This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: gSJ863vdIYpNVwzQuVHUI3yBVMa62MIKzbuaWWw2I40= Subject key identifier: AC:E3:FD:01:14:4F:C5:80:B3:41:D3:30:FB:F2:99:01:70:7D:58:CE Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 12E08F9172739588C09580F44C1B6A47040D8892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: FD Signing time: Sun 07 Dec 2025 12:40:57 +0000 Manifest this update: Sun 07 Dec 2025 12:35:57 +0000 Manifest next update: Wed 10 Dec 2025 21:52:57 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) 2: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: vYujV1dhJE1QT32NtsK60WXGTXrUa3e4FjKJD+cc7KM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e0:8f:91:72:73:95:88:c0:95:80:f4:4c:1b:6a:47:04:0d:88:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Dec 7 12:35:57 2025 GMT Not After : Dec 10 21:52:57 2025 GMT Subject: CN=ACE3FD01144FC580B341D330FBF29901707D58CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:d2:13:58:f2:1c:50:ce:de:d1:ee:d9:dd: c3:d7:28:66:d4:66:d5:13:59:59:cc:13:dd:4e:de: f5:31:1a:86:05:e9:67:03:7d:fe:c9:91:ad:3a:9a: 09:c1:09:60:2c:e8:2f:c4:0b:4a:66:d6:0b:cb:ee: 33:45:eb:0d:8d:aa:12:b6:46:d8:07:19:ab:1a:f5: be:e8:a3:83:39:50:b2:e4:8e:c3:2b:09:a7:5a:d6: ee:76:b4:9b:af:30:f4:d4:c1:40:f1:90:a2:66:5b: fa:2d:62:f3:62:df:69:5f:c7:f2:6b:f5:91:9e:0e: ff:7d:e5:9a:37:09:fd:42:2f:8c:41:f6:18:9a:5a: a3:0c:16:af:58:e2:c6:50:8c:97:0c:2f:79:7e:5a: 99:dc:8a:dd:f0:c1:13:37:3e:55:f1:57:03:8d:26: 4c:34:3a:db:11:a7:93:c3:80:e1:30:3c:f9:1e:ed: e9:79:98:6b:da:8f:fb:5c:db:5c:c0:70:ff:7f:65: fd:99:e3:bb:2f:d5:5b:29:25:6a:51:a3:11:b1:dc: 3f:6f:9e:9b:6f:93:bc:9a:01:22:6a:ce:44:64:b8: 9c:c2:30:15:21:e2:17:52:e8:e4:04:67:fe:c1:a8: 31:dd:f3:c1:da:8c:0e:b5:d0:28:00:d3:bf:4b:b7: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E3:FD:01:14:4F:C5:80:B3:41:D3:30:FB:F2:99:01:70:7D:58:CE X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b8:48:3a:a2:54:7e:0a:5d:3d:e6:ad:db:ce:3f:98:5b:38: 99:62:39:f4:08:e9:2c:62:f2:b6:d7:1c:a4:28:28:b7:4e:69: 9c:ac:1b:cb:48:0e:37:ca:5d:fe:e8:98:eb:50:f2:ef:df:ab: ec:da:aa:2b:0d:01:1a:5c:37:12:e6:3a:00:1c:56:49:af:f5: a6:14:61:76:3d:a3:97:f5:50:be:f1:ab:4e:b9:e4:0f:7c:28: 77:6d:8b:6f:d5:bb:92:a8:fd:58:20:a2:54:0a:37:9c:e1:4e: 82:c0:e7:f9:f1:71:16:ca:ba:99:e8:8b:5c:7c:cf:ac:aa:0d: 05:3a:5d:dd:53:6f:90:90:e3:56:3f:bb:9d:be:69:37:89:d2: d7:21:fc:71:6a:ca:02:1e:95:af:31:f8:70:93:70:88:f9:4f: 6c:1f:bc:6c:7c:6f:c4:e4:b3:2b:27:e6:48:34:f8:a4:02:f4: b0:69:53:8c:82:bb:7f:d6:33:f8:2d:0b:e8:1f:38:8c:f6:f4: f3:9c:89:53:9a:df:d5:f5:a7:86:75:70:7c:98:9b:f4:9a:ad: 9a:8d:9a:33:53:a0:eb:b3:a4:e8:7f:02:99:d0:61:25:07:98: 40:25:4c:75:d0:50:eb:70:0b:5c:46:bd:53:c6:e8:cc:23:38: c2:f9:be:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuCPkXJzlYjAlYD0TBtqRwQNiJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNTEyMDcxMjM1NTdaFw0yNTEyMTAyMTUyNTdaMDMxMTAvBgNV BAMTKEFDRTNGRDAxMTQ0RkM1ODBCMzQxRDMzMEZCRjI5OTAxNzA3RDU4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/X9ITWPIcUM7e0e7Z3cPXKGbU ZtUTWVnME91O3vUxGoYF6WcDff7Jka06mgnBCWAs6C/EC0pm1gvL7jNF6w2NqhK2 RtgHGasa9b7oo4M5ULLkjsMrCada1u52tJuvMPTUwUDxkKJmW/otYvNi32lfx/Jr 9ZGeDv995Zo3Cf1CL4xB9hiaWqMMFq9Y4sZQjJcML3l+Wpncit3wwRM3PlXxVwON Jkw0OtsRp5PDgOEwPPke7el5mGvaj/tc21zAcP9/Zf2Z47sv1VspJWpRoxGx3D9v nptvk7yaASJqzkRkuJzCMBUh4hdS6OQEZ/7BqDHd88HajA610CgA079Lt62PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrOP9ARRPxYCzQdMw+/KZAXB9WM4wHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAu4SDqiVH4KXT3mrdvOP5hbOJliOfQI6Sxi 8rbXHKQoKLdOaZysG8tIDjfKXf7omOtQ8u/fq+zaqisNARpcNxLmOgAcVkmv9aYU YXY9o5f1UL7xq0655A98KHdti2/Vu5Ko/VggolQKN5zhToLA5/nxcRbKupnoi1x8 z6yqDQU6Xd1Tb5CQ41Y/u52+aTeJ0tch/HFqygIela8x+HCTcIj5T2wfvGx8b8Tk sysn5kg0+KQC9LBpU4yCu3/WM/gtC+gfOIz29POciVOa39X1p4Z1cHyYm/SarZqN mjNToOuzpOh/ApnQYSUHmEAlTHXQUOtwC1xGvVPG6MwjOML5vp0= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:10 2025 by rpki-client