This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: RrF6fkLG1aBwDimmvttjrTgT/102rBSdEERjd8iwwCw= Subject key identifier: 19:09:E1:EE:27:81:8F:A1:ED:5A:43:A6:3B:12:FE:DC:C3:80:DA:A8 Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 5B549A7835F31B9328290A57E1B63F207E28DE4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 01A1 Signing time: Wed 03 Dec 2025 11:41:27 +0000 Manifest this update: Wed 03 Dec 2025 11:36:27 +0000 Manifest next update: Sat 06 Dec 2025 15:52:27 +0000 Files and hashes: 1: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) 2: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: aY0fQhM8KCxMCOsPe4i9zEWafcvCfoGRO+SbWgVzZhw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:54:9a:78:35:f3:1b:93:28:29:0a:57:e1:b6:3f:20:7e:28:de:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Dec 3 11:36:27 2025 GMT Not After : Dec 6 15:52:27 2025 GMT Subject: CN=1909E1EE27818FA1ED5A43A63B12FEDCC380DAA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:99:58:47:d8:b0:eb:56:07:51:42:dc:ad: 01:25:48:fc:e6:b9:a7:aa:70:26:80:67:9d:ef:a7: fe:c4:fa:7f:26:89:77:57:e5:4c:ea:67:4b:f0:13: 9b:1e:c9:5d:52:40:08:3a:87:00:32:ac:f0:e7:11: ed:bc:97:14:ef:27:a4:d2:13:a7:99:b8:3d:6e:c5: 2f:5f:68:ce:e1:c2:ea:a2:44:44:1f:cc:65:cf:e2: 6e:c3:1c:06:d0:3e:a7:7b:e2:94:6b:f2:30:e1:72: 69:4e:58:fa:b1:3f:59:82:f2:00:f9:41:77:19:02: 61:bd:65:f4:e4:05:a4:cc:cd:c1:bf:49:d5:74:6d: 73:88:03:94:da:ae:8f:7e:96:b3:1d:63:d2:71:37: 93:16:4c:ea:82:5b:41:0b:9d:6d:d6:8e:e6:b0:77: fb:ea:35:a9:22:f5:08:cb:85:ae:8b:b8:e7:75:ea: 19:14:ec:21:b7:89:3c:23:0b:76:9a:50:79:57:73: e1:14:74:7d:49:4a:9b:95:4e:95:e1:92:49:c4:dd: 21:e6:f5:3b:1c:2c:35:72:61:f5:6a:82:70:56:e2: 78:84:d1:cf:76:10:51:ea:b8:f0:10:30:ac:59:11: 29:e4:3c:cd:fe:d6:b0:81:8f:d0:d7:92:84:3b:67: 09:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:09:E1:EE:27:81:8F:A1:ED:5A:43:A6:3B:12:FE:DC:C3:80:DA:A8 X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:dd:0a:30:11:d4:c1:8e:3c:f0:9a:8e:e5:88:b5:21:a1:18: a4:9e:75:45:7b:25:23:7c:97:2a:d5:94:a8:5d:c2:de:d2:76: d1:92:05:2e:df:fc:23:df:f1:11:3c:36:24:a9:e6:5d:33:0a: ee:7f:d6:bc:b7:a2:49:b5:a8:aa:e8:b6:02:1e:a6:65:15:0e: 40:bb:1d:f3:e4:7c:15:6d:c6:71:73:73:a4:2e:04:36:11:1d: 16:97:5b:dc:76:c2:e5:ee:c0:71:15:7d:50:cc:a9:2a:ff:fd: f2:3c:f7:96:c2:96:83:a7:8d:8c:03:f4:44:ac:9b:db:2c:0a: 7c:96:12:a7:4c:f8:37:f3:04:ac:37:42:f7:08:d1:46:26:07: c7:34:c3:38:15:e7:ad:de:84:e7:0c:17:de:7c:2b:ac:d7:37: 30:16:34:29:7a:25:90:55:ef:7f:49:36:21:97:ac:e3:4a:91: 85:a6:4d:8c:14:70:c7:f8:bd:c0:d7:9d:6a:70:c4:f3:c6:4b: 03:3c:89:1d:3e:5e:a6:bb:5b:8c:56:50:a2:cd:c9:43:01:32: 79:e2:11:cb:90:e7:77:9e:c0:db:9e:5f:73:78:a2:45:cb:8f: bb:4d:c4:18:05:15:86:7c:cd:3f:bf:2e:d7:93:1e:6f:ed:dc: a6:33:7d:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1SaeDXzG5MoKQpX4bY/IH4o3kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNTEyMDMxMTM2MjdaFw0yNTEyMDYxNTUyMjdaMDMxMTAvBgNV BAMTKDE5MDlFMUVFMjc4MThGQTFFRDVBNDNBNjNCMTJGRURDQzM4MERBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/5lYR9iw61YHUULcrQElSPzm uaeqcCaAZ53vp/7E+n8miXdX5UzqZ0vwE5seyV1SQAg6hwAyrPDnEe28lxTvJ6TS E6eZuD1uxS9faM7hwuqiREQfzGXP4m7DHAbQPqd74pRr8jDhcmlOWPqxP1mC8gD5 QXcZAmG9ZfTkBaTMzcG/SdV0bXOIA5Taro9+lrMdY9JxN5MWTOqCW0ELnW3Wjuaw d/vqNaki9QjLha6LuOd16hkU7CG3iTwjC3aaUHlXc+EUdH1JSpuVTpXhkknE3SHm 9TscLDVyYfVqgnBW4niE0c92EFHquPAQMKxZESnkPM3+1rCBj9DXkoQ7ZwmPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGQnh7ieBj6HtWkOmOxL+3MOA2qgwHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPdCjAR1MGOPPCajuWItSGhGKSedUV7JSN8 lyrVlKhdwt7SdtGSBS7f/CPf8RE8NiSp5l0zCu5/1ry3okm1qKrotgIepmUVDkC7 HfPkfBVtxnFzc6QuBDYRHRaXW9x2wuXuwHEVfVDMqSr//fI895bCloOnjYwD9ESs m9ssCnyWEqdM+DfzBKw3QvcI0UYmB8c0wzgV563ehOcMF958K6zXNzAWNCl6JZBV 739JNiGXrONKkYWmTYwUcMf4vcDXnWpwxPPGSwM8iR0+Xqa7W4xWUKLNyUMBMnni EcuQ53eewNueX3N4okXLj7tNxBgFFYZ8zT+/LteTHm/t3KYzfUY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:25 2025 by rpki-client