This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft File: E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json) Hash identifier: /14/bXFsnGVqpcj4iWsqrsI7RRa8xtvnpfBYwjcvnZ8= Subject key identifier: C7:5E:EE:A7:63:D8:6A:0B:41:53:CB:64:1E:9D:DF:B4:4A:7F:80:24 Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Certificate serial: 6C469F101629C2164303AB09B52D6AFADBFDBBF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft Manifest number: 0166 Signing time: Tue 16 Dec 2025 22:20:38 +0000 Manifest this update: Tue 16 Dec 2025 22:15:38 +0000 Manifest next update: Sat 20 Dec 2025 08:24:38 +0000 Files and hashes: 1: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: pWyEMJB2NECQjGD21jXFIhV6AewDgUPpxcuSNxlavYI=) 2: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: p909d8VjhDkob+UXRoZRxJtZcS/lf4G9yDRtU4iVWWk=) 3: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: yAoUwsI8PnRtGW8XSW2QRH8eIRaJ/0DTBoelR57eAWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:46:9f:10:16:29:c2:16:43:03:ab:09:b5:2d:6a:fa:db:fd:bb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Validity Not Before: Dec 16 22:15:38 2025 GMT Not After : Dec 20 08:24:38 2025 GMT Subject: CN=C75EEEA763D86A0B4153CB641E9DDFB44A7F8024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f5:f8:78:ff:5d:6d:d7:f8:93:f7:4b:ca:49: 25:ad:f4:03:41:a4:a1:98:28:1e:69:70:e5:bc:96: 92:1c:13:fc:15:44:a1:55:62:be:61:72:59:e3:02: 2e:a2:24:dd:1d:e6:5d:0a:e5:79:94:55:34:33:dc: 6f:a8:9a:ca:95:72:5e:25:80:e8:e8:ad:76:9c:6a: 7a:c2:fe:89:52:62:39:f0:e1:e1:12:fb:81:c1:1b: f0:50:ce:29:e2:27:6a:16:64:2b:6e:45:2c:b4:1e: 62:49:a1:a0:8a:ce:4c:d9:55:10:6d:26:15:7e:38: 7a:b5:ef:c7:d1:66:df:1f:9c:d1:bb:23:30:4f:e9: 9d:37:6d:72:92:b7:7e:09:2b:2d:65:93:5b:a5:dd: 01:dc:4a:32:da:14:8e:0c:da:a8:0e:25:da:34:32: 97:b9:7a:74:80:e0:4b:d9:02:a4:7e:00:98:87:b8: b8:9d:6f:00:1c:c7:82:7a:23:13:83:87:0a:8f:6c: 13:87:72:f8:7c:45:b7:9e:c8:ac:07:ea:86:56:51: b1:5b:01:9d:88:06:f2:91:5e:7e:53:3f:3f:93:4a: 41:15:7c:68:7c:98:1b:8f:2f:68:99:b0:ce:d9:fa: eb:a3:f6:36:e6:09:31:5f:57:80:2e:be:65:ad:db: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:EE:A7:63:D8:6A:0B:41:53:CB:64:1E:9D:DF:B4:4A:7F:80:24 X509v3 Authority Key Identifier: keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:68:62:97:83:fd:d3:53:5e:d0:e9:ed:0d:df:46:6f:66:33: 7d:22:9c:12:09:02:2d:7e:98:72:b7:4b:de:13:7d:85:ad:42: 84:94:49:4c:3b:a0:ff:d4:f0:25:88:ba:bc:7d:d9:fe:90:c5: 92:6c:04:5b:dd:b7:65:88:45:7e:5f:dc:0e:4f:16:62:5e:73: 7d:a3:39:09:d7:fd:1d:d0:77:38:56:1c:09:bf:46:4c:ea:ad: a7:98:e2:2d:80:50:28:ac:44:26:a8:ce:2e:46:cc:fa:d5:09: 39:f3:07:9c:e9:a5:83:7c:c2:38:f2:2c:57:b8:95:22:c7:ab: 32:78:27:5b:0b:5b:9e:81:4b:a8:cd:ed:e2:22:32:6f:a4:7d: 56:ec:79:eb:4e:0e:fc:4e:e9:4a:5c:12:6e:c9:42:c1:45:a0: ea:97:7f:8e:3d:f0:d9:77:fb:57:1c:bd:ec:25:1a:1a:e8:88: 9f:73:11:8e:92:46:11:c3:fe:53:b0:75:60:3e:a9:9a:40:7c: 65:52:88:26:81:0e:b9:7d:a8:9d:db:e1:bd:24:73:5a:72:a5: 4c:e6:42:87:a3:56:d7:2e:8d:77:03:9a:fc:c0:05:77:8f:fc: 2c:bf:1c:d3:f3:48:10:62:d7:16:f1:8e:88:fd:0b:09:fc:86: eb:c1:8a:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEafEBYpwhZDA6sJtS1q+tv9u/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5 NTU4NTcxRDAeFw0yNTEyMTYyMjE1MzhaFw0yNTEyMjAwODI0MzhaMDMxMTAvBgNV BAMTKEM3NUVFRUE3NjNEODZBMEI0MTUzQ0I2NDFFOURERkI0NEE3RjgwMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl9fh4/11t1/iT90vKSSWt9ANB pKGYKB5pcOW8lpIcE/wVRKFVYr5hclnjAi6iJN0d5l0K5XmUVTQz3G+omsqVcl4l gOjorXacanrC/olSYjnw4eES+4HBG/BQziniJ2oWZCtuRSy0HmJJoaCKzkzZVRBt JhV+OHq178fRZt8fnNG7IzBP6Z03bXKSt34JKy1lk1ul3QHcSjLaFI4M2qgOJdo0 Mpe5enSA4EvZAqR+AJiHuLidbwAcx4J6IxODhwqPbBOHcvh8RbeeyKwH6oZWUbFb AZ2IBvKRXn5TPz+TSkEVfGh8mBuPL2iZsM7Z+uuj9jbmCTFfV4AuvmWt2+ajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx17up2PYagtBU8tkHp3ftEp/gCQwHwYDVR0j BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4 NTcxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3 ODU5NTU4NTcxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANNoYpeD/dNTXtDp7Q3fRm9mM30inBIJAi1+ mHK3S94TfYWtQoSUSUw7oP/U8CWIurx92f6QxZJsBFvdt2WIRX5f3A5PFmJec32j OQnX/R3QdzhWHAm/RkzqraeY4i2AUCisRCaozi5GzPrVCTnzB5zppYN8wjjyLFe4 lSLHqzJ4J1sLW56BS6jN7eIiMm+kfVbseetODvxO6UpcEm7JQsFFoOqXf4498Nl3 +1ccvewlGhroiJ9zEY6SRhHD/lOwdWA+qZpAfGVSiCaBDrl9qJ3b4b0kc1pypUzm QoejVtcujXcDmvzABXeP/Cy/HNPzSBBi1xbxjoj9Cwn8huvBiuk= -----END CERTIFICATE-----Generated at Fri Dec 19 11:23:42 2025 by rpki-client