This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: rzS7ar/BlaLX/cusq6sVuRjrYI/fiQ0zETjMEBssrmI= Subject key identifier: 66:3C:61:77:F9:06:C9:14:1F:B4:6E:EB:88:99:5C:0A:1A:D0:8B:FB Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 38BBF48FE6C0B8A2B06C94FB96E4501E5663E3B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: 0114 Signing time: Wed 03 Dec 2025 10:41:59 +0000 Manifest this update: Wed 03 Dec 2025 10:36:59 +0000 Manifest next update: Sat 06 Dec 2025 18:07:59 +0000 Files and hashes: 1: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: AxREmpC8cdJIAl60971y5BlThnK5xr9mxplCXdz4IEg=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bb:f4:8f:e6:c0:b8:a2:b0:6c:94:fb:96:e4:50:1e:56:63:e3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Dec 3 10:36:59 2025 GMT Not After : Dec 6 18:07:59 2025 GMT Subject: CN=663C6177F906C9141FB46EEB88995C0A1AD08BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:a0:4d:c6:02:3b:dc:4b:4a:9a:27:e3:a5: e1:76:14:e6:94:1d:e2:e7:71:9a:2d:87:26:b0:24: 59:34:40:80:a2:f7:90:c4:30:38:c2:e5:63:15:c2: 12:96:95:99:fa:2a:0d:bb:aa:0d:92:56:b3:5f:40: e2:48:dc:4c:1c:70:da:5b:cc:2e:e0:f9:69:c9:6f: 2f:1b:1c:3e:e9:f5:5e:87:19:32:d3:8b:1a:a7:72: 7e:4d:cc:c6:1f:fa:77:59:e8:4b:8f:82:92:4a:97: 51:16:e5:fb:c0:98:7a:b0:9f:37:0e:71:e3:d0:65: 26:a2:e2:5f:45:36:3b:84:28:8f:69:81:07:96:b2: 82:d8:fe:c6:19:a8:52:72:f3:1f:7d:49:0a:7a:de: b6:6a:f9:75:df:66:e1:49:20:8a:3e:ac:3d:78:50: d8:b8:b8:66:3d:e4:3d:11:9c:9e:cf:de:c7:24:0b: 3d:bb:3b:98:35:43:44:c0:68:c1:95:03:88:c1:bb: 57:9c:20:7c:32:82:3b:7c:3a:10:84:6f:90:8e:d9: bf:3b:62:88:26:30:a3:fd:2e:83:77:0e:9b:36:8e: 39:32:36:3b:ee:c3:b2:4e:47:8a:d0:3c:fd:9e:19: 5d:f2:b7:d8:6a:be:1f:3e:b5:c7:7f:fe:3b:ab:e3: 86:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3C:61:77:F9:06:C9:14:1F:B4:6E:EB:88:99:5C:0A:1A:D0:8B:FB X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:71:9f:c8:b2:4f:da:18:c8:9a:4c:c3:d9:50:f0:c7:7a:63: b7:8b:a9:6c:4a:9a:f8:fd:8d:82:a9:77:18:09:24:55:c0:29: 41:e6:95:16:00:a1:9d:4d:6c:3c:32:11:4e:23:75:27:13:9d: 5c:f9:fa:96:a9:b4:f3:69:2c:7e:4e:de:d7:c4:df:55:97:3c: 82:2d:64:05:b2:25:bf:48:77:2e:58:e2:1b:9a:c8:9c:b6:9b: 3e:5f:2f:d5:12:a8:81:ff:27:4f:b4:6b:36:ea:91:f6:ac:db: 5e:75:3c:24:c6:8b:2f:d4:bc:52:db:a5:55:90:88:b5:87:e6: 83:6e:b7:48:b7:d3:55:da:e5:a0:a6:98:b7:ce:d8:94:4e:3c: 40:4e:60:e5:31:a3:36:68:6e:5d:35:c7:b4:13:a9:c9:a7:f6: 44:4d:b1:ce:2b:dd:d2:a5:06:da:a8:91:24:ec:d8:81:db:89: e7:90:55:96:9e:40:53:a1:32:bf:9b:c6:86:d2:12:78:e5:d1: 85:ea:55:c9:e6:0d:16:8d:e1:ea:5a:ef:1a:51:40:44:82:ff: f9:cd:9f:85:a3:1c:41:31:23:66:78:e8:5b:2d:45:b8:61:4f: 37:07:ac:27:80:57:6f:fb:71:ea:06:8f:d6:fd:25:0e:94:55: 30:10:3a:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLv0j+bAuKKwbJT7luRQHlZj47kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTEyMDMxMDM2NTlaFw0yNTEyMDYxODA3NTlaMDMxMTAvBgNV BAMTKDY2M0M2MTc3RjkwNkM5MTQxRkI0NkVFQjg4OTk1QzBBMUFEMDhCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06aBNxgI73EtKmifjpeF2FOaU HeLncZothyawJFk0QICi95DEMDjC5WMVwhKWlZn6Kg27qg2SVrNfQOJI3EwccNpb zC7g+WnJby8bHD7p9V6HGTLTixqncn5NzMYf+ndZ6EuPgpJKl1EW5fvAmHqwnzcO cePQZSai4l9FNjuEKI9pgQeWsoLY/sYZqFJy8x99SQp63rZq+XXfZuFJIIo+rD14 UNi4uGY95D0RnJ7P3sckCz27O5g1Q0TAaMGVA4jBu1ecIHwygjt8OhCEb5CO2b87 YogmMKP9LoN3Dps2jjkyNjvuw7JOR4rQPP2eGV3yt9hqvh8+tcd//jur44ZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZjxhd/kGyRQftG7riJlcChrQi/swHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZxn8iyT9oYyJpMw9lQ8Md6Y7eLqWxKmvj9 jYKpdxgJJFXAKUHmlRYAoZ1NbDwyEU4jdScTnVz5+paptPNpLH5O3tfE31WXPIIt ZAWyJb9Idy5Y4huayJy2mz5fL9USqIH/J0+0azbqkfas2151PCTGiy/UvFLbpVWQ iLWH5oNut0i301Xa5aCmmLfO2JROPEBOYOUxozZobl01x7QTqcmn9kRNsc4r3dKl BtqokSTs2IHbieeQVZaeQFOhMr+bxobSEnjl0YXqVcnmDRaN4epa7xpRQESC//nN n4WjHEExI2Z46FstRbhhTzcHrCeAV2/7ceoGj9b9JQ6UVTAQOjc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:44 2025 by rpki-client