This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: GeaKcNGMXCImUdJy8lYmOFlEJraj4zaxxbbaNHNKwDY= Subject key identifier: 40:98:51:8E:A7:10:A1:0C:B6:C9:65:03:38:4A:50:C6:04:90:61:29 Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 5ED6B4D9C5E01C2BDF61B45A1F11A574249A7AFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: F9 Signing time: Wed 17 Dec 2025 15:50:46 +0000 Manifest this update: Wed 17 Dec 2025 15:45:46 +0000 Manifest next update: Sat 20 Dec 2025 23:57:46 +0000 Files and hashes: 1: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: PxoF6XQgFsxxLt2xwHISyr3i/v7bjhYlmoQZgnrBveM=) 2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d6:b4:d9:c5:e0:1c:2b:df:61:b4:5a:1f:11:a5:74:24:9a:7a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Dec 17 15:45:46 2025 GMT Not After : Dec 20 23:57:46 2025 GMT Subject: CN=4098518EA710A10CB6C96503384A50C604906129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:de:6f:bc:7e:66:ea:d6:4b:05:f1:1b:2d: 41:94:37:e9:f8:38:4c:03:9d:d5:bb:60:a5:9a:91: ce:f2:d7:ec:ec:5f:3e:0e:45:a7:e2:4e:98:f4:3e: 92:eb:7a:00:96:ae:22:8b:13:68:40:b6:dd:cd:b2: 25:dd:19:1b:30:d3:0c:e4:1d:68:02:26:6b:d4:0f: 35:d6:2a:71:09:70:04:f4:e0:75:c5:77:c2:58:78: 9d:01:78:20:a1:e8:a0:d3:29:be:ac:03:4f:df:81: 35:31:50:ed:44:b8:75:42:e2:26:e3:bc:31:6c:45: 06:83:41:c7:b1:6e:33:69:ab:17:7f:a6:a3:30:83: 75:0a:1f:53:23:3e:fc:08:cd:48:64:ba:21:81:0a: 1a:48:7a:87:2f:7a:de:db:ec:58:fb:dd:23:32:85: 9b:f4:07:86:8e:c1:64:72:06:56:70:4a:55:ca:e5: c2:f9:2e:ea:25:da:e6:99:63:39:8b:40:39:88:25: ff:56:ce:64:a2:f7:85:91:57:23:eb:f5:a2:9f:18: cf:bb:bd:62:87:0c:49:9b:1a:db:d3:0e:04:c5:d2: 98:28:fd:7e:71:02:79:06:41:de:f1:5e:5c:84:89: 7a:92:84:c8:e5:ae:66:15:f5:9a:1f:b1:a4:ef:f0: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:98:51:8E:A7:10:A1:0C:B6:C9:65:03:38:4A:50:C6:04:90:61:29 X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7a:0c:8f:2d:5b:20:0f:c5:04:87:61:13:22:09:75:d2:3e: 87:99:11:4c:78:0d:f7:1d:06:ec:ec:2d:39:fa:9b:1a:52:ad: ce:17:94:4a:08:f0:a2:7d:9b:74:f9:2c:c0:5c:e7:bc:5c:ec: 01:fb:e6:c4:d2:e7:7f:36:50:37:36:29:36:9c:50:d4:5d:04: e3:aa:5b:bb:16:3b:07:b7:38:de:cd:d0:79:ea:e9:d2:16:96: 9d:42:24:cb:81:fe:bf:eb:02:0f:6e:26:bb:3a:80:b5:27:41: de:cc:2f:8c:ad:41:a6:c7:c7:09:89:10:be:50:87:37:69:6f: 15:1d:67:a2:f7:12:9e:39:99:5b:4c:16:2c:ab:cf:04:2b:5e: a3:3f:b2:24:2e:19:9b:3d:4d:88:04:55:11:4a:22:fb:7e:3a: 59:b6:ea:d9:92:43:98:f0:79:aa:92:df:9d:ce:29:f3:6f:01: 31:b0:49:9b:45:29:5c:6d:95:5a:ba:ef:d6:be:29:73:ba:b5: a1:94:02:dd:1e:19:c4:b3:85:ef:2b:65:4b:26:a5:26:37:2f: 3c:da:66:75:9a:3b:ef:fc:d0:4d:52:15:6c:56:b1:2b:1e:8f: 95:f5:75:c3:33:d5:52:82:8b:a5:d9:63:76:ca:9f:65:87:8d: 90:61:d1:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXta02cXgHCvfYbRaHxGldCSaevswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNTEyMTcxNTQ1NDZaFw0yNTEyMjAyMzU3NDZaMDMxMTAvBgNV BAMTKDQwOTg1MThFQTcxMEExMENCNkM5NjUwMzM4NEE1MEM2MDQ5MDYxMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIN5vvH5m6tZLBfEbLUGUN+n4 OEwDndW7YKWakc7y1+zsXz4ORafiTpj0PpLregCWriKLE2hAtt3NsiXdGRsw0wzk HWgCJmvUDzXWKnEJcAT04HXFd8JYeJ0BeCCh6KDTKb6sA0/fgTUxUO1EuHVC4ibj vDFsRQaDQcexbjNpqxd/pqMwg3UKH1MjPvwIzUhkuiGBChpIeocvet7b7Fj73SMy hZv0B4aOwWRyBlZwSlXK5cL5Luol2uaZYzmLQDmIJf9WzmSi94WRVyPr9aKfGM+7 vWKHDEmbGtvTDgTF0pgo/X5xAnkGQd7xXlyEiXqShMjlrmYV9ZofsaTv8AuvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJhRjqcQoQy2yWUDOEpQxgSQYSkwHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADl6DI8tWyAPxQSHYRMiCXXSPoeZEUx4Dfcd BuzsLTn6mxpSrc4XlEoI8KJ9m3T5LMBc57xc7AH75sTS5382UDc2KTacUNRdBOOq W7sWOwe3ON7N0Hnq6dIWlp1CJMuB/r/rAg9uJrs6gLUnQd7ML4ytQabHxwmJEL5Q hzdpbxUdZ6L3Ep45mVtMFiyrzwQrXqM/siQuGZs9TYgEVRFKIvt+Olm26tmSQ5jw eaqS353OKfNvATGwSZtFKVxtlVq679a+KXO6taGUAt0eGcSzhe8rZUsmpSY3Lzza ZnWaO+/80E1SFWxWsSsej5X1dcMz1VKCi6XZY3bKn2WHjZBh0TQ= -----END CERTIFICATE-----Generated at Sat Dec 20 22:10:04 2025 by rpki-client