This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: pNvrIiFKskQ5nXuSFdtr9/Mo2xDiILuaIg1i/5UP44Y= Subject key identifier: 96:CE:C9:85:D2:5F:26:51:88:EE:CA:52:7C:C1:48:E5:E9:1E:DA:E9 Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 055AE21D6B9AC724898219A52B306DB3DF037B62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: BB Signing time: Thu 18 Dec 2025 19:32:19 +0000 Manifest this update: Thu 18 Dec 2025 19:27:19 +0000 Manifest next update: Mon 22 Dec 2025 06:45:19 +0000 Files and hashes: 1: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: D1j1lCivRx4MpFMf1wJtpmY2c2+VbcHJ9Y4DtgTsc+k=) 2: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: qP5p1JtLajQU4tMkK8i4H4Q7vMTKK0pWmbujRAH0CW4=) 3: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: R0jNeZREOH7PdH08cIX9FXJ07BU9g/y14/QiKIW3zDQ=) 4: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: /rrVT8+7vMAShEA29/a83w5natJXQZ8dbakSMPveJCo=) 5: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: J44OQfuOtn7GSVZ4S3pDhy2ARW8beE+hiN6Z+ejqygE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 06:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5a:e2:1d:6b:9a:c7:24:89:82:19:a5:2b:30:6d:b3:df:03:7b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Dec 18 19:27:19 2025 GMT Not After : Dec 22 06:45:19 2025 GMT Subject: CN=96CEC985D25F265188EECA527CC148E5E91EDAE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e3:35:23:2e:bb:dc:82:c1:0b:c4:c8:e5:db: 2b:82:7f:89:f2:94:8b:04:85:ec:b1:3b:15:b0:ab: a4:6d:25:e9:7b:ef:7d:50:74:63:e4:95:43:6d:f8: c8:0e:73:9f:aa:fb:14:c4:ae:fb:58:4b:2a:bb:b1: ac:0e:82:21:5f:60:82:67:83:b5:32:2a:10:e0:cf: 98:47:d8:50:2e:7e:4c:c6:68:92:70:f9:80:e2:0e: 7b:d1:c9:1c:b9:41:23:98:81:83:75:db:2f:e7:e5: 56:6c:a3:1d:6b:92:d6:97:7c:66:d6:98:97:40:65: aa:42:f9:f7:38:3a:c8:cc:ef:cf:05:5f:09:92:cd: a0:7f:20:97:1c:1c:50:3b:1a:f1:c2:6c:85:84:b6: 14:07:31:53:15:fe:63:06:48:a5:00:5c:a7:c6:6d: 96:e7:43:5d:d4:56:86:3d:41:0d:6d:07:57:10:d4: 03:e7:e2:36:50:ec:5a:9c:94:be:a1:fd:b9:71:94: 1e:72:25:4c:73:3c:89:73:e1:b5:da:b9:80:50:73: b9:3f:31:49:a6:65:7f:b7:29:1b:b8:88:2e:76:74: ac:33:fb:d3:9f:18:a6:d9:f9:36:46:7a:11:c8:74: f6:fd:df:44:df:cb:66:b9:2b:6e:1b:f8:c3:8f:e2: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CE:C9:85:D2:5F:26:51:88:EE:CA:52:7C:C1:48:E5:E9:1E:DA:E9 X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fd:dc:ea:6c:11:f4:23:bc:b3:a1:fa:35:76:82:24:53:31: 4a:69:d1:a5:b0:2a:bf:d4:df:7a:59:e8:eb:7e:2c:aa:d1:3b: 31:2a:d6:00:9d:bb:cd:6d:a9:ff:f1:c0:ae:fa:04:83:7e:ee: cc:f1:bb:6e:78:b4:b5:7c:dc:f1:fb:2d:ee:a2:1a:80:16:a6: 5b:1c:f5:12:29:e9:5c:22:55:6f:b3:13:55:8e:a1:86:80:1c: 9e:d8:48:94:36:e5:18:6f:76:dd:4f:69:83:85:67:8f:25:3e: 78:b2:12:22:7a:97:a7:f2:21:e9:c6:31:9e:4e:ce:7b:d4:1e: b0:fe:9b:11:c3:9d:ad:ba:13:69:ef:48:fe:57:7f:54:e7:ff: 66:e0:33:07:99:af:05:68:ff:d2:8e:c4:de:c1:57:88:10:4e: c9:02:4b:a1:bc:eb:eb:a1:71:b4:6a:f6:94:4b:5b:60:9c:ca: 27:1e:ab:4c:89:a8:13:27:f5:cb:44:d8:c9:84:b9:0b:6a:56: d9:de:7d:81:77:be:3d:18:51:f4:b1:36:33:7f:c9:a2:2e:11: b6:31:4d:9c:82:55:48:a9:b4:91:27:e7:0e:93:60:1a:1b:a2: f4:aa:d7:4d:b1:3b:64:ba:22:dc:12:91:31:ea:ee:c7:bb:6d: 96:45:74:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVriHWuaxySJghmlKzBts98De2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTEyMTgxOTI3MTlaFw0yNTEyMjIwNjQ1MTlaMDMxMTAvBgNV BAMTKDk2Q0VDOTg1RDI1RjI2NTE4OEVFQ0E1MjdDQzE0OEU1RTkxRURBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4zUjLrvcgsELxMjl2yuCf4ny lIsEheyxOxWwq6RtJel7731QdGPklUNt+MgOc5+q+xTErvtYSyq7sawOgiFfYIJn g7UyKhDgz5hH2FAufkzGaJJw+YDiDnvRyRy5QSOYgYN12y/n5VZsox1rktaXfGbW mJdAZapC+fc4OsjM788FXwmSzaB/IJccHFA7GvHCbIWEthQHMVMV/mMGSKUAXKfG bZbnQ13UVoY9QQ1tB1cQ1APn4jZQ7FqclL6h/blxlB5yJUxzPIlz4bXauYBQc7k/ MUmmZX+3KRu4iC52dKwz+9OfGKbZ+TZGehHIdPb930Tfy2a5K24b+MOP4iZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUls7JhdJfJlGI7spSfMFI5eke2ukwHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEb93OpsEfQjvLOh+jV2giRTMUpp0aWwKr/U 33pZ6Ot+LKrROzEq1gCdu81tqf/xwK76BIN+7szxu254tLV83PH7Le6iGoAWplsc 9RIp6VwiVW+zE1WOoYaAHJ7YSJQ25Rhvdt1PaYOFZ48lPniyEiJ6l6fyIenGMZ5O znvUHrD+mxHDna26E2nvSP5Xf1Tn/2bgMweZrwVo/9KOxN7BV4gQTskCS6G86+uh cbRq9pRLW2Ccyiceq0yJqBMn9ctE2MmEuQtqVtnefYF3vj0YUfSxNjN/yaIuEbYx TZyCVUiptJEn5w6TYBobovSq102xO2S6ItwSkTHq7se7bZZFdNE= -----END CERTIFICATE-----Generated at Sun Dec 21 03:07:32 2025 by rpki-client