This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft (raw, json) Hash identifier: 1ZPn1zUeP8QXnX7Vk4edSoSNqxYmFELpFWPdrzwuVR8= Subject key identifier: D7:7F:EA:EE:FD:ED:B9:3D:9D:48:61:4F:44:D0:4B:F4:80:48:26:20 Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Certificate serial: 2E6E407CC32FF013EA7CF0E2D08173FFE9C8359D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft Manifest number: 052C Signing time: Tue 02 Dec 2025 00:30:00 +0000 Manifest this update: Tue 02 Dec 2025 00:25:00 +0000 Manifest next update: Fri 05 Dec 2025 03:47:00 +0000 Files and hashes: 1: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: mhHbC7IIWFFORZdV/WAdZvBGn0b08EabDQByz7GAvr4=) 2: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: 7t1UfL5E/ZJwSEO7orDivflRDFpoQvNkURGau+OZ9WE=) 3: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl (hash: 7i0Eoawz3l1QCMZGQy3kQ9YNQDx3UqZ662llAH37c6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6e:40:7c:c3:2f:f0:13:ea:7c:f0:e2:d0:81:73:ff:e9:c8:35:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Validity Not Before: Dec 2 00:25:00 2025 GMT Not After : Dec 5 03:47:00 2025 GMT Subject: CN=D77FEAEEFDEDB93D9D48614F44D04BF480482620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6c:36:e6:8e:24:9f:8c:e1:68:45:1e:d3:83: d9:53:8b:58:e8:fe:41:2d:ab:fe:e1:f8:25:37:29: 48:e6:c4:2b:83:92:60:57:84:ea:fa:55:f8:a8:1a: 9b:d6:3b:11:01:42:6b:82:75:42:76:30:55:f4:5a: e6:43:b1:a9:36:8f:da:d9:75:aa:41:e2:13:24:b8: b4:7c:3a:f6:d5:01:8f:03:b3:73:e0:18:91:36:46: c1:66:45:86:44:1a:1e:f9:e7:ce:47:eb:e6:97:d4: a6:46:34:85:d0:76:60:aa:b5:c1:7d:47:a7:64:30: 7c:26:0c:99:5a:33:73:d0:61:f4:3a:d4:92:bc:c0: f0:97:a8:ca:9b:88:c9:3a:b4:80:18:1f:25:6f:2e: 16:f5:53:d8:9f:e7:09:e8:7a:a2:86:96:d0:08:67: c5:06:e1:49:f2:2e:9a:56:b0:20:59:24:07:f0:02: df:df:bc:61:6c:cf:28:a5:9b:50:de:ac:e2:7f:7a: 17:db:71:50:4f:8d:db:b0:9c:99:39:3e:8d:42:8b: ea:13:5c:13:d0:fc:13:50:3a:8b:70:7a:fa:a9:9e: 7d:f5:3b:ea:7b:59:6f:82:33:3a:78:7b:2e:a8:64: 08:e6:91:f4:86:d3:95:35:24:30:5f:a5:22:89:b8: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7F:EA:EE:FD:ED:B9:3D:9D:48:61:4F:44:D0:4B:F4:80:48:26:20 X509v3 Authority Key Identifier: keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:09:d4:e0:cd:9b:22:52:6a:39:9e:2c:7d:13:63:78:4b:bc: 53:18:be:0b:32:09:aa:d1:eb:79:30:3f:22:9c:32:81:16:c3: ab:4a:c9:23:e6:af:69:c2:7f:3d:09:08:09:9c:c5:d8:0a:71: ad:03:ae:aa:ad:09:8f:1e:ac:9f:4a:ab:cf:db:0c:dd:f3:bf: 1d:0d:7f:03:76:fe:f1:1a:9d:f4:32:3c:e9:b2:99:0f:aa:c0: 08:07:53:c1:bd:24:c5:93:20:03:ef:6b:95:ca:63:c4:85:6a: 8f:dd:6c:8e:ce:28:b8:fc:62:cc:71:7d:6d:2d:ce:e8:96:83: bb:41:27:cf:41:ce:f9:9a:16:16:98:9b:a4:55:b9:9b:ed:da: 71:b8:ff:44:d9:de:22:69:a5:75:37:0c:6d:39:19:02:1b:ad: 15:61:9b:67:59:e0:92:d7:26:47:bb:97:f3:65:86:0e:7e:7c: 46:6b:36:8e:69:68:25:7f:50:cc:ba:00:64:f1:68:bd:a6:96: 7a:15:6d:c4:25:88:5a:b9:76:e5:ff:a6:91:a4:5d:9a:79:e3: a5:f2:34:ea:44:54:c7:0e:d7:aa:b1:10:a8:fd:49:16:41:2e: 6d:a8:dc:2e:66:c3:96:9a:56:09:b1:3d:12:4d:6f:5e:39:02: e2:27:d0:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULm5AfMMv8BPqfPDi0IFz/+nINZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB NDc4RkQxQzAeFw0yNTEyMDIwMDI1MDBaFw0yNTEyMDUwMzQ3MDBaMDMxMTAvBgNV BAMTKEQ3N0ZFQUVFRkRFREI5M0Q5RDQ4NjE0RjQ0RDA0QkY0ODA0ODI2MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbDbmjiSfjOFoRR7Tg9lTi1jo /kEtq/7h+CU3KUjmxCuDkmBXhOr6VfioGpvWOxEBQmuCdUJ2MFX0WuZDsak2j9rZ dapB4hMkuLR8OvbVAY8Ds3PgGJE2RsFmRYZEGh75585H6+aX1KZGNIXQdmCqtcF9 R6dkMHwmDJlaM3PQYfQ61JK8wPCXqMqbiMk6tIAYHyVvLhb1U9if5wnoeqKGltAI Z8UG4UnyLppWsCBZJAfwAt/fvGFszyilm1DerOJ/ehfbcVBPjduwnJk5Po1Ci+oT XBPQ/BNQOotwevqpnn31O+p7WW+CMzp4ey6oZAjmkfSG05U1JDBfpSKJuAypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13/q7v3tuT2dSGFPRNBL9IBIJiAwHwYDVR0j BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4 RkQxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3 QUVBNDc4RkQxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAJ1ODNmyJSajmeLH0TY3hLvFMYvgsyCarR 63kwPyKcMoEWw6tKySPmr2nCfz0JCAmcxdgKca0DrqqtCY8erJ9Kq8/bDN3zvx0N fwN2/vEanfQyPOmymQ+qwAgHU8G9JMWTIAPva5XKY8SFao/dbI7OKLj8YsxxfW0t zuiWg7tBJ89BzvmaFhaYm6RVuZvt2nG4/0TZ3iJppXU3DG05GQIbrRVhm2dZ4JLX Jke7l/Nlhg5+fEZrNo5paCV/UMy6AGTxaL2mlnoVbcQliFq5duX/ppGkXZp546Xy NOpEVMcO16qxEKj9SRZBLm2o3C5mw5aaVgmxPRJNb145AuIn0MQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:34 2025 by rpki-client