This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: ty154hPxL0G81vP95OKWesRMU5EWexdvQko+pwB52f4= Subject key identifier: 40:03:FD:B0:E3:80:40:BA:93:EE:83:30:5D:01:83:1C:BD:BD:9D:4D Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 2DD79D65F151F8EA5C13BB3AA7968F43F1669D9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 01E0 Signing time: Wed 24 Dec 2025 12:40:02 +0000 Manifest this update: Wed 24 Dec 2025 12:35:02 +0000 Manifest next update: Sat 27 Dec 2025 19:39:02 +0000 Files and hashes: 1: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: GfoRbCqzzEwM+JaSR+jL9jpyyrybmpGlShF5wsNuV5w=) 2: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: y63ewMWU1PajFEYPqumn5iL0u7Ztg5skMtvfJeII8qA=) 3: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: XXDfIIYOEglBKxR32q76DP0xk41MtlD2sFhZIbxce4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d7:9d:65:f1:51:f8:ea:5c:13:bb:3a:a7:96:8f:43:f1:66:9d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Dec 24 12:35:02 2025 GMT Not After : Dec 27 19:39:02 2025 GMT Subject: CN=4003FDB0E38040BA93EE83305D01831CBDBD9D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:8c:56:ec:f5:ff:05:62:2c:f2:7b:3b:1c: 15:2f:78:ca:da:5f:8d:08:1c:54:40:ac:03:3e:45: a0:c9:07:bf:33:15:dd:fd:50:5d:4c:36:0f:84:25: 4f:de:67:1b:a5:84:26:d3:e4:32:3b:90:83:2f:fd: bb:d3:c8:ab:f6:cc:27:34:01:72:51:a0:46:72:05: c3:05:c1:31:d4:08:04:bd:60:91:29:5d:2a:5d:b7: 16:e5:31:c0:2e:23:43:9f:aa:6b:06:dc:5f:16:39: 6f:5f:d4:56:6b:b7:f9:e4:61:dc:49:1a:74:70:6a: 44:da:78:0d:63:72:6a:87:57:8e:2e:31:2e:b2:07: 10:fe:92:80:6f:05:e4:5a:ad:7d:6c:da:74:50:f7: 72:61:16:38:9d:7b:fd:c0:47:d6:f8:47:54:7d:cc: 96:7d:a3:8e:e4:7d:bf:51:60:f6:ac:7d:e8:f8:97: c9:29:32:96:c4:c3:36:32:92:5b:17:6f:26:0e:fa: 4e:5d:61:28:bc:53:d4:b3:a6:15:da:2b:61:fb:46: 04:0c:81:bd:c8:99:9f:91:39:10:da:6b:4c:f3:0a: ab:01:bd:79:44:b2:10:52:9f:29:33:af:a3:3f:e7: 4c:5c:45:33:fa:8b:56:22:b0:7c:7e:2d:bd:61:b8: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:03:FD:B0:E3:80:40:BA:93:EE:83:30:5D:01:83:1C:BD:BD:9D:4D X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:bb:a3:28:cb:ed:07:2a:a8:6e:7d:8f:af:73:2c:8b:22:e4: 3e:75:32:fd:3b:0f:b8:96:00:d9:4d:e8:fd:a0:3f:3f:c2:59: b6:73:82:67:08:14:26:44:60:7b:a5:cf:68:ba:81:31:a2:9e: b2:3e:05:82:ce:6e:de:b1:be:0b:c9:30:d7:81:77:93:4f:c1: ed:22:c2:46:1a:bc:75:ca:86:43:90:47:70:57:f2:a5:ca:8a: 54:59:59:4e:1f:ba:d0:1a:76:0b:78:c2:41:e3:c9:08:bb:20: ca:ff:25:09:d5:2d:b1:8f:2d:30:74:db:80:1d:4c:bc:a7:cd: af:0f:2b:b9:96:3a:df:01:9c:42:30:24:ab:56:ad:4c:39:e1: 12:7c:bb:a2:13:64:d1:86:59:7e:e4:ee:9e:be:23:0a:bb:1a: 64:d7:17:6d:99:dc:82:25:84:bc:50:fe:b8:79:5c:78:01:65: b6:ae:1e:65:31:a8:e6:78:83:28:63:03:44:68:b5:50:c3:b0: ec:b0:27:01:e4:b6:bf:60:8e:44:5f:bb:12:93:16:ef:30:e0: 34:d8:35:8f:2c:6c:22:fb:ad:bb:ed:8a:4d:14:55:c4:21:ec: 5c:a1:42:09:d5:9e:c1:ed:08:46:d0:7e:83:71:f1:8b:7d:fc: c2:18:d4:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdedZfFR+OpcE7s6p5aPQ/FmnZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTEyMjQxMjM1MDJaFw0yNTEyMjcxOTM5MDJaMDMxMTAvBgNV BAMTKDQwMDNGREIwRTM4MDQwQkE5M0VFODMzMDVEMDE4MzFDQkRCRDlENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChKoxW7PX/BWIs8ns7HBUveMra X40IHFRArAM+RaDJB78zFd39UF1MNg+EJU/eZxulhCbT5DI7kIMv/bvTyKv2zCc0 AXJRoEZyBcMFwTHUCAS9YJEpXSpdtxblMcAuI0OfqmsG3F8WOW9f1FZrt/nkYdxJ GnRwakTaeA1jcmqHV44uMS6yBxD+koBvBeRarX1s2nRQ93JhFjide/3AR9b4R1R9 zJZ9o47kfb9RYPasfej4l8kpMpbEwzYyklsXbyYO+k5dYSi8U9SzphXaK2H7RgQM gb3ImZ+RORDaa0zzCqsBvXlEshBSnykzr6M/50xcRTP6i1YisHx+Lb1huPThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQAP9sOOAQLqT7oMwXQGDHL29nU0wHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIW7oyjL7QcqqG59j69zLIsi5D51Mv07D7iW ANlN6P2gPz/CWbZzgmcIFCZEYHulz2i6gTGinrI+BYLObt6xvgvJMNeBd5NPwe0i wkYavHXKhkOQR3BX8qXKilRZWU4futAadgt4wkHjyQi7IMr/JQnVLbGPLTB024Ad TLynza8PK7mWOt8BnEIwJKtWrUw54RJ8u6ITZNGGWX7k7p6+Iwq7GmTXF22Z3IIl hLxQ/rh5XHgBZbauHmUxqOZ4gyhjA0RotVDDsOywJwHktr9gjkRfuxKTFu8w4DTY NY8sbCL7rbvtik0UVcQh7FyhQgnVnsHtCEbQfoNx8Yt9/MIY1G0= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:37 2025 by rpki-client