This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft File: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json) Hash identifier: Kh8aN0NRiYSzJ5MZh+L8nG6x2jSqzYoh6Bj63Gs6zNc= Subject key identifier: 20:4C:C4:0F:B5:25:2D:E4:3F:A4:9E:18:B6:A6:30:5E:58:77:5F:C4 Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Certificate issuer: /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Certificate serial: 56A291FC95116010DD9A1534E90DFCEB47B08087 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft Manifest number: 015D Signing time: Sun 28 Dec 2025 06:12:29 +0000 Manifest this update: Sun 28 Dec 2025 06:07:29 +0000 Manifest next update: Wed 31 Dec 2025 07:11:29 +0000 Files and hashes: 1: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: Y71EeD959aIr9ucCZApJALClmCCepz1YWwy1H6B20+w=) 2: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: icoM+EmZmnaUSNYe+M3YT7QPi2377uDTJ5GrlCTs7Lw=) 3: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: jWt+P4QKwJjOrKb2UGl+BMXbAfH4R0q7jcd/iS8t/YU=) 4: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: LJVWK744DaCLalz0/Sl7Gt/PYQWV0FOVmOX8NAlnD4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 07:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a2:91:fc:95:11:60:10:dd:9a:15:34:e9:0d:fc:eb:47:b0:80:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Validity Not Before: Dec 28 06:07:29 2025 GMT Not After : Dec 31 07:11:29 2025 GMT Subject: CN=204CC40FB5252DE43FA49E18B6A6305E58775FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8c:26:99:ea:cd:44:c0:b3:fb:b4:d0:2d:bf: 7b:ca:b9:53:61:73:b1:b6:11:97:53:fd:85:51:30: 9b:bd:2e:f3:5e:d0:7f:0b:b5:3f:ba:12:6c:fe:89: 6b:1d:63:cb:f1:7a:6f:93:bd:d5:02:a2:b5:42:65: 66:09:ec:18:b9:3e:23:f8:d7:36:2a:97:eb:2d:2f: e2:16:f3:ac:10:bd:d5:f3:bd:74:e9:2c:41:5e:cd: d9:9f:6f:3a:56:1b:8e:99:68:12:b4:45:ed:8c:d5: 58:eb:d8:9a:c8:78:48:1c:e4:b4:5d:ae:53:3a:72: 4a:a8:6f:30:f8:9a:07:da:cf:b4:b2:34:4b:94:1c: fe:81:2e:69:44:e3:ec:65:1a:f9:1f:64:3f:61:8c: 07:0f:cf:5b:de:9c:19:8a:c8:b6:80:85:6f:bb:f4: f6:62:7b:cd:64:73:21:92:df:ff:4e:23:c9:05:7a: ac:ff:46:7c:e9:08:50:ea:c3:ac:48:7f:1c:14:c5: fc:dc:7a:6e:2f:fd:4e:7a:75:c4:9d:12:17:e8:22: bb:35:70:ca:97:79:62:a2:8e:35:fb:e3:e5:0b:83: 32:d1:a7:06:ea:51:8c:71:80:8a:3b:e7:15:71:10: 12:b0:61:94:cf:9b:0b:cf:10:32:af:c6:48:01:93: 62:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4C:C4:0F:B5:25:2D:E4:3F:A4:9E:18:B6:A6:30:5E:58:77:5F:C4 X509v3 Authority Key Identifier: keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:37:6d:16:fb:6a:73:1d:3a:3f:6e:e6:a4:dd:15:37:c6:98: ef:0e:20:6f:28:9c:d0:33:15:4e:b7:2b:24:04:ac:bc:ff:d6: a4:24:c3:24:6d:f5:ab:5d:b9:02:ba:56:4f:34:b7:bd:2b:f7: 79:53:b6:a8:74:a7:d5:eb:30:28:c9:e4:01:c5:fc:29:68:de: b4:ab:12:20:6b:15:44:99:83:5c:e4:dc:9b:c2:4d:9b:30:3d: 90:d3:06:80:dc:2e:a5:24:db:81:d9:20:bd:4c:92:ab:3e:85: 0d:d0:3b:85:ec:19:9e:c9:ae:38:6e:14:5a:43:29:ae:0f:9a: 79:6d:a9:b7:50:98:1a:eb:07:67:ac:4a:5a:81:f4:3c:34:a5: ef:f4:6d:53:c7:2f:6d:18:c5:8e:5b:62:06:8f:11:5f:de:45: b2:66:4c:09:cd:af:5b:f9:b4:e5:b6:e8:1b:85:9a:ba:82:7b: a7:8b:82:70:b1:2a:63:db:13:b5:76:c1:b0:4a:d9:ec:8f:55: 34:74:d1:da:0e:d0:c8:e5:c9:24:17:ab:38:6a:a6:97:f6:af: 13:5c:3a:6c:cd:86:7f:c0:9d:50:c0:b8:4a:79:c4:5a:e4:af: ae:82:59:80:a7:45:db:1a:d3:75:29:35:c5:ff:f8:11:b7:a7: b3:cf:89:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqKR/JURYBDdmhU06Q3860ewgIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIz NEEwRjFCMjAeFw0yNTEyMjgwNjA3MjlaFw0yNTEyMzEwNzExMjlaMDMxMTAvBgNV BAMTKDIwNENDNDBGQjUyNTJERTQzRkE0OUUxOEI2QTYzMDVFNTg3NzVGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdjCaZ6s1EwLP7tNAtv3vKuVNh c7G2EZdT/YVRMJu9LvNe0H8LtT+6Emz+iWsdY8vxem+TvdUCorVCZWYJ7Bi5PiP4 1zYql+stL+IW86wQvdXzvXTpLEFezdmfbzpWG46ZaBK0Re2M1Vjr2JrIeEgc5LRd rlM6ckqobzD4mgfaz7SyNEuUHP6BLmlE4+xlGvkfZD9hjAcPz1venBmKyLaAhW+7 9PZie81kcyGS3/9OI8kFeqz/RnzpCFDqw6xIfxwUxfzcem4v/U56dcSdEhfoIrs1 cMqXeWKijjX74+ULgzLRpwbqUYxxgIo75xVxEBKwYZTPmwvPEDKvxkgBk2JTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIEzED7UlLeQ/pJ4YtqYwXlh3X8QwHwYDVR0j BBgwFoAU4f5po0IWwk0YcPXO06QwkjSg8bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMC9FMUZFNjlBMzQy MTZDMjREMTg3MEY1Q0VEM0E0MzA5MjM0QTBGMUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIzNEEw RjFCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMw OTIzNEEwRjFCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABg3bRb7anMdOj9u5qTdFTfGmO8OIG8onNAz FU63KyQErLz/1qQkwyRt9atduQK6Vk80t70r93lTtqh0p9XrMCjJ5AHF/Clo3rSr EiBrFUSZg1zk3JvCTZswPZDTBoDcLqUk24HZIL1Mkqs+hQ3QO4XsGZ7JrjhuFFpD Ka4PmnltqbdQmBrrB2esSlqB9Dw0pe/0bVPHL20YxY5bYgaPEV/eRbJmTAnNr1v5 tOW26BuFmrqCe6eLgnCxKmPbE7V2wbBK2eyPVTR00doO0MjlySQXqzhqppf2rxNc OmzNhn/AnVDAuEp5xFrkr66CWYCnRdsa03UpNcX/+BG3p7PPib8= -----END CERTIFICATE-----Generated at Mon Dec 29 22:43:55 2025 by rpki-client