0:44:c5:4c:6c:36:63:e7:c9:5f:69:32:5d:38: 02:ab:f6:b4:a1:91:42:76:6f:ac:a1:04:65:4b:61: 5a:4f:19:c6:d7:5f:57:25:57:8b:08:c0:45:a2:43: b1:8f:45:a1:3a:6c:a8:62:b6:ad:f6:86:e1:99:6a: 2a:5d:c4:2d:4d:29:7b:49:1a:df:b3:24:fb:80:f4: c3:f0:a8:71:cb:cb:f6:25:d9:61:8f:ff:25:33:5d: c9:cb:15:d6:30:79:2e:04:78:70:0c:7d:d2:8b:27: 9a:ef:79:46:2d:16:50:30:af:de:17:4a:4a:39:2d: 9c:6d:5e:c5:01:13:f1:bc:ce:59:f2:30:9c:4d:dd: b6:04:46:c2:31:e3:96:38:0f:26:f0:c6:23:ea:f9: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C7:8C:30:1D:95:79:91:10:EE:D3:91:F3:FE:B1:45:3D:C1:31:D8 X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:7a:ad:da:9d:a4:04:d4:c8:cf:e7:5f:2e:4d:25:bb:cf:ed: 5b:21:74:0e:9c:7b:5b:92:73:36:77:d1:77:3b:90:c4:32:88: 84:ac:91:e0:dc:a5:b2:ab:40:9f:74:2c:61:66:d4:2c:4a:72: bc:74:5e:97:20:24:95:05:42:1e:a9:33:1d:9b:05:db:2d:b1: 81:7d:1b:92:1f:1e:d9:c5:bd:90:5e:a8:3b:51:f1:2d:d0:cd: 56:b1:3e:8c:27:e7:eb:2f:99:3a:0c:a6:92:b2:27:9c:76:7b: 7a:8e:ca:7a:ad:cb:bb:88:21:d1:03:ca:42:e5:f5:3a:35:53: 5b:fc:ad:aa:6f:fc:30:22:73:dd:78:f7:0f:65:be:74:06:bc: 29:94:73:55:c9:64:fb:1c:be:f1:ce:b5:bc:91:15:de:42:1c: f0:bd:ab:3b:91:dd:1f:c3:40:cc:8f:c0:e7:11:fb:d8:77:66: 61:fe:a7:67:01:c4:a5:96:93:07:03:75:89:cb:3d:6f:f5:fb: 37:8e:ca:fc:00:67:07:fe:f2:6a:17:5a:06:a4:f3:14:1a:ad: f0:b8:5d:9b:3e:43:c2:97:3f:ad:35:2f:bb:2c:20:ec:50:6c: 2e:23:fb:47:41:45:8c:ad:fb:80:1d:03:e5:a2:ef:2e:0f:96: 9e:b4:6f:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCCdqbv9aUFEYOTahvtC3E/k/sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTEyMDExMzQ2MTVaFw0yNTEyMDQyMjI5MTVaMDMxMTAvBgNV BAMTKEY2Qzc4QzMwMUQ5NTc5OTExMEVFRDM5MUYzRkVCMTQ1M0RDMTMxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcSuvkE1aVN9E5frJhtupuW3L1 7EvRPZlbIJWXZMwyfukOPesH0PCx7PNzbv+us8IXhPoMcxbpdYlOjGF6bJr6QvQh tD55o3TVoOwdVtpcDdXEVa57kafMe+PzVlaJOqDxV5TBsILYr8TwRMVMbDZj58lf aTJdOAKr9rShkUJ2b6yhBGVLYVpPGcbXX1clV4sIwEWiQ7GPRaE6bKhitq32huGZ aipdxC1NKXtJGt+zJPuA9MPwqHHLy/Yl2WGP/yUzXcnLFdYweS4EeHAMfdKLJ5rv eUYtFlAwr94XSko5LZxtXsUBE/G8zlnyMJxN3bYERsIx45Y4DybwxiPq+WSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9seMMB2VeZEQ7tOR8/6xRT3BMdgwHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd6rdqdpATUyM/nXy5NJbvP7VshdA6ce1uS czZ30Xc7kMQyiISskeDcpbKrQJ90LGFm1CxKcrx0XpcgJJUFQh6pMx2bBdstsYF9 G5IfHtnFvZBeqDtR8S3QzVaxPown5+svmToMppKyJ5x2e3qOynqty7uIIdEDykLl 9To1U1v8rapv/DAic9149w9lvnQGvCmUc1XJZPscvvHOtbyRFd5CHPC9qzuR3R/D QMyPwOcR+9h3ZmH+p2cBxKWWkwcDdYnLPW/1+zeOyvwAZwf+8moXWgak8xQarfC4 XZs+Q8KXP601L7ssIOxQbC4j+0dBRYyt+4AdA+Wi7y4Plp60b4I= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:13 2025 by rpki-client