This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft File: E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft (raw, json) Hash identifier: Xccs6JJdPU+U1emM+sV56cAdRzXeLGUQ2+hZjmEgnd0= Subject key identifier: EB:19:0D:AE:D0:03:37:31:96:11:5F:EA:19:FA:83:BA:4F:F3:77:F9 Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Certificate serial: 5DB0276563A72A049F021A23E675988656F7F43D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft Manifest number: 0470 Signing time: Mon 01 Dec 2025 10:11:49 +0000 Manifest this update: Mon 01 Dec 2025 10:06:49 +0000 Manifest next update: Thu 04 Dec 2025 16:16:49 +0000 Files and hashes: 1: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: ftn9K7p77+T5MEgcZnDpxyUXZFHtofZmQssGsi+FEgo=) 2: E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl (hash: XDWsuDtrUIjP0tFUEKbWUaqBJ91mL1zyKrX/pYYmIA8=) 3: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: c+kaUi4De+/vm5rVBRPjrkkr1HTjdZlHY3+0tiasoH8=) 4: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b0:27:65:63:a7:2a:04:9f:02:1a:23:e6:75:98:86:56:f7:f4:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Validity Not Before: Dec 1 10:06:49 2025 GMT Not After : Dec 4 16:16:49 2025 GMT Subject: CN=EB190DAED003373196115FEA19FA83BA4FF377F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:46:18:4c:d4:54:80:ad:ce:03:08:5a:77: d6:8e:8f:cb:cd:89:a4:f6:21:a5:31:f1:f4:f3:a3: 17:69:f5:93:d2:3e:81:83:dc:b1:48:c3:88:ac:1e: 69:56:fc:7a:bc:2f:b1:c3:ad:8f:d6:57:48:59:2f: 8b:65:fd:57:aa:88:dd:42:62:2b:91:0a:38:b3:f4: eb:15:e4:5d:73:4b:5d:d8:f1:f1:dc:b2:a3:ed:84: 67:83:ba:ac:d1:a0:54:e9:2e:7d:06:4c:8c:3d:e7: 0c:14:b3:01:6d:11:a5:a0:cd:1f:d2:0d:51:93:37: 80:5e:58:96:00:c1:25:0e:1a:c9:30:3c:e3:4c:a4: 6f:2c:67:f6:70:1b:fd:cb:9f:d1:f8:4a:48:a1:ab: c0:b7:dc:97:5a:8b:df:62:05:a3:fb:fe:84:1d:9e: f7:68:b5:71:da:90:d1:00:4e:16:85:66:52:4f:9b: 22:8b:62:e8:7d:29:14:91:bc:20:83:0a:01:9c:3a: 64:04:f9:9a:97:a9:55:e5:b5:21:f7:b5:f6:3e:7b: d4:af:b2:2f:42:81:fe:29:21:7d:29:2a:09:e4:a0: 56:84:3e:e9:11:29:37:6c:27:b6:63:c7:c6:23:77: c8:d7:f5:22:63:8d:22:37:34:d4:48:3a:1c:36:66: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:19:0D:AE:D0:03:37:31:96:11:5F:EA:19:FA:83:BA:4F:F3:77:F9 X509v3 Authority Key Identifier: keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:40:a7:9c:0e:f2:f3:52:35:6b:73:03:d3:74:5e:14:47:9b: 60:d6:75:9c:4e:c0:f6:18:12:7e:5e:c9:58:50:b8:7f:79:ce: 1d:f6:ae:19:dd:f0:08:32:93:e9:94:17:68:6f:55:04:94:4a: 6b:21:ef:a3:69:c3:0b:05:27:34:1c:2d:76:7d:e4:ed:df:fe: 8e:9f:51:81:ce:a2:ca:90:49:f7:59:d5:eb:a7:76:6d:4d:29: b3:73:16:63:c3:1b:07:d8:4b:62:4b:4f:b8:1e:39:fd:36:68: 3d:34:af:f3:01:82:6a:18:d8:85:0e:eb:9e:31:37:44:3a:fa: b9:d4:f7:96:13:64:52:6a:a6:fb:37:6a:28:cd:c7:ce:81:24: 5f:1d:da:ed:f0:d4:70:74:f2:29:e7:af:35:ab:22:2d:95:93: 35:e9:22:40:2e:42:26:93:97:61:bc:96:c8:e5:0c:ed:0d:9e: 28:29:68:99:05:23:82:76:30:f6:d2:e2:1d:95:9b:92:e9:cf: 22:f2:df:9a:9c:0f:68:c3:1e:7c:7e:99:93:2e:9a:6a:48:f8: 1f:8b:89:29:87:8a:67:18:57:dc:05:d3:21:39:53:6f:2d:47: e2:41:f8:c0:46:9a:13:b6:da:17:20:e7:e9:3d:04:f7:2b:ba: 1e:85:8c:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbAnZWOnKgSfAhoj5nWYhlb39D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2 QjkxMTY1QTAeFw0yNTEyMDExMDA2NDlaFw0yNTEyMDQxNjE2NDlaMDMxMTAvBgNV BAMTKEVCMTkwREFFRDAwMzM3MzE5NjExNUZFQTE5RkE4M0JBNEZGMzc3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOEYYTNRUgK3OAwhad9aOj8vN iaT2IaUx8fTzoxdp9ZPSPoGD3LFIw4isHmlW/Hq8L7HDrY/WV0hZL4tl/VeqiN1C YiuRCjiz9OsV5F1zS13Y8fHcsqPthGeDuqzRoFTpLn0GTIw95wwUswFtEaWgzR/S DVGTN4BeWJYAwSUOGskwPONMpG8sZ/ZwG/3Ln9H4Skihq8C33Jdai99iBaP7/oQd nvdotXHakNEAThaFZlJPmyKLYuh9KRSRvCCDCgGcOmQE+ZqXqVXltSH3tfY+e9Sv si9Cgf4pIX0pKgnkoFaEPukRKTdsJ7Zjx8Yjd8jX9SJjjSI3NNRIOhw2ZgR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6xkNrtADNzGWEV/qGfqDuk/zd/kwHwYDVR0j BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx MTY1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJhYzllNjMtOTg5MC00MjJlLTg4 ZGMtN2NiNmRkYWMyMmZhLzAvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEy OTM2QjkxMTY1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5Ap5wO8vNSNWtzA9N0XhRHm2DWdZxOwPYY En5eyVhQuH95zh32rhnd8Agyk+mUF2hvVQSUSmsh76NpwwsFJzQcLXZ95O3f/o6f UYHOosqQSfdZ1eundm1NKbNzFmPDGwfYS2JLT7geOf02aD00r/MBgmoY2IUO654x N0Q6+rnU95YTZFJqpvs3aijNx86BJF8d2u3w1HB08innrzWrIi2VkzXpIkAuQiaT l2G8lsjlDO0NnigpaJkFI4J2MPbS4h2Vm5LpzyLy35qcD2jDHnx+mZMummpI+B+L iSmHimcYV9wF0yE5U28tR+JB+MBGmhO22hcg5+k9BPcruh6FjPc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:33 2025 by rpki-client