This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: qBpDcBuidAhOyW2Ovoj9N1NcQT2kYOy0Xa+6XDa6yWY= Subject key identifier: 10:F0:AA:1E:EE:51:21:2B:01:DF:D1:93:7A:33:DA:D9:6B:29:22:53 Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 15BE0F3C2DBE59C5636FD6E6CE306FFA2A1BADBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 01B2 Signing time: Mon 01 Dec 2025 19:12:21 +0000 Manifest this update: Mon 01 Dec 2025 19:07:21 +0000 Manifest next update: Thu 04 Dec 2025 22:25:21 +0000 Files and hashes: 1: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: 5PNWaaXBq5mt1TOsk1q320rmS49LAj9nxSEOopqDmgU=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:be:0f:3c:2d:be:59:c5:63:6f:d6:e6:ce:30:6f:fa:2a:1b:ad:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Dec 1 19:07:21 2025 GMT Not After : Dec 4 22:25:21 2025 GMT Subject: CN=10F0AA1EEE51212B01DFD1937A33DAD96B292253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d4:9b:cb:2f:66:34:61:8e:bb:0e:0d:1a:6e: f5:b7:96:06:ef:54:4c:f7:fb:c5:b9:24:07:3a:cd: ce:82:79:43:73:36:4d:29:7f:1a:2f:77:d3:0e:22: 57:c7:21:5d:9f:00:9f:2d:1a:5d:fc:89:39:d6:73: dc:97:73:67:46:a4:c5:db:b5:49:ac:9e:9e:33:19: 48:3c:d7:db:3e:f6:94:61:2b:97:1b:dc:07:84:a8: b2:54:ad:7a:f7:b3:f4:f5:bd:cb:41:28:34:22:24: 0d:50:1f:e1:d9:b2:81:2d:1f:45:0b:97:14:4d:0f: 71:13:96:f2:d7:0f:2e:b4:ed:29:c2:9f:95:d1:a1: 0b:b2:cb:44:e8:15:44:33:a3:0d:e2:81:99:da:f5: 9a:75:99:b3:f0:a2:d0:78:78:dd:ac:51:41:ed:24: ce:50:9e:f7:c4:45:14:3b:f6:a7:55:67:d1:54:35: 9f:4a:29:35:85:94:52:c0:90:f4:11:60:8e:c9:03: 0b:40:a5:33:c8:96:a4:02:2b:8e:a4:8b:cc:b7:4f: 26:a1:77:40:46:66:7b:43:e2:2c:b9:3c:ab:90:bd: d2:40:58:f2:ae:bc:71:91:6e:c6:0b:5f:49:33:6b: 53:44:5a:b4:b5:08:9e:21:e4:e4:f7:d3:19:cf:ef: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F0:AA:1E:EE:51:21:2B:01:DF:D1:93:7A:33:DA:D9:6B:29:22:53 X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d6:2f:91:e1:3e:7e:ab:b8:8b:0e:93:9b:7c:16:1b:fb:40: 15:49:ba:b8:62:7e:87:4b:de:70:f2:47:6b:27:cb:4a:c1:8a: c6:7a:71:69:26:29:5f:36:df:65:82:81:9d:7d:b1:8b:b6:a1: 6e:a4:e4:69:1f:b4:e2:dc:d8:7d:b0:c6:97:10:4c:46:26:a2: 93:0f:07:36:8e:58:c6:84:76:c7:61:ef:52:56:e8:fb:c9:a1: 2e:17:c6:f1:1b:20:df:81:06:25:d3:ca:3b:b9:51:43:23:f7: 81:c8:d8:c4:76:1c:0d:21:62:e0:8f:7a:b5:aa:ab:3b:78:3d: 5c:92:43:1c:47:27:71:8f:ac:25:22:81:b4:94:d6:55:a9:0b: 52:d7:80:2d:64:3f:ab:dc:8c:fa:74:8b:19:58:22:f0:dd:7f: 1f:9c:30:e8:bb:8a:7b:97:35:cc:76:ea:4d:0c:a6:0a:c9:3e: ad:24:cd:68:fc:c1:d9:53:58:1b:89:a0:82:e8:7f:7b:d1:91: 0a:37:b8:7f:f1:53:18:e8:6b:68:8b:f4:42:e2:59:54:49:33: 75:61:9a:dd:fc:0a:61:de:04:bb:9f:bd:6a:07:f6:a3:6e:36: c9:68:c8:17:6e:36:62:e5:6c:cc:23:13:3d:63:3a:0c:df:35: 8d:88:ee:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFb4PPC2+WcVjb9bmzjBv+iobrbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTEyMDExOTA3MjFaFw0yNTEyMDQyMjI1MjFaMDMxMTAvBgNV BAMTKDEwRjBBQTFFRUU1MTIxMkIwMURGRDE5MzdBMzNEQUQ5NkIyOTIyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn1JvLL2Y0YY67Dg0abvW3lgbv VEz3+8W5JAc6zc6CeUNzNk0pfxovd9MOIlfHIV2fAJ8tGl38iTnWc9yXc2dGpMXb tUmsnp4zGUg819s+9pRhK5cb3AeEqLJUrXr3s/T1vctBKDQiJA1QH+HZsoEtH0UL lxRND3ETlvLXDy607SnCn5XRoQuyy0ToFUQzow3igZna9Zp1mbPwotB4eN2sUUHt JM5QnvfERRQ79qdVZ9FUNZ9KKTWFlFLAkPQRYI7JAwtApTPIlqQCK46ki8y3Tyah d0BGZntD4iy5PKuQvdJAWPKuvHGRbsYLX0kza1NEWrS1CJ4h5OT30xnP72M/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEPCqHu5RISsB39GTejPa2WspIlMwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTWL5HhPn6ruIsOk5t8Fhv7QBVJurhifodL 3nDyR2sny0rBisZ6cWkmKV8232WCgZ19sYu2oW6k5GkftOLc2H2wxpcQTEYmopMP BzaOWMaEdsdh71JW6PvJoS4XxvEbIN+BBiXTyju5UUMj94HI2MR2HA0hYuCPerWq qzt4PVySQxxHJ3GPrCUigbSU1lWpC1LXgC1kP6vcjPp0ixlYIvDdfx+cMOi7inuX Ncx26k0MpgrJPq0kzWj8wdlTWBuJoILof3vRkQo3uH/xUxjoa2iL9ELiWVRJM3Vh mt38CmHeBLufvWoH9qNuNsloyBduNmLlbMwjEz1jOgzfNY2I7oU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:16 2025 by rpki-client