This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft File: E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft (raw, json) Hash identifier: vIOFtuvTOndG1r/IlN5c/Byy5xAjwS0pAK321lAHvBI= Subject key identifier: 2A:84:8D:8D:EE:FB:71:90:76:76:FC:A2:47:F6:F9:D5:50:E1:86:76 Authority key identifier: E3:06:D6:21:65:BE:B9:60:9E:6D:D2:54:66:BD:D9:07:1B:1F:23:CF Certificate issuer: /CN=E306D62165BEB9609E6DD25466BDD9071B1F23CF Certificate serial: 1F7A3D203130E4F7442FEBBA10C69E682A3D4B1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft Manifest number: 01EF Signing time: Mon 22 Dec 2025 10:42:33 +0000 Manifest this update: Mon 22 Dec 2025 10:37:33 +0000 Manifest next update: Thu 25 Dec 2025 21:07:33 +0000 Files and hashes: 1: 3130332e3231312e38322e302f32342d3234203d3e20313334363630.roa (hash: Nh+HiVLmMcDNhbKCLKBivfmLyDAXlG86o04scwdSgPc=) 2: E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl (hash: BvJ1+K1xdmi5SQ7H+jS/7JfiV6gEWkdpgP3SfwavwQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7a:3d:20:31:30:e4:f7:44:2f:eb:ba:10:c6:9e:68:2a:3d:4b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E306D62165BEB9609E6DD25466BDD9071B1F23CF Validity Not Before: Dec 22 10:37:33 2025 GMT Not After : Dec 25 21:07:33 2025 GMT Subject: CN=2A848D8DEEFB71907676FCA247F6F9D550E18676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:58:44:52:0b:83:a7:3e:6e:fc:f3:6f:bb:69: 1a:24:94:c5:c7:7a:dc:15:7b:ae:0d:ef:2c:62:26: 95:0f:40:6f:cb:d5:e9:b3:7c:c5:4d:9b:92:8f:78: dc:ad:17:20:9b:e5:f6:55:0e:f5:a5:0b:a3:1d:fd: 4b:37:67:7a:82:75:a2:a8:04:d6:bb:95:ae:0a:fc: 73:c9:69:d2:9c:03:de:2f:4c:0b:f9:27:d0:e2:74: b7:79:a8:aa:d2:af:f6:a2:a6:df:cb:a1:66:d8:fb: ae:32:36:03:53:5b:cc:93:df:da:41:57:fd:6b:2c: cc:28:20:df:e8:c3:08:78:d1:a8:7d:04:90:da:0c: d6:a6:56:6e:52:2c:9f:ad:1a:ea:5d:32:8a:ec:83: 74:04:8a:54:11:56:3c:8c:a6:5c:81:92:95:73:80: 53:13:35:bc:82:10:e5:2e:50:a3:72:21:35:9b:b7: 54:3a:87:b5:07:c1:1e:09:d3:9a:9a:52:30:d8:9b: 11:a1:9a:6e:e0:28:79:0c:84:bd:c0:1b:d7:04:56: dc:28:64:95:47:92:32:2b:6c:95:2b:ca:ec:80:dc: 7d:55:9a:a1:c4:ea:a8:58:b1:94:d8:17:71:f0:28: 9a:98:2a:5a:67:d5:a0:94:cb:53:22:d5:21:46:fc: 17:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:84:8D:8D:EE:FB:71:90:76:76:FC:A2:47:F6:F9:D5:50:E1:86:76 X509v3 Authority Key Identifier: keyid:E3:06:D6:21:65:BE:B9:60:9E:6D:D2:54:66:BD:D9:07:1B:1F:23:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:27:a6:a3:04:08:23:30:df:1f:a3:3c:92:d0:de:3c:70:48: 51:7c:0e:87:2a:f4:60:01:cd:1b:ca:88:9f:0b:5a:e0:95:45: c3:39:a8:36:a7:a9:2e:54:37:41:2f:7f:a3:0d:9b:26:ab:61: b7:ac:88:94:86:71:8e:42:ee:55:fa:d0:e5:a5:84:ac:96:1f: 94:1b:b7:4c:39:19:50:b3:18:ce:2d:e1:e3:d7:de:23:40:a1: 82:38:e0:be:c3:aa:39:e3:ef:ce:a2:56:0c:d0:1b:b3:03:2c: 67:94:2a:a7:6d:c9:2e:e2:89:32:5f:ba:7c:a2:eb:22:8d:97: 19:32:ab:86:1d:52:1b:83:26:7b:0c:12:c6:64:ac:c7:b6:d8: e7:59:34:92:90:73:e2:74:f9:84:55:c5:8a:27:0b:e9:4c:74: dd:a4:e4:0b:fd:56:c3:4e:ad:6a:8c:bc:84:99:b2:7f:f4:da: 02:d9:1f:4b:bb:1a:69:f5:47:03:48:42:31:d8:d6:d1:e7:ec: 99:41:1a:47:52:4d:96:cd:9d:fc:7d:d1:91:2c:fb:75:a9:dc: 93:b5:00:60:24:92:53:77:68:3c:71:6e:bb:0c:d9:f0:02:1f: f1:f4:f0:5b:d0:4f:ad:51:aa:fb:e7:98:36:56:3a:3d:71:20: ec:a6:34:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3o9IDEw5PdEL+u6EMaeaCo9SxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5MDcx QjFGMjNDRjAeFw0yNTEyMjIxMDM3MzNaFw0yNTEyMjUyMTA3MzNaMDMxMTAvBgNV BAMTKDJBODQ4RDhERUVGQjcxOTA3Njc2RkNBMjQ3RjZGOUQ1NTBFMTg2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoWERSC4OnPm7882+7aRoklMXH etwVe64N7yxiJpUPQG/L1emzfMVNm5KPeNytFyCb5fZVDvWlC6Md/Us3Z3qCdaKo BNa7la4K/HPJadKcA94vTAv5J9DidLd5qKrSr/aipt/LoWbY+64yNgNTW8yT39pB V/1rLMwoIN/owwh40ah9BJDaDNamVm5SLJ+tGupdMorsg3QEilQRVjyMplyBkpVz gFMTNbyCEOUuUKNyITWbt1Q6h7UHwR4J05qaUjDYmxGhmm7gKHkMhL3AG9cEVtwo ZJVHkjIrbJUryuyA3H1VmqHE6qhYsZTYF3HwKJqYKlpn1aCUy1Mi1SFG/BfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKoSNje77cZB2dvyiR/b51VDhhnYwHwYDVR0j BBgwFoAU4wbWIWW+uWCebdJUZr3ZBxsfI88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDRjZmFhYy01ZDExLTQxNDItYjFmMy04OGZjYzQxYjMzOGEvMC9FMzA2RDYyMTY1 QkVCOTYwOUU2REQyNTQ2NkJERDkwNzFCMUYyM0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5MDcxQjFG MjNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQ0Y2ZhYWMtNWQxMS00MTQyLWIx ZjMtODhmY2M0MWIzMzhhLzAvRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5 MDcxQjFGMjNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8npqMECCMw3x+jPJLQ3jxwSFF8Docq9GAB zRvKiJ8LWuCVRcM5qDanqS5UN0Evf6MNmyarYbesiJSGcY5C7lX60OWlhKyWH5Qb t0w5GVCzGM4t4ePX3iNAoYI44L7Dqjnj786iVgzQG7MDLGeUKqdtyS7iiTJfunyi 6yKNlxkyq4YdUhuDJnsMEsZkrMe22OdZNJKQc+J0+YRVxYonC+lMdN2k5Av9VsNO rWqMvISZsn/02gLZH0u7Gmn1RwNIQjHY1tHn7JlBGkdSTZbNnfx90ZEs+3Wp3JO1 AGAkklN3aDxxbrsM2fACH/H08FvQT61RqvvnmDZWOj1xIOymNBs= -----END CERTIFICATE-----Generated at Wed Dec 24 21:52:33 2025 by rpki-client