This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: lxSaEczll/nuTIqDTQzNhTDbymQp6u4w7cqyTKuJYlY= Subject key identifier: 15:B7:C8:A9:CD:AC:26:D0:60:E5:6B:BA:43:61:31:38:03:F1:9D:40 Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 407BDDF52F837DC427BA8A4BA6E0F2BC635454BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: 0110 Signing time: Thu 18 Dec 2025 23:22:50 +0000 Manifest this update: Thu 18 Dec 2025 23:17:50 +0000 Manifest next update: Mon 22 Dec 2025 08:29:50 +0000 Files and hashes: 1: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) 2: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) 3: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: Qtp7RXerOLOm3DwuX1XBle0BnRt+Rjw6dRuM1tpYzh8=) 4: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 08:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7b:dd:f5:2f:83:7d:c4:27:ba:8a:4b:a6:e0:f2:bc:63:54:54:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Dec 18 23:17:50 2025 GMT Not After : Dec 22 08:29:50 2025 GMT Subject: CN=15B7C8A9CDAC26D060E56BBA4361313803F19D40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:9b:ba:6a:1b:db:a5:df:a3:01:19:2c:cb: a3:bb:f0:ea:ca:5b:ba:1b:f4:e3:9f:7c:2f:16:f4: e6:b3:4a:a9:5f:8a:97:67:a7:43:4c:be:1e:1b:5d: b7:c2:6a:b3:a5:10:6c:95:90:9d:f8:c1:55:e3:3e: 70:1f:32:94:c4:f9:31:af:b6:5a:7a:6d:72:25:e1: 46:f5:a2:e0:9d:ee:56:e5:f1:eb:28:18:89:b1:b3: ae:2d:ed:63:61:c1:d7:f3:b1:f9:a8:ca:5d:28:be: 56:53:25:ad:df:0c:dd:b6:d7:b9:bb:33:03:b4:1c: cf:cf:3c:48:8a:df:5e:73:1b:b9:97:cd:d2:ce:15: b8:b4:8d:8f:77:ed:eb:80:53:d7:96:68:84:bd:2d: 2a:b8:b6:e5:c3:01:62:f1:a0:6e:9a:f4:d0:8d:35: ce:12:83:98:17:cb:c4:7f:b4:3e:b2:37:29:ea:6f: 57:92:e3:63:cb:e8:7c:56:aa:1e:2b:7c:a5:b1:60: 76:39:77:bf:78:2d:7e:2e:0f:67:d7:91:95:ce:27: cf:a8:11:43:ec:27:84:f0:64:43:ed:a3:dc:7d:19: d5:6c:58:a1:b6:48:fc:c8:bf:8b:97:a6:1b:77:38: e1:22:6c:21:75:50:91:5c:b9:c2:70:b1:d8:6b:5a: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B7:C8:A9:CD:AC:26:D0:60:E5:6B:BA:43:61:31:38:03:F1:9D:40 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a7:d6:9c:f8:af:08:35:af:d5:0a:57:41:41:9f:c1:27:83: 43:05:15:14:b7:cd:b7:0f:37:43:2c:4d:b3:b6:ab:ed:ba:9d: 3f:34:52:32:4c:da:94:ed:a3:96:ad:91:fc:41:70:61:c0:a4: 90:1d:42:cb:33:82:85:d3:c0:a3:bc:05:90:0f:e5:48:41:66: dc:3d:e5:67:7e:3e:6a:55:56:51:3f:8e:da:3a:e6:0c:f5:a5: 2b:ef:40:04:2a:4c:d0:05:35:d2:ba:b3:8e:84:08:66:5b:a5: 5b:b9:8f:dd:07:1f:af:1c:9d:63:04:ca:e0:cb:68:99:77:21: b9:3a:0a:05:27:e7:fa:4c:4e:67:57:08:bb:93:a6:00:cd:11: 37:00:e9:46:3b:a1:16:f5:10:c2:04:62:9a:95:12:35:43:9c: b3:b2:ca:05:9c:bd:44:ec:59:f1:26:35:8a:96:5a:f7:40:ae: 9c:68:8b:54:fb:b5:e4:e9:6c:9d:fa:9f:97:43:5f:38:04:a7: a2:1a:4e:ec:7f:de:74:fb:39:f6:b6:0e:3f:a2:b5:1e:9f:05: e7:33:ab:47:2a:3c:20:ad:b8:c0:5f:51:b8:50:da:ee:31:6e: a4:17:7c:91:c4:24:61:c3:13:0c:71:dd:8e:39:4c:d5:88:8a: 0c:0e:b4:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQHvd9S+DfcQnuopLpuDyvGNUVLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTEyMTgyMzE3NTBaFw0yNTEyMjIwODI5NTBaMDMxMTAvBgNV BAMTKDE1QjdDOEE5Q0RBQzI2RDA2MEU1NkJCQTQzNjEzMTM4MDNGMTlENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8opu6ahvbpd+jARksy6O78OrK W7ob9OOffC8W9OazSqlfipdnp0NMvh4bXbfCarOlEGyVkJ34wVXjPnAfMpTE+TGv tlp6bXIl4Ub1ouCd7lbl8esoGImxs64t7WNhwdfzsfmoyl0ovlZTJa3fDN2217m7 MwO0HM/PPEiK315zG7mXzdLOFbi0jY937euAU9eWaIS9LSq4tuXDAWLxoG6a9NCN Nc4Sg5gXy8R/tD6yNynqb1eS42PL6HxWqh4rfKWxYHY5d794LX4uD2fXkZXOJ8+o EUPsJ4TwZEPto9x9GdVsWKG2SPzIv4uXpht3OOEibCF1UJFcucJwsdhrWnt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFbfIqc2sJtBg5Wu6Q2ExOAPxnUAwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHun1pz4rwg1r9UKV0FBn8Eng0MFFRS3zbcP N0MsTbO2q+26nT80UjJM2pTto5atkfxBcGHApJAdQsszgoXTwKO8BZAP5UhBZtw9 5Wd+PmpVVlE/jto65gz1pSvvQAQqTNAFNdK6s46ECGZbpVu5j90HH68cnWMEyuDL aJl3Ibk6CgUn5/pMTmdXCLuTpgDNETcA6UY7oRb1EMIEYpqVEjVDnLOyygWcvUTs WfEmNYqWWvdArpxoi1T7teTpbJ36n5dDXzgEp6IaTux/3nT7Ofa2Dj+itR6fBecz q0cqPCCtuMBfUbhQ2u4xbqQXfJHEJGHDEwxx3Y45TNWIigwOtI8= -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:29 2025 by rpki-client