This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft File: E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft (raw, json) Hash identifier: nOEJzj0CmcOrwd1Vv5diBmYjqxJ8bosxLjjQAzQ+aKg= Subject key identifier: 01:9D:9C:78:35:56:A2:6D:46:23:83:77:C8:17:90:D1:9D:D9:C3:DA Authority key identifier: E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2 Certificate issuer: /CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2 Certificate serial: 20FB487A87370CC7422CC96AC6BD0F94E755D43F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft Manifest number: 01DD Signing time: Wed 17 Dec 2025 21:52:01 +0000 Manifest this update: Wed 17 Dec 2025 21:47:01 +0000 Manifest next update: Sat 20 Dec 2025 22:03:01 +0000 Files and hashes: 1: 3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (hash: dOmtQ8xQIM/OxqNbVqEyr7os+kU4sc0vVqyQb/jy+M4=) 2: E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl (hash: 28k7+P2+ze7dwB5rvojbofQShPpueMJ/LD+O7khFlSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fb:48:7a:87:37:0c:c7:42:2c:c9:6a:c6:bd:0f:94:e7:55:d4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2 Validity Not Before: Dec 17 21:47:01 2025 GMT Not After : Dec 20 22:03:01 2025 GMT Subject: CN=019D9C783556A26D46238377C81790D19DD9C3DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:05:ec:70:1e:c7:1c:ac:44:0a:9b:34:e1: 9b:a7:17:15:e1:f1:0e:11:fe:6e:3e:38:24:1b:3b: 94:d8:0c:1c:a3:71:e0:40:69:cb:88:00:66:85:af: c6:11:34:d0:3b:ae:77:18:59:53:a6:b7:1e:56:c3: 30:89:de:86:32:6b:c4:47:90:9a:c4:cb:bc:de:d1: d6:59:a3:32:b4:06:d9:11:bd:ea:14:87:2d:dc:bc: 60:83:16:35:b7:89:3e:88:1d:96:70:95:34:01:6e: 64:42:52:8a:e7:34:a0:89:b8:23:82:6e:96:71:f4: 59:f5:9d:36:0c:c7:3e:b7:98:22:af:ad:bb:f0:e4: 5e:3e:10:1d:9c:97:48:dc:97:4a:0a:a9:dd:77:4b: 44:51:99:f5:98:ac:bb:f5:49:da:7e:44:9d:88:49: ba:f6:27:9f:18:ef:fd:86:64:9f:48:d4:f1:f5:ad: f2:c4:8a:8a:f7:b4:92:93:c8:73:69:03:66:64:af: e1:c8:ed:c9:0a:a7:0c:07:f1:17:07:ad:ab:a8:b0: d8:53:5f:c8:86:0f:70:d0:2f:5a:d8:15:d9:52:45: f5:2d:b9:9d:a9:bf:29:3b:55:37:3a:12:5c:fe:76: ce:f1:f1:12:7c:b8:80:cf:d4:b4:46:21:b4:ea:eb: 83:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9D:9C:78:35:56:A2:6D:46:23:83:77:C8:17:90:D1:9D:D9:C3:DA X509v3 Authority Key Identifier: keyid:E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cf:fd:e9:45:08:fd:4a:12:a4:d7:08:1b:bb:8f:7a:57:6f: 8e:b6:0d:d3:89:a5:a6:7e:57:9b:8e:db:8f:62:cb:cb:b3:92: 9f:14:39:4e:47:f3:55:ae:0a:e0:d2:38:57:59:fb:c2:ef:b3: 2f:bc:0f:06:e8:f4:45:19:68:f1:a5:27:9a:a4:3f:d7:df:c2: 91:8a:81:15:62:66:f6:55:5c:ad:c9:d7:c9:e6:5d:ff:33:72: c1:9a:f6:31:69:91:24:ad:d0:b8:52:99:a7:dc:33:42:e8:b3: 01:45:65:3b:14:e3:92:55:5d:f9:5c:32:ed:a9:46:61:7d:42: 59:f9:8c:f5:93:48:d2:02:27:73:82:b6:60:65:68:3b:18:17: f0:79:20:c5:7f:1b:b5:cb:06:0e:78:3b:c6:14:41:d0:a1:9d: a0:89:d8:60:b6:80:b7:35:60:74:6e:c6:6d:a4:94:af:b1:ec: dc:26:a2:22:fd:28:fb:76:c4:76:d4:9a:0b:39:ec:e0:7f:df: 42:17:05:4d:ae:54:69:5d:f4:a1:0e:75:f3:d9:1d:ec:cc:d9: 36:da:98:29:03:91:5c:88:12:a6:ff:fa:60:1e:39:7e:5b:c8: cb:5a:04:0d:d4:b9:8e:9c:c6:95:ad:95:02:67:ad:5e:aa:df: 8d:52:85:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIPtIeoc3DMdCLMlqxr0PlOdV1D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3NEI5QUE3MThDMzdGOEIxMjYyNDNGMkUzMERBMzVG NDNDMEREMjAeFw0yNTEyMTcyMTQ3MDFaFw0yNTEyMjAyMjAzMDFaMDMxMTAvBgNV BAMTKDAxOUQ5Qzc4MzU1NkEyNkQ0NjIzODM3N0M4MTc5MEQxOUREOUMzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RAXscB7HHKxECps04ZunFxXh 8Q4R/m4+OCQbO5TYDByjceBAacuIAGaFr8YRNNA7rncYWVOmtx5WwzCJ3oYya8RH kJrEy7ze0dZZozK0BtkRveoUhy3cvGCDFjW3iT6IHZZwlTQBbmRCUornNKCJuCOC bpZx9Fn1nTYMxz63mCKvrbvw5F4+EB2cl0jcl0oKqd13S0RRmfWYrLv1Sdp+RJ2I Sbr2J58Y7/2GZJ9I1PH1rfLEior3tJKTyHNpA2Zkr+HI7ckKpwwH8RcHrauosNhT X8iGD3DQL1rYFdlSRfUtuZ2pvyk7VTc6Elz+ds7x8RJ8uIDP1LRGIbTq64NJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAZ2ceDVWom1GI4N3yBeQ0Z3Zw9owHwYDVR0j BBgwFoAU4HS5qnGMN/ixJiQ/LjDaNfQ8DdIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2QyNGIwNS0yNjllLTQ3ODQtYjkzNS1mMjc2NjU4MzBmZGEvMC9FMDc0QjlBQTcx OEMzN0Y4QjEyNjI0M0YyRTMwREEzNUY0M0MwREQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3NEI5QUE3MThDMzdGOEIxMjYyNDNGMkUzMERBMzVGNDND MEREMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkMjRiMDUtMjY5ZS00Nzg0LWI5 MzUtZjI3NjY1ODMwZmRhLzAvRTA3NEI5QUE3MThDMzdGOEIxMjYyNDNGMkUzMERB MzVGNDNDMEREMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrP/elFCP1KEqTXCBu7j3pXb462DdOJpaZ+ V5uO249iy8uzkp8UOU5H81WuCuDSOFdZ+8Lvsy+8Dwbo9EUZaPGlJ5qkP9ffwpGK gRViZvZVXK3J18nmXf8zcsGa9jFpkSSt0LhSmafcM0LoswFFZTsU45JVXflcMu2p RmF9Qln5jPWTSNICJ3OCtmBlaDsYF/B5IMV/G7XLBg54O8YUQdChnaCJ2GC2gLc1 YHRuxm2klK+x7NwmoiL9KPt2xHbUmgs57OB/30IXBU2uVGld9KEOdfPZHezM2Tba mCkDkVyIEqb/+mAeOX5byMtaBA3UuY6cxpWtlQJnrV6q341Shdg= -----END CERTIFICATE-----Generated at Fri Dec 19 21:07:11 2025 by rpki-client