This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: fVulfdwEry3ALQ26tX3M1zlTqZ3BgcoRZDJEmq3EoK0= Subject key identifier: 4C:0F:C8:9C:13:A9:0B:DE:E9:E5:09:49:3D:C4:E8:3C:89:12:C0:A8 Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 37DFB37113E2AC12606681334447153DF66E1D4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 0535 Signing time: Thu 18 Dec 2025 22:22:20 +0000 Manifest this update: Thu 18 Dec 2025 22:17:20 +0000 Manifest next update: Mon 22 Dec 2025 03:00:20 +0000 Files and hashes: 1: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 2: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: ZYF6FbDhqAnTNcGFvwNfentY1zURhcBMQu+kUWJ3+B0=) 3: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) 4: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) 5: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:df:b3:71:13:e2:ac:12:60:66:81:33:44:47:15:3d:f6:6e:1d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Dec 18 22:17:20 2025 GMT Not After : Dec 22 03:00:20 2025 GMT Subject: CN=4C0FC89C13A90BDEE9E509493DC4E83C8912C0A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:6a:fb:c6:99:33:e3:2a:fc:f4:c2:01:91: 5c:fa:ae:a4:75:f4:a9:a1:86:99:3a:98:11:ab:af: fd:eb:ca:a7:c6:40:56:cd:5d:ee:29:4b:53:54:c6: 30:73:9d:26:03:c4:d8:2d:db:5e:ce:b3:5f:b3:cd: 9e:8d:26:36:b3:7d:31:db:3f:e9:a5:9c:2d:32:88: 92:e2:36:d8:ce:0e:9d:9e:01:d1:e3:7b:41:95:b1: a5:d9:51:46:d8:c5:dc:93:c2:d0:fa:6a:62:6f:9f: d6:bf:c4:ea:0b:08:b1:91:ca:a9:b9:1c:7c:90:18: ba:b5:54:50:e2:e3:14:09:64:a7:05:8d:a0:dd:32: 27:0d:b4:4b:1b:51:c6:73:48:0d:b9:b6:6e:c9:67: b2:8a:cc:c9:fe:32:b1:bc:fa:e2:eb:ff:18:2e:49: 56:b0:6d:b4:32:b8:08:70:6d:c3:3a:e3:19:52:8b: e9:1e:e7:8c:cb:f4:d2:08:4c:0a:db:6a:49:90:2b: f4:d3:ec:c0:04:5e:69:32:44:60:98:c4:4e:c7:3c: 88:ee:cb:dc:8b:66:af:da:70:89:c6:b6:dc:3a:8a: 1d:93:b8:87:98:f5:81:52:b0:d4:df:8d:12:d6:0c: e9:dd:7b:63:b2:73:2a:d6:09:c1:86:08:0d:d3:8d: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0F:C8:9C:13:A9:0B:DE:E9:E5:09:49:3D:C4:E8:3C:89:12:C0:A8 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6a:f2:8c:71:00:43:e4:56:96:45:7d:ae:7e:fa:70:d8:45: 4e:e4:33:9e:2c:d2:b9:29:0e:aa:4e:12:26:8e:25:88:23:90: 2f:39:42:93:31:48:f3:9d:7d:5c:8f:9c:30:92:e0:02:ed:f8: 51:74:0d:63:65:30:a1:9c:5a:c8:18:13:14:42:5a:55:3a:7e: 62:90:cc:a7:92:98:54:c1:ec:b6:3c:1f:bc:72:8b:68:67:dc: 8e:f6:41:11:4d:16:dd:9b:58:99:d9:86:60:b4:a6:d3:c8:30: e0:50:57:84:b5:7a:ec:a9:5e:45:a0:af:ad:df:32:65:bc:9d: 72:e7:e0:5e:0a:95:0b:ed:a6:e1:da:96:e5:2f:f5:ba:8c:05: b1:b5:fd:9e:33:d2:62:73:8c:0f:d7:a2:6e:cc:80:6e:c3:a4: f8:3b:87:96:90:8e:97:b0:9f:aa:e4:00:ec:10:1a:d6:07:de: 06:eb:34:86:e6:75:0c:e7:09:36:2c:81:b4:62:11:19:6e:3e: 3a:e0:f8:89:75:68:ac:83:f8:ed:3f:2d:18:7a:b4:f7:47:23: 5a:72:2c:2e:d8:5c:16:38:27:7a:1d:89:72:c9:9d:41:71:62: 84:55:f4:88:51:33:89:45:14:eb:c4:7d:31:e8:1e:7c:6c:9e: ce:96:e4:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9+zcRPirBJgZoEzREcVPfZuHUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTEyMTgyMjE3MjBaFw0yNTEyMjIwMzAwMjBaMDMxMTAvBgNV BAMTKDRDMEZDODlDMTNBOTBCREVFOUU1MDk0OTNEQzRFODNDODkxMkMwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlWr7xpkz4yr89MIBkVz6rqR1 9Kmhhpk6mBGrr/3ryqfGQFbNXe4pS1NUxjBznSYDxNgt217Os1+zzZ6NJjazfTHb P+mlnC0yiJLiNtjODp2eAdHje0GVsaXZUUbYxdyTwtD6amJvn9a/xOoLCLGRyqm5 HHyQGLq1VFDi4xQJZKcFjaDdMicNtEsbUcZzSA25tm7JZ7KKzMn+MrG8+uLr/xgu SVawbbQyuAhwbcM64xlSi+ke54zL9NIITArbakmQK/TT7MAEXmkyRGCYxE7HPIju y9yLZq/acInGttw6ih2TuIeY9YFSsNTfjRLWDOnde2OycyrWCcGGCA3Tjd59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTA/InBOpC97p5QlJPcToPIkSwKgwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRq8oxxAEPkVpZFfa5++nDYRU7kM54s0rkp DqpOEiaOJYgjkC85QpMxSPOdfVyPnDCS4ALt+FF0DWNlMKGcWsgYExRCWlU6fmKQ zKeSmFTB7LY8H7xyi2hn3I72QRFNFt2bWJnZhmC0ptPIMOBQV4S1euypXkWgr63f MmW8nXLn4F4KlQvtpuHaluUv9bqMBbG1/Z4z0mJzjA/Xom7MgG7DpPg7h5aQjpew n6rkAOwQGtYH3gbrNIbmdQznCTYsgbRiERluPjrg+Il1aKyD+O0/LRh6tPdHI1py LC7YXBY4J3odiXLJnUFxYoRV9IhRM4lFFOvEfTHoHnxsns6W5Ho= -----END CERTIFICATE-----Generated at Fri Dec 19 14:30:50 2025 by rpki-client