This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: 5FeK+C+Pg+iQnrFjeZRGb+QFxs/98dqbZJ0aBlAKuwY= Subject key identifier: 69:31:C3:9E:B5:F2:B8:E6:24:08:85:52:4D:84:D9:03:B0:CD:F2:89 Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 283EB21C9019DB09EE73E342947B8E147B12CE97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 024B Signing time: Tue 02 Dec 2025 12:41:49 +0000 Manifest this update: Tue 02 Dec 2025 12:36:49 +0000 Manifest next update: Fri 05 Dec 2025 23:43:49 +0000 Files and hashes: 1: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: +uanKrOlJ1inyxGrMVmi+UClp9vCCzs4JkeBJaqGWYc=) 2: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: 14kyrfsD+7L6HD6lT/ZpgTzA6KD3u31aozJICrv8QKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3e:b2:1c:90:19:db:09:ee:73:e3:42:94:7b:8e:14:7b:12:ce:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Dec 2 12:36:49 2025 GMT Not After : Dec 5 23:43:49 2025 GMT Subject: CN=6931C39EB5F2B8E6240885524D84D903B0CDF289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bf:55:d0:2d:97:0f:72:ce:35:ab:ce:4d:e3: b5:98:70:8e:0a:3e:ec:29:e4:20:d4:b3:8a:3c:0a: b3:83:37:f9:27:66:69:51:c5:b0:c3:3a:2d:92:dc: 5f:9a:30:8a:22:3a:64:14:d9:e7:ad:ff:d8:c2:9f: 1f:f5:5a:b9:f5:ea:ef:52:c6:df:42:59:82:dd:69: bd:f4:68:1e:7d:e5:eb:87:f3:49:77:2a:de:75:53: ab:23:26:55:4a:3a:d0:f9:e5:73:b9:20:5e:ae:8d: be:29:63:81:78:b6:79:d2:71:f7:1a:75:ca:e4:f5: 4c:e8:20:63:c0:d3:7b:64:93:e0:aa:00:b4:2f:4f: 1d:e7:01:b2:8c:e2:f5:00:a4:15:2c:6e:a9:a6:19: 3a:ef:3b:ab:3e:68:af:7c:a9:42:d8:eb:d1:b6:cb: 95:1a:ae:4a:b3:d5:36:33:1e:63:e3:e3:33:6c:9a: b0:48:20:16:75:e4:63:84:59:be:0d:9e:30:4d:28: 50:d6:b7:df:0b:bd:36:3b:f3:15:6e:84:82:cf:95: 3b:6b:a7:e4:87:62:6a:2c:c3:52:58:af:a2:30:7a: b9:83:97:ec:82:6f:5e:4b:6e:3c:80:06:ff:cb:62: e9:b5:85:5c:9d:a8:0a:45:88:83:09:ed:66:bb:f5: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:31:C3:9E:B5:F2:B8:E6:24:08:85:52:4D:84:D9:03:B0:CD:F2:89 X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bc:b7:e6:c1:3d:b1:95:09:fb:6d:d0:b9:0d:59:cc:b9:fd: 3c:9c:4d:f4:4b:8e:fd:ce:92:c1:a8:31:76:f3:00:7c:08:b1: f3:e1:45:1f:e2:f2:27:67:0b:02:9a:97:43:95:33:43:ce:e6: 7e:a6:d8:26:4c:12:a2:ef:16:09:97:87:13:cc:aa:42:61:9b: 98:26:62:59:4d:98:23:97:49:44:08:6b:e9:c6:02:e5:2c:f8: 9a:ac:f0:a1:0a:a2:3e:b7:5b:ac:0a:5c:38:16:ed:81:be:5b: 2c:c3:b5:05:0e:f0:df:b8:e0:b2:54:f4:cf:1e:ff:76:2d:a2: b3:a7:a4:2d:ea:c1:d9:d9:f6:02:01:9a:c1:8d:44:6e:4d:cd: 64:72:bc:58:9b:5e:e6:26:15:a3:1e:6a:a5:ee:cb:41:80:65: 5f:36:f5:b5:8a:67:27:7e:2f:23:76:f3:2d:3e:f4:bb:cb:c1: c3:4a:05:68:f0:89:0f:d3:d6:62:82:c6:8f:10:56:6f:a8:c1: 6a:45:03:74:1c:97:59:86:20:19:ff:ce:38:ff:b9:83:e6:9a: 93:86:c1:d6:22:62:ab:1c:9f:4c:1d:bf:af:cd:83:65:63:72: 02:ad:90:6b:fa:7f:99:aa:dd:35:5a:dc:5d:46:f0:3e:ca:bb: 3d:c2:0c:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKD6yHJAZ2wnuc+NClHuOFHsSzpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNTEyMDIxMjM2NDlaFw0yNTEyMDUyMzQzNDlaMDMxMTAvBgNV BAMTKDY5MzFDMzlFQjVGMkI4RTYyNDA4ODU1MjREODREOTAzQjBDREYyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqv1XQLZcPcs41q85N47WYcI4K Puwp5CDUs4o8CrODN/knZmlRxbDDOi2S3F+aMIoiOmQU2eet/9jCnx/1Wrn16u9S xt9CWYLdab30aB595euH80l3Kt51U6sjJlVKOtD55XO5IF6ujb4pY4F4tnnScfca dcrk9UzoIGPA03tkk+CqALQvTx3nAbKM4vUApBUsbqmmGTrvO6s+aK98qULY69G2 y5Uarkqz1TYzHmPj4zNsmrBIIBZ15GOEWb4NnjBNKFDWt98LvTY78xVuhILPlTtr p+SHYmosw1JYr6IwermDl+yCb15LbjyABv/LYum1hVydqApFiIMJ7Wa79ZZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTHDnrXyuOYkCIVSTYTZA7DN8okwHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABO8t+bBPbGVCftt0LkNWcy5/TycTfRLjv3O ksGoMXbzAHwIsfPhRR/i8idnCwKal0OVM0PO5n6m2CZMEqLvFgmXhxPMqkJhm5gm YllNmCOXSUQIa+nGAuUs+Jqs8KEKoj63W6wKXDgW7YG+WyzDtQUO8N+44LJU9M8e /3YtorOnpC3qwdnZ9gIBmsGNRG5NzWRyvFibXuYmFaMeaqXuy0GAZV829bWKZyd+ LyN28y0+9LvLwcNKBWjwiQ/T1mKCxo8QVm+owWpFA3Qcl1mGIBn/zjj/uYPmmpOG wdYiYqscn0wdv6/Ng2VjcgKtkGv6f5mq3TVa3F1G8D7Kuz3CDOA= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:42 2025 by rpki-client