This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft File: E380A055DD3B1E364672B9F0DD6852AE31F93906.mft (raw, json) Hash identifier: 6lL6K+Cho+g+z3CtDgMTCyrdLlRehLvVG1+RX0k+Nxk= Subject key identifier: 71:3D:2E:A2:5F:2A:FF:EF:A7:AB:DF:BA:59:22:E6:D6:78:25:25:0B Authority key identifier: E3:80:A0:55:DD:3B:1E:36:46:72:B9:F0:DD:68:52:AE:31:F9:39:06 Certificate issuer: /CN=E380A055DD3B1E364672B9F0DD6852AE31F93906 Certificate serial: 448D71678F088D1F8D98CA61096032CD213CCBDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft Manifest number: F4 Signing time: Sat 20 Dec 2025 16:42:21 +0000 Manifest this update: Sat 20 Dec 2025 16:37:21 +0000 Manifest next update: Wed 24 Dec 2025 01:42:21 +0000 Files and hashes: 1: 3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (hash: KXi3wp4OORvn6TsBUOzJaVybFRf6vF3ckUcKEtOB1Ho=) 2: E380A055DD3B1E364672B9F0DD6852AE31F93906.crl (hash: LaTfDk4X2lpTNnaHgeebDjtmq0AmezngDsvDSYjidsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.crl rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8d:71:67:8f:08:8d:1f:8d:98:ca:61:09:60:32:cd:21:3c:cb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E380A055DD3B1E364672B9F0DD6852AE31F93906 Validity Not Before: Dec 20 16:37:21 2025 GMT Not After : Dec 24 01:42:21 2025 GMT Subject: CN=713D2EA25F2AFFEFA7ABDFBA5922E6D67825250B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:21:48:0d:ed:88:be:8d:c6:6c:44:a0:88: f8:a9:9c:39:47:90:52:a8:76:c8:18:42:ce:20:df: 82:42:13:96:8d:dc:66:db:f2:6e:ff:eb:c0:a6:60: 85:21:5e:92:9e:0a:4d:f3:2c:7d:15:ce:cb:fd:58: b3:b3:a9:56:b1:f6:76:61:d9:dd:4f:eb:f3:ec:15: fa:0b:91:97:54:02:81:6c:e9:e6:dc:2b:d6:d9:6c: 01:d4:4d:e2:4b:90:4b:fb:6a:f6:5f:01:51:e8:81: 8e:a3:e1:0a:33:3b:4e:2c:0b:71:da:75:06:c6:3d: 31:83:bb:b5:db:9d:cb:1f:04:fd:b3:f9:19:d9:9f: e3:c7:d5:6a:fa:c3:61:e3:12:2e:e1:ba:2d:ff:a8: 44:e1:ce:46:ec:99:a9:f9:a4:ec:19:58:66:8d:62: fe:1c:2a:0f:33:88:6f:ff:9f:2b:e4:db:17:2d:81: 63:86:c3:8c:34:bc:a9:34:73:cd:40:89:9c:ef:77: 83:76:f1:47:5a:a0:70:4b:77:19:70:4f:ca:ad:cc: b4:a2:ac:1e:a6:5e:4d:97:e3:43:ec:54:4b:30:15: 52:e3:e3:e0:18:90:61:45:cc:52:2c:98:47:cb:d0: e7:15:7c:57:9f:f3:10:88:2e:17:6e:31:5a:c9:5f: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3D:2E:A2:5F:2A:FF:EF:A7:AB:DF:BA:59:22:E6:D6:78:25:25:0B X509v3 Authority Key Identifier: keyid:E3:80:A0:55:DD:3B:1E:36:46:72:B9:F0:DD:68:52:AE:31:F9:39:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:42:9f:85:b6:2a:e8:79:37:28:ca:34:67:c6:e0:d2:89:5a: 0b:cd:e3:47:38:25:ea:ec:3d:b2:e8:cf:b8:ff:34:79:03:29: 71:13:9b:98:ef:6c:25:88:b1:53:ab:75:77:ec:12:f7:37:82: ba:10:83:1d:2e:14:a3:bd:47:43:08:b3:4d:8b:58:8a:0e:05: 3c:db:7e:71:68:7e:26:b5:1f:f3:b4:38:33:b4:d3:65:25:78: ee:10:38:bd:44:b4:f1:6e:b6:70:a6:88:93:a4:8c:44:6b:6f: 23:e5:c7:21:72:fc:3a:dd:37:bc:35:27:a1:d0:3b:61:71:84: 1e:de:4e:0c:7c:f1:39:03:43:88:90:87:5d:09:a9:74:df:18: ac:2b:db:d9:48:68:9a:b3:d1:2b:a6:80:49:d5:ea:3e:46:3a: df:3a:db:5a:af:71:53:61:86:71:46:0f:6a:bb:ad:65:e1:fa: 00:b7:47:04:dc:93:2a:75:b4:1b:05:b1:c1:ed:24:84:6a:04: 04:59:cf:e0:45:cd:2d:30:1b:83:8f:99:42:6c:13:9a:a3:be: ca:91:f2:c0:de:f0:c0:4b:46:bb:19:d8:c2:a4:02:2a:2a:27: 9a:06:7f:40:c6:6b:33:64:ab:ca:b2:ec:a1:42:2b:2b:bc:fc: 45:eb:b1:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURI1xZ48IjR+NmMphCWAyzSE8y98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MEEwNTVERDNCMUUzNjQ2NzJCOUYwREQ2ODUyQUUz MUY5MzkwNjAeFw0yNTEyMjAxNjM3MjFaFw0yNTEyMjQwMTQyMjFaMDMxMTAvBgNV BAMTKDcxM0QyRUEyNUYyQUZGRUZBN0FCREZCQTU5MjJFNkQ2NzgyNTI1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52CFIDe2Ivo3GbESgiPipnDlH kFKodsgYQs4g34JCE5aN3Gbb8m7/68CmYIUhXpKeCk3zLH0Vzsv9WLOzqVax9nZh 2d1P6/PsFfoLkZdUAoFs6ebcK9bZbAHUTeJLkEv7avZfAVHogY6j4QozO04sC3Ha dQbGPTGDu7XbncsfBP2z+RnZn+PH1Wr6w2HjEi7hui3/qEThzkbsman5pOwZWGaN Yv4cKg8ziG//nyvk2xctgWOGw4w0vKk0c81AiZzvd4N28UdaoHBLdxlwT8qtzLSi rB6mXk2X40PsVEswFVLj4+AYkGFFzFIsmEfL0OcVfFef8xCILhduMVrJX7gTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcT0uol8q/++nq9+6WSLm1nglJQswHwYDVR0j BBgwFoAU44CgVd07HjZGcrnw3WhSrjH5OQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmYyNjBjZS0yM2Y1LTQwOTUtODJkYi1lZjcxMTRlNDcxYjIvMC9FMzgwQTA1NURE M0IxRTM2NDY3MkI5RjBERDY4NTJBRTMxRjkzOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTM4MEEwNTVERDNCMUUzNjQ2NzJCOUYwREQ2ODUyQUUzMUY5 MzkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmMjYwY2UtMjNmNS00MDk1LTgy ZGItZWY3MTE0ZTQ3MWIyLzAvRTM4MEEwNTVERDNCMUUzNjQ2NzJCOUYwREQ2ODUy QUUzMUY5MzkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlCn4W2Kuh5NyjKNGfG4NKJWgvN40c4Jers PbLoz7j/NHkDKXETm5jvbCWIsVOrdXfsEvc3groQgx0uFKO9R0MIs02LWIoOBTzb fnFofia1H/O0ODO002UleO4QOL1EtPFutnCmiJOkjERrbyPlxyFy/DrdN7w1J6HQ O2FxhB7eTgx88TkDQ4iQh10JqXTfGKwr29lIaJqz0SumgEnV6j5GOt8621qvcVNh hnFGD2q7rWXh+gC3RwTckyp1tBsFscHtJIRqBARZz+BFzS0wG4OPmUJsE5qjvsqR 8sDe8MBLRrsZ2MKkAioqJ5oGf0DGazNkq8qy7KFCKyu8/EXrsQw= -----END CERTIFICATE-----Generated at Tue Dec 23 11:01:33 2025 by rpki-client