This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: 276kbLZxQn2nvDcFYot8R77Qw8yLO+7wlD6mRrePM0Q= Subject key identifier: 3D:16:D2:91:AB:99:6A:9E:6D:7B:0A:21:6F:79:A3:3B:3F:06:05:61 Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 692828888593BB19A304EB81D660DFD1317B41C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 022E Signing time: Fri 26 Dec 2025 13:31:17 +0000 Manifest this update: Fri 26 Dec 2025 13:26:17 +0000 Manifest next update: Mon 29 Dec 2025 19:50:17 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) 2: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: ekbDwWTOE4wpcvhh94zPaL5IGdqt0NG9nPWp7LhW6tU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:28:28:88:85:93:bb:19:a3:04:eb:81:d6:60:df:d1:31:7b:41:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Dec 26 13:26:17 2025 GMT Not After : Dec 29 19:50:17 2025 GMT Subject: CN=3D16D291AB996A9E6D7B0A216F79A33B3F060561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:28:1c:6c:0f:7f:99:a5:61:eb:ee:8b:52:4e: 51:cc:41:ad:5c:1f:9d:e3:33:2c:1d:2b:ec:a2:16: 99:31:a8:7d:d6:57:7c:a8:28:ce:2c:a2:7a:8d:64: 71:e0:a4:51:a2:4d:9f:4d:64:2b:e6:cb:e6:e9:d4: 29:fa:49:5b:f9:9e:9b:0c:62:53:ab:04:3f:ba:f6: c8:37:1e:1d:17:b2:76:4e:71:f8:cf:63:12:7a:4a: c4:41:b1:c2:c3:3d:9a:f9:a1:e7:89:50:37:ee:26: 1e:f4:66:7e:01:69:7c:90:e7:ef:d6:dd:3a:e4:c2: e6:ec:6f:81:ed:09:d6:6e:00:7f:33:e2:56:c1:d4: 84:0e:c0:2c:2f:21:89:2d:89:bb:d2:07:bb:12:2c: 4f:79:b5:be:ac:f7:d5:6b:a4:d8:82:94:a5:7b:7e: ee:68:2c:4c:a8:0b:35:c3:4d:f4:0c:22:82:e7:5c: 55:e8:ca:83:f3:13:23:cf:a2:cb:96:1f:fa:f2:75: eb:a2:dd:ed:85:0e:56:a6:0b:3b:4d:eb:76:37:21: 7e:39:62:d8:74:3c:b8:b9:52:18:8a:08:42:2e:4e: 65:36:16:e1:6c:4d:ef:d3:dc:f8:63:5b:48:cb:4e: bd:81:95:1b:5d:1d:9f:e3:bb:b5:31:6a:cf:b7:6d: 21:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:16:D2:91:AB:99:6A:9E:6D:7B:0A:21:6F:79:A3:3B:3F:06:05:61 X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3f:7f:cb:11:54:76:57:48:1f:37:3e:09:d0:42:31:e0:79: ed:70:08:d6:66:2c:bd:11:89:18:55:45:98:3c:d9:84:3f:67: aa:99:43:96:b9:da:44:45:2f:e8:ee:e9:ae:e5:7f:33:09:9f: 59:d0:c6:55:74:f0:5c:19:66:0f:17:d9:ae:bf:68:73:c7:42: ed:ee:af:87:b4:c9:02:7e:ec:e3:79:20:a4:1b:ea:d1:d8:80: c8:2f:02:b3:ac:1d:fb:77:69:46:bd:df:05:d5:e0:7d:c0:03: 19:c6:1c:b8:47:15:68:97:fa:9e:dd:5e:3e:d4:e2:ed:c2:0d: b5:4c:f2:95:98:67:81:ca:f2:3a:62:d6:25:e1:eb:48:3d:61: 66:de:47:f8:ce:71:97:7a:44:46:b1:79:78:5a:c0:b1:db:7d: d9:38:5e:50:55:92:04:a2:e5:7d:01:a1:54:23:9b:c6:b5:85: cd:b8:85:fa:63:20:14:a0:d0:3b:63:eb:e4:da:9f:57:59:78: d2:f1:fd:ea:76:af:31:21:5e:78:8f:6f:9e:ea:ac:d5:a1:8e: 61:33:bb:5c:71:fe:a1:da:26:8a:20:52:8c:72:a3:ce:63:d8: 3a:b5:4a:9f:b4:ec:51:78:72:b4:23:ee:35:95:0f:74:e7:06: d6:24:53:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSgoiIWTuxmjBOuB1mDf0TF7QcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTEyMjYxMzI2MTdaFw0yNTEyMjkxOTUwMTdaMDMxMTAvBgNV BAMTKDNEMTZEMjkxQUI5OTZBOUU2RDdCMEEyMTZGNzlBMzNCM0YwNjA1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuKBxsD3+ZpWHr7otSTlHMQa1c H53jMywdK+yiFpkxqH3WV3yoKM4sonqNZHHgpFGiTZ9NZCvmy+bp1Cn6SVv5npsM YlOrBD+69sg3Hh0XsnZOcfjPYxJ6SsRBscLDPZr5oeeJUDfuJh70Zn4BaXyQ5+/W 3Trkwubsb4HtCdZuAH8z4lbB1IQOwCwvIYktibvSB7sSLE95tb6s99VrpNiClKV7 fu5oLEyoCzXDTfQMIoLnXFXoyoPzEyPPosuWH/rydeui3e2FDlamCztN63Y3IX45 Yth0PLi5UhiKCEIuTmU2FuFsTe/T3PhjW0jLTr2BlRtdHZ/ju7Uxas+3bSFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPRbSkauZap5tewohb3mjOz8GBWEwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0/f8sRVHZXSB83PgnQQjHgee1wCNZmLL0R iRhVRZg82YQ/Z6qZQ5a52kRFL+ju6a7lfzMJn1nQxlV08FwZZg8X2a6/aHPHQu3u r4e0yQJ+7ON5IKQb6tHYgMgvArOsHft3aUa93wXV4H3AAxnGHLhHFWiX+p7dXj7U 4u3CDbVM8pWYZ4HK8jpi1iXh60g9YWbeR/jOcZd6REaxeXhawLHbfdk4XlBVkgSi 5X0BoVQjm8a1hc24hfpjIBSg0Dtj6+Tan1dZeNLx/ep2rzEhXniPb57qrNWhjmEz u1xx/qHaJoogUoxyo85j2Dq1Sp+07FF4crQj7jWVD3TnBtYkUxo= -----END CERTIFICATE-----Generated at Sat Dec 27 17:50:03 2025 by rpki-client