This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft File: 0EAF2A0CD22523DB087375417038E4165075CA3E.mft (raw, json) Hash identifier: 2TD1N3IAMK+5Dxg3r/3kr7jCoObIZ2r1/ebXke+Llkc= Subject key identifier: 22:A7:F4:D3:88:39:EC:D6:ED:CC:D7:FE:B5:87:B0:C5:13:84:72:98 Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E Certificate issuer: /CN=0EAF2A0CD22523DB087375417038E4165075CA3E Certificate serial: 7D0F7B2E0D026C5347DB511F738A0CC8CD01A80A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft Manifest number: 010B Signing time: Wed 17 Dec 2025 19:31:08 +0000 Manifest this update: Wed 17 Dec 2025 19:26:08 +0000 Manifest next update: Sun 21 Dec 2025 03:18:08 +0000 Files and hashes: 1: 0EAF2A0CD22523DB087375417038E4165075CA3E.crl (hash: oOYG5reQnqvi3DMtRymHCl/rCeVly7IjbqMHnxvLm0k=) 2: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: LQj0jMPge82CwHOWS5fHIk0tBtvaFA1Hv5mniV+5odo=) 3: 3135372e32302e34352e302f32342d3234203d3e20323035343232.roa (hash: 0BKZVYiTiHtgjZEUGoDI40NlGQFEUeOEKE+t8AaJ1+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0f:7b:2e:0d:02:6c:53:47:db:51:1f:73:8a:0c:c8:cd:01:a8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E Validity Not Before: Dec 17 19:26:08 2025 GMT Not After : Dec 21 03:18:08 2025 GMT Subject: CN=22A7F4D38839ECD6EDCCD7FEB587B0C513847298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:50:97:d0:ba:cf:26:90:40:23:66:f8:90: 62:56:8d:da:8c:3b:a2:a3:59:32:be:b9:fb:43:1f: d1:51:ca:89:58:c8:2e:b9:b9:14:6d:18:a9:82:0c: dd:c5:e7:dc:6e:17:e4:58:3f:06:f1:73:27:a8:80: 84:a6:a4:33:17:fc:f3:5e:36:c9:a9:34:e3:ea:65: e7:df:3a:95:aa:e5:76:e7:53:86:77:df:43:1b:7b: e3:d9:2e:8d:1b:61:a1:c6:4d:49:bf:c2:b3:ff:ff: 95:9f:d3:a5:88:18:e8:3a:16:8f:c7:02:df:e3:71: 32:10:36:89:13:89:9a:92:03:f3:3b:ad:c6:2d:45: 91:1d:fc:74:54:5f:1e:bd:16:4e:4a:75:13:bd:b2: 1e:e8:19:f7:72:09:01:29:a0:ba:03:c7:5d:1c:4f: 4d:97:48:02:2c:a8:ef:f1:84:32:96:24:82:52:c3: 34:7b:c5:da:97:fe:c9:03:f4:33:51:ab:61:c9:35: d6:1a:c3:49:ef:79:4b:c2:21:ea:33:de:b4:7e:ee: b8:97:e0:5a:17:eb:8a:a6:c2:06:3a:8a:a9:fb:9d: f7:8f:a0:d6:0a:52:7f:32:e3:b4:28:f3:f1:14:b7: 86:23:bc:ca:ec:48:9a:b8:70:28:8d:55:d6:b5:93: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A7:F4:D3:88:39:EC:D6:ED:CC:D7:FE:B5:87:B0:C5:13:84:72:98 X509v3 Authority Key Identifier: keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:16:08:5a:bc:49:f1:65:fc:57:ac:a6:55:ea:7b:03:f2:fa: 81:25:bf:2d:ab:b2:31:d0:d3:1e:79:2c:c5:66:ee:4e:48:e9: 39:5c:e9:ca:1e:38:e2:26:39:58:22:40:8b:10:7a:de:be:16: 9f:06:45:cb:21:10:86:16:c5:8a:10:ca:9d:40:a7:d1:20:40: e7:ea:29:24:01:16:4c:7e:f0:d1:0d:e2:33:db:ce:76:43:b9: 29:55:01:27:8f:19:8b:63:53:2b:4d:1f:54:4f:40:57:76:39: 4d:9b:c2:6e:ea:78:78:17:1e:9a:25:a9:12:85:ac:a4:15:23: 77:39:5c:2b:b6:da:e4:5b:60:ab:e8:3d:9d:92:1d:80:c6:50: 2e:49:f4:ab:c3:a5:d4:5a:50:e1:54:3f:d0:fc:51:c8:bd:29: 1b:c6:e0:e4:ba:21:5f:02:f9:35:73:b7:90:57:4f:94:91:5b: 3f:8d:e4:cd:72:45:c9:cb:10:b7:c5:0f:3f:04:9d:a2:c2:9d: 2e:f4:92:6e:99:72:f8:d2:bc:72:ce:f8:a2:ff:22:3a:89:35: 25:3f:e6:a0:63:91:c7:44:db:17:63:c1:7e:d5:b9:a6:40:7d: d5:3b:50:e8:f5:b9:36:5f:29:17:04:f7:48:8c:4f:df:0b:b9: 8b:1b:82:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQ97Lg0CbFNH21Efc4oMyM0BqAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1 MDc1Q0EzRTAeFw0yNTEyMTcxOTI2MDhaFw0yNTEyMjEwMzE4MDhaMDMxMTAvBgNV BAMTKDIyQTdGNEQzODgzOUVDRDZFRENDRDdGRUI1ODdCMEM1MTM4NDcyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE91CX0LrPJpBAI2b4kGJWjdqM O6KjWTK+uftDH9FRyolYyC65uRRtGKmCDN3F59xuF+RYPwbxcyeogISmpDMX/PNe NsmpNOPqZeffOpWq5XbnU4Z330Mbe+PZLo0bYaHGTUm/wrP//5Wf06WIGOg6Fo/H At/jcTIQNokTiZqSA/M7rcYtRZEd/HRUXx69Fk5KdRO9sh7oGfdyCQEpoLoDx10c T02XSAIsqO/xhDKWJIJSwzR7xdqX/skD9DNRq2HJNdYaw0nveUvCIeoz3rR+7riX 4FoX64qmwgY6iqn7nfePoNYKUn8y47Qo8/EUt4YjvMrsSJq4cCiNVda1k21bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIqf004g57NbtzNf+tYewxROEcpgwHwYDVR0j BBgwFoAUDq8qDNIlI9sIc3VBcDjkFlB1yj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMC8wRUFGMkEwQ0Qy MjUyM0RCMDg3Mzc1NDE3MDM4RTQxNjUwNzVDQTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1MDc1 Q0EzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0 MTY1MDc1Q0EzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkWCFq8SfFl/FesplXqewPy+oElvy2rsjHQ 0x55LMVm7k5I6Tlc6coeOOImOVgiQIsQet6+Fp8GRcshEIYWxYoQyp1Ap9EgQOfq KSQBFkx+8NEN4jPbznZDuSlVASePGYtjUytNH1RPQFd2OU2bwm7qeHgXHpolqRKF rKQVI3c5XCu22uRbYKvoPZ2SHYDGUC5J9KvDpdRaUOFUP9D8Uci9KRvG4OS6IV8C +TVzt5BXT5SRWz+N5M1yRcnLELfFDz8EnaLCnS70km6ZcvjSvHLO+KL/IjqJNSU/ 5qBjkcdE2xdjwX7VuaZAfdU7UOj1uTZfKRcE90iMT98LuYsbgio= -----END CERTIFICATE-----Generated at Sun Dec 21 00:42:37 2025 by rpki-client