This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: En3WnLnej6R89jb9fQeGxIc+zU0+t7UwlnCJe6rTOvE= Subject key identifier: 75:0A:9B:7C:F4:4A:FA:7A:D7:4E:E1:11:F8:34:3E:B5:09:78:2E:24 Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 3F4EAE634413CC3395262CB0E066DE85D3243D84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 01CB Signing time: Thu 18 Dec 2025 05:01:06 +0000 Manifest this update: Thu 18 Dec 2025 04:56:06 +0000 Manifest next update: Sun 21 Dec 2025 10:09:06 +0000 Files and hashes: 1: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: uICRVqRri8R1EgyBPUsLQp4TscukJjiepoiJFR6/Ibc=) 2: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: O20k7kammI8nCMEpS4GSD6tOsvI4mlkVNS2xMYS6Dm0=) 3: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: IgBk8nUZZ29ZSChbWhRLqEMkR6u+A1fqdcf9ejFY80Y=) 4: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: AgLvlSE1smWWR/jE1YysJDc3mDL4n9sETXp5KZ0HtjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4e:ae:63:44:13:cc:33:95:26:2c:b0:e0:66:de:85:d3:24:3d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Dec 18 04:56:06 2025 GMT Not After : Dec 21 10:09:06 2025 GMT Subject: CN=750A9B7CF44AFA7AD74EE111F8343EB509782E24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:e6:d4:72:84:1d:42:51:ae:37:19:b4:fd: b5:c9:21:f4:0a:04:05:cb:57:df:66:7b:42:79:99: 42:2a:fe:1b:d5:94:8c:ee:ec:00:bf:69:fa:95:6e: a8:ae:0b:a0:0c:a5:df:90:72:ab:76:4e:a0:ea:e8: a7:3d:f7:c6:cb:76:da:75:1d:98:73:c8:23:27:06: de:c6:33:01:ee:ec:a5:c8:bd:97:6b:ce:5d:3d:00: 26:43:0a:af:f7:73:10:a4:25:07:8c:77:c3:83:96: 1f:c0:55:14:eb:b5:47:50:18:57:e7:ea:af:0f:81: f1:bc:99:6c:af:e9:71:ff:a3:77:7a:56:5e:37:40: fc:12:28:4e:7b:4b:a8:00:0b:c9:fb:f0:df:68:de: 7c:a1:ec:55:3f:f1:e7:1e:bc:ff:90:16:68:72:18: 77:50:1a:ea:51:85:02:6f:cc:f0:01:32:71:98:cb: 6e:51:69:33:ee:ac:f7:b2:87:89:f0:cd:32:ce:92: 88:6c:c3:3b:e4:67:40:c9:f8:0b:31:d6:53:be:b9: 46:d1:b4:48:c5:81:a1:c5:b5:7a:54:cc:85:22:7a: 15:19:04:86:bf:e5:13:e4:97:04:b8:12:b3:2d:68: 0e:63:45:90:06:12:88:09:22:ba:10:4e:39:f1:d9: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0A:9B:7C:F4:4A:FA:7A:D7:4E:E1:11:F8:34:3E:B5:09:78:2E:24 X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:7e:53:09:77:0d:c6:57:34:14:bc:d0:5f:44:45:cf:88:0b: 69:25:dd:fd:67:2e:4b:9d:21:0b:d1:ac:09:c1:e4:36:34:25: c7:c8:af:d4:3f:cc:e9:40:46:a7:1f:2e:f0:09:79:1d:e5:5f: 7f:9c:7e:76:4b:73:d3:45:01:18:bc:60:2e:52:40:98:c3:56: 4c:a5:ca:75:f7:67:fb:e7:98:6d:68:70:65:1e:e8:df:f6:2d: 62:ca:3f:1c:6a:75:16:16:fd:aa:d7:2e:4f:28:2a:ec:7a:9a: 71:db:f3:90:cb:6e:88:41:9c:1f:bc:c0:fb:61:b7:64:ba:40: 3f:4c:1f:b2:75:8c:03:70:e3:96:35:eb:78:cc:71:57:7c:80: c0:62:27:5f:09:e9:fc:86:c4:45:ef:52:a2:10:e6:d1:24:a2: 05:25:b7:2e:ae:56:3c:90:ed:be:35:a8:fa:75:28:d3:be:44: 06:c5:c5:ab:20:df:a6:bf:4b:89:16:0d:3b:44:c0:5c:d8:e7: d1:ff:d0:1d:54:e2:fe:a1:06:5b:fb:cb:6f:3a:26:0e:5c:05: 0f:9c:04:d0:9c:4e:99:6b:8f:a1:28:c9:75:2c:af:9b:3f:32: 7b:25:83:fc:f4:4d:00:db:61:bc:42:53:6b:f0:d4:c7:e8:5e: 32:44:5a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP06uY0QTzDOVJiyw4GbehdMkPYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNTEyMTgwNDU2MDZaFw0yNTEyMjExMDA5MDZaMDMxMTAvBgNV BAMTKDc1MEE5QjdDRjQ0QUZBN0FENzRFRTExMUY4MzQzRUI1MDk3ODJFMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8ubUcoQdQlGuNxm0/bXJIfQK BAXLV99me0J5mUIq/hvVlIzu7AC/afqVbqiuC6AMpd+Qcqt2TqDq6Kc998bLdtp1 HZhzyCMnBt7GMwHu7KXIvZdrzl09ACZDCq/3cxCkJQeMd8ODlh/AVRTrtUdQGFfn 6q8PgfG8mWyv6XH/o3d6Vl43QPwSKE57S6gAC8n78N9o3nyh7FU/8ecevP+QFmhy GHdQGupRhQJvzPABMnGYy25RaTPurPeyh4nwzTLOkohswzvkZ0DJ+Asx1lO+uUbR tEjFgaHFtXpUzIUiehUZBIa/5RPklwS4ErMtaA5jRZAGEogJIroQTjnx2bGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdQqbfPRK+nrXTuER+DQ+tQl4LiQwHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZ+Uwl3DcZXNBS80F9ERc+IC2kl3f1nLkud IQvRrAnB5DY0JcfIr9Q/zOlARqcfLvAJeR3lX3+cfnZLc9NFARi8YC5SQJjDVkyl ynX3Z/vnmG1ocGUe6N/2LWLKPxxqdRYW/arXLk8oKux6mnHb85DLbohBnB+8wPth t2S6QD9MH7J1jANw45Y163jMcVd8gMBiJ18J6fyGxEXvUqIQ5tEkogUlty6uVjyQ 7b41qPp1KNO+RAbFxasg36a/S4kWDTtEwFzY59H/0B1U4v6hBlv7y286Jg5cBQ+c BNCcTplrj6EoyXUsr5s/Mnslg/z0TQDbYbxCU2vw1MfoXjJEWo4= -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:55 2025 by rpki-client