This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: HfIGgO8az0x8Z6TxZJne2plVqKXpcL+CfGo6IGJxIyc= Subject key identifier: 37:D9:0F:54:06:F8:D8:31:C1:8F:95:5F:5F:26:4F:0A:F1:55:B1:0A Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: F5F191B1BF2A85CCC967541CB31C8B71CDA76F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 0149 Signing time: Thu 18 Dec 2025 01:42:01 +0000 Manifest this update: Thu 18 Dec 2025 01:37:01 +0000 Manifest next update: Sun 21 Dec 2025 11:40:01 +0000 Files and hashes: 1: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: VplOBLaXlcKJuXzC/kYMwYe44pXvcuZNrI/g2VUmZTU=) 2: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: cziExQNbsC9slbA6+8SWM0R0EDsOLwLtgTBqDttdfO0=) 3: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: I2C8DMVqO+UvaBs5YlG9NOgvC28QJd48wCuocpWQcD8=) 4: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: 17S1NzRw5+8IP/n/zFRvAJ9ydBwiGj1bRmgVr44VYpQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 11:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f5:f1:91:b1:bf:2a:85:cc:c9:67:54:1c:b3:1c:8b:71:cd:a7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Dec 18 01:37:01 2025 GMT Not After : Dec 21 11:40:01 2025 GMT Subject: CN=37D90F5406F8D831C18F955F5F264F0AF155B10A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:4e:cf:92:05:8c:c4:1f:03:ff:c0:ba:84: c0:7a:9d:62:79:40:55:aa:62:2b:25:5d:cb:33:c7: d5:da:e0:2c:72:e2:29:a1:df:29:2e:08:7f:56:b3: 91:90:87:ce:29:50:df:15:ad:0b:19:9c:20:11:3c: 5a:b1:72:50:ed:f6:5a:a0:94:31:7d:46:d9:02:6a: 55:a1:54:64:47:a3:30:14:15:75:98:33:08:c4:1f: ce:9f:0b:a7:d1:db:70:56:a3:2d:ff:02:d9:16:08: d0:8d:97:7b:33:bf:4c:65:38:fa:f1:d4:1a:3c:2d: 2a:af:0d:14:7f:53:16:77:bc:35:4e:bd:6c:ef:04: 5d:86:46:ae:b0:5a:98:ac:7e:dc:55:ad:f0:c5:18: 38:37:42:68:9c:e9:1a:5a:44:ec:9c:4f:6d:3b:bf: a7:b8:91:0c:b0:fe:05:35:35:e6:77:45:b1:f9:e7: c6:17:df:c7:a1:b3:e4:3e:bc:99:14:97:d0:06:84: 01:c3:c1:da:64:04:72:1e:f6:4e:5a:3e:41:15:53: eb:95:e6:f6:44:17:0d:fd:47:e8:5c:5e:a7:9c:f6: 33:d9:34:be:6c:e4:37:8d:67:f5:bf:63:f3:b6:7e: 39:2b:d5:a4:8d:2d:d9:18:49:79:ef:69:5a:9b:70: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D9:0F:54:06:F8:D8:31:C1:8F:95:5F:5F:26:4F:0A:F1:55:B1:0A X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:92:49:78:f9:dc:6d:1b:94:1e:0f:24:a1:4e:5e:b3:d5:48: 01:86:54:1a:a1:67:47:7a:c3:89:22:8c:98:a7:58:0c:67:7b: d1:a1:28:f9:ad:1f:e8:43:67:a7:3c:e8:81:06:7e:ea:7c:49: 5a:37:02:89:a8:b0:be:0e:2b:d3:5c:7d:f1:b4:27:2f:eb:0a: 7e:53:19:9f:a4:0f:bf:f4:a0:52:f0:04:82:ef:8f:92:b7:00: 4a:3b:b4:cc:db:62:9c:84:bc:46:d1:0d:46:91:34:1a:6a:45: 83:61:62:a0:fb:29:49:10:ac:b7:f0:f0:1f:77:de:a6:e6:8b: a3:b1:58:9d:bb:3f:87:b0:c1:0c:10:a4:f2:52:95:e4:c6:43: f2:b1:28:ce:99:e6:05:76:45:37:93:93:63:2f:0e:64:87:3d: 79:bc:07:20:c3:4b:dc:f8:50:85:ec:d1:82:de:67:2b:1c:9d: 0c:19:21:83:ba:22:04:e9:e4:cd:59:a6:5b:e6:a8:90:1e:2c: 48:ea:11:61:58:b2:0e:32:2f:a2:05:88:02:b5:37:1d:a0:39: 81:87:36:c0:68:53:93:12:7e:c0:9c:97:74:18:39:76:50:9f: cc:ee:ca:13:63:21:1c:60:e1:89:2a:28:26:f7:3e:75:75:c8: f9:29:92:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPXxkbG/KoXMyWdUHLMci3HNp28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTEyMTgwMTM3MDFaFw0yNTEyMjExMTQwMDFaMDMxMTAvBgNV BAMTKDM3RDkwRjU0MDZGOEQ4MzFDMThGOTU1RjVGMjY0RjBBRjE1NUIxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRk7PkgWMxB8D/8C6hMB6nWJ5 QFWqYislXcszx9Xa4Cxy4imh3ykuCH9Ws5GQh84pUN8VrQsZnCARPFqxclDt9lqg lDF9RtkCalWhVGRHozAUFXWYMwjEH86fC6fR23BWoy3/AtkWCNCNl3szv0xlOPrx 1Bo8LSqvDRR/UxZ3vDVOvWzvBF2GRq6wWpisftxVrfDFGDg3Qmic6RpaROycT207 v6e4kQyw/gU1NeZ3RbH558YX38ehs+Q+vJkUl9AGhAHDwdpkBHIe9k5aPkEVU+uV 5vZEFw39R+hcXqec9jPZNL5s5DeNZ/W/Y/O2fjkr1aSNLdkYSXnvaVqbcNtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN9kPVAb42DHBj5VfXyZPCvFVsQowHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGSSXj53G0blB4PJKFOXrPVSAGGVBqhZ0d6 w4kijJinWAxne9GhKPmtH+hDZ6c86IEGfup8SVo3AomosL4OK9NcffG0Jy/rCn5T GZ+kD7/0oFLwBILvj5K3AEo7tMzbYpyEvEbRDUaRNBpqRYNhYqD7KUkQrLfw8B93 3qbmi6OxWJ27P4ewwQwQpPJSleTGQ/KxKM6Z5gV2RTeTk2MvDmSHPXm8ByDDS9z4 UIXs0YLeZyscnQwZIYO6IgTp5M1ZplvmqJAeLEjqEWFYsg4yL6IFiAK1Nx2gOYGH NsBoU5MSfsCcl3QYOXZQn8zuyhNjIRxg4YkqKCb3PnV1yPkpkgQ= -----END CERTIFICATE-----Generated at Fri Dec 19 08:25:16 2025 by rpki-client