This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: z9lmB8BRNrBiQOObT+sBTke7P1YYowtVuYWLb2xnHws= Subject key identifier: 24:4B:5D:42:79:9B:36:42:54:C9:FF:06:95:51:33:D4:A6:A1:35:A8 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 145B6242B10E1E0DF6545108B8B81ABAA9B6A324 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 0117 Signing time: Fri 19 Dec 2025 14:03:31 +0000 Manifest this update: Fri 19 Dec 2025 13:58:31 +0000 Manifest next update: Mon 22 Dec 2025 21:55:31 +0000 Files and hashes: 1: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 2: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 3: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) 4: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: EA3NIiAo7vFhCUrZMeetDsRC5yRGvw078NVqbX+pET0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 21:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5b:62:42:b1:0e:1e:0d:f6:54:51:08:b8:b8:1a:ba:a9:b6:a3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Dec 19 13:58:31 2025 GMT Not After : Dec 22 21:55:31 2025 GMT Subject: CN=244B5D42799B364254C9FF06955133D4A6A135A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0b:95:96:69:fd:3a:42:9a:65:b2:82:40:ee: 24:8e:e6:eb:91:cb:d5:96:a7:8e:06:ee:ed:46:a1: f1:30:f0:2e:ab:96:2a:31:b6:bd:b5:9f:33:56:68: 6e:4a:4c:5b:dd:f2:b3:d1:d4:b6:2b:74:e4:a7:9f: 79:42:81:bc:57:1e:2e:ab:02:37:2b:f7:4b:95:c5: 1c:43:f2:66:c5:a5:1f:91:43:a8:b1:09:b4:f2:bd: 23:50:a1:99:5c:1c:fa:43:b0:fd:f7:12:eb:ad:df: c3:20:08:11:ed:fb:b7:71:41:53:5d:f6:be:04:91: 18:45:91:08:c5:d7:54:55:df:2c:28:49:42:a5:a4: 9c:de:a6:e6:38:ef:38:92:82:a1:d8:c6:24:fa:72: b1:90:52:41:60:cc:72:40:05:94:5f:a1:9f:53:5a: ce:72:cc:c0:b8:74:bd:5e:53:7c:9f:a9:c8:3b:f3: 62:3d:27:3f:54:9f:7a:46:7d:a4:e4:1c:3a:2e:23: df:8d:83:32:bc:d4:e0:36:52:03:e3:87:88:ac:01: 7c:22:44:f8:e0:20:fe:cd:44:d9:6d:cd:0a:33:88: a5:8e:bc:35:eb:82:34:5c:f0:76:b7:30:27:a7:f9: cf:82:c9:2a:ab:b7:54:62:2c:af:70:01:e4:9a:e9: ec:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4B:5D:42:79:9B:36:42:54:C9:FF:06:95:51:33:D4:A6:A1:35:A8 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:06:36:24:51:48:68:3b:ad:d7:26:20:ae:91:f8:2c:83:4c: e9:56:ac:51:38:4c:24:1d:5b:3f:81:04:00:fb:e4:8f:3b:41: 2c:1f:96:29:da:15:22:e0:43:e9:7a:b8:4b:47:fc:e0:a8:d1: 57:d2:e0:15:92:4e:df:4b:1f:e5:b1:3d:63:83:f3:92:4e:0b: 3d:18:ff:dc:08:b4:14:3d:4d:60:49:6d:4b:ba:4e:63:d6:13: ed:2d:78:88:50:1b:ae:c6:a3:c8:ec:b8:db:a0:e1:70:e6:ba: 62:21:74:a2:5d:b1:1f:92:17:7e:18:83:d8:3a:32:93:5d:c5: 4f:90:06:4a:4a:1b:b3:19:08:45:e4:d9:ad:e8:11:67:95:8d: b7:94:79:87:46:69:7e:bf:fe:58:46:68:09:41:32:d6:72:2d: 94:8c:96:2b:85:c4:b8:a5:ff:a4:5e:cb:10:86:9a:94:6f:99: 27:17:2f:03:cd:fd:ad:a4:49:75:f2:3e:8f:2a:58:59:2b:d4: ea:2b:8f:53:95:a5:60:fa:b6:ed:2e:53:55:ec:23:9d:c0:b2: 55:df:ea:c0:c7:eb:80:81:b8:00:36:ec:9d:15:c9:fd:64:ee: 31:7e:45:16:c7:a0:8e:df:0a:12:6e:ef:0b:8d:fb:f9:9d:ff: 0a:08:c1:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFtiQrEOHg32VFEIuLgauqm2oyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTEyMTkxMzU4MzFaFw0yNTEyMjIyMTU1MzFaMDMxMTAvBgNV BAMTKDI0NEI1RDQyNzk5QjM2NDI1NEM5RkYwNjk1NTEzM0Q0QTZBMTM1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgC5WWaf06QpplsoJA7iSO5uuR y9WWp44G7u1GofEw8C6rlioxtr21nzNWaG5KTFvd8rPR1LYrdOSnn3lCgbxXHi6r Ajcr90uVxRxD8mbFpR+RQ6ixCbTyvSNQoZlcHPpDsP33Euut38MgCBHt+7dxQVNd 9r4EkRhFkQjF11RV3ywoSUKlpJzepuY47ziSgqHYxiT6crGQUkFgzHJABZRfoZ9T Ws5yzMC4dL1eU3yfqcg782I9Jz9Un3pGfaTkHDouI9+NgzK81OA2UgPjh4isAXwi RPjgIP7NRNltzQoziKWOvDXrgjRc8Ha3MCen+c+CySqrt1RiLK9wAeSa6ezRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJEtdQnmbNkJUyf8GlVEz1KahNagwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsGNiRRSGg7rdcmIK6R+CyDTOlWrFE4TCQd Wz+BBAD75I87QSwflinaFSLgQ+l6uEtH/OCo0VfS4BWSTt9LH+WxPWOD85JOCz0Y /9wItBQ9TWBJbUu6TmPWE+0teIhQG67Go8jsuNug4XDmumIhdKJdsR+SF34Yg9g6 MpNdxU+QBkpKG7MZCEXk2a3oEWeVjbeUeYdGaX6//lhGaAlBMtZyLZSMliuFxLil /6ReyxCGmpRvmScXLwPN/a2kSXXyPo8qWFkr1Oorj1OVpWD6tu0uU1XsI53AslXf 6sDH64CBuAA27J0Vyf1k7jF+RRbHoI7fChJu7wuN+/md/woIwSg= -----END CERTIFICATE-----Generated at Sun Dec 21 00:03:12 2025 by rpki-client