This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: 5G9WE9bzzJMh1NUzGJ3VpPyuNJzRHWScUnidzMOMc2I= Subject key identifier: 8F:DB:CC:08:9D:85:E1:97:5F:95:EE:3E:F4:7C:A0:77:ED:66:AE:50 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 7C3E07A9EC6F770164AD803B0CE23112F2D1EEB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: 0115 Signing time: Thu 18 Dec 2025 04:21:58 +0000 Manifest this update: Thu 18 Dec 2025 04:16:58 +0000 Manifest next update: Sun 21 Dec 2025 10:54:58 +0000 Files and hashes: 1: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: ADCP72RbIufKj4QAd0ZJ7lDleTjtSFDhFjl8qh19kZ4=) 2: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 3: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) 4: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3e:07:a9:ec:6f:77:01:64:ad:80:3b:0c:e2:31:12:f2:d1:ee:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Dec 18 04:16:58 2025 GMT Not After : Dec 21 10:54:58 2025 GMT Subject: CN=8FDBCC089D85E1975F95EE3EF47CA077ED66AE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:e2:cf:c2:e1:3c:0f:5e:09:d1:a6:6d:88: 57:94:75:5b:cb:6d:2b:a2:2f:65:01:ea:a9:a0:4f: 22:2c:84:bc:60:e6:5f:4c:c9:bd:d1:e6:1d:d6:f3: 5a:ca:c8:8f:65:d2:d4:4d:a9:db:2f:5c:06:d3:ab: 41:66:58:57:00:b8:be:95:cb:52:49:d8:61:e2:66: 59:c3:10:9f:e5:1c:c0:ca:bd:4b:20:e9:cd:39:ce: 1b:34:f7:4c:79:8d:41:9c:7d:0b:88:84:c8:43:78: 08:dc:da:a0:a2:ab:20:9b:62:6c:61:ef:d1:3f:22: 82:d4:3c:70:45:d0:d1:d5:e7:33:d2:ce:2f:a6:7c: 6c:f6:ca:e0:57:b9:b3:00:79:b1:da:e1:13:da:8b: e2:13:77:d5:66:9e:c5:e1:1a:88:15:ee:5f:1e:94: 32:d5:4f:f3:0e:0c:ab:e2:f4:34:8c:9a:6d:09:7e: dc:f0:59:cf:47:da:e8:81:8c:75:1b:d5:30:42:df: ac:6a:ec:b1:23:58:ab:28:2c:04:f4:7d:e4:aa:d5: 1d:39:91:a2:06:f2:0b:5e:39:c3:63:5a:7d:50:a3: 5a:97:19:6f:6d:be:00:75:2e:19:76:a2:8a:86:9c: 82:00:78:da:a2:d6:2f:c4:8a:d6:ca:d7:6d:ec:7b: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DB:CC:08:9D:85:E1:97:5F:95:EE:3E:F4:7C:A0:77:ED:66:AE:50 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f6:5f:ad:62:34:3f:44:0a:36:e3:55:8d:c4:a0:16:b0:7c: b9:2a:70:65:c7:8c:99:e7:3c:ab:a1:af:96:94:21:c7:94:26: 15:83:32:f7:71:34:36:43:26:ba:a6:50:1c:75:88:5f:74:63: 9a:83:9f:ba:40:f0:cf:d8:4c:23:d7:dc:86:41:b8:6e:8f:fd: e2:d8:c6:4b:5b:d7:81:29:d3:fe:bc:8b:a6:0e:d3:60:76:d2: c8:a1:15:da:bc:24:64:a2:97:26:37:ee:b4:ef:d0:ed:28:ec: 7f:d8:a0:25:e6:e0:92:07:8e:9c:f6:9a:94:53:9b:49:e2:82: 1e:08:87:29:98:78:fc:cb:64:6c:39:76:fc:08:5b:08:58:a6: 9d:a3:97:60:c5:6c:2e:c9:14:0a:d3:32:c1:ec:66:7b:7d:08: ac:91:3f:38:2c:a6:47:95:6e:8f:97:71:aa:fd:c3:e2:af:3e: 87:6e:6b:d6:85:db:dc:fd:d3:79:44:a7:8e:00:f1:84:5e:fb: 46:bc:f1:7e:5d:48:4e:24:be:e7:fd:a4:db:fd:06:19:8f:06: 68:c5:83:c1:41:fd:5b:60:a2:60:6e:6b:fd:c0:5c:41:a6:a4: 19:34:08:29:6d:de:6a:1d:8f:04:d2:ca:06:47:86:2e:c1:2c: b8:eb:85:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfD4HqexvdwFkrYA7DOIxEvLR7rAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTEyMTgwNDE2NThaFw0yNTEyMjExMDU0NThaMDMxMTAvBgNV BAMTKDhGREJDQzA4OUQ4NUUxOTc1Rjk1RUUzRUY0N0NBMDc3RUQ2NkFFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8eLPwuE8D14J0aZtiFeUdVvL bSuiL2UB6qmgTyIshLxg5l9Myb3R5h3W81rKyI9l0tRNqdsvXAbTq0FmWFcAuL6V y1JJ2GHiZlnDEJ/lHMDKvUsg6c05zhs090x5jUGcfQuIhMhDeAjc2qCiqyCbYmxh 79E/IoLUPHBF0NHV5zPSzi+mfGz2yuBXubMAebHa4RPai+ITd9VmnsXhGogV7l8e lDLVT/MODKvi9DSMmm0JftzwWc9H2uiBjHUb1TBC36xq7LEjWKsoLAT0feSq1R05 kaIG8gteOcNjWn1Qo1qXGW9tvgB1Lhl2ooqGnIIAeNqi1i/EitbK123sexsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj9vMCJ2F4Zdfle4+9Hygd+1mrlAwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL2X61iND9ECjbjVY3EoBawfLkqcGXHjJnn PKuhr5aUIceUJhWDMvdxNDZDJrqmUBx1iF90Y5qDn7pA8M/YTCPX3IZBuG6P/eLY xktb14Ep0/68i6YO02B20sihFdq8JGSilyY37rTv0O0o7H/YoCXm4JIHjpz2mpRT m0nigh4IhymYePzLZGw5dvwIWwhYpp2jl2DFbC7JFArTMsHsZnt9CKyRPzgspkeV bo+Xcar9w+KvPodua9aF29z903lEp44A8YRe+0a88X5dSE4kvuf9pNv9BhmPBmjF g8FB/VtgomBua/3AXEGmpBk0CClt3modjwTSygZHhi7BLLjrhYM= -----END CERTIFICATE-----Generated at Fri Dec 19 16:50:29 2025 by rpki-client