This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft File: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json) Hash identifier: 1weCtcWJPwsytpZqW6HIKU8u53gis2ZMsjIFHoKIZ4Y= Subject key identifier: 82:E3:27:7C:AF:2E:0A:B5:14:59:48:52:76:EB:54:7C:8E:C7:95:FD Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Certificate serial: 4F88BC0AC3CD67D7E8B4CEFFD8DFAEFEDDA9909A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft Manifest number: 021D Signing time: Tue 16 Dec 2025 14:21:57 +0000 Manifest this update: Tue 16 Dec 2025 14:16:57 +0000 Manifest next update: Sat 20 Dec 2025 01:17:57 +0000 Files and hashes: 1: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: IXuTbrVds45PD12w7kAN8T3nDZaj12OlrbaO/PnOVgY=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: ztOieajHr1k+CIYjNgErkUbe6vEvP2EXx+nQ8S+WL90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:88:bc:0a:c3:cd:67:d7:e8:b4:ce:ff:d8:df:ae:fe:dd:a9:90:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Validity Not Before: Dec 16 14:16:57 2025 GMT Not After : Dec 20 01:17:57 2025 GMT Subject: CN=82E3277CAF2E0AB51459485276EB547C8EC795FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a9:50:57:94:50:d7:4a:4a:66:45:69:8a:6d: 6a:cf:b5:db:7d:42:cd:e9:c7:79:47:22:2c:c8:ea: 01:9f:69:f4:6d:b9:75:3c:d7:5d:04:08:7f:de:4b: 4d:cc:a9:cb:f3:8d:a6:d5:a9:76:1c:a3:74:29:59: 6a:11:1b:da:1b:ba:3e:89:f5:26:51:69:26:e5:97: 6d:51:82:16:5f:a1:9a:ad:7a:70:fd:58:4b:a6:94: 53:2e:c5:08:94:a3:84:1b:69:fb:89:6c:cd:97:4f: e0:68:43:9c:b7:d1:89:f5:6b:10:a8:2a:97:51:32: 50:4f:0d:71:1b:25:f3:e4:b0:de:27:11:8f:39:34: 98:6e:c4:5c:55:5d:74:a1:e0:cc:f5:1f:d3:e1:40: bf:dd:c8:f5:b7:f5:d4:70:11:3d:52:12:42:77:2e: 36:7d:85:f5:ea:75:24:3c:93:f2:c8:76:0a:5c:33: ee:d1:c3:a1:7e:ac:f6:1f:e1:ba:87:08:b2:1c:45: 6e:c2:c0:33:ab:2e:77:00:e2:43:03:bd:94:04:0d: 76:91:ac:2c:84:e9:3e:5c:4d:37:21:fe:79:0e:9a: 6c:7f:c8:6b:26:90:31:c8:69:3e:ff:38:f1:90:36: 8e:8e:7a:93:21:c7:32:98:7a:92:31:77:f0:a0:85: 30:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E3:27:7C:AF:2E:0A:B5:14:59:48:52:76:EB:54:7C:8E:C7:95:FD X509v3 Authority Key Identifier: keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:df:db:5c:ab:0b:cc:66:b8:f3:b0:4e:b0:eb:f7:08:d0:45: f8:e2:a7:0d:19:15:6a:15:d3:fc:78:52:50:7c:aa:3b:ba:45: 1a:1e:3d:ef:c4:59:02:e0:68:3f:b3:0b:03:ef:7a:fa:7b:d4: c8:7f:86:5b:3c:5e:26:16:7d:60:10:38:0b:bb:32:0c:c4:d0: 3b:fa:00:e6:38:13:f3:15:1d:b2:cd:6d:a1:87:48:c4:37:b2: 2e:4a:40:d8:fb:1d:3c:cc:de:35:1b:f4:b0:5b:6c:c5:a5:e6: c0:37:9f:5b:66:c6:6c:5a:f5:40:4a:e8:aa:88:6f:1f:1c:b1: 01:e8:a8:da:25:f6:0a:fa:90:0d:c5:08:0c:aa:f2:15:0e:32: 87:81:cd:e3:5c:a1:7c:35:77:cb:ac:19:7a:89:e0:6c:20:f3: 06:8d:39:42:03:02:fb:47:9a:c3:5c:f5:29:93:a9:cd:7b:e1: 7d:f3:5b:84:c2:16:f7:6e:fc:0c:e9:74:33:23:51:a2:e5:fa: 1e:5e:0e:29:fb:64:e6:40:1b:47:86:ba:86:72:d2:1f:0a:19: 1c:77:8e:01:1b:98:8a:b5:76:ab:46:e3:ef:54:c0:a8:92:a0: 06:88:bc:ca:4a:73:f2:fb:4a:cb:61:3d:37:68:d6:2b:13:10: 0f:09:51:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4i8CsPNZ9fotM7/2N+u/t2pkJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG ODdGM0VDODAeFw0yNTEyMTYxNDE2NTdaFw0yNTEyMjAwMTE3NTdaMDMxMTAvBgNV BAMTKDgyRTMyNzdDQUYyRTBBQjUxNDU5NDg1Mjc2RUI1NDdDOEVDNzk1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqVBXlFDXSkpmRWmKbWrPtdt9 Qs3px3lHIizI6gGfafRtuXU8110ECH/eS03MqcvzjabVqXYco3QpWWoRG9obuj6J 9SZRaSbll21RghZfoZqtenD9WEumlFMuxQiUo4QbafuJbM2XT+BoQ5y30Yn1axCo KpdRMlBPDXEbJfPksN4nEY85NJhuxFxVXXSh4Mz1H9PhQL/dyPW39dRwET1SEkJ3 LjZ9hfXqdSQ8k/LIdgpcM+7Rw6F+rPYf4bqHCLIcRW7CwDOrLncA4kMDvZQEDXaR rCyE6T5cTTch/nkOmmx/yGsmkDHIaT7/OPGQNo6OepMhxzKYepIxd/CghTB3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUguMnfK8uCrUUWUhSdutUfI7Hlf0wHwYDVR0j BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG M0VDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBB MjhGODdGM0VDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHf21yrC8xmuPOwTrDr9wjQRfjipw0ZFWoV 0/x4UlB8qju6RRoePe/EWQLgaD+zCwPvevp71Mh/hls8XiYWfWAQOAu7MgzE0Dv6 AOY4E/MVHbLNbaGHSMQ3si5KQNj7HTzM3jUb9LBbbMWl5sA3n1tmxmxa9UBK6KqI bx8csQHoqNol9gr6kA3FCAyq8hUOMoeBzeNcoXw1d8usGXqJ4Gwg8waNOUIDAvtH msNc9SmTqc174X3zW4TCFvdu/AzpdDMjUaLl+h5eDin7ZOZAG0eGuoZy0h8KGRx3 jgEbmIq1dqtG4+9UwKiSoAaIvMpKc/L7SsthPTdo1isTEA8JUQI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:56 2025 by rpki-client