This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: mlreQr4mgAJmi09c2JjBjGrcQ5H4mwjTYUOiu7sqvR0= Subject key identifier: A0:F5:9D:7E:FC:29:A2:BA:01:C7:6A:9D:79:00:85:3E:AE:08:47:FD Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 3F28EF16D18D604FAAF6780BD26EA04795DAD8C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: 0111 Signing time: Tue 02 Dec 2025 03:31:06 +0000 Manifest this update: Tue 02 Dec 2025 03:26:06 +0000 Manifest next update: Fri 05 Dec 2025 10:09:06 +0000 Files and hashes: 1: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) 2: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: ga22sp2uPTB/cRCIcOKx38vPAPfxpa2ATDByNgILYVY=) 3: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 4: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:28:ef:16:d1:8d:60:4f:aa:f6:78:0b:d2:6e:a0:47:95:da:d8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Dec 2 03:26:06 2025 GMT Not After : Dec 5 10:09:06 2025 GMT Subject: CN=A0F59D7EFC29A2BA01C76A9D7900853EAE0847FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:17:df:92:da:10:1e:9f:ef:50:f4:6f:f5: 22:f4:85:fb:95:d7:c0:ae:b7:42:d6:60:cd:e4:97: fb:e7:85:21:c4:1d:91:59:05:e5:38:44:30:a2:b4: 31:af:15:90:0f:3f:64:57:2e:e0:7d:21:30:3e:8f: a6:e2:99:2d:41:cf:3f:aa:41:03:f4:c0:8d:92:fa: b6:6a:5f:ba:18:8b:c1:a9:55:bc:cf:03:65:2b:bd: 13:b1:71:8b:ff:92:d3:5a:68:c7:ff:d6:4f:66:c1: f4:93:96:14:1f:1a:c8:de:52:9b:cb:c0:df:87:c4: 5e:91:79:f6:f1:81:b1:38:f7:63:bb:1e:59:e9:f4: cc:e3:5c:4d:ae:2b:44:0b:fb:e1:c5:9e:66:23:e0: be:3c:c6:32:8a:03:06:dd:32:5b:25:50:ea:72:72: 48:ac:cb:76:6a:7b:f5:17:03:81:9f:b6:69:41:39: e5:96:54:59:67:a7:d1:1b:0a:95:d0:d7:9f:63:94: 9d:da:18:f5:f1:11:c3:ff:72:a5:59:48:4f:39:81: e4:1b:88:49:52:0f:02:5e:21:0e:50:55:26:00:47: 84:dd:a0:75:bc:eb:d1:d9:a1:92:c3:5f:f9:cd:73: fa:cb:5e:b0:33:84:9b:e3:2e:de:90:0b:ea:4d:86: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F5:9D:7E:FC:29:A2:BA:01:C7:6A:9D:79:00:85:3E:AE:08:47:FD X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:93:4e:48:a9:8c:b1:50:12:90:cc:3a:77:8c:64:ed:a3:cc: 36:31:f0:71:bb:2e:fe:af:15:84:44:c7:95:77:3e:b7:82:77: c6:7c:cd:72:3c:91:58:45:ca:4d:ec:b3:61:c8:d2:f1:f5:c1: 19:0e:a5:83:37:93:78:5a:0f:dc:d3:fa:ba:fc:40:05:a6:f2: b5:0c:38:33:84:97:82:93:59:be:96:2f:5a:db:57:03:9a:ea: 57:06:93:a0:a9:a5:0a:7c:1c:8c:6c:d7:17:dd:9b:f3:75:96: f4:b8:50:94:01:40:90:50:8b:a2:32:54:90:98:f6:b5:8b:7e: cd:b3:16:07:b9:02:51:28:c0:7f:d6:8f:cc:f1:2e:92:48:fc: 63:a7:1b:e2:b9:73:2e:03:12:64:7f:62:0a:d7:b2:9a:74:4d: d7:04:dd:84:4f:28:4a:ca:81:71:17:8d:d0:66:43:94:87:6b: 44:66:12:3c:86:76:08:57:96:5e:de:4f:06:41:dd:c6:21:b2: 60:4a:30:4b:c7:e8:fd:cb:c2:1a:d1:71:f9:c7:f1:8a:c3:d4: 21:83:32:68:92:7a:b9:0c:b6:9f:77:18:94:53:3b:f9:b2:98: ef:7b:bd:73:ac:47:40:71:cb:d9:c3:3c:a2:86:f4:59:0e:98: 50:42:d1:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPyjvFtGNYE+q9ngL0m6gR5Xa2MgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTEyMDIwMzI2MDZaFw0yNTEyMDUxMDA5MDZaMDMxMTAvBgNV BAMTKEEwRjU5RDdFRkMyOUEyQkEwMUM3NkE5RDc5MDA4NTNFQUUwODQ3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaXxffktoQHp/vUPRv9SL0hfuV 18Cut0LWYM3kl/vnhSHEHZFZBeU4RDCitDGvFZAPP2RXLuB9ITA+j6bimS1Bzz+q QQP0wI2S+rZqX7oYi8GpVbzPA2UrvROxcYv/ktNaaMf/1k9mwfSTlhQfGsjeUpvL wN+HxF6RefbxgbE492O7Hlnp9MzjXE2uK0QL++HFnmYj4L48xjKKAwbdMlslUOpy ckisy3Zqe/UXA4GftmlBOeWWVFlnp9EbCpXQ159jlJ3aGPXxEcP/cqVZSE85geQb iElSDwJeIQ5QVSYAR4TdoHW869HZoZLDX/nNc/rLXrAzhJvjLt6QC+pNhrXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoPWdfvwporoBx2qdeQCFPq4IR/0wHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyTTkipjLFQEpDMOneMZO2jzDYx8HG7Lv6v FYREx5V3PreCd8Z8zXI8kVhFyk3ss2HI0vH1wRkOpYM3k3haD9zT+rr8QAWm8rUM ODOEl4KTWb6WL1rbVwOa6lcGk6CppQp8HIxs1xfdm/N1lvS4UJQBQJBQi6IyVJCY 9rWLfs2zFge5AlEowH/Wj8zxLpJI/GOnG+K5cy4DEmR/YgrXspp0TdcE3YRPKErK gXEXjdBmQ5SHa0RmEjyGdghXll7eTwZB3cYhsmBKMEvH6P3LwhrRcfnH8YrD1CGD MmiSerkMtp93GJRTO/mymO97vXOsR0Bxy9nDPKKG9FkOmFBC0SA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:38 2025 by rpki-client