This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: xEosD3how5Gv1uNlABeNlCl22LvxkhaiOigXi6n10+U= Subject key identifier: 8B:CE:91:0C:88:9A:DC:A8:20:69:8F:B3:FF:DD:67:4F:5E:65:90:A0 Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 052FFA03CE40483C45D5AED201C6849F5E7CF01A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: F4 Signing time: Thu 18 Dec 2025 21:02:16 +0000 Manifest this update: Thu 18 Dec 2025 20:57:16 +0000 Manifest next update: Sun 21 Dec 2025 22:31:16 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: jSEbOeozzsEZCSdGeWqpOPWmprMivxkyWYoadrFyhRg=) 2: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: KBt4DGPnC2dRY/kC+dmtb7LavTisSL0UURy3FjVep7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2f:fa:03:ce:40:48:3c:45:d5:ae:d2:01:c6:84:9f:5e:7c:f0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Dec 18 20:57:16 2025 GMT Not After : Dec 21 22:31:16 2025 GMT Subject: CN=8BCE910C889ADCA820698FB3FFDD674F5E6590A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:51:08:e5:22:80:2e:41:26:2b:c2:c0:54:24: d3:77:5a:ee:af:d9:96:0e:9d:33:a3:2a:b9:fc:17: 09:98:03:b4:98:09:8a:38:19:0b:6c:af:fe:ee:43: 36:9d:63:b1:bf:1f:0b:49:b2:1c:ee:76:a5:0d:5e: 92:6d:8d:99:11:e8:c2:fe:5a:d4:60:09:81:db:f6: 68:6d:dd:ba:e0:c9:0e:f2:f1:1c:dd:b7:06:37:80: ab:7e:88:e0:72:b6:31:5f:aa:86:ee:ed:c3:0a:83: d2:84:fa:2d:8d:00:e2:12:f6:72:7d:91:19:59:5f: c7:ee:ee:5f:04:f6:97:57:bf:1c:c9:67:9d:95:ee: da:1e:d1:d8:43:6a:bc:8f:ab:b7:b4:ae:4b:ea:da: 51:65:54:c3:1b:45:67:72:a7:40:e7:ee:ed:ee:ef: cc:fe:fe:02:82:d3:00:8b:9e:b4:00:c1:58:66:ac: a6:37:00:de:1b:78:af:ae:76:f8:3d:9a:af:1c:fe: 9a:81:de:71:db:58:b4:d5:a8:12:03:66:fb:28:6d: ef:61:dc:29:f8:fd:f7:91:41:fe:fc:9e:6a:a9:f0: 20:6d:31:9b:3d:75:df:38:9f:d2:2a:a7:fd:46:27: 07:c4:90:92:3c:8e:d2:de:08:89:55:91:bd:65:7c: 22:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CE:91:0C:88:9A:DC:A8:20:69:8F:B3:FF:DD:67:4F:5E:65:90:A0 X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ce:a2:67:40:29:c2:a4:08:16:7e:d3:b0:fc:2a:8e:42:28: a6:2a:25:00:53:ca:2c:86:99:1e:5b:96:06:22:77:48:49:f2: 30:a4:27:e8:7b:7d:67:4d:5c:44:de:7e:d1:3d:7c:bd:3b:ee: ef:d7:ca:86:ab:a8:ab:59:74:16:9e:16:bb:54:73:ab:90:b7: 89:dd:6b:37:28:3a:99:0c:cb:c5:a7:bd:ca:28:25:9b:a2:70: c0:f8:c4:77:0f:fc:f2:aa:bb:cc:51:82:77:7b:cc:52:04:96: c5:da:1d:63:b0:40:53:6e:ee:0e:9e:77:e9:69:1d:f5:63:47: d0:b2:ad:28:1e:9c:11:8c:df:6b:2e:0e:e1:a9:24:dd:e8:0f: 6e:41:62:96:40:7f:0a:7d:52:51:c7:8d:05:50:c6:32:9c:ad: df:1c:35:68:e1:ad:55:44:ad:22:74:b2:35:a5:9f:46:eb:47: 9f:87:01:14:db:47:0d:6d:85:4d:1b:0b:3f:d9:ae:68:db:ca: 26:bd:8b:a3:ab:cc:a6:67:72:e2:ae:8d:c6:e5:14:ce:e6:49: d3:0d:c4:a7:27:99:ba:48:9f:f8:34:2a:c5:7f:fc:bf:c4:46: ce:11:6c:9e:28:e4:a0:65:45:ec:a4:48:38:55:2b:d0:3d:e4: b9:16:c0:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBS/6A85ASDxF1a7SAcaEn1588BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTEyMTgyMDU3MTZaFw0yNTEyMjEyMjMxMTZaMDMxMTAvBgNV BAMTKDhCQ0U5MTBDODg5QURDQTgyMDY5OEZCM0ZGREQ2NzRGNUU2NTkwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7UQjlIoAuQSYrwsBUJNN3Wu6v 2ZYOnTOjKrn8FwmYA7SYCYo4GQtsr/7uQzadY7G/HwtJshzudqUNXpJtjZkR6ML+ WtRgCYHb9mht3brgyQ7y8RzdtwY3gKt+iOBytjFfqobu7cMKg9KE+i2NAOIS9nJ9 kRlZX8fu7l8E9pdXvxzJZ52V7toe0dhDaryPq7e0rkvq2lFlVMMbRWdyp0Dn7u3u 78z+/gKC0wCLnrQAwVhmrKY3AN4beK+udvg9mq8c/pqB3nHbWLTVqBIDZvsobe9h 3Cn4/feRQf78nmqp8CBtMZs9dd84n9Iqp/1GJwfEkJI8jtLeCIlVkb1lfCJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi86RDIia3KggaY+z/91nT15lkKAwHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrOomdAKcKkCBZ+07D8Ko5CKKYqJQBTyiyG mR5blgYid0hJ8jCkJ+h7fWdNXETeftE9fL077u/XyoarqKtZdBaeFrtUc6uQt4nd azcoOpkMy8WnvcooJZuicMD4xHcP/PKqu8xRgnd7zFIElsXaHWOwQFNu7g6ed+lp HfVjR9CyrSgenBGM32suDuGpJN3oD25BYpZAfwp9UlHHjQVQxjKcrd8cNWjhrVVE rSJ0sjWln0brR5+HARTbRw1thU0bCz/Zrmjbyia9i6OrzKZncuKujcblFM7mSdMN xKcnmbpIn/g0KsV//L/ERs4RbJ4o5KBlReykSDhVK9A95LkWwGg= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:03 2025 by rpki-client