This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: W6Gz3Rnh1G5arPKBWNKIDQKcMrmpHYGMruSefdvlLB4= Subject key identifier: D9:2B:31:F1:7B:52:D0:C5:FA:39:62:3F:CB:14:92:56:10:4E:38:57 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 46A6313D1799ED59BD4AB8A5CF618055415441D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 0537 Signing time: Tue 02 Dec 2025 02:05:03 +0000 Manifest this update: Tue 02 Dec 2025 02:00:03 +0000 Manifest next update: Fri 05 Dec 2025 07:25:03 +0000 Files and hashes: 1: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) 2: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: Zyb9UnO3x/HDnpsnUiyPAXers9UFUnOp9wo+dRP858g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a6:31:3d:17:99:ed:59:bd:4a:b8:a5:cf:61:80:55:41:54:41:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Dec 2 02:00:03 2025 GMT Not After : Dec 5 07:25:03 2025 GMT Subject: CN=D92B31F17B52D0C5FA39623FCB149256104E3857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:b7:f3:bc:ac:01:83:8c:30:e8:03:48:b1: b6:d1:48:98:e1:7e:d1:5f:aa:6b:ef:40:08:df:d9: 08:0c:57:d6:e4:0b:cb:62:82:70:79:ce:a2:18:1d: ea:2c:98:8f:69:82:91:a2:f5:f1:b3:d3:b1:9d:97: 72:56:ce:82:59:66:e2:b3:c0:f4:ae:bd:75:56:0e: f6:34:a4:10:54:fc:f0:d7:15:f6:25:56:c1:a0:9f: 0b:93:87:bc:1b:c0:dc:8d:14:31:5a:fd:51:1e:0c: e8:d3:81:d5:4f:75:7a:cf:1e:2d:da:3e:50:1d:ac: d1:27:47:b9:5b:1a:27:9d:2b:ad:7d:0f:0d:bf:50: 84:51:f7:e8:bc:d7:73:09:fc:06:d9:b4:15:bb:a9: 1e:fd:a2:71:ac:c3:7a:53:37:9f:62:d3:ec:b4:d4: 64:bd:98:1d:6a:6e:2b:dd:4d:0d:e7:63:64:01:e3: 91:ab:23:7b:30:bb:b3:a2:0f:95:86:2d:c9:3a:6a: b1:f8:49:ab:e0:48:16:70:e6:ec:6c:26:09:43:54: b2:2a:46:5e:77:9b:78:f3:39:8e:de:ad:e2:22:2d: 68:bb:54:30:df:f3:d1:20:ef:87:8e:0f:fc:65:8f: bb:59:7d:05:8d:e0:13:43:78:7b:94:32:e1:5e:0d: 0b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2B:31:F1:7B:52:D0:C5:FA:39:62:3F:CB:14:92:56:10:4E:38:57 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:38:d1:a5:b4:5c:3e:2b:9b:d5:72:f0:df:da:9e:83:82:aa: 81:1b:ad:31:90:db:cd:08:47:80:00:21:f4:57:0e:21:18:1e: c6:0e:1e:37:e8:c0:cb:b3:6f:fd:3c:22:8c:fd:da:f4:14:a9: ca:67:51:10:b5:6e:25:7a:7a:7f:68:a4:e3:2f:da:09:01:06: 96:b6:c6:3d:40:61:39:df:7a:6c:03:f5:90:0e:4a:a0:6d:d7: c7:4b:08:aa:f9:e4:a7:23:4b:3b:a0:44:a8:da:c0:7c:a4:10: 47:f0:ab:3c:83:ec:7b:e5:70:e1:fb:ee:13:74:48:4b:62:05: 7d:33:71:45:9e:d4:a0:da:54:3a:85:b5:29:7e:59:80:5b:df: 35:06:7f:11:76:1f:01:c1:f1:30:3e:56:c6:0c:5b:02:2e:89: ec:7f:20:16:6e:68:47:25:8b:10:f9:19:1f:b4:76:c6:ca:8b: ad:22:1c:b9:da:51:82:8b:0c:e0:fb:e1:c4:8e:3d:f8:8e:3e: 1d:06:f5:74:d6:e2:97:b7:e8:b0:e6:ca:75:70:d9:70:41:b9: d5:c3:2c:2e:d8:e8:07:b4:73:f0:f4:ae:38:11:38:47:57:24: d2:de:37:f7:bd:e7:56:3d:3c:01:69:49:ae:3b:dc:8c:ad:99: 87:ad:04:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqYxPReZ7Vm9Srilz2GAVUFUQdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTEyMDIwMjAwMDNaFw0yNTEyMDUwNzI1MDNaMDMxMTAvBgNV BAMTKEQ5MkIzMUYxN0I1MkQwQzVGQTM5NjIzRkNCMTQ5MjU2MTA0RTM4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmbfzvKwBg4ww6ANIsbbRSJjh ftFfqmvvQAjf2QgMV9bkC8tignB5zqIYHeosmI9pgpGi9fGz07Gdl3JWzoJZZuKz wPSuvXVWDvY0pBBU/PDXFfYlVsGgnwuTh7wbwNyNFDFa/VEeDOjTgdVPdXrPHi3a PlAdrNEnR7lbGiedK619Dw2/UIRR9+i813MJ/AbZtBW7qR79onGsw3pTN59i0+y0 1GS9mB1qbivdTQ3nY2QB45GrI3swu7OiD5WGLck6arH4SavgSBZw5uxsJglDVLIq Rl53m3jzOY7ereIiLWi7VDDf89Eg74eOD/xlj7tZfQWN4BNDeHuUMuFeDQuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Ssx8XtS0MX6OWI/yxSSVhBOOFcwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI40aW0XD4rm9Vy8N/anoOCqoEbrTGQ280I R4AAIfRXDiEYHsYOHjfowMuzb/08Ioz92vQUqcpnURC1biV6en9opOMv2gkBBpa2 xj1AYTnfemwD9ZAOSqBt18dLCKr55KcjSzugRKjawHykEEfwqzyD7HvlcOH77hN0 SEtiBX0zcUWe1KDaVDqFtSl+WYBb3zUGfxF2HwHB8TA+VsYMWwIuiex/IBZuaEcl ixD5GR+0dsbKi60iHLnaUYKLDOD74cSOPfiOPh0G9XTW4pe36LDmynVw2XBBudXD LC7Y6Ae0c/D0rjgROEdXJNLeN/e951Y9PAFpSa473IytmYetBFs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:41 2025 by rpki-client