This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft File: E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft (raw, json) Hash identifier: tmBuwMyESmi99zB43O/JVXTPMd/ri3mE10fK2IKjdkE= Subject key identifier: F2:1F:C3:63:6F:70:BF:A6:A3:AE:07:3D:18:61:BE:6E:F4:4C:93:B7 Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F Certificate issuer: /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Certificate serial: 22B85792A1C1D1D7D5D691949DDC2BB7694270F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft Manifest number: AB Signing time: Sun 21 Dec 2025 03:01:28 +0000 Manifest this update: Sun 21 Dec 2025 02:56:28 +0000 Manifest next update: Wed 24 Dec 2025 12:45:28 +0000 Files and hashes: 1: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: dSXAsb0EYxBUtM1CoaRZWop2Ld4yRUPCa2RHmQsYyhU=) 2: E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl (hash: 0abuObIatXnCrSgje00LBEBBpo+DuXH3FSNKIwwapig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 12:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b8:57:92:a1:c1:d1:d7:d5:d6:91:94:9d:dc:2b:b7:69:42:70:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Validity Not Before: Dec 21 02:56:28 2025 GMT Not After : Dec 24 12:45:28 2025 GMT Subject: CN=F21FC3636F70BFA6A3AE073D1861BE6EF44C93B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:39:9a:f2:64:75:73:f3:a5:a4:4d:f8:60: ac:65:c2:d5:f3:18:b7:23:73:2d:bd:ea:17:e8:35: 06:9b:ea:41:ed:cd:43:d9:d4:1a:bb:50:88:44:ad: f4:6a:5a:a1:f4:ba:04:55:e6:43:46:26:95:ab:0d: 14:3f:b3:17:ca:7f:d5:e9:cb:b0:d9:9d:f3:63:60: 27:37:5f:ea:45:b7:d7:81:fc:e5:9c:a1:a1:20:2d: cf:f2:1e:b8:d2:b5:91:18:ec:e4:7e:64:6e:5f:52: 69:df:b0:d3:ac:81:b0:8a:78:17:37:38:06:12:42: c5:12:e6:c4:24:3d:35:4b:4c:79:b3:99:c9:54:14: d8:38:b4:21:9e:f9:2d:26:61:db:c6:b0:50:04:70: e4:fe:f0:c9:e5:64:a5:74:79:1a:84:8c:7b:32:52: 6d:31:56:52:e5:e6:df:68:e2:96:00:dc:83:73:57: c9:7c:d4:00:57:85:b5:7c:9d:52:68:39:7f:7d:0c: b2:10:b8:41:52:e3:13:2a:b4:f4:9e:24:06:bf:44: 40:eb:6f:d3:0b:a7:5d:9d:97:51:e0:3f:da:14:76: 89:ca:eb:ea:71:db:02:be:b2:95:6d:eb:ac:da:7a: ca:8b:d5:4a:d5:c7:de:77:c4:5d:c4:f1:e4:bc:a5: e4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1F:C3:63:6F:70:BF:A6:A3:AE:07:3D:18:61:BE:6E:F4:4C:93:B7 X509v3 Authority Key Identifier: keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b5:b2:3f:97:42:18:9e:d3:d9:fc:72:2e:e2:6f:a1:40:8e: 34:1a:ed:29:4e:a7:c3:b9:78:ce:b2:23:f2:a5:0e:25:e6:f3: 9d:5d:22:43:0c:f9:be:40:00:2d:93:46:80:c9:9b:f1:ee:0f: d2:69:8b:98:eb:45:98:42:6f:7b:c2:53:eb:2a:2f:3f:d9:c6: 19:ef:db:f6:c0:57:3a:cb:ba:f1:83:aa:9d:4b:2a:72:fa:59: bc:44:02:1a:d1:a5:8f:1c:ed:38:7b:da:74:3a:d1:9c:7e:51: 36:ac:24:b4:c4:c1:f3:7c:66:10:d5:87:f2:31:bb:cc:a1:c0: c2:e9:17:cd:4e:3d:e0:ab:52:39:58:e4:52:37:34:34:54:79: 98:35:2e:37:71:31:d0:7d:5c:fd:5f:e4:e9:a2:6d:e6:47:ee: 5b:23:7f:47:5b:f4:26:27:68:c7:26:64:3d:9b:80:ab:41:60: 87:b2:b3:7b:ec:75:1e:51:ac:d2:2c:64:37:d4:e6:7d:1f:df: b2:d9:02:eb:4f:a3:b4:5b:d1:d1:3e:4c:a7:52:26:bd:43:62: 1d:3a:da:55:ba:eb:7f:3b:d8:1d:d8:87:29:18:1e:77:fe:32: 63:7e:80:51:ce:c6:f1:72:99:f4:e9:b8:f0:73:1f:74:9e:18: 2d:09:6c:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrhXkqHB0dfV1pGUndwrt2lCcPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5 NTk1M0ExRjAeFw0yNTEyMjEwMjU2MjhaFw0yNTEyMjQxMjQ1MjhaMDMxMTAvBgNV BAMTKEYyMUZDMzYzNkY3MEJGQTZBM0FFMDczRDE4NjFCRTZFRjQ0QzkzQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWzma8mR1c/OlpE34YKxlwtXz GLcjcy296hfoNQab6kHtzUPZ1Bq7UIhErfRqWqH0ugRV5kNGJpWrDRQ/sxfKf9Xp y7DZnfNjYCc3X+pFt9eB/OWcoaEgLc/yHrjStZEY7OR+ZG5fUmnfsNOsgbCKeBc3 OAYSQsUS5sQkPTVLTHmzmclUFNg4tCGe+S0mYdvGsFAEcOT+8MnlZKV0eRqEjHsy Um0xVlLl5t9o4pYA3INzV8l81ABXhbV8nVJoOX99DLIQuEFS4xMqtPSeJAa/REDr b9MLp12dl1HgP9oUdonK6+px2wK+spVt66zaesqL1UrVx953xF3E8eS8peQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8h/DY29wv6ajrgc9GGG+bvRMk7cwHwYDVR0j BBgwFoAU5TzdIEpdW/eIOgQ4v8IXlJWVOh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWU3Y2EzOS04ZGJjLTQyODItYTBkMy04NDgwMjM3MjY4NjIvMC9FNTNDREQyMDRB NUQ1QkY3ODgzQTA0MzhCRkMyMTc5NDk1OTUzQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5NTk1 M0ExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3 OTQ5NTk1M0ExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJW1sj+XQhie09n8ci7ib6FAjjQa7SlOp8O5 eM6yI/KlDiXm851dIkMM+b5AAC2TRoDJm/HuD9Jpi5jrRZhCb3vCU+sqLz/Zxhnv 2/bAVzrLuvGDqp1LKnL6WbxEAhrRpY8c7Th72nQ60Zx+UTasJLTEwfN8ZhDVh/Ix u8yhwMLpF81OPeCrUjlY5FI3NDRUeZg1LjdxMdB9XP1f5OmibeZH7lsjf0db9CYn aMcmZD2bgKtBYIeys3vsdR5RrNIsZDfU5n0f37LZAutPo7Rb0dE+TKdSJr1DYh06 2lW663872B3YhykYHnf+MmN+gFHOxvFymfTpuPBzH3SeGC0JbLM= -----END CERTIFICATE-----Generated at Wed Dec 24 08:49:50 2025 by rpki-client