This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: uygORY01v6BxW+ivDtmMHRh6cjWS3hqPJQdrcegMOp4= Subject key identifier: AB:98:F7:12:15:C5:8E:DE:B8:C9:3A:B4:42:64:D5:91:88:E2:AB:9B Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 4DBC8085DF5FFEAA8B712B902BAA6AD72413C9E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 024E Signing time: Tue 02 Dec 2025 19:40:57 +0000 Manifest this update: Tue 02 Dec 2025 19:35:57 +0000 Manifest next update: Fri 05 Dec 2025 22:11:57 +0000 Files and hashes: 1: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: eT0muT85ysoN0p4Ua185YXTs5tiQwscmgSbDglrEaR4=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: PyDXoIlT1NIef5VwI6vIhfIo1ytHrmrJtk3n+sEFsT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bc:80:85:df:5f:fe:aa:8b:71:2b:90:2b:aa:6a:d7:24:13:c9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Dec 2 19:35:57 2025 GMT Not After : Dec 5 22:11:57 2025 GMT Subject: CN=AB98F71215C58EDEB8C93AB44264D59188E2AB9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dc:c4:e7:bd:25:71:6c:5f:4e:50:84:86:6f: 64:18:cf:6e:b1:43:d2:78:90:d1:cf:2f:42:14:53: b1:c0:27:10:ca:6f:f0:c7:f4:55:f9:a2:47:1a:71: 3d:6d:28:7b:a0:a6:96:eb:e8:57:35:84:82:87:ec: e2:d0:a9:92:22:b8:41:5d:95:89:69:20:a4:d2:fd: 18:64:40:46:c7:aa:00:b6:b2:4c:8e:1c:fb:7b:1f: e7:a4:ee:e9:3c:4a:e9:9c:93:04:d9:a5:a1:06:25: f2:ee:cc:86:96:38:fd:47:ce:70:eb:c8:58:c0:8c: 28:a6:d2:af:11:1b:7b:49:64:26:c4:82:0d:e1:0d: 38:09:ef:b9:5a:17:a6:b1:c2:49:fa:c7:4b:cb:78: bd:fe:a8:52:ad:fe:b5:58:ff:12:eb:54:a4:59:6e: 3f:43:a0:c9:f8:12:fa:29:3e:2a:71:72:5c:74:0c: 73:29:87:56:fb:7b:df:5e:57:ec:8e:be:91:7b:9c: 0c:be:68:fd:85:d6:fb:67:7d:55:94:83:c7:c8:ba: b5:18:7f:37:86:63:20:a8:e8:c4:31:52:c1:9f:be: 65:0b:3c:03:24:a1:80:ee:72:e1:31:55:61:56:96: 11:52:e2:ca:b0:b3:f5:d3:c4:c6:f6:0d:f4:1a:22: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:98:F7:12:15:C5:8E:DE:B8:C9:3A:B4:42:64:D5:91:88:E2:AB:9B X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:36:b1:d3:d5:f7:1e:38:17:db:1c:b8:f8:ab:c4:74:42:09: 14:9d:1e:38:34:4c:dd:6e:80:34:c0:d7:f1:b8:ce:08:f3:3e: 0c:97:76:a0:71:ad:4c:ba:29:0f:9d:1f:41:2d:59:d9:b7:21: c1:e2:26:5c:45:94:08:9a:f7:65:aa:bd:0c:37:7e:ca:4c:60: e3:52:de:e7:38:b7:6f:aa:3e:1f:ce:ee:1b:f7:51:85:96:64: 82:f8:bd:27:70:d8:a2:72:1b:b2:43:39:f6:66:76:4f:4a:19: fd:0d:29:1f:c1:53:7f:5e:a6:3a:b5:78:df:ca:33:b0:1c:72: a3:85:6d:bc:f5:91:6e:e2:53:32:dd:b5:32:37:a9:cf:bd:c4: f0:91:37:13:0f:2b:fa:38:87:68:8d:44:cd:11:6e:46:56:b2: d6:e0:d3:a3:4f:28:33:5f:82:6a:0e:bf:88:9b:d8:22:03:b5: 5a:26:14:4c:4a:7c:b3:6f:f3:fb:1b:51:c5:cf:94:f7:03:10: 88:52:bc:f8:9c:0c:1d:5d:da:61:e9:8e:49:32:8f:04:67:e6: 4a:ff:24:5e:3e:59:21:1d:05:b6:be:be:af:b6:81:59:6f:a5: 62:23:a3:bc:07:6a:08:80:46:9e:47:6b:f5:90:56:95:ea:84: 18:6a:89:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbyAhd9f/qqLcSuQK6pq1yQTyeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNTEyMDIxOTM1NTdaFw0yNTEyMDUyMjExNTdaMDMxMTAvBgNV BAMTKEFCOThGNzEyMTVDNThFREVCOEM5M0FCNDQyNjRENTkxODhFMkFCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3MTnvSVxbF9OUISGb2QYz26x Q9J4kNHPL0IUU7HAJxDKb/DH9FX5okcacT1tKHugppbr6Fc1hIKH7OLQqZIiuEFd lYlpIKTS/RhkQEbHqgC2skyOHPt7H+ek7uk8SumckwTZpaEGJfLuzIaWOP1HznDr yFjAjCim0q8RG3tJZCbEgg3hDTgJ77laF6axwkn6x0vLeL3+qFKt/rVY/xLrVKRZ bj9DoMn4EvopPipxclx0DHMph1b7e99eV+yOvpF7nAy+aP2F1vtnfVWUg8fIurUY fzeGYyCo6MQxUsGfvmULPAMkoYDucuExVWFWlhFS4sqws/XTxMb2DfQaIvDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq5j3EhXFjt64yTq0QmTVkYjiq5swHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk2sdPV9x44F9scuPirxHRCCRSdHjg0TN1u gDTA1/G4zgjzPgyXdqBxrUy6KQ+dH0EtWdm3IcHiJlxFlAia92WqvQw3fspMYONS 3uc4t2+qPh/O7hv3UYWWZIL4vSdw2KJyG7JDOfZmdk9KGf0NKR/BU39epjq1eN/K M7AccqOFbbz1kW7iUzLdtTI3qc+9xPCRNxMPK/o4h2iNRM0RbkZWstbg06NPKDNf gmoOv4ib2CIDtVomFExKfLNv8/sbUcXPlPcDEIhSvPicDB1d2mHpjkkyjwRn5kr/ JF4+WSEdBba+vq+2gVlvpWIjo7wHagiARp5Ha/WQVpXqhBhqibA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:39 2025 by rpki-client