This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: 1J+k1nYg2uKRq2ifbggmr4S4XGMgtEyoY+ndxkz3g5o= Subject key identifier: 79:B7:34:DA:92:48:32:FC:5B:10:BE:48:24:62:B3:E0:0F:96:0C:1B Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 7B406054AE55A2866E553F25FC6224019EF75E08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 03FE Signing time: Wed 03 Dec 2025 10:42:27 +0000 Manifest this update: Wed 03 Dec 2025 10:37:27 +0000 Manifest next update: Sat 06 Dec 2025 18:28:27 +0000 Files and hashes: 1: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=) 2: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: CUX/FZUFqFLVmfqcGn4Uxf38ndBFpWWkwqBCc1O0Nwg=) 3: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: pu6E7lqsCnaewoaekReKM84LPqMlNhHjkfMDxvv0qvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:40:60:54:ae:55:a2:86:6e:55:3f:25:fc:62:24:01:9e:f7:5e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Dec 3 10:37:27 2025 GMT Not After : Dec 6 18:28:27 2025 GMT Subject: CN=79B734DA924832FC5B10BE482462B3E00F960C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:fb:ee:44:26:3e:40:70:7b:4c:59:90:73: f5:f5:98:40:90:a8:e2:e2:7c:72:80:76:ea:21:70: b0:5c:0f:09:ff:f7:c9:6b:96:4c:e2:80:ba:9d:5d: cf:9b:a6:59:c6:f7:3e:4d:d9:06:05:45:64:18:f5: 83:c5:e5:8f:69:eb:b0:71:ed:2a:5b:1c:d0:f2:79: dd:2b:51:75:cc:9f:b3:b1:8a:fa:0d:6e:6c:e1:9f: 3b:25:17:c3:43:e0:e0:cf:2e:f5:5e:94:ee:c9:5a: e7:88:99:cf:94:db:b2:8a:a5:dc:66:75:44:2f:59: 9f:be:1a:92:91:14:81:23:51:c7:b4:73:b0:eb:3a: 30:f6:e1:63:d1:82:78:25:c4:b8:2a:a2:26:11:da: b2:0b:65:1f:f1:20:71:f3:ca:ab:e7:07:b3:0b:e5: 4e:d4:16:73:3a:72:00:c3:11:59:6b:e7:45:32:07: f8:6b:3e:06:f2:2e:53:45:90:99:3f:06:bd:e2:1e: 40:d8:c7:5e:ca:d3:5b:62:94:53:13:0f:b2:a1:d4: f7:c2:81:8c:81:96:62:bf:74:cc:1a:5d:f7:98:d1: d3:9c:0a:c1:40:cd:8a:4c:0d:c9:8b:9c:f9:57:97: 16:fe:b9:3b:f6:eb:48:4d:95:89:81:7b:d6:ce:81: f3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B7:34:DA:92:48:32:FC:5B:10:BE:48:24:62:B3:E0:0F:96:0C:1B X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b1:8b:3a:1d:2c:81:e4:cb:7c:e2:bc:27:94:2d:ca:0d:30: 70:20:f5:74:e6:68:9d:0a:45:08:5d:4d:85:36:52:f3:b8:0f: 8a:ab:81:0b:c5:46:16:d0:a3:c0:8c:9c:63:2e:6f:66:9e:9c: bb:04:ee:95:83:31:91:b1:e2:e0:7d:f6:ed:2f:b0:9e:d3:69: a7:21:0e:1a:49:bd:f9:03:d3:a1:44:f0:6a:72:33:a9:43:39: 80:9b:3d:3a:56:99:23:32:e0:ce:9b:e1:34:1c:a4:f3:3a:0b: 07:06:e9:96:b2:20:cb:dc:1c:eb:6d:83:ea:d3:25:76:e1:59: cb:ea:fc:56:d5:7d:9d:d4:ef:93:25:4a:ed:70:28:4f:d1:a4: a0:0c:95:9f:60:56:df:a2:30:1e:7f:00:0e:21:de:7b:69:fb: 25:e2:98:94:16:0c:b6:f2:63:72:be:97:3e:a0:5b:d3:08:04: a7:02:04:55:58:3f:20:59:98:f1:c9:3e:0b:6b:e7:6b:97:6d: ac:77:95:d7:a8:cf:1e:4f:a2:c3:cd:15:db:09:d6:58:7e:6b: 72:75:7a:a1:12:41:a4:cd:48:99:91:f9:5f:77:13:bb:90:29: 2e:f8:9c:f7:c6:7a:a5:9c:cd:9d:ff:05:2c:4e:27:87:98:ea: 18:29:8d:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0BgVK5VooZuVT8l/GIkAZ73XggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTEyMDMxMDM3MjdaFw0yNTEyMDYxODI4MjdaMDMxMTAvBgNV BAMTKDc5QjczNERBOTI0ODMyRkM1QjEwQkU0ODI0NjJCM0UwMEY5NjBDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMfvuRCY+QHB7TFmQc/X1mECQ qOLifHKAduohcLBcDwn/98lrlkzigLqdXc+bplnG9z5N2QYFRWQY9YPF5Y9p67Bx 7SpbHNDyed0rUXXMn7OxivoNbmzhnzslF8ND4ODPLvVelO7JWueImc+U27KKpdxm dUQvWZ++GpKRFIEjUce0c7DrOjD24WPRgnglxLgqoiYR2rILZR/xIHHzyqvnB7ML 5U7UFnM6cgDDEVlr50UyB/hrPgbyLlNFkJk/Br3iHkDYx17K01tilFMTD7Kh1PfC gYyBlmK/dMwaXfeY0dOcCsFAzYpMDcmLnPlXlxb+uTv260hNlYmBe9bOgfOvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUebc02pJIMvxbEL5IJGKz4A+WDBswHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqxizodLIHky3zivCeULcoNMHAg9XTmaJ0K RQhdTYU2UvO4D4qrgQvFRhbQo8CMnGMub2aenLsE7pWDMZGx4uB99u0vsJ7Taach DhpJvfkD06FE8GpyM6lDOYCbPTpWmSMy4M6b4TQcpPM6CwcG6ZayIMvcHOttg+rT JXbhWcvq/FbVfZ3U75MlSu1wKE/RpKAMlZ9gVt+iMB5/AA4h3ntp+yXimJQWDLby Y3K+lz6gW9MIBKcCBFVYPyBZmPHJPgtr52uXbax3ldeozx5PosPNFdsJ1lh+a3J1 eqESQaTNSJmR+V93E7uQKS74nPfGeqWczZ3/BSxOJ4eY6hgpjck= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:33 2025 by rpki-client