This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft File: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft (raw, json) Hash identifier: AHjBDnpbw47vJOerJoZoE2kUNE8tsu6Qafv7X3A6J14= Subject key identifier: B4:B9:D8:73:3E:78:92:88:D7:3F:14:FB:F8:3E:A5:E4:DE:61:BA:A6 Authority key identifier: CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC Certificate issuer: /CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Certificate serial: 142F864601E6195CDAD2086A1E844CDF58AC37BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft Manifest number: 34 Signing time: Tue 02 Dec 2025 19:51:49 +0000 Manifest this update: Tue 02 Dec 2025 19:46:49 +0000 Manifest next update: Fri 05 Dec 2025 22:36:49 +0000 Files and hashes: 1: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl (hash: sCGIV8j51aHgEyshncR+WdVgfptWJ+j72VQqUfFZ4FE=) 2: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: 9Q3I81vfimJR2eOE3uBt/l1OU+u3ttXpoOc8s4Hxxs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2f:86:46:01:e6:19:5c:da:d2:08:6a:1e:84:4c:df:58:ac:37:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Validity Not Before: Dec 2 19:46:49 2025 GMT Not After : Dec 5 22:36:49 2025 GMT Subject: CN=B4B9D8733E789288D73F14FBF83EA5E4DE61BAA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:2b:c3:13:62:d4:87:20:b2:0e:d1:01:75: 68:87:77:d8:44:b5:46:61:de:a4:ee:a3:c8:1f:36: 41:66:9e:b1:7b:46:fd:cb:63:5c:ec:5b:a4:a1:4a: e0:f7:46:a4:39:49:32:01:8c:4d:86:47:15:f4:18: 70:d7:8f:fa:8a:2d:5f:76:aa:3d:35:90:d0:29:ef: 1a:e1:7a:1b:fd:f5:b1:8a:86:9d:c0:40:e8:19:03: d5:b7:ea:4e:b1:52:05:28:54:ba:61:2e:e0:a9:a2: c3:27:38:26:3a:e6:cc:e1:0b:9e:3f:de:73:3c:18: f0:e8:dc:3b:af:0c:df:1c:d2:05:a5:59:77:38:74: 8d:cb:53:e9:95:b9:fa:f6:16:92:29:86:b0:4e:8f: 5f:91:8d:64:54:a7:c1:00:42:b5:72:8d:20:18:f9: 3c:55:27:b8:48:42:b6:af:48:90:c2:61:79:dd:0c: 44:cd:50:36:f1:a7:9c:11:86:29:90:ed:66:ed:e6: c3:e9:59:cb:e8:5c:0e:73:46:17:a8:ec:1c:3e:e4: ac:71:04:24:57:5e:40:cf:1d:02:13:f8:e3:d3:06: ff:62:5c:86:76:69:fa:98:08:e7:8e:87:ec:10:d2: ee:0d:c1:72:fb:16:92:1c:6e:3e:cb:a4:85:83:7f: 89:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B9:D8:73:3E:78:92:88:D7:3F:14:FB:F8:3E:A5:E4:DE:61:BA:A6 X509v3 Authority Key Identifier: keyid:CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3d:d8:cf:60:3a:37:57:e5:a0:6c:b7:a3:db:8e:2c:33:07: 48:45:18:a1:6e:cf:12:43:ff:35:a8:17:f3:62:62:19:b5:10: 3a:b1:fa:45:bf:75:61:15:8b:b3:0e:c7:66:f7:c7:4a:cf:fb: 49:66:d9:fa:60:b3:dd:bb:b8:b9:0b:6b:ed:de:84:23:15:33: 12:95:19:b7:0f:e5:c2:eb:58:ca:74:1e:1d:d1:d5:77:58:56: 2a:1c:ff:f0:a1:30:45:69:c6:77:0b:57:9b:2a:a1:f1:db:ec: c6:60:a0:03:67:83:93:92:ce:ff:6f:60:27:48:3a:9c:2d:2e: 1f:7d:cc:bf:50:45:62:93:23:7a:7c:42:ed:07:6c:55:51:7a: 59:a9:47:51:6b:61:23:30:37:84:0b:73:e4:ec:2c:0f:0c:6d: 4e:8e:02:4a:c3:1d:47:5e:8b:a3:88:c1:04:92:b6:b8:4c:66: 75:c2:c6:78:e7:46:a0:77:09:f5:e7:f0:97:09:eb:b0:36:0b: 7a:c2:cb:7e:a8:2b:fc:c0:9e:67:c6:23:bb:a4:a7:5d:8b:25: 40:eb:d9:3b:9f:94:a3:c3:81:51:2f:54:76:ef:6f:6c:42:50: 85:69:33:57:3a:91:ae:df:a9:fb:36:3b:a4:70:7f:7f:f7:28: 74:6d:de:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFC+GRgHmGVza0ghqHoRM31isN7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4 QTcyOUZDQzAeFw0yNTEyMDIxOTQ2NDlaFw0yNTEyMDUyMjM2NDlaMDMxMTAvBgNV BAMTKEI0QjlEODczM0U3ODkyODhENzNGMTRGQkY4M0VBNUU0REU2MUJBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rSvDE2LUhyCyDtEBdWiHd9hE tUZh3qTuo8gfNkFmnrF7Rv3LY1zsW6ShSuD3RqQ5STIBjE2GRxX0GHDXj/qKLV92 qj01kNAp7xrhehv99bGKhp3AQOgZA9W36k6xUgUoVLphLuCposMnOCY65szhC54/ 3nM8GPDo3DuvDN8c0gWlWXc4dI3LU+mVufr2FpIphrBOj1+RjWRUp8EAQrVyjSAY +TxVJ7hIQravSJDCYXndDETNUDbxp5wRhimQ7Wbt5sPpWcvoXA5zRheo7Bw+5Kxx BCRXXkDPHQIT+OPTBv9iXIZ2afqYCOeOh+wQ0u4NwXL7FpIcbj7LpIWDf4nJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtLnYcz54kojXPxT7+D6l5N5huqYwHwYDVR0j BBgwFoAUzuG1vp+MMMpxDBt+sibDZIpyn8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjkzZmM4Zi1hZmNjLTRkZWYtODA2Zi1mNDQ0OTNkMDdhM2YvMC9DRUUxQjVCRTlG OEMzMENBNzEwQzFCN0VCMjI2QzM2NDhBNzI5RkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4QTcy OUZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMz NjQ4QTcyOUZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk92M9gOjdX5aBst6PbjiwzB0hFGKFuzxJD /zWoF/NiYhm1EDqx+kW/dWEVi7MOx2b3x0rP+0lm2fpgs927uLkLa+3ehCMVMxKV GbcP5cLrWMp0Hh3R1XdYVioc//ChMEVpxncLV5sqofHb7MZgoANng5OSzv9vYCdI OpwtLh99zL9QRWKTI3p8Qu0HbFVRelmpR1FrYSMwN4QLc+TsLA8MbU6OAkrDHUde i6OIwQSStrhMZnXCxnjnRqB3CfXn8JcJ67A2C3rCy36oK/zAnmfGI7ukp12LJUDr 2TuflKPDgVEvVHbvb2xCUIVpM1c6ka7fqfs2O6Rwf3/3KHRt3hM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:05:20 2025 by rpki-client