This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: v4o2JFNegL/rRsUPTW+biBV/mzZ0Qr4RUSw/Hb6SEbE= Subject key identifier: 8E:EB:D8:B1:B9:AD:2A:42:3C:52:A3:45:BD:8D:F6:28:45:AA:01:AB Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 3A3A2AA04D3EDB89E63C0FD035540DE367D4459F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 0205 Signing time: Wed 03 Dec 2025 08:00:49 +0000 Manifest this update: Wed 03 Dec 2025 07:55:49 +0000 Manifest next update: Sat 06 Dec 2025 15:45:49 +0000 Files and hashes: 1: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=) 2: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: RmHxfz4XCfFpmHc5u6YbAEU9Ft9oygfXjUMWe2RiXzk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3a:2a:a0:4d:3e:db:89:e6:3c:0f:d0:35:54:0d:e3:67:d4:45:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Dec 3 07:55:49 2025 GMT Not After : Dec 6 15:45:49 2025 GMT Subject: CN=8EEBD8B1B9AD2A423C52A345BD8DF62845AA01AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:fe:ac:36:44:6c:12:1e:26:3d:b3:a2:ad: c9:d7:d4:bd:44:21:8d:83:0c:65:02:46:0b:06:13: 44:9c:6c:70:dd:e9:39:dc:85:12:fc:83:d3:97:33: a5:77:13:2e:6b:14:a3:13:fb:9f:15:16:11:cf:c4: f1:68:0c:db:a0:5a:0a:39:b0:18:fb:ec:42:7b:07: e3:91:7d:1e:0b:77:75:68:82:33:f6:94:35:05:09: 8b:8a:b8:a5:d8:e8:91:44:fe:eb:39:76:9a:f9:d5: 3a:cd:99:23:db:06:58:b3:c2:89:f3:08:86:9e:52: 29:1a:31:f8:68:08:70:cc:88:07:f9:26:7f:94:6d: 37:a5:fd:67:ef:43:23:ac:d1:ed:24:e2:f3:37:01: ab:27:a4:7a:20:77:ea:79:17:85:2b:01:31:83:88: 84:10:6a:fd:43:a5:76:10:65:f5:60:0a:0d:ca:1a: ce:0f:11:c7:ff:f4:45:06:51:e6:fd:20:2a:a9:50: 30:97:98:f1:7d:d8:29:77:7d:36:5d:f9:37:21:dc: 78:00:8b:35:29:56:2f:ec:6c:20:4f:3c:de:70:bc: 5d:54:51:c0:75:dc:4e:6e:8e:82:66:8e:5f:bd:87: 5b:60:e7:c7:6e:5f:f0:d3:e0:b9:c3:8b:4e:80:42: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EB:D8:B1:B9:AD:2A:42:3C:52:A3:45:BD:8D:F6:28:45:AA:01:AB X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:68:65:67:19:97:3b:3d:79:5f:6c:3c:4b:4d:aa:87:89:2e: 20:2e:f1:c7:45:31:4f:ca:4e:d8:33:68:9e:48:e3:2c:c1:29: 76:00:f9:f0:91:be:26:94:48:c0:1c:8b:12:e0:48:00:81:45: 0a:2e:24:3f:04:70:6f:b9:87:90:a6:7e:7b:1b:f2:ae:64:2a: 68:9b:97:5d:5b:f3:7d:5e:f1:e6:19:76:67:e6:4f:2d:f5:2f: c2:fd:a2:6e:83:ab:dc:0e:bd:45:d5:d5:e6:c1:f1:95:47:cf: f9:7e:58:5f:c9:86:13:b5:73:24:dc:f0:d0:4d:9f:c8:5f:c8: 73:a7:5f:46:95:28:9a:cd:fb:de:a2:49:21:54:bd:dd:71:e6: c0:4e:ec:2a:9a:00:73:d5:72:b1:e2:60:7d:b3:1a:1d:4d:e2: e5:f3:cf:b8:0c:a2:e8:72:d3:db:bd:14:da:64:c9:84:de:a7: 69:ec:8b:93:c5:56:9c:3d:63:ef:30:ec:d4:a2:45:75:5f:63: 10:c5:62:c2:d8:d5:07:30:62:a2:7b:ef:f5:bc:30:46:9d:a3: d8:85:98:9e:0f:15:21:4b:2e:fc:90:8e:46:18:06:94:1c:3f: 80:51:f0:23:08:73:79:2d:63:17:f1:f9:61:8a:20:b4:b4:0c: 57:94:e0:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOjoqoE0+24nmPA/QNVQN42fURZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNTEyMDMwNzU1NDlaFw0yNTEyMDYxNTQ1NDlaMDMxMTAvBgNV BAMTKDhFRUJEOEIxQjlBRDJBNDIzQzUyQTM0NUJEOERGNjI4NDVBQTAxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tv6sNkRsEh4mPbOircnX1L1E IY2DDGUCRgsGE0ScbHDd6TnchRL8g9OXM6V3Ey5rFKMT+58VFhHPxPFoDNugWgo5 sBj77EJ7B+ORfR4Ld3VogjP2lDUFCYuKuKXY6JFE/us5dpr51TrNmSPbBlizwonz CIaeUikaMfhoCHDMiAf5Jn+UbTel/WfvQyOs0e0k4vM3AasnpHogd+p5F4UrATGD iIQQav1DpXYQZfVgCg3KGs4PEcf/9EUGUeb9ICqpUDCXmPF92Cl3fTZd+Tch3HgA izUpVi/sbCBPPN5wvF1UUcB13E5ujoJmjl+9h1tg58duX/DT4LnDi06AQjUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjuvYsbmtKkI8UqNFvY32KEWqAaswHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVoZWcZlzs9eV9sPEtNqoeJLiAu8cdFMU/K TtgzaJ5I4yzBKXYA+fCRviaUSMAcixLgSACBRQouJD8EcG+5h5Cmfnsb8q5kKmib l11b831e8eYZdmfmTy31L8L9om6Dq9wOvUXV1ebB8ZVHz/l+WF/JhhO1cyTc8NBN n8hfyHOnX0aVKJrN+96iSSFUvd1x5sBO7CqaAHPVcrHiYH2zGh1N4uXzz7gMouhy 09u9FNpkyYTep2nsi5PFVpw9Y+8w7NSiRXVfYxDFYsLY1QcwYqJ77/W8MEado9iF mJ4PFSFLLvyQjkYYBpQcP4BR8CMIc3ktYxfx+WGKILS0DFeU4EY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:41 2025 by rpki-client