This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: XJjwebzul5lltzAXnc25hL2TkqrgJhGISGZ0F0qABd4= Subject key identifier: 8C:AA:E4:37:A6:FC:EE:84:47:08:A7:0B:C6:5A:81:F3:28:7F:46:BB Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 131CDEB6105835C6E28ADF35B9F9F7327019AA20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 052A Signing time: Mon 01 Dec 2025 20:30:57 +0000 Manifest this update: Mon 01 Dec 2025 20:25:57 +0000 Manifest next update: Fri 05 Dec 2025 07:25:57 +0000 Files and hashes: 1: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) 2: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: UX4U8jG9YrRXpHTXCkjlBDp3eVHOq/pWjZqaHCLsvVs=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1c:de:b6:10:58:35:c6:e2:8a:df:35:b9:f9:f7:32:70:19:aa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Dec 1 20:25:57 2025 GMT Not After : Dec 5 07:25:57 2025 GMT Subject: CN=8CAAE437A6FCEE844708A70BC65A81F3287F46BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:25:a2:3e:12:56:77:f8:d0:20:e5:2d:70: a6:03:91:8a:bd:94:a7:ba:96:25:94:08:17:4b:5a: 8b:28:23:64:5d:6d:74:66:57:5a:a8:e9:14:08:e3: 71:29:d9:f1:c6:7d:e3:77:22:0f:2e:3f:25:a4:3b: ab:fc:4b:56:44:08:e2:24:76:a2:45:9a:df:59:ff: 87:c7:fd:87:7b:8c:9d:0e:a6:c1:21:2b:9e:a5:ed: d5:5c:8d:7a:04:a6:75:5d:87:79:41:1c:44:40:64: aa:70:8d:15:68:36:d9:fd:0a:aa:9f:11:db:13:b2: 19:5a:fb:f4:c3:d8:bf:23:08:e8:86:c3:ee:57:fc: 70:74:3f:26:ef:15:a5:f3:b2:26:67:34:cb:79:74: e7:2e:9f:39:5b:a4:0d:5d:8a:76:19:42:ea:df:cd: 35:ae:88:4c:fd:81:24:f9:73:c9:07:d0:2e:45:cd: 24:2d:bf:91:53:0e:02:dc:81:da:a0:d7:6e:e5:5f: d8:05:5e:3b:26:68:e4:e9:2b:6d:b9:e7:14:2c:02: 4a:97:69:71:12:0b:8a:89:70:50:e3:d7:b8:63:9a: 87:6c:0f:25:c0:06:c0:89:d3:24:82:c2:2e:3d:76: 3b:3b:dd:28:3a:e1:3c:1f:3a:74:bc:44:80:76:e4: 3e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AA:E4:37:A6:FC:EE:84:47:08:A7:0B:C6:5A:81:F3:28:7F:46:BB X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:04:0c:97:4e:87:96:e7:e5:de:d2:06:53:70:99:54:0d:c5: ac:ec:0c:51:cd:6d:a8:90:11:d3:bd:5d:55:1e:a7:9d:a3:2a: ea:33:24:28:2d:e7:55:0d:9e:b8:41:44:a7:ec:98:2b:9e:71: 41:c3:cf:8c:68:ca:58:2c:bc:16:8c:88:7a:74:8e:80:8b:45: dc:aa:56:f2:59:b4:4e:fd:63:b2:55:f7:d0:30:78:bc:57:e0: 74:87:64:6e:2f:07:15:51:29:8e:62:ae:e7:8d:7d:9c:12:a5: 8a:01:ac:32:df:2c:67:fe:ca:82:95:db:ab:2c:5d:d1:c0:3a: 7f:1d:af:86:b1:42:f6:ec:66:0f:e4:37:53:c1:ef:67:3f:63: 7d:62:76:e1:57:13:17:62:ac:76:63:85:ec:c9:48:ab:5b:4c: 96:83:a9:ba:4f:0b:47:0d:25:9f:c4:99:97:b6:a1:ac:e2:30: eb:68:0e:99:8b:f1:e4:8d:2e:bd:c3:e5:c6:5c:7d:d9:68:99: 0c:d3:45:b7:e7:73:98:28:a7:7f:c4:51:5a:1a:7d:5e:8d:f3: 75:97:2d:32:bc:9a:70:1e:48:6c:12:6c:06:cc:1a:3d:7e:9b: ff:71:d3:c8:3a:9d:6c:0b:7f:f9:d5:93:4d:08:d4:be:49:9b: 3f:e3:95:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUExzethBYNcbiit81ufn3MnAZqiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTEyMDEyMDI1NTdaFw0yNTEyMDUwNzI1NTdaMDMxMTAvBgNV BAMTKDhDQUFFNDM3QTZGQ0VFODQ0NzA4QTcwQkM2NUE4MUYzMjg3RjQ2QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZiWiPhJWd/jQIOUtcKYDkYq9 lKe6liWUCBdLWosoI2RdbXRmV1qo6RQI43Ep2fHGfeN3Ig8uPyWkO6v8S1ZECOIk dqJFmt9Z/4fH/Yd7jJ0OpsEhK56l7dVcjXoEpnVdh3lBHERAZKpwjRVoNtn9Cqqf EdsTshla+/TD2L8jCOiGw+5X/HB0PybvFaXzsiZnNMt5dOcunzlbpA1dinYZQurf zTWuiEz9gST5c8kH0C5FzSQtv5FTDgLcgdqg127lX9gFXjsmaOTpK2255xQsAkqX aXESC4qJcFDj17hjmodsDyXABsCJ0ySCwi49djs73Sg64TwfOnS8RIB25D5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjKrkN6b87oRHCKcLxlqB8yh/RrswHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsEDJdOh5bn5d7SBlNwmVQNxazsDFHNbaiQ EdO9XVUep52jKuozJCgt51UNnrhBRKfsmCuecUHDz4xoylgsvBaMiHp0joCLRdyq VvJZtE79Y7JV99AweLxX4HSHZG4vBxVRKY5irueNfZwSpYoBrDLfLGf+yoKV26ss XdHAOn8dr4axQvbsZg/kN1PB72c/Y31iduFXExdirHZjhezJSKtbTJaDqbpPC0cN JZ/EmZe2oaziMOtoDpmL8eSNLr3D5cZcfdlomQzTRbfnc5gop3/EUVoafV6N83WX LTK8mnAeSGwSbAbMGj1+m/9x08g6nWwLf/nVk00I1L5Jmz/jlVE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:29 2025 by rpki-client