This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: 2samtg1NNGUFO1G7i6lIupSr9APL7phj2250gK9N1AI= Subject key identifier: 6B:19:9D:C4:4A:74:8A:4B:D3:75:D6:E5:B1:DB:40:90:5D:2B:45:53 Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 34E493D9F287C7627518A4D08B42594B8C292D13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 01C3 Signing time: Tue 02 Dec 2025 04:02:33 +0000 Manifest this update: Tue 02 Dec 2025 03:57:33 +0000 Manifest next update: Fri 05 Dec 2025 11:57:33 +0000 Files and hashes: 1: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: XvrWKabUzo+8QdekV/WCEKHm2CO1S57vakuFbZ2xMyY=) 2: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: cJKEe5oWqA0zZifrGeoAdod+hQBn7x+sUTh6uEissOs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e4:93:d9:f2:87:c7:62:75:18:a4:d0:8b:42:59:4b:8c:29:2d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: Dec 2 03:57:33 2025 GMT Not After : Dec 5 11:57:33 2025 GMT Subject: CN=6B199DC44A748A4BD375D6E5B1DB40905D2B4553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:ca:68:bf:b7:45:6d:41:c0:0c:26:13:42: ef:e9:fb:88:13:eb:00:e6:84:46:12:d6:cd:6c:b6: 4e:30:5f:c9:69:09:db:9d:92:6e:39:79:fb:3e:a8: f4:26:1b:de:e0:ae:87:13:c8:87:78:d1:c5:dc:83: 56:46:25:7b:ed:8a:bb:42:76:a2:9d:78:41:ab:0b: 65:4b:75:a1:16:2f:12:75:a7:5b:9e:72:96:93:46: 1f:56:3e:a6:28:01:70:91:12:fc:00:e4:38:34:6e: 30:7f:5f:fe:c7:65:fd:19:53:0e:ec:06:ce:e8:bc: 75:06:f7:5e:ed:99:37:97:69:43:ab:1b:2c:bb:21: 02:c7:5c:cd:39:b1:d9:6f:ea:e8:3c:f8:0a:94:a1: a8:92:ed:32:91:6d:df:f6:1c:2c:b3:e4:24:7f:67: ba:63:ae:96:3d:64:32:e1:37:37:48:37:e6:96:fb: 71:c2:7b:37:a7:70:28:1c:83:d9:5a:dc:34:82:e0: 54:ff:92:c3:5f:91:f5:18:ac:42:ec:4a:6e:f2:48: 74:cd:7c:f3:e4:0f:f2:5a:8f:1b:99:8f:57:d9:9e: 66:98:81:5c:d2:b2:e2:53:25:bf:a6:fe:95:cd:51: 37:7f:66:2d:e4:be:22:60:9c:28:fd:da:e3:54:66: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:19:9D:C4:4A:74:8A:4B:D3:75:D6:E5:B1:DB:40:90:5D:2B:45:53 X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fc:87:bb:a2:b9:9d:a3:c0:96:4f:d2:51:c9:40:b7:d0:45: 9e:50:b3:b3:c2:2a:e1:dc:70:3e:f2:da:73:14:f2:21:9f:9f: 97:43:69:14:86:89:0b:5f:a7:d7:5c:45:39:20:b8:a4:7b:d4: 36:f2:d2:a7:e5:21:9c:ca:57:2f:96:8e:fe:55:05:96:38:0e: 72:bd:18:25:b4:2c:ba:7a:d8:d9:46:85:41:e4:d4:e0:f9:73: 19:80:07:6d:06:28:3e:cc:e0:08:7c:31:d9:ab:d1:ac:73:ba: 06:6e:ff:b3:cc:ae:3e:9a:f6:4d:36:f4:50:10:bb:9a:76:9c: c6:27:8d:0f:18:9e:73:28:24:bb:48:48:e9:0c:2c:22:a8:2a: 3a:62:c7:90:68:45:7c:df:77:40:2a:46:e7:d6:38:60:6f:73: 67:57:54:e5:dd:91:cd:65:56:61:ad:df:10:e8:fc:94:43:c9: 0b:39:9a:5f:cc:cd:fc:bd:4b:69:e7:70:16:81:ee:5b:03:7f: bf:b3:91:b2:19:65:2a:5f:d5:13:05:f5:d5:df:d1:6a:fe:12: 79:b7:8e:8b:24:21:78:28:78:8f:59:c9:2c:ea:33:03:fa:ac: 35:02:15:64:56:c6:2d:72:3f:44:2f:61:28:68:13:79:fe:aa: 7c:12:fb:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNOST2fKHx2J1GKTQi0JZS4wpLRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNTEyMDIwMzU3MzNaFw0yNTEyMDUxMTU3MzNaMDMxMTAvBgNV BAMTKDZCMTk5REM0NEE3NDhBNEJEMzc1RDZFNUIxREI0MDkwNUQyQjQ1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0spov7dFbUHADCYTQu/p+4gT 6wDmhEYS1s1stk4wX8lpCdudkm45efs+qPQmG97grocTyId40cXcg1ZGJXvtirtC dqKdeEGrC2VLdaEWLxJ1p1uecpaTRh9WPqYoAXCREvwA5Dg0bjB/X/7HZf0ZUw7s Bs7ovHUG917tmTeXaUOrGyy7IQLHXM05sdlv6ug8+AqUoaiS7TKRbd/2HCyz5CR/ Z7pjrpY9ZDLhNzdIN+aW+3HCezencCgcg9la3DSC4FT/ksNfkfUYrELsSm7ySHTN fPPkD/JajxuZj1fZnmaYgVzSsuJTJb+m/pXNUTd/Zi3kviJgnCj92uNUZrQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaxmdxEp0ikvTddblsdtAkF0rRVMwHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGj8h7uiuZ2jwJZP0lHJQLfQRZ5Qs7PCKuHc cD7y2nMU8iGfn5dDaRSGiQtfp9dcRTkguKR71Dby0qflIZzKVy+Wjv5VBZY4DnK9 GCW0LLp62NlGhUHk1OD5cxmAB20GKD7M4Ah8Mdmr0axzugZu/7PMrj6a9k029FAQ u5p2nMYnjQ8YnnMoJLtISOkMLCKoKjpix5BoRXzfd0AqRufWOGBvc2dXVOXdkc1l VmGt3xDo/JRDyQs5ml/Mzfy9S2nncBaB7lsDf7+zkbIZZSpf1RMF9dXf0Wr+Enm3 joskIXgoeI9ZySzqMwP6rDUCFWRWxi1yP0QvYShoE3n+qnwS+3A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:40 2025 by rpki-client