This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: QwQ1L9Va6NeOTGoc3W3oEueX5gsInaDPMX749GhyPzI= Subject key identifier: 2C:8D:C6:03:23:70:CB:E4:AB:BB:D4:1F:87:13:79:95:5B:17:DB:82 Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 2BDAFF5B1E26E88FAC616B30C7A95AB33E6FDD01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 0256 Signing time: Wed 17 Dec 2025 13:21:01 +0000 Manifest this update: Wed 17 Dec 2025 13:16:01 +0000 Manifest next update: Sun 21 Dec 2025 00:43:01 +0000 Files and hashes: 1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: iP8AEXdZncMq4lfVF2HPonUvmFI/8bHQ0xGJ1gjxYRM=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:da:ff:5b:1e:26:e8:8f:ac:61:6b:30:c7:a9:5a:b3:3e:6f:dd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Dec 17 13:16:01 2025 GMT Not After : Dec 21 00:43:01 2025 GMT Subject: CN=2C8DC6032370CBE4ABBBD41F871379955B17DB82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a7:e7:3c:79:9b:00:a6:4a:c0:ff:0c:90:bb: 15:7a:67:c4:9d:25:1c:87:6e:3d:d8:55:33:14:3a: 8a:1b:9d:d0:f4:37:80:33:29:11:d6:cd:4f:a5:5b: 00:0d:1d:ab:0d:39:58:1d:ca:ee:a5:85:cb:17:86: 23:c5:9c:31:f7:f9:ca:cc:16:9b:f8:68:53:03:57: 74:95:d6:52:4a:72:7b:a1:95:5e:88:68:92:00:1a: 11:15:ae:86:14:e7:54:54:47:72:0f:fd:fa:6f:4c: 29:f5:f5:dd:fb:df:d7:b8:77:7e:55:53:38:56:21: 8a:b2:33:b8:52:80:47:cb:a1:ae:bd:6c:fd:69:bb: 27:df:73:fd:1d:8d:ae:98:06:d1:44:33:b5:79:8d: 2b:b7:46:c2:0d:e4:31:f6:5f:01:4e:a8:92:2f:a4: 16:4b:12:d7:f5:95:c7:e9:92:df:cb:68:b1:68:cd: 39:96:08:92:89:8c:6e:22:13:1c:86:98:b2:1a:3b: 36:07:78:03:e7:3f:1b:0b:b0:fd:76:86:14:a3:bc: 19:62:69:2f:d5:ab:89:5c:ad:ea:cd:9f:31:32:ab: 3c:fb:39:4f:6d:a4:6f:c5:b3:23:92:19:27:79:55: 8c:f2:c8:d2:3b:d7:82:70:50:9c:93:05:df:1f:ce: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8D:C6:03:23:70:CB:E4:AB:BB:D4:1F:87:13:79:95:5B:17:DB:82 X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:73:69:6e:37:cf:ab:02:22:25:0d:40:90:29:32:74:f3:80: a8:a2:d4:2b:25:79:be:d9:95:b4:f4:3b:92:0e:e7:81:41:96: d2:dc:ce:61:24:ec:87:8b:b6:91:95:68:73:77:77:a1:61:65: e0:50:c1:4f:83:6d:dc:ef:35:f1:14:ea:ff:a8:4a:ec:b5:6f: 90:4d:66:a9:ab:dc:e7:51:1e:51:78:87:d2:21:e3:3b:a3:5a: df:06:3c:3d:45:7b:da:d2:b6:1a:15:ba:1c:81:ef:84:15:12: 15:bd:09:dc:06:f4:a8:17:a1:ac:08:e0:9c:5f:c4:19:ec:87: ec:03:90:b2:8d:26:75:40:41:c9:a5:91:81:17:b1:73:c9:07: 7c:bf:fb:8a:07:b9:7b:c7:13:df:1d:0f:4d:bd:b0:13:a7:53: 69:6d:91:05:6f:b3:3c:33:da:74:bc:2f:4f:86:49:15:e1:fd: 03:e5:9e:3f:51:18:be:94:4e:4c:f3:05:28:35:c2:d5:a8:6f: 79:4e:5c:0f:be:09:34:39:04:0f:f5:d7:ad:bc:6d:bb:e4:1f: 28:02:a6:13:81:8d:df:63:1f:cc:ac:b8:96:3a:9f:74:ce:21: fe:2b:cb:2b:ff:98:87:83:1a:f1:45:f9:1d:f8:94:76:70:2e: 2d:c5:dc:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9r/Wx4m6I+sYWswx6lasz5v3QEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNTEyMTcxMzE2MDFaFw0yNTEyMjEwMDQzMDFaMDMxMTAvBgNV BAMTKDJDOERDNjAzMjM3MENCRTRBQkJCRDQxRjg3MTM3OTk1NUIxN0RCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQp+c8eZsApkrA/wyQuxV6Z8Sd JRyHbj3YVTMUOoobndD0N4AzKRHWzU+lWwANHasNOVgdyu6lhcsXhiPFnDH3+crM Fpv4aFMDV3SV1lJKcnuhlV6IaJIAGhEVroYU51RUR3IP/fpvTCn19d3739e4d35V UzhWIYqyM7hSgEfLoa69bP1puyffc/0dja6YBtFEM7V5jSu3RsIN5DH2XwFOqJIv pBZLEtf1lcfpkt/LaLFozTmWCJKJjG4iExyGmLIaOzYHeAPnPxsLsP12hhSjvBli aS/Vq4lcrerNnzEyqzz7OU9tpG/FsyOSGSd5VYzyyNI714JwUJyTBd8fzhJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULI3GAyNwy+Sru9QfhxN5lVsX24IwHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9zaW43z6sCIiUNQJApMnTzgKii1Csleb7Z lbT0O5IO54FBltLczmEk7IeLtpGVaHN3d6FhZeBQwU+DbdzvNfEU6v+oSuy1b5BN Zqmr3OdRHlF4h9Ih4zujWt8GPD1Fe9rSthoVuhyB74QVEhW9CdwG9KgXoawI4Jxf xBnsh+wDkLKNJnVAQcmlkYEXsXPJB3y/+4oHuXvHE98dD029sBOnU2ltkQVvszwz 2nS8L0+GSRXh/QPlnj9RGL6UTkzzBSg1wtWob3lOXA++CTQ5BA/11628bbvkHygC phOBjd9jH8ysuJY6n3TOIf4ryyv/mIeDGvFF+R34lHZwLi3F3Ig= -----END CERTIFICATE-----Generated at Sat Dec 20 09:41:08 2025 by rpki-client