This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: FKyUE1W5BMZ6csya7vqg8moScMzwnCrFsHXq2gR2dCk= Subject key identifier: 25:FF:D5:63:64:4C:80:54:78:7D:45:ED:7B:DB:FA:9E:6A:55:7C:86 Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 350929FAFB1B652D315296D64421B53F18B81A71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 01E4 Signing time: Wed 03 Dec 2025 01:11:32 +0000 Manifest this update: Wed 03 Dec 2025 01:06:32 +0000 Manifest next update: Sat 06 Dec 2025 11:40:32 +0000 Files and hashes: 1: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=) 2: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=) 3: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=) 4: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: 5uZltRt4s78HpB4NzxLYZWbgVrzawnNAzXqNtc15QK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:09:29:fa:fb:1b:65:2d:31:52:96:d6:44:21:b5:3f:18:b8:1a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Dec 3 01:06:32 2025 GMT Not After : Dec 6 11:40:32 2025 GMT Subject: CN=25FFD563644C8054787D45ED7BDBFA9E6A557C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:48:7d:5b:1d:c4:9b:0e:fa:d6:6d:30:4e: ed:dd:28:91:45:9d:72:79:48:86:88:58:81:4a:c7: 76:8e:b4:31:b5:ef:56:03:bf:bc:c9:f0:d7:bb:0d: fd:d7:69:30:e5:f4:00:52:26:28:c6:f5:30:90:bd: 54:43:d9:06:cc:e4:fb:77:bc:62:fd:f7:ff:81:dc: b6:15:7c:d4:3f:2f:cb:d0:1a:8c:cc:73:5e:a6:24: 98:65:db:66:ec:cf:64:61:c5:ef:03:09:7b:c9:7a: c7:99:01:02:e9:a8:24:3b:97:b6:70:e4:03:29:2f: e1:9e:96:50:38:16:7a:7d:55:a4:8b:6b:5e:c4:97: b1:21:c5:fa:2a:65:60:05:9e:0e:6b:34:f5:83:07: c6:c3:fb:12:64:e3:2c:41:45:0c:44:85:55:7b:d2: e5:3f:6d:46:7f:cf:a7:fd:0d:8b:f2:b8:17:31:66: 63:7f:0a:f6:50:a5:71:1e:35:9c:40:64:74:69:17: b1:d3:90:a7:ec:a7:36:8a:b2:32:fe:4a:0e:3e:1a: fa:eb:23:da:2e:b4:8c:20:c8:ef:ce:f0:b0:ac:9d: 01:1e:71:73:a0:10:ae:c4:d0:a0:0c:30:10:1d:86: 0a:b3:d2:77:81:72:9f:10:08:4d:51:3a:89:c0:e4: 07:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FF:D5:63:64:4C:80:54:78:7D:45:ED:7B:DB:FA:9E:6A:55:7C:86 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:90:8a:bd:92:50:4d:39:9b:8e:de:63:e8:16:01:6e:df:fb: 59:88:3d:dc:5e:e5:2f:4a:4f:33:e4:67:0f:51:ee:65:34:a8: 9a:28:75:39:1b:27:18:c1:45:25:6f:c1:24:b6:e0:c5:dd:88: c0:7b:ba:0a:9f:e2:72:15:60:5b:d7:9e:05:c8:13:de:4a:03: df:aa:db:72:e2:de:f9:ef:b3:a7:16:3d:e9:3b:a1:f3:da:bf: cc:8b:d6:0d:7d:2c:3a:8e:23:d9:a0:2b:ad:fc:84:a3:0c:66: 7b:3c:f3:39:4a:07:e4:da:fe:95:39:c0:d0:af:9a:34:66:3f: 58:63:da:ea:ab:59:f9:d4:6c:a6:a2:2a:e6:cb:b9:2d:fb:0f: 4e:f3:33:7a:b5:15:fa:d8:77:d2:f2:c3:0d:ea:85:a3:74:d2: 54:38:c8:3e:66:bb:65:0d:ac:e7:e0:72:c1:b2:93:3e:96:24: fa:d7:4b:fa:e1:71:34:76:4e:5e:3d:d9:65:14:17:d9:64:2f: af:72:9e:5d:e6:a9:d7:f2:d7:b7:19:33:f8:b7:db:88:c5:ec: f2:3d:d2:cf:b7:aa:32:2e:be:50:99:2e:8b:e9:21:23:51:79: e3:4d:dc:de:03:c1:c1:f3:e3:d0:df:1a:4b:9b:46:91:36:ba: 24:a4:1a:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQkp+vsbZS0xUpbWRCG1Pxi4GnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNTEyMDMwMTA2MzJaFw0yNTEyMDYxMTQwMzJaMDMxMTAvBgNV BAMTKDI1RkZENTYzNjQ0QzgwNTQ3ODdENDVFRDdCREJGQTlFNkE1NTdDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDix0h9Wx3Emw761m0wTu3dKJFF nXJ5SIaIWIFKx3aOtDG171YDv7zJ8Ne7Df3XaTDl9ABSJijG9TCQvVRD2QbM5Pt3 vGL99/+B3LYVfNQ/L8vQGozMc16mJJhl22bsz2Rhxe8DCXvJeseZAQLpqCQ7l7Zw 5AMpL+GellA4Fnp9VaSLa17El7EhxfoqZWAFng5rNPWDB8bD+xJk4yxBRQxEhVV7 0uU/bUZ/z6f9DYvyuBcxZmN/CvZQpXEeNZxAZHRpF7HTkKfspzaKsjL+Sg4+Gvrr I9outIwgyO/O8LCsnQEecXOgEK7E0KAMMBAdhgqz0neBcp8QCE1ROonA5AddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJf/VY2RMgFR4fUXte9v6nmpVfIYwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWQir2SUE05m47eY+gWAW7f+1mIPdxe5S9K TzPkZw9R7mU0qJoodTkbJxjBRSVvwSS24MXdiMB7ugqf4nIVYFvXngXIE95KA9+q 23Li3vnvs6cWPek7ofPav8yL1g19LDqOI9mgK638hKMMZns88zlKB+Ta/pU5wNCv mjRmP1hj2uqrWfnUbKaiKubLuS37D07zM3q1FfrYd9Lyww3qhaN00lQ4yD5mu2UN rOfgcsGykz6WJPrXS/rhcTR2Tl492WUUF9lkL69ynl3mqdfy17cZM/i324jF7PI9 0s+3qjIuvlCZLovpISNReeNN3N4DwcHz49DfGkubRpE2uiSkGno= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:27 2025 by rpki-client