This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json)
Hash identifier: IhXpq6Ufqq3UtLykL7fp1AJpcTRhW3Qy8kgzx/nMvmE=
Subject key identifier: 8A:3F:0E:53:E3:36:A2:E3:C6:73:2F:6C:23:E4:EF:78:14:3D:47:39
Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E
Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E
Certificate serial: 7E92422CCFE8207CF11148B96F5AD75892EDC49F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
Manifest number: 01E2
Signing time: Wed 03 Dec 2025 05:22:10 +0000
Manifest this update: Wed 03 Dec 2025 05:17:10 +0000
Manifest next update: Sat 06 Dec 2025 10:04:10 +0000
Files and hashes: 1: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: Ahb3p33ibrMz7Uv2Q5P5X2Qd76rXmfVe9Dijm1VbLYw=)
2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: fFWzPgou/ECKiXU5DKj/fTCFyECWSQWhIu1tavvJN+Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl
rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 10:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:92:42:2c:cf:e8:20:7c:f1:11:48:b9:6f:5a:d7:58:92:ed:c4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E
Validity
Not Before: Dec 3 05:17:10 2025 GMT
Not After : Dec 6 10:04:10 2025 GMT
Subject: CN=8A3F0E53E336A2E3C6732F6C23E4EF78143D4739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:f8:cd:7e:69:fa:f4:1e:fa:d5:81:ca:5b:
9a:d2:1f:32:2b:91:66:17:3e:9a:7c:4e:b6:f2:ae:
20:82:fe:80:e4:1f:26:e2:1a:0c:0d:5d:bb:11:48:
0f:79:d6:81:78:67:2a:33:4e:e8:45:20:1f:47:72:
b3:b9:82:d4:83:7e:49:11:df:eb:63:d8:3c:17:f3:
b3:a1:92:8b:0e:5a:59:d1:32:82:3f:e0:16:98:9c:
ad:7a:5e:45:cc:8d:06:29:ed:28:32:d0:36:cb:9d:
94:ed:ba:a2:4c:3a:e6:87:e6:b6:b8:ae:0f:af:ba:
88:a2:fc:da:a6:85:df:96:06:37:56:24:7f:1a:db:
54:8f:c4:3b:f7:d0:f6:d9:c2:9b:2a:5c:ce:ff:ca:
67:c3:a1:75:d5:ed:f9:9b:54:9a:bb:85:a5:76:05:
93:6c:6e:22:fb:e3:49:42:8b:79:d2:a2:54:1b:d0:
5c:b9:2a:22:3a:f2:7a:3a:1c:d5:42:db:36:cf:8d:
e6:0b:40:3b:41:fb:f1:06:55:4e:e6:bc:d1:a4:bc:
c5:fa:5e:cf:47:a5:38:51:24:da:87:34:86:17:b3:
f3:bf:e5:d5:3d:e3:16:72:82:87:87:b5:c4:72:73:
17:b9:09:24:a5:51:1c:39:84:f7:fc:49:8b:c4:91:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3F:0E:53:E3:36:A2:E3:C6:73:2F:6C:23:E4:EF:78:14:3D:47:39
X509v3 Authority Key Identifier:
keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:10:21:0d:8f:d6:c8:ba:07:12:80:5e:00:49:0b:7d:41:5d:
67:d9:ee:91:34:43:c0:a1:1f:53:d5:02:ee:0f:48:f3:f5:33:
5f:a8:70:3b:60:c9:7f:1a:b4:1c:ea:dd:43:8b:7a:ce:60:59:
bc:e1:62:e6:92:6e:16:1e:fb:e6:6e:ad:4d:ba:c3:f6:38:96:
08:ba:f3:d3:6c:f6:46:84:57:0f:78:3a:8c:a2:e6:34:e1:48:
68:65:a4:8f:b9:93:a1:61:22:85:8b:4b:ad:ef:1f:48:0e:80:
16:0d:dc:d8:d9:c2:d1:95:42:df:15:42:22:44:09:f0:78:28:
e2:da:d6:19:b9:31:ea:f5:30:d3:22:1e:03:86:7f:5a:64:fc:
08:f9:10:62:9c:8b:e3:21:21:26:ef:0f:3e:1f:e6:0b:1e:f0:
06:0e:62:83:95:2e:a0:66:81:0a:c4:59:c6:16:eb:2e:ff:26:
d2:f9:84:43:5c:f2:49:a2:91:c9:ce:67:4d:bd:67:72:d6:05:
34:7e:3f:a9:ce:76:d1:a6:56:9e:ca:49:e4:75:a1:f1:7a:6d:
7b:f7:f7:3e:87:62:12:0e:a3:41:1e:a8:17:3d:ef:3c:56:60:
9c:18:23:5f:13:53:c1:93:fe:64:92:bb:79:b6:e7:1f:bf:f4:
95:bf:58:b4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfpJCLM/oIHzxEUi5b1rXWJLtxJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4
QkFGNzM5RTAeFw0yNTEyMDMwNTE3MTBaFw0yNTEyMDYxMDA0MTBaMDMxMTAvBgNV
BAMTKDhBM0YwRTUzRTMzNkEyRTNDNjczMkY2QzIzRTRFRjc4MTQzRDQ3MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxfjNfmn69B761YHKW5rSHzIr
kWYXPpp8TrbyriCC/oDkHybiGgwNXbsRSA951oF4ZyozTuhFIB9HcrO5gtSDfkkR
3+tj2DwX87OhkosOWlnRMoI/4BaYnK16XkXMjQYp7Sgy0DbLnZTtuqJMOuaH5ra4
rg+vuoii/Nqmhd+WBjdWJH8a21SPxDv30PbZwpsqXM7/ymfDoXXV7fmbVJq7haV2
BZNsbiL740lCi3nSolQb0Fy5KiI68no6HNVC2zbPjeYLQDtB+/EGVU7mvNGkvMX6
Xs9HpThRJNqHNIYXs/O/5dU94xZygoeHtcRycxe5CSSlURw5hPf8SYvEkZwRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUij8OU+M2ouPGcy9sI+TveBQ9RzkwHwYDVR0j
BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy
NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG
NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm
N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1
NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEwQIQ2P1si6BxKAXgBJC31BXWfZ7pE0Q8Ch
H1PVAu4PSPP1M1+ocDtgyX8atBzq3UOLes5gWbzhYuaSbhYe++ZurU26w/Y4lgi6
89Ns9kaEVw94Ooyi5jThSGhlpI+5k6FhIoWLS63vH0gOgBYN3NjZwtGVQt8VQiJE
CfB4KOLa1hm5Mer1MNMiHgOGf1pk/Aj5EGKci+MhISbvDz4f5gse8AYOYoOVLqBm
gQrEWcYW6y7/JtL5hENc8kmikcnOZ029Z3LWBTR+P6nOdtGmVp7KSeR1ofF6bXv3
9z6HYhIOo0EeqBc97zxWYJwYI18TU8GT/mSSu3m25x+/9JW/WLQ=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:01 2025 by rpki-client