This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: JPJ/S+99XkT6UtUvaVEUg8Gp8Q8paqsHLlpTkeeBedU= Subject key identifier: 56:5A:55:A9:71:12:57:3E:C2:CF:6E:9A:E1:4F:21:10:A0:65:25:73 Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 44CE1C57346D5394890958755AD4B53159BFC212 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 024A Signing time: Wed 03 Dec 2025 13:21:37 +0000 Manifest this update: Wed 03 Dec 2025 13:16:37 +0000 Manifest next update: Sun 07 Dec 2025 00:44:37 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: tTXBDbx3vtXUTwoZJWrTCYZQkwoFci64Hb4o1Ovllgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ce:1c:57:34:6d:53:94:89:09:58:75:5a:d4:b5:31:59:bf:c2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Dec 3 13:16:37 2025 GMT Not After : Dec 7 00:44:37 2025 GMT Subject: CN=565A55A97112573EC2CF6E9AE14F2110A0652573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:4c:56:81:75:1e:e0:e4:f1:32:f2:bc:50: b3:5a:6d:2a:e7:09:1d:cf:c0:c6:a6:45:45:b6:06: 78:88:0e:f5:a6:b7:0e:aa:63:1d:2e:19:20:0b:a7: ee:41:a4:4e:1d:05:14:4e:57:b2:9f:e9:fd:d3:5b: 03:71:99:f6:d3:d1:e2:90:4f:2a:50:4b:ac:42:15: ec:d0:65:50:8a:b1:a1:03:a7:8e:cd:5f:59:1e:88: bb:a6:03:39:97:9d:77:21:fd:00:a7:40:7c:68:b8: 8c:9b:ba:15:0d:c5:ff:47:37:80:44:f6:a3:28:de: db:1e:f2:48:56:d3:58:e4:70:fb:b1:e3:c0:59:d5: ed:5a:2c:31:d1:4b:91:23:18:08:cb:78:d8:4b:90: d1:c4:9d:35:29:ee:97:78:4c:78:9e:4c:e9:e2:1e: 63:cf:c3:8f:69:87:ce:41:2b:d9:c3:b6:fc:c4:c0: 9c:a6:e6:0b:5f:19:e2:ce:d3:84:43:c2:40:cc:49: 92:9f:d8:ae:0f:c4:3c:b0:35:a5:4e:d8:1b:a5:c2: ed:d6:d9:d1:de:a6:53:73:a5:21:c4:9a:56:1b:cc: d0:72:a3:3c:d1:e8:8e:f3:35:2e:94:75:81:a6:42: 74:9b:76:2b:b6:f2:f4:41:77:31:dd:57:6a:51:eb: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5A:55:A9:71:12:57:3E:C2:CF:6E:9A:E1:4F:21:10:A0:65:25:73 X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:a2:73:d6:d4:bb:b5:ff:a3:88:5b:17:e8:e2:e5:08:5f:ef: 17:2d:29:95:47:22:d2:5e:78:40:38:8e:73:80:67:c4:8b:31: f8:a8:19:f2:e4:56:12:26:b3:14:ab:0e:0c:30:d8:29:0f:da: da:a9:60:21:70:f7:01:48:3f:df:b6:e7:a7:12:d2:ed:e7:7f: 1a:79:3b:43:0a:55:94:73:68:ea:3f:d8:54:db:9e:f4:a1:d8: 16:e0:d7:f4:44:12:a9:7f:1c:fe:30:98:3f:5a:a9:66:db:46: e4:d2:61:b0:b8:f8:01:e8:d8:6e:bc:3c:5a:5b:bc:4c:47:74: d8:95:79:02:04:36:71:fb:16:05:d4:09:4c:40:d4:92:36:81: 5c:ba:27:3b:de:70:8d:33:35:6f:7a:b4:6a:3c:a0:41:ce:49: d8:89:f5:ad:3b:30:cf:99:9c:bb:31:27:74:1e:58:43:65:b4: 63:42:9d:11:58:04:78:ff:8a:d5:7a:cf:3f:8c:09:bf:0c:82: 6a:65:1c:f2:a4:30:21:e8:de:46:86:2b:dd:b9:bb:31:b9:9d: 9c:8a:29:57:c9:0e:44:eb:33:df:68:80:a5:4b:3f:86:b5:a3: 8d:39:8d:f1:ab:a3:63:52:6f:db:0e:6e:c4:d1:85:24:9d:0d: 25:47:36:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURM4cVzRtU5SJCVh1WtS1MVm/whIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTEyMDMxMzE2MzdaFw0yNTEyMDcwMDQ0MzdaMDMxMTAvBgNV BAMTKDU2NUE1NUE5NzExMjU3M0VDMkNGNkU5QUUxNEYyMTEwQTA2NTI1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XkxWgXUe4OTxMvK8ULNabSrn CR3PwMamRUW2BniIDvWmtw6qYx0uGSALp+5BpE4dBRROV7Kf6f3TWwNxmfbT0eKQ TypQS6xCFezQZVCKsaEDp47NX1keiLumAzmXnXch/QCnQHxouIybuhUNxf9HN4BE 9qMo3tse8khW01jkcPux48BZ1e1aLDHRS5EjGAjLeNhLkNHEnTUp7pd4THieTOni HmPPw49ph85BK9nDtvzEwJym5gtfGeLO04RDwkDMSZKf2K4PxDywNaVO2Bulwu3W 2dHeplNzpSHEmlYbzNByozzR6I7zNS6UdYGmQnSbdiu28vRBdzHdV2pR64odAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVlpVqXESVz7Cz26a4U8hEKBlJXMwHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANKic9bUu7X/o4hbF+ji5Qhf7xctKZVHItJe eEA4jnOAZ8SLMfioGfLkVhImsxSrDgww2CkP2tqpYCFw9wFIP9+256cS0u3nfxp5 O0MKVZRzaOo/2FTbnvSh2Bbg1/REEql/HP4wmD9aqWbbRuTSYbC4+AHo2G68PFpb vExHdNiVeQIENnH7FgXUCUxA1JI2gVy6JzvecI0zNW96tGo8oEHOSdiJ9a07MM+Z nLsxJ3QeWENltGNCnRFYBHj/itV6zz+MCb8MgmplHPKkMCHo3kaGK925uzG5nZyK KVfJDkTrM99ogKVLP4a1o405jfGro2NSb9sObsTRhSSdDSVHNqo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:50 2025 by rpki-client