This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json) Hash identifier: viHgEVer31n1uh7xGxT/O7qA3kAgDufvIUC7xKw295g= Subject key identifier: D2:D0:00:7D:0F:3A:4D:BF:7F:20:29:59:54:77:96:F2:E7:C9:0F:FC Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Certificate serial: 32C64633CA589FE1B4016B81D60A0186D6BDAB6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft Manifest number: 02F9 Signing time: Wed 17 Dec 2025 15:02:28 +0000 Manifest this update: Wed 17 Dec 2025 14:57:28 +0000 Manifest next update: Sat 20 Dec 2025 22:08:28 +0000 Files and hashes: 1: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: F9XeMeAThs50tFBxMslcgwIp8eQsMJvADEAy3RCyxts=) 2: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=) 3: 3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa (hash: uShV8vRhK/SDVf3Twj+hPuhHAzUhqQGJIQPtkavd13M=) 4: 3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa (hash: joRtsTzluk9HUnqI3+6HvaybpCq3OAhZ2eSjEhqFFeA=) 5: 3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa (hash: UUOaSFdZB1gNgfcBiLfpj8+sysFmMb8lGgAOYylAanI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c6:46:33:ca:58:9f:e1:b4:01:6b:81:d6:0a:01:86:d6:bd:ab:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Validity Not Before: Dec 17 14:57:28 2025 GMT Not After : Dec 20 22:08:28 2025 GMT Subject: CN=D2D0007D0F3A4DBF7F202959547796F2E7C90FFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:ad:da:ef:8c:46:5f:1d:8a:3f:cd:12:eb: 7e:08:ca:43:c5:4f:65:77:db:e7:25:42:aa:2d:f8: 8f:16:0a:9c:1d:db:3a:cf:b0:ac:1a:90:b8:24:6e: 75:f2:af:1f:ec:24:a3:fc:10:be:42:e1:be:fd:59: d4:a6:33:a3:e5:f1:c4:38:c5:03:fc:4a:f0:dd:4f: ac:a8:37:3b:6e:ed:b4:1d:10:4d:23:1b:f9:5f:39: 16:aa:b8:b0:0b:05:5c:f4:9f:52:f6:f9:7a:d3:47: df:66:c7:80:c8:77:35:60:1a:be:b0:c8:95:84:50: 72:2b:dd:45:08:e1:71:6d:e9:0e:2c:51:eb:d8:b5: 79:fa:75:f1:be:64:31:81:07:d7:c0:28:6d:be:e6: b6:b9:27:2f:6d:19:65:98:f8:1e:29:72:76:a6:0e: 79:f7:0c:6a:ff:0e:1d:d3:60:0d:fa:8a:88:5b:8f: b7:f5:ae:7d:bb:13:1a:3f:ec:2e:9c:0a:79:81:d7: 1c:6b:83:bb:68:ed:3f:08:de:22:1a:6a:70:c1:cc: cc:65:4a:63:d9:d1:8c:f9:76:28:31:43:4b:e1:81: 73:f9:ab:a9:ef:22:40:6b:6f:b6:57:4f:81:c0:a1: 53:a5:90:34:dc:79:c5:de:a6:8d:20:85:cd:cb:6c: c9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D0:00:7D:0F:3A:4D:BF:7F:20:29:59:54:77:96:F2:E7:C9:0F:FC X509v3 Authority Key Identifier: keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:88:20:1a:27:ea:b4:ce:be:af:33:5b:ef:ab:1c:e7:f5:ba: ae:02:db:ab:e1:db:5f:d3:d9:e7:ce:19:8a:99:90:1d:1e:4a: 3b:12:bd:79:1b:02:29:52:b5:85:6a:60:6b:de:79:c7:be:81: 0e:81:97:66:47:8e:0f:8c:eb:7b:0b:ed:ca:07:4c:7c:a0:8d: 05:75:9b:09:a4:fe:93:7a:14:58:4e:5b:ca:01:ea:00:92:ef: 05:4d:c2:2d:42:19:55:9b:82:53:72:9d:dc:69:1b:a4:c0:57: f3:ef:75:aa:86:e3:b0:b8:a0:12:07:94:54:eb:1c:c1:21:8f: 7e:c7:dc:a0:c8:8c:b9:96:2a:c8:07:0c:b4:0d:ab:48:23:26: 54:9d:f1:9a:96:2f:aa:a6:9d:19:4b:f3:68:d4:27:55:f3:e2: 42:7f:6e:dd:d4:c4:1c:12:68:e7:0e:23:aa:1f:d7:0b:d8:86: b4:f6:12:e4:5a:fc:b5:cd:3a:c5:6c:43:95:30:a7:b7:15:e3: 8a:7d:dd:f0:ef:69:87:e2:3c:1f:56:dd:7a:3f:eb:49:5b:dc: ba:fa:1c:99:1d:86:fe:f0:11:0b:46:73:38:3b:d9:5b:f1:7c: 69:a7:03:76:67:23:7d:c2:c5:02:de:a6:96:8e:f8:56:0a:0b: 08:f1:28:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsZGM8pYn+G0AWuB1goBhta9q28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4 QTA1MjVBMTAeFw0yNTEyMTcxNDU3MjhaFw0yNTEyMjAyMjA4MjhaMDMxMTAvBgNV BAMTKEQyRDAwMDdEMEYzQTREQkY3RjIwMjk1OTU0Nzc5NkYyRTdDOTBGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ra3a74xGXx2KP80S634IykPF T2V32+clQqot+I8WCpwd2zrPsKwakLgkbnXyrx/sJKP8EL5C4b79WdSmM6Pl8cQ4 xQP8SvDdT6yoNztu7bQdEE0jG/lfORaquLALBVz0n1L2+XrTR99mx4DIdzVgGr6w yJWEUHIr3UUI4XFt6Q4sUevYtXn6dfG+ZDGBB9fAKG2+5ra5Jy9tGWWY+B4pcnam Dnn3DGr/Dh3TYA36iohbj7f1rn27Exo/7C6cCnmB1xxrg7to7T8I3iIaanDBzMxl SmPZ0Yz5digxQ0vhgXP5q6nvIkBrb7ZXT4HAoVOlkDTcecXepo0ghc3LbMmjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0tAAfQ86Tb9/IClZVHeW8ufJD/wwHwYDVR0j BBgwFoAU4BTm7QNTfkU1ZdBue4oxqooFJaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMC9FMDE0RTZFRDAz NTM3RTQ1MzU2NUQwNkU3QjhBMzFBQThBMDUyNUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4QTA1 MjVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMx QUE4QTA1MjVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmIIBon6rTOvq8zW++rHOf1uq4C26vh21/T 2efOGYqZkB0eSjsSvXkbAilStYVqYGveece+gQ6Bl2ZHjg+M63sL7coHTHygjQV1 mwmk/pN6FFhOW8oB6gCS7wVNwi1CGVWbglNyndxpG6TAV/PvdaqG47C4oBIHlFTr HMEhj37H3KDIjLmWKsgHDLQNq0gjJlSd8ZqWL6qmnRlL82jUJ1Xz4kJ/bt3UxBwS aOcOI6of1wvYhrT2EuRa/LXNOsVsQ5Uwp7cV44p93fDvaYfiPB9W3Xo/60lb3Lr6 HJkdhv7wEQtGczg72VvxfGmnA3ZnI33CxQLeppaO+FYKCwjxKOM= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:46 2025 by rpki-client