This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: qp2SRWwb6PVH8dDZjN/fmR+5X+ExcoJTSS9Zk9ZFzJs= Subject key identifier: 69:7D:B6:0E:8B:1B:50:80:CD:A6:75:4C:DF:5A:1A:00:BF:36:19:90 Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 529B678D16318CCDD32245A2B1ABEB5AB6E86F39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 0219 Signing time: Wed 24 Dec 2025 15:31:38 +0000 Manifest this update: Wed 24 Dec 2025 15:26:38 +0000 Manifest next update: Sun 28 Dec 2025 01:18:38 +0000 Files and hashes: 1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: yz9DrhiZMU3eHWMSo1Oy5Cw6+/2sDeBXKj2G3NoDN0k=) 2: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: /kdpO1chibekWvoCcWmLBE/S3y27sKOA+aYQMp1Pk+k=) 3: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: r4fgqA47qTlb3GhP6gzYmrPLdVv6QpS/f5hXYEC/f/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9b:67:8d:16:31:8c:cd:d3:22:45:a2:b1:ab:eb:5a:b6:e8:6f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Dec 24 15:26:38 2025 GMT Not After : Dec 28 01:18:38 2025 GMT Subject: CN=697DB60E8B1B5080CDA6754CDF5A1A00BF361990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:54:5b:be:20:f3:30:2d:a7:82:c6:78:7e: 7e:e3:fc:f7:93:85:e2:1b:3f:c1:f2:f9:70:e7:1c: ad:e9:f9:46:1a:5e:dc:a7:79:aa:66:4a:27:c1:df: 15:54:69:6a:d1:64:fc:bb:5c:18:12:c9:05:a1:2e: 67:93:24:57:4f:ea:c2:56:2e:f8:14:f8:41:06:ff: 95:18:fd:ee:0c:8e:e7:0a:ff:2c:8f:d5:bd:e9:47: 1e:33:44:5c:1d:fb:2b:34:89:60:7c:f1:3a:99:64: 58:aa:c9:08:ce:3e:68:af:77:3a:04:ea:bd:46:5b: 80:b3:c7:07:b4:7d:fa:96:8a:86:bb:8c:e8:52:2a: d1:d0:2d:fc:77:55:50:f8:2f:85:7f:34:a4:e4:17: d2:dc:ef:d1:3f:41:cd:65:41:9d:50:1a:1a:44:64: d4:34:23:a6:8b:50:7f:df:b3:4e:44:86:10:f1:20: d6:31:d9:46:a0:a7:1c:ae:28:41:6b:e7:25:1d:11: 66:1c:cd:98:ee:64:26:c9:0c:8d:d8:b1:fb:f1:33: 8c:53:72:5d:6d:30:6a:b7:96:47:17:d3:f1:b7:a4: a2:8f:5f:3a:f0:a3:9b:11:87:ea:3f:65:6c:8c:90: b0:b4:d8:f1:88:ff:70:9b:43:d8:40:5c:6a:1c:82: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7D:B6:0E:8B:1B:50:80:CD:A6:75:4C:DF:5A:1A:00:BF:36:19:90 X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8c:23:fa:a2:4e:84:fb:77:61:fd:7a:9e:a5:83:b8:44:14: b6:76:85:e0:54:40:35:cb:d8:9d:02:07:c1:86:2a:e6:ee:91: 50:b5:33:07:58:32:24:a3:6f:f8:d4:ed:23:6d:32:8c:d2:f2: 9d:67:e1:b5:58:a5:7a:da:30:cb:f3:bb:41:cd:be:c8:fb:3e: f6:68:9c:d2:00:8f:8c:5a:83:5b:1c:13:5f:30:45:15:78:a9: cf:13:18:85:93:6c:6f:87:34:45:50:ac:64:25:88:7f:ba:cd: 23:a6:9b:46:ce:17:a3:d5:eb:d1:26:f9:ee:be:ba:7d:37:08: 73:e6:fd:b7:62:d0:8f:26:42:7f:98:d6:7d:f7:33:8a:70:ed: 4e:47:45:f0:8a:60:0b:f9:f3:0a:b6:fa:77:21:0a:7c:32:28: dd:8a:07:44:db:91:2b:3d:47:d1:e0:25:80:18:db:20:a1:49: f0:fb:30:72:e1:ff:0b:07:98:16:d3:d3:b7:86:02:20:a1:cd: fe:69:3b:1b:fc:a2:74:c2:3a:62:dd:a7:1a:d2:40:b3:1d:ef: 2c:da:7a:d2:a1:a7:29:dd:c6:a1:e9:2f:06:3a:d6:57:4d:d0: d7:57:60:8e:6c:d9:dd:d0:54:ec:16:43:b6:d5:40:66:d3:66: 98:ac:34:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUptnjRYxjM3TIkWisavrWrbobzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNTEyMjQxNTI2MzhaFw0yNTEyMjgwMTE4MzhaMDMxMTAvBgNV BAMTKDY5N0RCNjBFOEIxQjUwODBDREE2NzU0Q0RGNUExQTAwQkYzNjE5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94VRbviDzMC2ngsZ4fn7j/PeT heIbP8Hy+XDnHK3p+UYaXtyneapmSifB3xVUaWrRZPy7XBgSyQWhLmeTJFdP6sJW LvgU+EEG/5UY/e4MjucK/yyP1b3pRx4zRFwd+ys0iWB88TqZZFiqyQjOPmivdzoE 6r1GW4Czxwe0ffqWioa7jOhSKtHQLfx3VVD4L4V/NKTkF9Lc79E/Qc1lQZ1QGhpE ZNQ0I6aLUH/fs05EhhDxINYx2UagpxyuKEFr5yUdEWYczZjuZCbJDI3YsfvxM4xT cl1tMGq3lkcX0/G3pKKPXzrwo5sRh+o/ZWyMkLC02PGI/3CbQ9hAXGocgk1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaX22DosbUIDNpnVM31oaAL82GZAwHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2MI/qiToT7d2H9ep6lg7hEFLZ2heBUQDXL 2J0CB8GGKubukVC1MwdYMiSjb/jU7SNtMozS8p1n4bVYpXraMMvzu0HNvsj7PvZo nNIAj4xag1scE18wRRV4qc8TGIWTbG+HNEVQrGQliH+6zSOmm0bOF6PV69Em+e6+ un03CHPm/bdi0I8mQn+Y1n33M4pw7U5HRfCKYAv58wq2+nchCnwyKN2KB0TbkSs9 R9HgJYAY2yChSfD7MHLh/wsHmBbT07eGAiChzf5pOxv8onTCOmLdpxrSQLMd7yza etKhpyndxqHpLwY61ldN0NdXYI5s2d3QVOwWQ7bVQGbTZpisNHc= -----END CERTIFICATE-----Generated at Wed Dec 24 20:21:58 2025 by rpki-client