This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: WZ3L8jruesct1NjQ558AOAosjyMHVn/vQfw05obRcjc= Subject key identifier: 8E:FC:EF:B6:9C:33:66:D4:72:95:23:27:5F:04:FE:B4:98:26:97:0E Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 7DCAEEDA39F1D654AAD3771C6A029E384D26DFE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 0246 Signing time: Sun 14 Dec 2025 07:11:22 +0000 Manifest this update: Sun 14 Dec 2025 07:06:22 +0000 Manifest next update: Wed 17 Dec 2025 09:09:22 +0000 Files and hashes: 1: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: 1fH5ODg5EBO/V3ZRGDzSAcFIPIjeQA5tTEeKFK83Jno=) 2: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 1PlLZ70/l1XO167EbfOMkFAS5NVNN52M28JEV2n5Nfw=) 3: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: lG93mDy8mZJ1KYLzkUSHtFdOp3jxkVuITP5q7tld/tA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 08:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ca:ee:da:39:f1:d6:54:aa:d3:77:1c:6a:02:9e:38:4d:26:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Dec 14 07:06:22 2025 GMT Not After : Dec 17 09:09:22 2025 GMT Subject: CN=8EFCEFB69C3366D4729523275F04FEB49826970E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dc:b9:63:d9:5e:0c:e0:0f:bd:fe:ee:f6:fd: 78:a4:d3:ef:f5:27:a1:97:d5:6a:d8:17:d4:9b:49: bb:0c:d1:cc:db:86:00:c4:05:4c:32:ec:35:35:db: 19:ad:88:45:7e:46:8c:87:9b:7a:f1:c6:9a:12:b9: e1:13:2a:1b:45:60:2d:b9:a2:e0:7b:d0:7a:00:b6: ae:31:c3:28:f7:e8:06:d2:88:a8:d3:f8:f0:bf:dd: 20:84:02:5d:30:21:22:95:1d:9a:20:a3:ab:9d:ea: 6e:fb:29:5e:3c:1d:cc:cd:59:75:83:3e:8a:9f:33: 21:98:7c:5d:bc:3c:e8:3e:51:30:76:9a:3b:4c:99: e3:da:e5:26:e7:8a:65:7f:87:ca:61:08:b3:1c:cf: 55:4b:c2:bd:65:1a:19:ed:e7:26:d2:63:60:b3:b4: 6f:98:4e:fc:bc:1c:c4:b6:8a:4e:e6:a2:79:72:9a: 6a:e9:cb:a8:b0:5f:d9:14:ec:8f:f6:c9:81:a4:56: 67:6a:16:9b:33:4a:e3:be:58:63:4e:40:59:7b:b8: 41:1c:0e:c5:9a:14:6c:cc:02:8e:08:e6:28:4a:21: eb:ef:15:8e:fa:c2:8a:45:76:a8:88:41:0f:44:a2: 1e:4e:cc:3b:f6:d2:66:50:dc:1d:24:9b:5e:ea:8b: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FC:EF:B6:9C:33:66:D4:72:95:23:27:5F:04:FE:B4:98:26:97:0E X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d0:27:a5:2a:c4:21:ef:e3:21:b0:44:33:f4:88:c6:f8:ba: 3a:f7:d5:05:93:cf:a6:bb:f7:c6:3f:b7:e1:82:a6:f4:71:ab: 2d:77:66:81:48:c2:a2:76:19:05:ed:e5:d4:1e:c3:cf:c8:8f: fc:03:0a:7d:d0:0d:ff:0d:28:fe:ad:42:67:ff:c4:c7:a4:5a: b0:b9:cf:29:c3:2e:df:55:70:c9:23:db:fa:d1:0c:98:52:db: 98:f1:a8:d4:76:1e:20:84:c3:ce:57:4b:01:79:fd:df:2b:6f: 59:1b:e8:38:84:c7:ac:74:32:16:5a:d2:3e:fa:33:41:82:2d: a8:fc:c6:5d:c0:e7:68:40:b0:8d:83:a3:db:0b:21:e1:a1:83: 36:1c:c1:7b:99:56:e0:2e:b4:83:c2:28:97:94:66:ce:0e:60: e4:86:a3:98:32:fc:a5:1c:c5:25:88:ed:02:cf:d0:04:27:c0: 19:ed:1d:52:2a:d3:ef:e5:d6:d5:f7:6a:24:07:ae:5a:dc:eb: d3:4e:a5:d0:ab:97:d5:7e:9a:99:3e:7f:95:f6:27:3e:f9:57: f0:fc:f8:d7:71:5e:71:1c:bc:c7:ce:78:01:45:7f:f2:69:1d: 69:a3:84:61:7d:e8:01:38:ef:65:87:c1:b4:33:16:0d:8a:14: 71:f7:71:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfcru2jnx1lSq03ccagKeOE0m3+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNTEyMTQwNzA2MjJaFw0yNTEyMTcwOTA5MjJaMDMxMTAvBgNV BAMTKDhFRkNFRkI2OUMzMzY2RDQ3Mjk1MjMyNzVGMDRGRUI0OTgyNjk3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3Llj2V4M4A+9/u72/Xik0+/1 J6GX1WrYF9SbSbsM0czbhgDEBUwy7DU12xmtiEV+RoyHm3rxxpoSueETKhtFYC25 ouB70HoAtq4xwyj36AbSiKjT+PC/3SCEAl0wISKVHZogo6ud6m77KV48HczNWXWD PoqfMyGYfF28POg+UTB2mjtMmePa5SbnimV/h8phCLMcz1VLwr1lGhnt5ybSY2Cz tG+YTvy8HMS2ik7monlymmrpy6iwX9kU7I/2yYGkVmdqFpszSuO+WGNOQFl7uEEc DsWaFGzMAo4I5ihKIevvFY76wopFdqiIQQ9Eoh5OzDv20mZQ3B0km17qi2nhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjvzvtpwzZtRylSMnXwT+tJgmlw4wHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/QJ6UqxCHv4yGwRDP0iMb4ujr31QWTz6a7 98Y/t+GCpvRxqy13ZoFIwqJ2GQXt5dQew8/Ij/wDCn3QDf8NKP6tQmf/xMekWrC5 zynDLt9VcMkj2/rRDJhS25jxqNR2HiCEw85XSwF5/d8rb1kb6DiEx6x0MhZa0j76 M0GCLaj8xl3A52hAsI2Do9sLIeGhgzYcwXuZVuAutIPCKJeUZs4OYOSGo5gy/KUc xSWI7QLP0AQnwBntHVIq0+/l1tX3aiQHrlrc69NOpdCrl9V+mpk+f5X2Jz75V/D8 +NdxXnEcvMfOeAFFf/JpHWmjhGF96AE472WHwbQzFg2KFHH3cVY= -----END CERTIFICATE-----Generated at Sun Dec 14 23:19:03 2025 by rpki-client