This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft File: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft (raw, json) Hash identifier: l+KISCwO4v0BHedMyEGuVNj3t1isWyQTW9d0rpju0gM= Subject key identifier: 36:A0:B9:B0:BA:1B:8D:0F:27:86:5C:60:CF:C6:FA:CF:5A:47:54:AD Authority key identifier: E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 Certificate issuer: /CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Certificate serial: 320A3425DEBAAB80C6CD3876E453BAAB981E2A85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft Manifest number: 02EE Signing time: Tue 23 Dec 2025 07:11:35 +0000 Manifest this update: Tue 23 Dec 2025 07:06:35 +0000 Manifest next update: Fri 26 Dec 2025 16:44:35 +0000 Files and hashes: 1: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl (hash: H/0Mk5nkGMFPYlx76CwqI95BWiJ8djYRxGm0JvKmhLs=) 2: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: XFCtvmMAAUBkMVCFTzI1cVSJed8FZNsw+FTnuaIBLa8=) 3: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: Brdn2dLUZTxd6fnM4xWw5E67aagF7MF4tCt2gy0nMwM=) 4: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: s+fqkugTUtrfTnYLMhS2gRWf2sStTpZQt4ymRPeizms=) 5: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: rkQIsU4mH+wmPkEwMYQGKlUQJZpq5skC0u2AtTeyAJY=) 6: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: Kwtm71D/Z6NhSfdr0MOgpN01lazOwL/r2/rIVuBoO7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 16:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0a:34:25:de:ba:ab:80:c6:cd:38:76:e4:53:ba:ab:98:1e:2a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Validity Not Before: Dec 23 07:06:35 2025 GMT Not After : Dec 26 16:44:35 2025 GMT Subject: CN=36A0B9B0BA1B8D0F27865C60CFC6FACF5A4754AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:e7:3c:80:47:c2:57:07:49:d5:e7:7b:e5: cb:07:49:5c:b6:97:5f:7d:58:58:d8:28:ca:c5:8e: 40:5f:a0:a2:68:78:58:65:0d:4b:31:7b:b2:35:6f: f6:f8:43:dc:a7:a0:ca:2b:3a:41:69:1c:8e:c5:ff: be:da:12:a0:83:e8:b0:e3:0f:09:09:ab:b2:02:6a: 63:8b:8e:3f:f4:59:96:57:6b:2a:c0:37:32:bf:6b: 90:44:19:3a:3d:92:58:65:f0:05:65:ab:43:b3:8d: 37:0b:4c:e1:ab:c0:9a:d6:4a:38:aa:d3:e8:2b:2f: d1:73:6b:d9:93:68:40:ad:48:75:8f:13:f3:5d:43: c3:5e:1b:36:4c:15:72:0a:d5:a0:39:2f:69:15:8d: 88:a9:4d:ac:29:e3:84:29:6f:d3:94:d3:30:9b:8e: 8f:a7:04:79:2e:86:f0:79:9a:e0:7e:35:df:28:7e: c6:3b:84:42:10:cd:de:2e:05:5f:28:04:08:fa:78: d7:82:ef:95:99:60:af:a5:53:20:d7:be:78:2a:63: b9:f2:22:46:84:b9:6f:5d:46:da:9f:0b:46:56:cb: 4b:e0:cb:50:3a:ae:ee:e7:7c:f5:d5:af:fa:e6:1b: 3a:68:40:cd:d5:0e:40:fd:b5:d9:a2:34:84:0f:f5: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A0:B9:B0:BA:1B:8D:0F:27:86:5C:60:CF:C6:FA:CF:5A:47:54:AD X509v3 Authority Key Identifier: keyid:E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9c:00:8c:67:d6:20:54:d3:cd:97:4a:f0:73:a5:39:33:c5: 69:d8:c6:5c:70:9f:8c:7f:9a:33:1e:a0:8b:9f:18:29:3d:ac: ad:f2:63:e6:54:f3:ae:43:46:a7:53:82:00:0b:59:23:e3:0a: b1:ca:99:88:e5:f3:5a:bd:ab:1c:9c:a7:f0:c6:5f:b4:6a:71: 66:6f:e9:00:57:f0:6a:49:2d:61:18:a2:69:fd:f4:61:52:8f: 48:17:8f:98:0b:a2:a2:91:c2:75:f2:12:a6:f9:6d:74:b7:47: e0:19:18:78:0d:e7:3f:35:6b:42:2c:87:c4:4e:be:3e:08:8f: d5:76:eb:3a:63:f4:ff:40:91:4a:41:59:db:5d:3b:39:bf:f1: f2:6e:f5:13:dd:36:e3:e4:e0:0e:23:4c:56:2e:4c:0d:57:94: fa:89:0b:6a:a1:98:9e:d6:c9:2b:fb:30:f5:f1:26:fd:bd:4e: ae:7e:ca:20:de:93:59:b2:95:85:2f:db:dc:47:46:0b:4e:55: d5:d5:5f:ef:fd:e7:10:97:94:67:fa:fe:5a:49:02:a2:bd:01: e7:33:e4:72:9c:6f:ef:96:80:7c:c6:b7:9e:31:9a:03:79:ba: ef:ed:10:e5:8f:3f:80:d0:d6:94:ba:81:e1:b2:23:0d:7c:96: a4:8e:37:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgo0Jd66q4DGzTh25FO6q5geKoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFD REI2OTJBNDAeFw0yNTEyMjMwNzA2MzVaFw0yNTEyMjYxNjQ0MzVaMDMxMTAvBgNV BAMTKDM2QTBCOUIwQkExQjhEMEYyNzg2NUM2MENGQzZGQUNGNUE0NzU0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKr+c8gEfCVwdJ1ed75csHSVy2 l199WFjYKMrFjkBfoKJoeFhlDUsxe7I1b/b4Q9ynoMorOkFpHI7F/77aEqCD6LDj DwkJq7ICamOLjj/0WZZXayrANzK/a5BEGTo9klhl8AVlq0OzjTcLTOGrwJrWSjiq 0+grL9Fza9mTaECtSHWPE/NdQ8NeGzZMFXIK1aA5L2kVjYipTawp44Qpb9OU0zCb jo+nBHkuhvB5muB+Nd8ofsY7hEIQzd4uBV8oBAj6eNeC75WZYK+lUyDXvngqY7ny IkaEuW9dRtqfC0ZWy0vgy1A6ru7nfPXVr/rmGzpoQM3VDkD9tdmiNIQP9TvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNqC5sLobjQ8nhlxgz8b6z1pHVK0wHwYDVR0j BBgwFoAU4aJLCY6awHxlj2r+4JkHUc22kqQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGFhNGMwZi05OTkyLTQyZmMtYTU0Mi1lZmY3NDA5MWIzMzQvMC9FMUEyNEIwOThF OUFDMDdDNjU4RjZBRkVFMDk5MDc1MUNEQjY5MkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFDREI2 OTJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3 NTFDREI2OTJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAecAIxn1iBU082XSvBzpTkzxWnYxlxwn4x/ mjMeoIufGCk9rK3yY+ZU865DRqdTggALWSPjCrHKmYjl81q9qxycp/DGX7RqcWZv 6QBX8GpJLWEYomn99GFSj0gXj5gLoqKRwnXyEqb5bXS3R+AZGHgN5z81a0Ish8RO vj4Ij9V26zpj9P9AkUpBWdtdOzm/8fJu9RPdNuPk4A4jTFYuTA1XlPqJC2qhmJ7W ySv7MPXxJv29Tq5+yiDek1mylYUv29xHRgtOVdXVX+/95xCXlGf6/lpJAqK9Aecz 5HKcb++WgHzGt54xmgN5uu/tEOWPP4DQ1pS6geGyIw18lqSON+c= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:03 2025 by rpki-client