This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: CxJDpNS7TZqeiU7EeWd5Qqly3fyJOvyK6sOwuI7AaPY= Subject key identifier: 42:CE:08:25:5D:73:A9:DA:25:D6:70:8A:2F:EF:18:75:16:10:7A:D0 Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 4ED476D5431443F2C260848FE1AB27E32479A1F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 0531 Signing time: Fri 19 Dec 2025 11:51:54 +0000 Manifest this update: Fri 19 Dec 2025 11:46:54 +0000 Manifest next update: Mon 22 Dec 2025 14:52:54 +0000 Files and hashes: 1: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: qxCmtuUPSHu9WJJzbJGzGpD/WrBA6yvsQX9RFZj2wO0=) 2: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) 3: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 14:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d4:76:d5:43:14:43:f2:c2:60:84:8f:e1:ab:27:e3:24:79:a1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Dec 19 11:46:54 2025 GMT Not After : Dec 22 14:52:54 2025 GMT Subject: CN=42CE08255D73A9DA25D6708A2FEF187516107AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:37:31:6d:87:26:4c:a4:9c:2c:71:4b:25: e9:be:84:7e:3b:03:e1:1f:da:11:fb:d6:84:fc:88: de:72:d6:4c:99:9f:5a:64:53:3a:ef:e3:50:3f:b6: 7e:6b:69:8c:e0:ff:61:6f:80:0a:e4:14:46:c3:46: 0b:d0:98:96:5f:c6:11:66:8d:34:91:28:03:18:ab: 70:5d:08:cc:76:8c:3b:bb:54:74:16:b5:42:69:69: 42:ff:1c:3a:5c:05:e8:f9:9f:1d:cb:70:50:92:35: 48:af:36:db:21:d7:2d:84:03:4c:b8:9f:da:f3:7d: 7b:90:38:c0:3a:70:b4:c4:15:17:7f:4a:5e:99:2c: 06:ba:dc:97:d1:e5:ed:79:58:5c:6f:e2:b9:40:d7: 40:99:28:46:1a:d1:2a:55:67:a4:d1:97:48:71:ea: c2:52:40:cd:0f:84:eb:b4:08:4b:0f:87:95:0a:c2: bc:74:53:42:3b:2e:d1:5c:56:d2:2f:67:75:0b:9f: 9b:36:d2:6d:94:2d:ec:53:e5:35:7a:ed:bd:17:6f: 63:ec:6b:6d:d1:fd:b9:3b:a4:21:05:1c:62:c4:81: d7:aa:84:81:ad:05:94:1f:f0:6f:42:dd:42:18:a6: be:17:37:28:e4:9f:4b:66:c0:77:90:53:bc:7d:ba: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CE:08:25:5D:73:A9:DA:25:D6:70:8A:2F:EF:18:75:16:10:7A:D0 X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:85:bc:df:c5:42:1d:8a:d6:54:95:6c:fe:ee:ad:af:df:47: e7:09:2b:e6:19:c5:d7:fb:06:cb:3d:8e:c3:80:4f:67:45:11: 6a:b4:e9:05:58:db:9b:cf:34:77:17:c2:c2:bc:8c:83:18:fe: 87:2c:32:26:f5:ef:7b:a6:8d:27:f8:65:10:ff:bb:b5:52:46: 15:60:89:96:e4:6a:32:a9:59:74:1e:0f:75:63:f6:df:2a:b1: 42:3a:11:f3:fb:f3:8b:d7:4a:66:21:09:0f:15:9f:f9:c8:8d: e8:45:c3:4b:09:f1:d6:16:76:00:d3:25:5e:c2:9c:e4:76:19: 63:5b:89:83:72:83:56:92:8c:f0:f4:2f:26:e5:4d:98:2e:73: a1:b5:b8:0d:4e:45:2b:a3:bd:b4:21:a0:74:77:70:d7:16:bb: 69:1a:15:9b:f3:c7:4a:f1:20:4e:8e:5c:86:79:44:c3:3b:9c: 97:e6:12:8e:70:f1:4b:2a:6e:a2:06:7c:bb:06:33:ec:70:de: 1c:3a:93:f5:ac:72:b9:a3:5a:89:e1:73:09:8d:13:8e:9f:a6: 29:40:18:86:cb:e2:91:aa:c2:b0:00:7b:6c:a4:5d:56:e3:db: d9:e3:64:ff:c3:4c:32:61:6f:16:b0:e3:4b:05:be:54:52:6e: fa:8a:c4:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtR21UMUQ/LCYISP4asn4yR5ofQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTEyMTkxMTQ2NTRaFw0yNTEyMjIxNDUyNTRaMDMxMTAvBgNV BAMTKDQyQ0UwODI1NUQ3M0E5REEyNUQ2NzA4QTJGRUYxODc1MTYxMDdBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkTcxbYcmTKScLHFLJem+hH47 A+Ef2hH71oT8iN5y1kyZn1pkUzrv41A/tn5raYzg/2FvgArkFEbDRgvQmJZfxhFm jTSRKAMYq3BdCMx2jDu7VHQWtUJpaUL/HDpcBej5nx3LcFCSNUivNtsh1y2EA0y4 n9rzfXuQOMA6cLTEFRd/Sl6ZLAa63JfR5e15WFxv4rlA10CZKEYa0SpVZ6TRl0hx 6sJSQM0PhOu0CEsPh5UKwrx0U0I7LtFcVtIvZ3ULn5s20m2ULexT5TV67b0Xb2Ps a23R/bk7pCEFHGLEgdeqhIGtBZQf8G9C3UIYpr4XNyjkn0tmwHeQU7x9upSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQs4IJV1zqdol1nCKL+8YdRYQetAwHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECFvN/FQh2K1lSVbP7ura/fR+cJK+YZxdf7 Bss9jsOAT2dFEWq06QVY25vPNHcXwsK8jIMY/ocsMib173umjSf4ZRD/u7VSRhVg iZbkajKpWXQeD3Vj9t8qsUI6EfP784vXSmYhCQ8Vn/nIjehFw0sJ8dYWdgDTJV7C nOR2GWNbiYNyg1aSjPD0LyblTZguc6G1uA1ORSujvbQhoHR3cNcWu2kaFZvzx0rx IE6OXIZ5RMM7nJfmEo5w8UsqbqIGfLsGM+xw3hw6k/WscrmjWonhcwmNE46fpilA GIbL4pGqwrAAe2ykXVbj29njZP/DTDJhbxaw40sFvlRSbvqKxJE= -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:42 2025 by rpki-client