This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft File: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft (raw, json) Hash identifier: wx7v4R76M1f7T1ci1Yd3Cqk1nK6zc+v4BlrxbXB5Sko= Subject key identifier: 75:63:7A:86:12:83:27:BC:F4:4F:88:5B:6A:E6:D3:2D:65:78:E3:FD Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 Certificate issuer: /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Certificate serial: 63BF22595EF8F8E75C1FE38F5CE6827D6FA46C74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft Manifest number: 01A0 Signing time: Wed 24 Dec 2025 06:41:29 +0000 Manifest this update: Wed 24 Dec 2025 06:36:29 +0000 Manifest next update: Sat 27 Dec 2025 08:36:29 +0000 Files and hashes: 1: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (hash: mZAxTr3skSw5Z8e7tPmU/OrFl4lSut1UK4pgkxrw8Us=) 2: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (hash: +9CDenNH43oJ9XkYbEWMdjfmnpMvrt7QWdKjYHPJebM=) 3: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl (hash: 3piq3KnlpO/2TBYOtSC42Fk+4h8/B3cd/hiJ3fP6Oi8=) 4: 3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (hash: kUp7KI2fPhlmcspldsUBOsyjkjUvmMSaheteN59dWW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 08:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bf:22:59:5e:f8:f8:e7:5c:1f:e3:8f:5c:e6:82:7d:6f:a4:6c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Validity Not Before: Dec 24 06:36:29 2025 GMT Not After : Dec 27 08:36:29 2025 GMT Subject: CN=75637A86128327BCF44F885B6AE6D32D6578E3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:1c:ca:56:8e:f1:80:22:3d:20:86:56:e3: 44:39:3b:b8:36:6c:06:83:22:c3:a9:8c:f1:bb:36: 50:c5:0a:2a:b5:a0:1e:31:9b:36:f9:51:6b:b4:df: 82:b3:7a:9b:ec:26:21:35:ed:41:6c:75:27:c7:46: 7b:83:8e:ce:6d:b6:cd:2b:35:10:88:c4:7f:4f:c5: e7:45:ec:94:f5:43:6e:30:f0:02:79:0e:3e:37:2e: c6:c0:e5:37:4a:2a:56:49:16:ba:9e:b0:5d:c3:43: 28:32:a1:37:d5:2d:79:81:1a:0c:14:39:60:a2:93: e6:0a:a2:1d:25:26:b4:42:87:e3:fa:e3:b6:91:bd: 5f:30:55:0e:c2:7e:56:74:ea:c2:b5:21:e1:67:20: 42:b1:73:bd:d1:51:83:48:19:54:16:73:8e:88:34: 0c:f1:2f:29:4c:da:63:0d:81:f9:d9:2c:b3:b0:15: b3:ca:3c:07:d4:1b:1e:2b:fc:3c:1f:46:19:20:52: 89:f1:73:93:f7:f3:9e:d5:6e:74:92:90:9a:da:c2: 4c:24:46:c8:41:ab:6b:a5:d3:4a:84:27:27:f0:20: 74:29:b4:9b:6e:7a:d8:0f:09:e2:aa:20:32:3f:47: 46:50:e0:c9:ee:83:2a:93:14:c2:55:9c:51:d0:b3: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:63:7A:86:12:83:27:BC:F4:4F:88:5B:6A:E6:D3:2D:65:78:E3:FD X509v3 Authority Key Identifier: keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b6:56:5d:b0:f1:ac:c7:6f:ca:85:ba:05:f6:8a:14:ef:28: 01:85:b1:a0:fe:54:68:d0:69:54:e4:5d:94:49:5c:ae:42:5c: 19:81:3a:38:b0:33:c0:77:34:72:3e:e4:b4:f5:ad:ed:1c:84: e6:fc:f7:46:6a:84:c3:ca:c0:f5:48:c1:8f:88:22:c7:78:af: d2:c8:59:d7:54:60:79:a5:e8:e4:6d:75:cf:ba:b4:3e:41:f9: 26:45:c0:d3:2c:75:94:bc:cb:ae:95:ff:dd:5b:d9:8b:75:52: 97:81:51:0d:60:f9:e4:10:9d:9d:ad:27:8e:59:08:74:47:93: 7a:6a:5d:9b:cd:68:55:d8:ab:ec:08:ef:de:a1:48:f3:34:97: e4:06:94:7d:0a:9f:cd:b7:3c:7f:e8:82:d8:29:41:d8:66:f8: 9d:92:30:ba:4d:cd:8c:77:29:89:90:01:7e:df:41:c6:55:21: 45:08:93:ee:b6:36:fa:b4:bb:18:72:b5:f1:e2:4e:d5:cf:dc: 29:6c:42:1f:cf:91:5d:0e:0c:9f:14:75:e0:a9:26:6d:a5:8a: 55:21:60:58:a2:72:c5:84:e9:59:a0:36:35:28:9c:73:4a:62: e4:4d:66:ab:af:c1:83:47:fd:ac:b1:9f:57:a0:cb:66:27:a1: 61:9e:ed:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY78iWV74+OdcH+OPXOaCfW+kbHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3 MkUwRjJDMzAeFw0yNTEyMjQwNjM2MjlaFw0yNTEyMjcwODM2MjlaMDMxMTAvBgNV BAMTKDc1NjM3QTg2MTI4MzI3QkNGNDRGODg1QjZBRTZEMzJENjU3OEUzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpuRzKVo7xgCI9IIZW40Q5O7g2 bAaDIsOpjPG7NlDFCiq1oB4xmzb5UWu034KzepvsJiE17UFsdSfHRnuDjs5tts0r NRCIxH9PxedF7JT1Q24w8AJ5Dj43LsbA5TdKKlZJFrqesF3DQygyoTfVLXmBGgwU OWCik+YKoh0lJrRCh+P647aRvV8wVQ7CflZ06sK1IeFnIEKxc73RUYNIGVQWc46I NAzxLylM2mMNgfnZLLOwFbPKPAfUGx4r/DwfRhkgUonxc5P3857VbnSSkJrawkwk RshBq2ul00qEJyfwIHQptJtuetgPCeKqIDI/R0ZQ4MnugyqTFMJVnFHQs8U5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdWN6hhKDJ7z0T4hbaubTLWV44/0wHwYDVR0j BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1 RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw RjJDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBkMWY0Y2UtMTY5Yi00MzFhLTgy ODYtYzVmM2EwN2JiYmUzLzAvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdF MkU3MkUwRjJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIO2Vl2w8azHb8qFugX2ihTvKAGFsaD+VGjQ aVTkXZRJXK5CXBmBOjiwM8B3NHI+5LT1re0chOb890ZqhMPKwPVIwY+IIsd4r9LI WddUYHml6ORtdc+6tD5B+SZFwNMsdZS8y66V/91b2Yt1UpeBUQ1g+eQQnZ2tJ45Z CHRHk3pqXZvNaFXYq+wI796hSPM0l+QGlH0Kn823PH/ogtgpQdhm+J2SMLpNzYx3 KYmQAX7fQcZVIUUIk+62Nvq0uxhytfHiTtXP3ClsQh/PkV0ODJ8UdeCpJm2lilUh YFiicsWE6VmgNjUonHNKYuRNZquvwYNH/ayxn1egy2YnoWGe7XQ= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:25 2025 by rpki-client