This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft File: E0EC18AE1077112F303C479717B7E1EAA868E35F.mft (raw, json) Hash identifier: z9wQyzDwKQYNwhq7hTzrbemSEuQ2b2Qt0EeR5m8uVkQ= Subject key identifier: 70:A9:58:6A:8E:ED:FB:86:86:59:AB:EA:E2:C6:1B:A4:39:D5:F8:7E Authority key identifier: E0:EC:18:AE:10:77:11:2F:30:3C:47:97:17:B7:E1:EA:A8:68:E3:5F Certificate issuer: /CN=E0EC18AE1077112F303C479717B7E1EAA868E35F Certificate serial: 032240EC7EDF3FCC634E80480F4640D8DA1C54FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft Manifest number: 0156 Signing time: Wed 17 Dec 2025 17:12:03 +0000 Manifest this update: Wed 17 Dec 2025 17:07:03 +0000 Manifest next update: Sat 20 Dec 2025 20:51:03 +0000 Files and hashes: 1: E0EC18AE1077112F303C479717B7E1EAA868E35F.crl (hash: 6W687BMcgrkr8NFw81V8PnWUeO2oEPDw8KhjYxB3nBI=) 2: 3130332e3138362e33342e302f32342d3234203d3e20313439363837.roa (hash: iFIOjwBtj1k6jrBAXZlZrv1rFkh0HszvE5iJysrcroI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.crl rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:22:40:ec:7e:df:3f:cc:63:4e:80:48:0f:46:40:d8:da:1c:54:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0EC18AE1077112F303C479717B7E1EAA868E35F Validity Not Before: Dec 17 17:07:03 2025 GMT Not After : Dec 20 20:51:03 2025 GMT Subject: CN=70A9586A8EEDFB868659ABEAE2C61BA439D5F87E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:91:fa:23:d4:e1:e3:0e:b1:ac:e3:71:2a: 5e:00:37:3d:20:8f:53:cd:64:e2:ae:8e:08:7d:47: 91:00:57:c3:ea:aa:5e:c4:bc:59:76:6e:b6:79:49: 52:a6:f3:43:86:ce:4b:b3:93:ca:84:24:62:00:c3: 14:d8:b9:c7:b3:a9:76:c5:a7:73:6d:52:bd:67:58: 2a:e1:21:18:1c:7a:a0:32:ac:ce:29:98:bf:76:c2: c2:d1:f5:c9:5e:99:57:89:76:7a:44:21:a9:a1:2f: c9:44:8d:dc:2f:5f:c7:77:9f:9d:d8:d7:2a:84:20: 27:13:2f:16:df:ac:0c:5b:33:a5:e3:d9:74:28:61: 22:4d:cd:5e:4c:3f:e7:3e:eb:91:a2:ce:43:3c:78: 78:05:41:31:ac:e3:2b:cb:aa:37:25:05:e8:31:1f: 64:bb:b1:29:da:ed:0a:a0:ad:8c:02:b1:93:57:3e: 81:23:6e:a0:30:c2:82:6c:b6:e4:5a:35:75:e4:ed: 58:da:28:f2:86:23:eb:f7:f2:1e:05:68:d9:5a:74: 5f:5d:30:0c:00:82:42:5c:a4:21:31:67:05:5e:19: 9e:62:39:56:52:42:d2:70:c9:88:06:04:65:02:4b: 1e:82:79:98:99:bd:a2:7d:30:bf:ef:35:22:35:dc: d1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A9:58:6A:8E:ED:FB:86:86:59:AB:EA:E2:C6:1B:A4:39:D5:F8:7E X509v3 Authority Key Identifier: keyid:E0:EC:18:AE:10:77:11:2F:30:3C:47:97:17:B7:E1:EA:A8:68:E3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0a:da:5b:c4:b9:1e:9e:9d:0a:41:82:95:3b:1b:00:9d:67: 02:d0:3c:6b:7f:ea:23:eb:28:e1:92:69:eb:55:21:93:37:0a: cc:0d:5f:f0:e1:f6:cc:67:dd:c1:af:db:a1:14:dd:52:9c:a7: 58:44:3a:a5:51:71:c3:6a:7a:69:85:bc:82:62:c3:86:86:f0: 3e:2a:2e:23:3e:31:cb:0a:87:1d:b0:8d:e5:4b:a4:b7:d7:4b: 24:a8:74:68:a4:87:d8:49:d3:6d:1b:5f:ea:53:10:5c:2b:cc: f6:3b:e4:e4:a7:7e:9e:33:98:f8:e3:ad:22:2a:3c:82:25:c0: bc:78:d0:5f:e7:20:69:07:d2:1b:62:2b:d5:8a:ad:ba:7d:7a: 8a:90:30:42:13:f8:55:d2:20:aa:58:d0:e9:2c:b1:16:5e:e9: 97:cb:27:3f:9d:29:69:e3:0c:fe:ba:e9:3a:c0:13:7d:c7:05: 96:9c:c4:88:5c:29:84:bd:55:92:ec:9a:86:3c:7a:37:57:bd: 26:5e:48:df:17:22:d5:73:1d:16:84:96:9d:d1:0c:c2:ea:b8: 47:73:ac:15:65:1f:43:ef:07:fa:88:0f:c6:95:95:4a:bb:59: 65:3a:84:00:7f:19:26:a1:1d:4d:37:66:1b:a2:87:b4:9f:21: cf:ad:48:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyJA7H7fP8xjToBID0ZA2NocVPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBFQzE4QUUxMDc3MTEyRjMwM0M0Nzk3MTdCN0UxRUFB ODY4RTM1RjAeFw0yNTEyMTcxNzA3MDNaFw0yNTEyMjAyMDUxMDNaMDMxMTAvBgNV BAMTKDcwQTk1ODZBOEVFREZCODY4NjU5QUJFQUUyQzYxQkE0MzlENUY4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxZH6I9Th4w6xrONxKl4ANz0g j1PNZOKujgh9R5EAV8Pqql7EvFl2brZ5SVKm80OGzkuzk8qEJGIAwxTYucezqXbF p3NtUr1nWCrhIRgceqAyrM4pmL92wsLR9clemVeJdnpEIamhL8lEjdwvX8d3n53Y 1yqEICcTLxbfrAxbM6Xj2XQoYSJNzV5MP+c+65GizkM8eHgFQTGs4yvLqjclBegx H2S7sSna7QqgrYwCsZNXPoEjbqAwwoJstuRaNXXk7VjaKPKGI+v38h4FaNladF9d MAwAgkJcpCExZwVeGZ5iOVZSQtJwyYgGBGUCSx6CeZiZvaJ9ML/vNSI13NGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKlYao7t+4aGWavq4sYbpDnV+H4wHwYDVR0j BBgwFoAU4OwYrhB3ES8wPEeXF7fh6qho418wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NTljN2M5Ni03YWJiLTQ1YWMtYTBjYi1kN2ZmZDA5YzE4NzYvMC9FMEVDMThBRTEw NzcxMTJGMzAzQzQ3OTcxN0I3RTFFQUE4NjhFMzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBFQzE4QUUxMDc3MTEyRjMwM0M0Nzk3MTdCN0UxRUFBODY4 RTM1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODU5YzdjOTYtN2FiYi00NWFjLWEw Y2ItZDdmZmQwOWMxODc2LzAvRTBFQzE4QUUxMDc3MTEyRjMwM0M0Nzk3MTdCN0Ux RUFBODY4RTM1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQK2lvEuR6enQpBgpU7GwCdZwLQPGt/6iPr KOGSaetVIZM3CswNX/Dh9sxn3cGv26EU3VKcp1hEOqVRccNqemmFvIJiw4aG8D4q LiM+McsKhx2wjeVLpLfXSySodGikh9hJ020bX+pTEFwrzPY75OSnfp4zmPjjrSIq PIIlwLx40F/nIGkH0htiK9WKrbp9eoqQMEIT+FXSIKpY0OkssRZe6ZfLJz+dKWnj DP666TrAE33HBZacxIhcKYS9VZLsmoY8ejdXvSZeSN8XItVzHRaElp3RDMLquEdz rBVlH0PvB/qID8aVlUq7WWU6hAB/GSahHU03Zhuih7SfIc+tSAI= -----END CERTIFICATE-----Generated at Fri Dec 19 12:58:25 2025 by rpki-client