This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: wX4nPD7keOnVqpTwDzrlI18hfbXDTz6lu/5EyiJaGyo= Subject key identifier: 92:A6:A7:D9:00:45:38:0F:AD:DA:5D:34:10:AC:20:CB:A8:8D:6B:16 Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 2EA992BEF8CED310A9E6619D15B6C88488DC089D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 01E2 Signing time: Mon 29 Dec 2025 00:12:16 +0000 Manifest this update: Mon 29 Dec 2025 00:07:16 +0000 Manifest next update: Thu 01 Jan 2026 06:22:16 +0000 Files and hashes: 1: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: 9tX10629DnRQzpDIgIuzgeSKAyZ1U8PLF0M4h+rm+Qk=) 2: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: Bv8GvXAWpJuOQ2Ct96QK+mo1xI0B5ow3KRvIax0cz0Y=) 3: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=) 4: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: 8Y74K2TpyYopjSPIvml4qteVJ3vz5OzDvTIoNm3Bjlk=) 5: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: qe46wqYoj4z+C+Tgta7yX78S6Rqx69jq5NSyjAXg4Xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 06:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a9:92:be:f8:ce:d3:10:a9:e6:61:9d:15:b6:c8:84:88:dc:08:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Dec 29 00:07:16 2025 GMT Not After : Jan 1 06:22:16 2026 GMT Subject: CN=92A6A7D90045380FADDA5D3410AC20CBA88D6B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:12:4e:0c:b8:f1:d4:59:20:11:cf:00:54: 31:48:cd:50:9a:f9:1a:a4:c2:88:f1:04:f8:5f:f4: 20:4e:6a:92:42:95:82:da:d6:14:d8:50:09:58:61: af:48:62:9c:dc:2c:52:1a:03:74:10:d3:be:c1:12: 93:54:62:07:22:ae:4b:c9:e8:5e:be:65:5e:f5:81: 23:55:12:bb:21:3e:df:61:90:37:15:ba:c5:b9:2e: d3:22:d3:5e:5c:7c:90:96:e7:cb:49:27:26:0c:b2: 89:b7:9f:e0:47:d5:06:6b:0f:f5:82:17:be:8e:da: 48:c1:79:53:59:90:42:14:2f:9a:5c:47:fd:23:78: 0d:f3:65:cf:3b:52:2c:de:bd:29:a1:e5:b0:d0:c2: d3:9f:8c:af:67:cb:62:72:d1:d0:d8:74:59:e6:e8: 39:77:81:92:56:0c:79:5a:9b:45:07:cc:3c:96:bc: c3:03:2d:75:6a:26:05:2c:79:88:1a:f6:fe:83:25: f6:40:fa:db:00:0d:93:95:84:bd:fc:7b:69:c9:35: ed:5c:8a:80:85:0a:dd:1c:1b:9e:34:d8:e5:95:6d: 6b:8e:14:04:c7:e5:56:05:e8:11:47:74:a0:82:36: 6c:a5:fb:a1:ff:8d:99:02:cf:f8:24:b5:b5:ba:d1: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A6:A7:D9:00:45:38:0F:AD:DA:5D:34:10:AC:20:CB:A8:8D:6B:16 X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3b:1b:76:b0:23:b4:67:57:a2:94:75:d2:cd:ec:95:bd:50: c5:3d:ce:69:26:f3:56:7b:d9:b6:5a:0c:ee:da:15:56:66:bb: 7c:4b:c6:62:9a:d6:0f:26:63:25:7a:bf:90:20:7d:8a:b3:5b: 5a:83:86:ea:04:5a:fe:1d:9b:90:e9:01:4b:ba:f8:6b:d6:9b: 5b:c0:e6:e2:de:0f:08:1a:6c:c3:f5:78:81:a5:6e:e4:b1:06: 99:2a:a0:38:5b:5c:83:a6:25:87:34:f5:46:35:12:d9:1e:c1: 07:49:1e:69:9a:aa:82:ea:61:1f:f5:07:f3:e6:33:94:c4:79: ea:e7:ba:e2:61:8b:9e:2d:e0:86:c3:fe:13:0c:59:7d:f6:35: 08:92:cc:96:9c:26:c1:f8:fe:a1:4c:8f:98:3b:ac:b0:93:59: fb:f9:dd:98:52:63:32:ff:e1:6e:b3:37:1b:6c:4f:7e:47:8b: b9:32:62:a7:1f:41:bd:d5:17:bb:4e:61:82:6a:b9:e6:3f:2e: ed:1f:a5:91:58:9e:76:63:41:1c:e4:2b:48:37:52:0c:06:7d: cf:73:c1:67:c4:97:38:f5:9d:11:48:30:c1:c3:c5:63:55:ad: 15:aa:18:d1:0e:54:d1:89:50:d0:e1:5d:25:63:f1:c0:d1:ea: 5e:d7:97:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqmSvvjO0xCp5mGdFbbIhIjcCJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNTEyMjkwMDA3MTZaFw0yNjAxMDEwNjIyMTZaMDMxMTAvBgNV BAMTKDkyQTZBN0Q5MDA0NTM4MEZBRERBNUQzNDEwQUMyMENCQTg4RDZCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbsBJODLjx1FkgEc8AVDFIzVCa +RqkwojxBPhf9CBOapJClYLa1hTYUAlYYa9IYpzcLFIaA3QQ077BEpNUYgcirkvJ 6F6+ZV71gSNVErshPt9hkDcVusW5LtMi015cfJCW58tJJyYMsom3n+BH1QZrD/WC F76O2kjBeVNZkEIUL5pcR/0jeA3zZc87UizevSmh5bDQwtOfjK9ny2Jy0dDYdFnm 6Dl3gZJWDHlam0UHzDyWvMMDLXVqJgUseYga9v6DJfZA+tsADZOVhL38e2nJNe1c ioCFCt0cG5402OWVbWuOFATH5VYF6BFHdKCCNmyl+6H/jZkCz/gktbW60cavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkqan2QBFOA+t2l00EKwgy6iNaxYwHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADg7G3awI7RnV6KUddLN7JW9UMU9zmkm81Z7 2bZaDO7aFVZmu3xLxmKa1g8mYyV6v5AgfYqzW1qDhuoEWv4dm5DpAUu6+GvWm1vA 5uLeDwgabMP1eIGlbuSxBpkqoDhbXIOmJYc09UY1EtkewQdJHmmaqoLqYR/1B/Pm M5TEeernuuJhi54t4IbD/hMMWX32NQiSzJacJsH4/qFMj5g7rLCTWfv53ZhSYzL/ 4W6zNxtsT35Hi7kyYqcfQb3VF7tOYYJqueY/Lu0fpZFYnnZjQRzkK0g3UgwGfc9z wWfElzj1nRFIMMHDxWNVrRWqGNEOVNGJUNDhXSVj8cDR6l7Xl04= -----END CERTIFICATE-----Generated at Mon Dec 29 16:26:35 2025 by rpki-client