This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: yPQMMm/BVMOig3iHv6ZO4NTFeDxcp+qGTuRHoFMnRgs= Subject key identifier: AC:E5:CC:43:A5:6D:E7:E3:8F:A8:6C:B3:0A:F0:CF:01:00:28:DA:CD Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 689CAE4F26D452B36E88A3A81E2FD68191653F13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 01E7 Signing time: Wed 17 Dec 2025 20:41:37 +0000 Manifest this update: Wed 17 Dec 2025 20:36:37 +0000 Manifest next update: Sun 21 Dec 2025 06:36:37 +0000 Files and hashes: 1: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: 1A0faaRHeU3eVFXvQpq5IlEqHrUWr50qT9yhshu30mE=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: 80MS0ZuTW+5iQNzQYBDQPZfjWsQsANAR7yyCgQ7zGBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9c:ae:4f:26:d4:52:b3:6e:88:a3:a8:1e:2f:d6:81:91:65:3f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Dec 17 20:36:37 2025 GMT Not After : Dec 21 06:36:37 2025 GMT Subject: CN=ACE5CC43A56DE7E38FA86CB30AF0CF010028DACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:00:c3:4e:5a:ff:96:e7:f5:41:a7:d5:af:19: a0:42:cd:ce:5a:7e:15:80:fb:c5:74:63:b7:83:1d: 7d:40:a7:6d:6e:29:9b:22:f3:0e:59:ef:fc:99:28: c5:9d:23:92:86:fd:6e:71:91:15:3c:8c:7b:76:fd: 6d:52:8c:de:77:8a:b8:05:11:ad:35:2a:55:18:f9: 0b:82:cb:47:a1:db:6f:55:0c:a4:d2:6f:ad:ca:f8: 90:6d:4f:cf:f1:00:d2:f0:16:f0:dd:05:3a:89:95: a7:b9:fe:a0:fc:1a:fe:19:11:61:a0:cb:73:e7:b7: 29:b6:47:b7:6e:10:75:c0:1d:59:de:17:6a:83:ce: 7f:69:9e:68:dd:9b:33:ff:69:27:c4:f3:c0:3f:c6: ee:f4:fa:01:d7:9f:6d:e7:db:09:bf:44:2f:24:7d: 06:1c:f2:d9:3c:93:7d:e1:6e:70:26:c6:0c:f4:d7: d2:2e:6d:52:23:43:8e:44:55:46:f1:67:c2:81:41: e3:ef:48:08:47:8f:ef:ba:97:25:05:88:c7:f6:f9: 21:6d:e5:96:98:59:b5:2d:11:e6:81:81:1a:3e:27: 05:0b:c0:23:ae:c8:ee:3f:2b:46:b8:eb:17:0e:6a: cd:b1:bb:79:25:76:07:22:e7:f4:62:99:5f:bf:33: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E5:CC:43:A5:6D:E7:E3:8F:A8:6C:B3:0A:F0:CF:01:00:28:DA:CD X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:64:3c:96:0d:a6:79:f5:00:2f:eb:f2:9b:b5:f2:57:80:01: 18:e2:ad:a6:46:aa:cc:54:fe:99:bc:14:4e:25:13:ef:27:d8: 7d:ec:83:f2:6d:81:95:5f:8c:e7:68:7a:0f:98:44:28:12:43: ed:d9:26:66:57:df:f6:24:00:fd:a1:9a:be:92:b2:5c:1d:2e: cb:3b:cb:c1:2f:d7:6b:fd:46:80:24:e1:db:78:20:af:79:2c: a2:6b:e2:4e:c5:0e:49:da:4d:8f:3a:84:b7:80:ba:2c:8a:9e: 82:4c:16:3e:d0:07:23:c4:1b:eb:7e:3e:ac:b6:dc:73:11:9c: f5:68:e4:ff:de:2e:6f:22:58:23:3e:13:29:69:e6:48:a6:64: 2f:53:64:f8:2d:42:ce:1d:ed:e0:4e:30:88:62:b9:f1:78:c8: 56:f8:ad:9b:14:15:f2:fa:50:1a:51:b9:1f:80:49:c1:f4:0e: 77:ec:6b:c7:8f:b8:3d:25:5f:82:19:70:ba:8a:90:a2:aa:b1: 79:eb:89:04:8c:e5:af:19:fe:1b:10:4d:b4:ae:2f:4e:44:a6: a5:9e:bf:ee:68:c6:15:bb:8a:e4:da:5a:c6:53:a9:a6:1a:82: 55:77:51:ad:d8:5b:f7:a4:da:f0:58:9c:ef:c9:58:45:6c:dc: 69:6d:c1:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJyuTybUUrNuiKOoHi/WgZFlPxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTEyMTcyMDM2MzdaFw0yNTEyMjEwNjM2MzdaMDMxMTAvBgNV BAMTKEFDRTVDQzQzQTU2REU3RTM4RkE4NkNCMzBBRjBDRjAxMDAyOERBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAMNOWv+W5/VBp9WvGaBCzc5a fhWA+8V0Y7eDHX1Ap21uKZsi8w5Z7/yZKMWdI5KG/W5xkRU8jHt2/W1SjN53irgF Ea01KlUY+QuCy0eh229VDKTSb63K+JBtT8/xANLwFvDdBTqJlae5/qD8Gv4ZEWGg y3Pntym2R7duEHXAHVneF2qDzn9pnmjdmzP/aSfE88A/xu70+gHXn23n2wm/RC8k fQYc8tk8k33hbnAmxgz019IubVIjQ45EVUbxZ8KBQePvSAhHj++6lyUFiMf2+SFt 5ZaYWbUtEeaBgRo+JwULwCOuyO4/K0a46xcOas2xu3kldgci5/RimV+/M/KNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrOXMQ6Vt5+OPqGyzCvDPAQAo2s0wHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpkPJYNpnn1AC/r8pu18leAARjiraZGqsxU /pm8FE4lE+8n2H3sg/JtgZVfjOdoeg+YRCgSQ+3ZJmZX3/YkAP2hmr6SslwdLss7 y8Ev12v9RoAk4dt4IK95LKJr4k7FDknaTY86hLeAuiyKnoJMFj7QByPEG+t+Pqy2 3HMRnPVo5P/eLm8iWCM+Eylp5kimZC9TZPgtQs4d7eBOMIhiufF4yFb4rZsUFfL6 UBpRuR+AScH0Dnfsa8ePuD0lX4IZcLqKkKKqsXnriQSM5a8Z/hsQTbSuL05EpqWe v+5oxhW7iuTaWsZTqaYaglV3Ua3YW/ek2vBYnO/JWEVs3GltwbA= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:42 2025 by rpki-client