This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft File: 0EAF2A0CD22523DB087375417038E4165075CA3E.mft (raw, json) Hash identifier: j4Q+dbJ3JSwpv3PMrOvV62jL8KiBd0bju+0GDZoSrTc= Subject key identifier: 40:42:45:64:EA:92:A6:87:28:BF:BF:34:02:D2:45:50:E5:28:C8:39 Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E Certificate issuer: /CN=0EAF2A0CD22523DB087375417038E4165075CA3E Certificate serial: 2FF34E34454070F0425C49103BCD61136CA0562C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft Manifest number: 010C Signing time: Sat 20 Dec 2025 03:21:09 +0000 Manifest this update: Sat 20 Dec 2025 03:16:09 +0000 Manifest next update: Tue 23 Dec 2025 06:36:09 +0000 Files and hashes: 1: 0EAF2A0CD22523DB087375417038E4165075CA3E.crl (hash: 6wjQ1TwLll2fxXRXrnxZlW5kgvWM1yxJmgBmJLrkUl8=) 2: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: LQj0jMPge82CwHOWS5fHIk0tBtvaFA1Hv5mniV+5odo=) 3: 3135372e32302e34352e302f32342d3234203d3e20323035343232.roa (hash: 0BKZVYiTiHtgjZEUGoDI40NlGQFEUeOEKE+t8AaJ1+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 06:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f3:4e:34:45:40:70:f0:42:5c:49:10:3b:cd:61:13:6c:a0:56:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E Validity Not Before: Dec 20 03:16:09 2025 GMT Not After : Dec 23 06:36:09 2025 GMT Subject: CN=40424564EA92A68728BFBF3402D24550E528C839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:55:dc:71:d4:dc:35:23:89:0c:05:6f:53: 2e:47:0f:9e:4c:5b:0e:e2:a7:74:03:4e:5d:61:be: 26:6e:c4:ef:4a:68:da:c9:fe:99:ed:37:25:29:de: dd:dd:a6:19:04:7a:83:35:0b:81:3e:15:95:18:fb: 35:58:29:ae:05:da:e4:fb:ad:cd:96:aa:2c:b3:ba: 59:47:14:b2:2b:92:c7:21:73:45:0b:00:f6:54:f4: ac:57:9e:4c:cb:20:bf:c6:0d:75:47:60:ae:81:c6: a3:53:93:6d:30:60:54:45:ba:1a:59:f2:34:54:53: 73:1f:e2:bb:58:98:81:a9:99:53:cd:9a:e3:d3:3a: 25:e5:c0:8e:59:b7:03:9a:87:95:b8:27:b5:39:56: 21:21:97:cd:e5:2b:cc:69:3a:a6:bb:5f:14:85:40: 14:92:57:1c:ec:f1:70:d0:c8:84:a0:4c:62:b5:98: f6:86:eb:d6:b1:2e:c8:ec:81:89:37:2d:07:48:a4: 53:3e:a1:02:7d:70:3e:e2:d6:9e:d9:2b:3f:25:a1: 86:7f:e1:04:c2:31:92:c0:f3:e8:74:85:a5:56:55: 52:b6:de:eb:74:a4:6a:2c:6b:f4:bc:b6:78:6f:e8: 7f:5f:ac:7d:8d:89:f2:f6:a9:78:39:81:f9:9e:30: e8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:42:45:64:EA:92:A6:87:28:BF:BF:34:02:D2:45:50:E5:28:C8:39 X509v3 Authority Key Identifier: keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a4:41:e8:f3:bc:68:b5:af:b1:c3:57:82:b6:5c:ed:f3:99: 08:e6:34:50:b8:f6:21:c8:29:39:f0:82:7f:50:9f:e4:62:ad: cd:14:f9:cf:32:0a:9d:f6:5c:98:b9:9b:76:4f:56:47:f8:f3: ca:db:06:53:64:94:0a:72:61:d5:9a:7b:ac:2c:00:db:1b:5b: 51:d3:59:e6:96:7b:85:35:6b:0e:f6:bb:81:54:2c:28:48:4b: 1c:8a:4a:4d:b7:98:78:0e:37:d1:a1:2c:c2:a9:33:7c:f6:51: 03:a7:67:36:7b:c2:3d:58:55:be:17:94:ef:87:5d:bb:25:a3: a5:b6:ab:8f:4c:f9:30:b1:ca:92:80:c0:5d:99:e4:1c:5c:74: bd:41:67:d7:42:23:fc:0c:eb:a8:b9:ea:64:74:15:40:05:a5: aa:87:12:7c:92:f1:79:2f:a8:1f:66:42:71:18:6c:5d:71:b3: 0d:f3:80:21:9e:96:5e:84:77:ea:29:5d:64:46:44:7a:51:10: dd:94:9e:82:c3:f4:5d:a1:25:07:82:b0:4b:44:6a:ca:82:57: 00:9a:05:1d:29:60:0d:c6:3c:90:05:2d:99:9d:8d:c5:d7:de: 28:6b:ce:7a:f4:91:57:13:0e:a9:1f:cf:73:6c:84:f7:4a:bf: c0:80:c3:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL/NONEVAcPBCXEkQO81hE2ygViwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1 MDc1Q0EzRTAeFw0yNTEyMjAwMzE2MDlaFw0yNTEyMjMwNjM2MDlaMDMxMTAvBgNV BAMTKDQwNDI0NTY0RUE5MkE2ODcyOEJGQkYzNDAyRDI0NTUwRTUyOEM4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pVXccdTcNSOJDAVvUy5HD55M Ww7ip3QDTl1hviZuxO9KaNrJ/pntNyUp3t3dphkEeoM1C4E+FZUY+zVYKa4F2uT7 rc2WqiyzullHFLIrkschc0ULAPZU9KxXnkzLIL/GDXVHYK6BxqNTk20wYFRFuhpZ 8jRUU3Mf4rtYmIGpmVPNmuPTOiXlwI5ZtwOah5W4J7U5ViEhl83lK8xpOqa7XxSF QBSSVxzs8XDQyISgTGK1mPaG69axLsjsgYk3LQdIpFM+oQJ9cD7i1p7ZKz8loYZ/ 4QTCMZLA8+h0haVWVVK23ut0pGosa/S8tnhv6H9frH2NifL2qXg5gfmeMOhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQEJFZOqSpocov780AtJFUOUoyDkwHwYDVR0j BBgwFoAUDq8qDNIlI9sIc3VBcDjkFlB1yj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMC8wRUFGMkEwQ0Qy MjUyM0RCMDg3Mzc1NDE3MDM4RTQxNjUwNzVDQTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1MDc1 Q0EzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0 MTY1MDc1Q0EzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqkQejzvGi1r7HDV4K2XO3zmQjmNFC49iHI KTnwgn9Qn+Rirc0U+c8yCp32XJi5m3ZPVkf488rbBlNklApyYdWae6wsANsbW1HT WeaWe4U1aw72u4FULChISxyKSk23mHgON9GhLMKpM3z2UQOnZzZ7wj1YVb4XlO+H Xbslo6W2q49M+TCxypKAwF2Z5BxcdL1BZ9dCI/wM66i56mR0FUAFpaqHEnyS8Xkv qB9mQnEYbF1xsw3zgCGell6Ed+opXWRGRHpREN2UnoLD9F2hJQeCsEtEasqCVwCa BR0pYA3GPJAFLZmdjcXX3ihrznr0kVcTDqkfz3NshPdKv8CAwyM= -----END CERTIFICATE-----Generated at Sun Dec 21 07:21:54 2025 by rpki-client