This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: RkhO1Ce0XvU+0miOY5SXD7W1ai3wOVPURuJQNPhKrA0= Subject key identifier: EF:F8:0C:6B:91:19:25:7D:CD:9E:3B:9D:57:73:8A:36:C7:5F:9B:89 Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 203685A40D473B19D2E132D78936E0E73A965DCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 018D Signing time: Wed 03 Dec 2025 07:00:44 +0000 Manifest this update: Wed 03 Dec 2025 06:55:44 +0000 Manifest next update: Sat 06 Dec 2025 16:01:44 +0000 Files and hashes: 1: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=) 2: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: BtA431IBxIKJTC2Ak/ZKro1zZT3xPFphLvqLBiSTvBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 16:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:36:85:a4:0d:47:3b:19:d2:e1:32:d7:89:36:e0:e7:3a:96:5d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Dec 3 06:55:44 2025 GMT Not After : Dec 6 16:01:44 2025 GMT Subject: CN=EFF80C6B9119257DCD9E3B9D57738A36C75F9B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:7b:7b:43:f6:0d:4b:89:ad:3c:25:9a:a4: 8f:25:bc:3b:dd:03:f8:83:7c:ac:5e:b4:fc:85:04: 19:33:71:df:b9:85:16:14:cd:e5:9a:9b:d9:9c:d4: b1:a5:9d:3b:3d:ce:93:6a:be:68:6a:a1:ed:6b:c2: 64:44:b7:7a:2d:e7:28:b9:12:d8:54:d6:91:d4:4e: 1f:c1:7b:f5:33:5f:cf:ba:a0:0a:e7:47:bc:23:24: f6:33:f9:4f:62:c7:84:f6:32:e3:77:24:35:ad:21: f9:96:a4:28:10:56:f2:29:28:9f:3a:3b:5d:bf:14: a7:05:81:80:0a:77:07:f7:42:ed:11:b8:2a:df:d4: db:4e:31:1b:3b:a8:31:53:cd:9f:9f:d9:b2:33:5e: ec:9b:d6:ae:cd:f7:62:b0:d8:82:78:13:07:d8:15: fa:31:4a:d7:3d:a5:34:6d:35:d2:1c:2b:0f:a5:f4: e9:f8:df:42:6d:75:2d:76:b6:23:0e:8d:d3:f6:0e: eb:04:8a:8e:72:bd:10:01:3a:3c:0c:e8:fb:a4:90: 58:6b:0a:a1:4f:93:63:be:c6:49:75:1c:67:b6:12: 28:da:df:8d:bf:34:51:f2:00:7b:3a:01:f7:f3:ba: ef:8d:e2:7d:d6:47:ab:c3:be:08:63:d4:2e:d7:58: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F8:0C:6B:91:19:25:7D:CD:9E:3B:9D:57:73:8A:36:C7:5F:9B:89 X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:70:e0:0d:ab:7e:1c:1c:57:20:39:ee:66:87:57:6b:b9:83: b8:b2:cd:f5:11:a5:dd:50:11:ef:c0:b7:43:dd:af:b1:3a:10: 3d:df:3e:95:9e:24:b7:3a:a2:fb:d2:35:db:15:f3:6f:cd:4a: 36:15:d1:6c:cb:0a:77:29:d9:83:3b:92:88:a8:26:75:7b:08: b6:42:75:22:c6:8c:df:3d:9c:ba:2c:ea:e2:a3:9d:dc:44:bd: 49:1c:2a:92:28:57:84:9e:6f:a3:93:da:ce:ed:6a:7d:bd:50: 59:17:0a:83:34:08:63:00:9b:e8:80:84:4b:af:ac:ff:2d:0e: ae:01:cf:bc:7a:14:f4:4c:7c:5d:30:1b:e6:27:0f:49:f6:03: 18:de:fc:ac:8d:9f:6d:87:84:13:f8:07:05:f8:6f:87:fb:47: a0:77:19:e7:44:3e:f5:8c:4c:c7:f0:f0:85:3a:21:c1:37:69: 44:c1:bb:24:ee:cb:14:30:06:f6:03:a0:74:e3:e3:60:28:be: 20:2f:c1:0d:6a:3e:43:49:f2:3f:e5:13:5b:5d:96:96:b2:b3: f4:f6:87:41:3a:e9:c4:17:77:a9:7b:bf:7c:d9:0a:5c:ae:ce: e8:b6:1e:aa:0d:b1:12:46:87:74:f6:6a:99:df:fc:1f:90:84: 5f:ea:6b:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDaFpA1HOxnS4TLXiTbg5zqWXcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNTEyMDMwNjU1NDRaFw0yNTEyMDYxNjAxNDRaMDMxMTAvBgNV BAMTKEVGRjgwQzZCOTExOTI1N0RDRDlFM0I5RDU3NzM4QTM2Qzc1RjlCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYnt7Q/YNS4mtPCWapI8lvDvd A/iDfKxetPyFBBkzcd+5hRYUzeWam9mc1LGlnTs9zpNqvmhqoe1rwmREt3ot5yi5 EthU1pHUTh/Be/UzX8+6oArnR7wjJPYz+U9ix4T2MuN3JDWtIfmWpCgQVvIpKJ86 O12/FKcFgYAKdwf3Qu0RuCrf1NtOMRs7qDFTzZ+f2bIzXuyb1q7N92Kw2IJ4EwfY FfoxStc9pTRtNdIcKw+l9On430JtdS12tiMOjdP2DusEio5yvRABOjwM6PukkFhr CqFPk2O+xkl1HGe2Eija342/NFHyAHs6Affzuu+N4n3WR6vDvghj1C7XWJjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7/gMa5EZJX3NnjudV3OKNsdfm4kwHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdw4A2rfhwcVyA57maHV2u5g7iyzfURpd1Q Ee/At0Pdr7E6ED3fPpWeJLc6ovvSNdsV82/NSjYV0WzLCncp2YM7koioJnV7CLZC dSLGjN89nLos6uKjndxEvUkcKpIoV4Seb6OT2s7tan29UFkXCoM0CGMAm+iAhEuv rP8tDq4Bz7x6FPRMfF0wG+YnD0n2Axje/KyNn22HhBP4BwX4b4f7R6B3GedEPvWM TMfw8IU6IcE3aUTBuyTuyxQwBvYDoHTj42AoviAvwQ1qPkNJ8j/lE1tdlpays/T2 h0E66cQXd6l7v3zZClyuzui2HqoNsRJGh3T2apnf/B+QhF/qa/Y= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:08 2025 by rpki-client