This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: C+/5Qo+HE2fDCt9USyDI4CS8dLEGFwsJnq/ohR8Wmn8= Subject key identifier: E5:E9:56:C3:C3:F6:32:6E:F5:50:73:C0:17:6A:6A:95:3A:A4:7D:A9 Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 2EECE7C2E25CC882DBE64C112CF073A298475D99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 04FB Signing time: Tue 23 Dec 2025 12:31:43 +0000 Manifest this update: Tue 23 Dec 2025 12:26:43 +0000 Manifest next update: Fri 26 Dec 2025 17:43:43 +0000 Files and hashes: 1: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=) 2: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: lIfOxtVwQ0qCcUUA8Tivk4iGZwo0arqsgK5f/wTi4d0=) 3: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ec:e7:c2:e2:5c:c8:82:db:e6:4c:11:2c:f0:73:a2:98:47:5d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Dec 23 12:26:43 2025 GMT Not After : Dec 26 17:43:43 2025 GMT Subject: CN=E5E956C3C3F6326EF55073C0176A6A953AA47DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:de:74:1d:e6:e5:ae:33:0f:ac:dc:3b:45: a7:c0:80:a9:32:9c:a4:69:9e:aa:4b:07:ae:a9:7d: db:0e:23:a4:9e:b1:3e:7d:38:c9:b1:de:ac:9a:ac: 5f:68:9e:96:4b:f8:da:dc:7d:33:97:98:0b:9d:16: 4f:06:8c:d0:4e:d5:6a:3c:ca:5e:31:25:42:93:ba: d1:b8:81:b9:cd:f0:6f:57:5e:48:22:75:dd:c7:10: d4:83:2b:26:6b:f5:11:1b:a7:d8:21:09:90:44:78: 77:87:12:a1:f0:cb:ac:47:da:54:ec:6d:63:a8:9b: b4:13:fe:b9:ac:34:53:c0:c3:5c:d3:d9:16:78:72: 67:46:60:38:c9:12:8c:20:f7:d0:fb:2d:62:6c:92: 47:fc:c5:3e:b4:ee:4d:84:94:1a:2f:d0:31:04:14: f1:72:a4:2f:29:eb:26:52:0d:34:63:ae:2a:27:40: f8:1e:3d:81:d0:cc:6a:75:64:58:44:29:57:10:83: 32:28:7e:bc:97:ce:be:e5:7d:cd:61:a7:02:55:e0: 69:46:31:9b:83:78:4f:5d:9b:4a:58:72:80:f2:6a: c8:fd:49:30:07:17:cb:c7:be:92:98:4b:e4:c6:b1: f9:7c:9e:1a:9a:ce:d1:28:2e:a5:d2:bd:df:4c:f0: f2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E9:56:C3:C3:F6:32:6E:F5:50:73:C0:17:6A:6A:95:3A:A4:7D:A9 X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:46:9a:e0:df:32:3e:60:aa:48:19:ba:a2:4f:46:0c:39:ee: 2a:b7:84:8f:5d:78:de:f3:c6:c9:2b:23:33:76:6b:a4:52:4c: 66:16:14:1d:04:9e:70:6c:86:34:b8:90:5f:aa:b8:2e:11:6b: 2b:25:57:11:60:b4:03:44:44:f9:7c:1b:72:d6:f6:05:96:51: be:c5:73:01:16:50:8d:4c:40:1b:ee:ac:b8:b1:92:1d:d1:cd: f6:68:e6:8e:be:ec:ac:e7:9f:6a:fb:59:1d:dc:54:dc:12:1e: 02:44:f2:0c:61:b5:be:1e:89:88:b7:f9:48:83:d1:60:36:cb: 70:fc:fb:53:b1:72:a4:f2:f4:06:60:8e:10:67:32:ee:e4:41: aa:6f:0c:cc:f1:bf:2d:0c:c8:58:a3:b7:77:2d:fa:07:a8:c5: 7f:a4:7f:d9:8b:98:07:42:9b:fc:72:44:7b:66:88:7d:b7:0b: 7d:45:f0:70:d3:d3:4a:c8:91:bf:77:4a:33:e4:7c:a8:71:d7: 12:13:8a:0d:86:25:db:85:d0:48:16:b2:1f:a5:22:4f:08:5f: 7c:01:6a:bd:0e:aa:e7:45:bd:4d:f7:26:3c:47:2e:51:7f:39: d9:44:eb:92:6c:71:d5:16:67:e1:93:de:02:22:08:33:82:a8: 2b:ae:ac:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuznwuJcyILb5kwRLPBzophHXZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNTEyMjMxMjI2NDNaFw0yNTEyMjYxNzQzNDNaMDMxMTAvBgNV BAMTKEU1RTk1NkMzQzNGNjMyNkVGNTUwNzNDMDE3NkE2QTk1M0FBNDdEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvV950HeblrjMPrNw7RafAgKky nKRpnqpLB66pfdsOI6SesT59OMmx3qyarF9onpZL+NrcfTOXmAudFk8GjNBO1Wo8 yl4xJUKTutG4gbnN8G9XXkgidd3HENSDKyZr9REbp9ghCZBEeHeHEqHwy6xH2lTs bWOom7QT/rmsNFPAw1zT2RZ4cmdGYDjJEowg99D7LWJskkf8xT607k2ElBov0DEE FPFypC8p6yZSDTRjrionQPgePYHQzGp1ZFhEKVcQgzIofryXzr7lfc1hpwJV4GlG MZuDeE9dm0pYcoDyasj9STAHF8vHvpKYS+TGsfl8nhqaztEoLqXSvd9M8PIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5elWw8P2Mm71UHPAF2pqlTqkfakwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFGmuDfMj5gqkgZuqJPRgw57iq3hI9deN7z xskrIzN2a6RSTGYWFB0EnnBshjS4kF+quC4RayslVxFgtANERPl8G3LW9gWWUb7F cwEWUI1MQBvurLixkh3RzfZo5o6+7Kznn2r7WR3cVNwSHgJE8gxhtb4eiYi3+UiD 0WA2y3D8+1OxcqTy9AZgjhBnMu7kQapvDMzxvy0MyFijt3ct+geoxX+kf9mLmAdC m/xyRHtmiH23C31F8HDT00rIkb93SjPkfKhx1xITig2GJduF0EgWsh+lIk8IX3wB ar0OqudFvU33JjxHLlF/OdlE65JscdUWZ+GT3gIiCDOCqCuurAQ= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:51 2025 by rpki-client