This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: AzMMZPDjxWshOmB1M64Tc+KMlitOEnanmaAXdjKl+Pc= Subject key identifier: C8:10:14:89:1A:D7:30:4E:5A:BA:8C:B2:D8:9B:4E:0F:A4:47:B2:00 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 10DC46072A4BAA49D6CF7F83A3925A6900E59EC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 0230 Signing time: Wed 24 Dec 2025 03:31:08 +0000 Manifest this update: Wed 24 Dec 2025 03:26:08 +0000 Manifest next update: Sat 27 Dec 2025 11:43:08 +0000 Files and hashes: 1: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) 2: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: fvuCynBU5Epqd/thaGvPLcY4ypXbUcKWvIAx+HxKlk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:dc:46:07:2a:4b:aa:49:d6:cf:7f:83:a3:92:5a:69:00:e5:9e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Dec 24 03:26:08 2025 GMT Not After : Dec 27 11:43:08 2025 GMT Subject: CN=C81014891AD7304E5ABA8CB2D89B4E0FA447B200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:98:db:58:05:97:6a:58:30:92:de:48:40: ef:3e:ee:fc:77:41:50:da:8a:dd:a5:39:47:8b:82: e6:7d:4a:68:50:b8:f8:d0:63:a5:d4:8f:38:6d:d0: 75:d0:8d:44:85:bd:db:9d:2e:a2:93:03:02:c6:e8: b9:6f:39:0c:12:96:a1:e0:d3:c6:b3:e3:63:0c:08: 61:ea:da:57:6b:63:15:d6:9b:7f:ae:dd:97:5b:b9: be:56:a5:cb:fc:93:81:21:7e:45:c4:a1:89:f9:ed: d2:00:ae:08:55:d8:43:19:9d:c2:18:68:08:0b:e0: ab:a6:69:36:bc:ed:01:e0:0b:82:a2:dc:56:70:3b: 5e:e0:4b:bf:46:78:eb:e6:2a:cf:95:31:6d:e4:8f: 65:9b:31:e2:52:e2:89:a3:bc:79:21:7f:93:76:02: 03:74:25:e9:65:c2:92:15:a0:97:b7:76:c5:9c:e4: b6:a7:a8:be:73:63:9e:d9:12:80:74:5a:61:c5:5d: 7c:a8:ad:7f:54:5c:b3:17:35:58:16:69:02:dc:90: 00:d5:b6:53:2a:9f:05:c9:ff:61:fd:2c:c8:d6:bd: 74:b5:fc:88:6f:e0:0f:d6:9a:7d:61:13:fb:cc:1a: 52:22:48:cf:f9:65:02:a9:c3:0c:21:0f:52:1f:46: ee:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:10:14:89:1A:D7:30:4E:5A:BA:8C:B2:D8:9B:4E:0F:A4:47:B2:00 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3f:ba:23:a0:9e:99:b3:8b:7a:8f:b2:a7:a5:43:f3:ba:a4: 1c:b5:1f:24:40:c0:80:47:87:c3:8b:52:e0:90:ea:55:af:32: 30:dc:1f:06:43:87:ff:c0:0d:3b:7e:f2:08:d4:d0:dd:63:ea: 03:f6:ef:3f:d2:b8:5e:a1:85:38:24:be:bf:c8:aa:74:e0:e7: 28:60:fc:21:c8:5c:e6:47:3b:b5:ab:45:f0:ca:cd:98:e4:44: 2b:40:9e:92:cc:68:0c:f2:37:1d:6a:30:7e:02:5a:35:a0:34: 0e:20:43:75:88:e7:a8:c4:b9:ef:4c:50:66:79:0c:e3:34:60: 44:18:1e:42:7e:a3:7b:fb:b4:21:be:ad:01:89:98:87:7c:da: 89:de:cf:da:ac:2e:83:db:50:ab:91:71:90:22:14:89:e0:9c: b9:84:e5:48:48:70:84:4f:7c:47:1e:c4:ab:d5:c5:34:c0:7e: 8d:22:49:05:5d:1c:30:7d:c1:8a:53:ee:1e:8c:4f:c5:dc:c2: e0:0e:06:98:c3:4f:0f:6c:05:07:5d:0d:df:53:d0:55:46:57: a0:b8:05:da:06:e8:c1:e9:24:00:46:80:d7:45:f1:7d:ff:52: 76:f1:6a:37:57:c9:6e:a8:10:b7:27:5b:a0:0c:36:d5:43:84: 65:71:a4:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENxGBypLqknWz3+Do5JaaQDlnsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTEyMjQwMzI2MDhaFw0yNTEyMjcxMTQzMDhaMDMxMTAvBgNV BAMTKEM4MTAxNDg5MUFENzMwNEU1QUJBOENCMkQ4OUI0RTBGQTQ0N0IyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDT5jbWAWXalgwkt5IQO8+7vx3 QVDait2lOUeLguZ9SmhQuPjQY6XUjzht0HXQjUSFvdudLqKTAwLG6LlvOQwSlqHg 08az42MMCGHq2ldrYxXWm3+u3Zdbub5Wpcv8k4EhfkXEoYn57dIArghV2EMZncIY aAgL4KumaTa87QHgC4Ki3FZwO17gS79GeOvmKs+VMW3kj2WbMeJS4omjvHkhf5N2 AgN0JellwpIVoJe3dsWc5LanqL5zY57ZEoB0WmHFXXyorX9UXLMXNVgWaQLckADV tlMqnwXJ/2H9LMjWvXS1/Ihv4A/Wmn1hE/vMGlIiSM/5ZQKpwwwhD1IfRu6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyBAUiRrXME5auoyy2JtOD6RHsgAwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADw/uiOgnpmzi3qPsqelQ/O6pBy1HyRAwIBH h8OLUuCQ6lWvMjDcHwZDh//ADTt+8gjU0N1j6gP27z/SuF6hhTgkvr/IqnTg5yhg /CHIXOZHO7WrRfDKzZjkRCtAnpLMaAzyNx1qMH4CWjWgNA4gQ3WI56jEue9MUGZ5 DOM0YEQYHkJ+o3v7tCG+rQGJmId82onez9qsLoPbUKuRcZAiFIngnLmE5UhIcIRP fEcexKvVxTTAfo0iSQVdHDB9wYpT7h6MT8XcwuAOBpjDTw9sBQddDd9T0FVGV6C4 BdoG6MHpJABGgNdF8X3/UnbxajdXyW6oELcnW6AMNtVDhGVxpFI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:01 2025 by rpki-client