This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: qCUq0vc49fp7HsQllfQBnv3bIcCxevAk1sQN8/8/a1E= Subject key identifier: D4:63:CE:D1:07:5C:D9:CD:63:D3:78:97:31:2C:E2:69:F9:B3:14:ED Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 4BF5E620ADEFE2E722A3841D25EF66C9E3347D03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: 0100 Signing time: Sat 06 Dec 2025 18:01:13 +0000 Manifest this update: Sat 06 Dec 2025 17:56:13 +0000 Manifest next update: Wed 10 Dec 2025 02:50:13 +0000 Files and hashes: 1: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: Veq/rZHjd4fr4PhZvocy0RjTH2bcujIiGbAKNm8c3Ws=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f5:e6:20:ad:ef:e2:e7:22:a3:84:1d:25:ef:66:c9:e3:34:7d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Dec 6 17:56:13 2025 GMT Not After : Dec 10 02:50:13 2025 GMT Subject: CN=D463CED1075CD9CD63D37897312CE269F9B314ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:4f:8f:d4:20:e9:28:5a:78:90:f0:17:07: f3:ec:30:82:04:89:fe:e0:e0:ca:a7:e3:9d:ea:9f: fd:c0:50:58:f6:e2:cf:f3:24:44:e9:f3:79:69:e6: 7d:ba:d7:40:94:8e:de:5c:b2:ad:77:ad:98:8c:7a: d2:ba:9e:08:2e:f2:15:e9:f8:78:67:23:d9:51:d1: a5:0b:4b:3e:dc:e9:0d:15:96:40:86:a1:67:79:19: 17:3c:6e:aa:d2:04:33:18:58:9a:8c:ee:69:a1:19: 5f:5e:32:78:88:19:06:5d:ad:62:11:b3:8a:9e:28: 49:fc:86:c8:e7:1b:9d:d1:31:2b:7f:75:0a:a9:7f: ce:29:9a:52:c2:65:d2:99:34:07:fb:b0:87:16:7d: 38:a4:60:ed:dd:f9:3f:58:29:f3:10:87:96:70:40: f0:d1:79:e4:df:5d:1f:c7:95:79:39:bc:45:59:53: 8d:43:c9:31:40:d2:02:3d:07:5a:3c:1c:62:f7:7c: 20:84:ed:11:83:2e:9e:68:97:bc:7d:93:23:02:9a: 1d:55:03:6f:13:73:a8:fc:2f:ef:7b:92:c7:57:a6: 93:55:38:54:f9:bf:1d:2f:62:e3:42:48:d3:5e:64: 1d:7f:d4:90:f4:4f:c8:b3:4b:03:98:ca:63:7e:ec: bb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:63:CE:D1:07:5C:D9:CD:63:D3:78:97:31:2C:E2:69:F9:B3:14:ED X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:87:e9:d4:81:08:4d:b4:e6:01:d4:42:ac:cd:ba:4d:6e:ed: 34:90:80:f0:e9:bc:66:20:ca:cf:9e:d6:0d:ef:08:ce:00:bb: 92:25:de:8f:3e:45:dd:c9:dd:48:4b:6b:02:a9:44:2d:f8:66: d2:38:5d:6c:c6:a1:bb:af:e4:f4:08:fc:ee:7a:f5:82:a2:c6: 37:d4:31:94:78:91:24:61:de:47:a0:50:17:5e:24:4c:73:ee: 05:f4:fc:c5:e7:79:fa:fe:c6:20:b1:a4:ce:31:23:e9:36:9e: f0:10:49:6d:f5:aa:b6:70:53:d6:e9:20:b1:ec:3c:99:91:16: ef:07:18:7f:8f:4f:88:b7:14:42:9d:33:45:cf:2b:3a:a5:8a: 0c:6a:c8:21:0f:b4:87:7a:1b:18:d1:e1:87:f4:a2:70:44:91: 3d:ad:16:9b:15:f9:39:2b:65:89:d5:3f:18:e1:12:5f:0e:4f: b5:9b:1e:25:a3:bb:00:89:c1:ed:77:fe:41:c1:1b:a5:c6:d2: 53:a4:36:02:0a:8a:37:63:02:54:42:cc:21:bc:7b:fe:82:60: 6a:a6:6c:62:b9:70:4b:78:25:9e:25:6d:2b:3a:22:03:7f:45: 3a:32:73:ba:41:13:fa:7d:3a:f6:40:01:1c:b2:e3:d2:5b:b9: 44:1f:ab:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/XmIK3v4ucio4QdJe9myeM0fQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNTEyMDYxNzU2MTNaFw0yNTEyMTAwMjUwMTNaMDMxMTAvBgNV BAMTKEQ0NjNDRUQxMDc1Q0Q5Q0Q2M0QzNzg5NzMxMkNFMjY5RjlCMzE0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb1k+P1CDpKFp4kPAXB/PsMIIE if7g4Mqn453qn/3AUFj24s/zJETp83lp5n2610CUjt5csq13rZiMetK6nggu8hXp +HhnI9lR0aULSz7c6Q0VlkCGoWd5GRc8bqrSBDMYWJqM7mmhGV9eMniIGQZdrWIR s4qeKEn8hsjnG53RMSt/dQqpf84pmlLCZdKZNAf7sIcWfTikYO3d+T9YKfMQh5Zw QPDReeTfXR/HlXk5vEVZU41DyTFA0gI9B1o8HGL3fCCE7RGDLp5ol7x9kyMCmh1V A28Tc6j8L+97ksdXppNVOFT5vx0vYuNCSNNeZB1/1JD0T8izSwOYymN+7LuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1GPO0Qdc2c1j03iXMSziafmzFO0wHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+H6dSBCE205gHUQqzNuk1u7TSQgPDpvGYg ys+e1g3vCM4Au5Il3o8+Rd3J3UhLawKpRC34ZtI4XWzGobuv5PQI/O569YKixjfU MZR4kSRh3kegUBdeJExz7gX0/MXnefr+xiCxpM4xI+k2nvAQSW31qrZwU9bpILHs PJmRFu8HGH+PT4i3FEKdM0XPKzqligxqyCEPtId6GxjR4Yf0onBEkT2tFpsV+Tkr ZYnVPxjhEl8OT7WbHiWjuwCJwe13/kHBG6XG0lOkNgIKijdjAlRCzCG8e/6CYGqm bGK5cEt4JZ4lbSs6IgN/RToyc7pBE/p9OvZAARyy49JbuUQfq1w= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:34 2025 by rpki-client