This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft File: E44D4DE701D932713536A084F76894A6B0473F5E.mft (raw, json) Hash identifier: blr/T/MoyGFNuL1cprxCsn8NOfo94TLcWBcLTXDWNgY= Subject key identifier: 38:E0:7C:CF:34:B4:1A:EE:97:CE:01:17:F8:88:60:34:9C:0A:F7:54 Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E Certificate issuer: /CN=E44D4DE701D932713536A084F76894A6B0473F5E Certificate serial: 7A2A0B3C8E56AEF568B3DBBD5890B734DD5CDC6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft Manifest number: 025E Signing time: Sun 14 Dec 2025 21:32:16 +0000 Manifest this update: Sun 14 Dec 2025 21:27:16 +0000 Manifest next update: Thu 18 Dec 2025 02:14:16 +0000 Files and hashes: 1: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: W4u8P1SQQa3NmSN5ZCqGSVGNmCx4edXu6e4flVOIf2c=) 2: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: bl/n5bigRNUdzOdSRBMJ4xavg1ElwqsMKJXdZov+BBc=) 3: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: otSYaOpWUX7/R5silYI2qFwHrea2Nhn73//fdSkzDls=) 4: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: 7QCopDe7hDkeVtB42/2nmhBi3ICh26qKFWh8viPiuG0=) 5: E44D4DE701D932713536A084F76894A6B0473F5E.crl (hash: LFVWZjHaZW2QBa9cZOsXJFcLc4txFhsbwhBgcmQjtB4=) 6: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: 4c0IK//t9QV9eDZcRuS2szDSLoJBAnWIV4hCGmSoEiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 02:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2a:0b:3c:8e:56:ae:f5:68:b3:db:bd:58:90:b7:34:dd:5c:dc:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E Validity Not Before: Dec 14 21:27:16 2025 GMT Not After : Dec 18 02:14:16 2025 GMT Subject: CN=38E07CCF34B41AEE97CE0117F88860349C0AF754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:50:b2:25:5b:c3:4c:80:74:92:c4:a4:b1: b6:b9:7d:e4:dc:e8:70:81:c7:dd:9b:da:a5:f6:7d: f3:74:5d:20:fd:c0:75:ae:06:49:15:1a:ac:e0:33: db:9a:bd:78:e9:12:1a:52:4b:f7:27:02:7c:14:70: 33:cb:13:fa:8e:7b:ba:19:ee:61:02:b2:51:81:98: bc:81:60:bb:96:fa:5d:69:49:e0:b6:3c:8e:c1:b2: cb:f5:10:b6:98:85:b3:dc:b6:90:bf:a3:73:a7:07: a4:12:f5:31:2d:cf:63:63:8e:60:2f:de:5c:88:55: 90:2e:63:61:e4:c4:1c:2c:fe:18:4e:c0:76:b1:0c: 0c:aa:24:16:65:c1:8d:e0:2e:8d:c4:64:40:e1:2a: c3:f8:17:45:5c:ba:03:ff:07:0b:33:fa:4d:12:3c: 7a:f8:d7:e4:d3:0f:6e:49:47:e7:65:ce:a8:73:01: aa:18:45:9c:08:55:52:ce:c3:d8:e0:12:e0:2d:79: 43:1e:b1:7e:ba:3c:3a:33:a6:21:4e:00:a8:e3:16: 0e:fe:79:7b:4a:68:07:b1:d1:8e:46:62:40:cf:5c: 75:be:f5:06:4b:20:3c:23:ff:d7:ea:40:76:5b:31: 87:9c:75:a2:c3:9f:63:1e:a1:72:ad:c9:10:9b:65: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E0:7C:CF:34:B4:1A:EE:97:CE:01:17:F8:88:60:34:9C:0A:F7:54 X509v3 Authority Key Identifier: keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:14:bd:28:2d:fd:f7:7e:00:ca:d8:50:17:83:bd:78:32:6a: f9:23:68:d3:8d:e6:e7:96:b4:9d:3f:34:d6:5e:68:b8:6f:32: b3:6c:f1:9d:d7:87:c6:02:49:0f:af:09:9f:64:1d:81:22:35: bb:b6:de:a7:5c:f3:39:b2:1a:0a:3b:55:4c:52:f2:86:ed:cc: c5:37:98:ae:50:2e:50:f9:c8:e7:8a:89:6e:f6:c2:5e:e2:83: ed:ab:de:6a:25:76:4c:92:98:82:67:d1:44:d1:2e:ec:57:ba: 59:3f:2b:b4:64:49:d5:f8:7d:92:bb:81:d4:a7:9e:1e:90:8b: 8b:fa:e6:a3:6b:61:9b:0a:b7:cf:fe:83:ae:1d:75:c6:3d:7e: b3:3b:df:d1:c0:57:19:d3:1d:b3:d0:28:3b:89:78:ac:2f:fa: 45:e2:5d:7c:e5:0c:92:01:74:a5:58:90:db:c6:de:56:e6:fd: 15:b5:54:9f:01:d0:93:0a:fa:ad:24:c8:6e:32:50:7f:ce:e0: 99:4b:34:23:75:3e:89:ed:f5:e0:7c:07:c6:9a:27:01:fa:79: 23:4d:93:d5:be:8f:7c:79:66:46:fa:dc:da:68:bb:21:a5:7a: 14:7e:b1:19:63:4d:d1:8c:5b:4d:b8:fe:45:3c:9b:cf:c9:02: 4d:e5:39:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeioLPI5WrvVos9u9WJC3NN1c3GwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZC MDQ3M0Y1RTAeFw0yNTEyMTQyMTI3MTZaFw0yNTEyMTgwMjE0MTZaMDMxMTAvBgNV BAMTKDM4RTA3Q0NGMzRCNDFBRUU5N0NFMDExN0Y4ODg2MDM0OUMwQUY3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+VCyJVvDTIB0ksSksba5feTc 6HCBx92b2qX2ffN0XSD9wHWuBkkVGqzgM9uavXjpEhpSS/cnAnwUcDPLE/qOe7oZ 7mECslGBmLyBYLuW+l1pSeC2PI7Bssv1ELaYhbPctpC/o3OnB6QS9TEtz2NjjmAv 3lyIVZAuY2HkxBws/hhOwHaxDAyqJBZlwY3gLo3EZEDhKsP4F0VcugP/Bwsz+k0S PHr41+TTD25JR+dlzqhzAaoYRZwIVVLOw9jgEuAteUMesX66PDozpiFOAKjjFg7+ eXtKaAex0Y5GYkDPXHW+9QZLIDwj/9fqQHZbMYecdaLDn2MeoXKtyRCbZbLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOB8zzS0Gu6XzgEX+IhgNJwK91QwHwYDVR0j BBgwFoAU5E1N5wHZMnE1NqCE92iUprBHP14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjRmMGZmYS1lMDMxLTRlZTEtYmYwZi02NGJhY2ZjZjI5NDIvMC9FNDRENERFNzAx RDkzMjcxMzUzNkEwODRGNzY4OTRBNkIwNDczRjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZCMDQ3 M0Y1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0 QTZCMDQ3M0Y1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsUvSgt/fd+AMrYUBeDvXgyavkjaNON5ueW tJ0/NNZeaLhvMrNs8Z3Xh8YCSQ+vCZ9kHYEiNbu23qdc8zmyGgo7VUxS8obtzMU3 mK5QLlD5yOeKiW72wl7ig+2r3moldkySmIJn0UTRLuxXulk/K7RkSdX4fZK7gdSn nh6Qi4v65qNrYZsKt8/+g64ddcY9frM739HAVxnTHbPQKDuJeKwv+kXiXXzlDJIB dKVYkNvG3lbm/RW1VJ8B0JMK+q0kyG4yUH/O4JlLNCN1Pont9eB8B8aaJwH6eSNN k9W+j3x5Zkb63NpouyGlehR+sRljTdGMW024/kU8m8/JAk3lOa4= -----END CERTIFICATE-----Generated at Tue Dec 16 07:22:52 2025 by rpki-client