This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: Ygio21FLVrzzaUIJXLuSzHaWnBvq6OEwu1EYAj/qdZg= Subject key identifier: 67:0F:64:41:63:AD:AC:42:FE:11:B3:2E:BE:71:E9:40:72:A4:97:2A Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 3647B00E9C6FD29D4D790BC12AA29D7C87C95620 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 0201 Signing time: Thu 18 Dec 2025 22:00:49 +0000 Manifest this update: Thu 18 Dec 2025 21:55:49 +0000 Manifest next update: Mon 22 Dec 2025 01:26:49 +0000 Files and hashes: 1: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=) 2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=) 3: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=) 4: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: svMpgdEeWPT3cDGVG715G7f0arZjdo3p6IIO8s5DnQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:47:b0:0e:9c:6f:d2:9d:4d:79:0b:c1:2a:a2:9d:7c:87:c9:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Dec 18 21:55:49 2025 GMT Not After : Dec 22 01:26:49 2025 GMT Subject: CN=670F644163ADAC42FE11B32EBE71E94072A4972A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:d6:c5:81:c3:7f:b4:b4:7e:39:15:0d:d2: 7b:7d:65:03:24:42:ec:3c:5d:ed:25:d8:f4:eb:ce: 8f:0e:1c:b2:5d:90:ac:1f:06:12:26:3f:3e:36:04: f0:1d:8e:0d:f2:dd:b7:38:d7:a3:bf:b5:24:95:20: 51:56:c2:42:78:cb:f0:44:b6:70:a1:e0:d9:92:64: e6:15:66:bc:84:59:6a:9a:90:7b:13:e8:e3:d1:c0: 81:b9:9c:8b:66:2f:86:21:c3:e5:30:33:d5:cf:d7: 50:b9:6c:7a:ea:c3:1e:e2:dd:4c:b2:ea:38:1c:df: d4:0e:4c:5e:cc:13:a3:e4:f3:99:ab:bc:e3:32:90: a2:07:29:7a:76:b3:60:bf:97:a0:a8:71:49:b1:c5: e1:5b:17:d0:c9:78:d5:2c:b9:25:47:d8:01:d2:a2: e6:b6:0c:39:0c:6b:d1:b6:2a:79:a6:d7:7b:b9:8e: 06:be:47:0f:d4:e7:d0:67:de:8d:67:b8:d0:fa:67: a0:87:f8:17:b1:8d:d2:88:a5:3e:18:64:63:cf:4f: 47:52:34:e8:61:e1:12:90:cd:a3:90:b7:c1:d9:05: 02:0f:f4:54:a9:3e:04:cb:4a:92:57:45:a9:2f:96: fc:22:c1:73:41:2e:6f:f3:d5:ca:57:8f:6d:5a:62: 4e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0F:64:41:63:AD:AC:42:FE:11:B3:2E:BE:71:E9:40:72:A4:97:2A X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:99:c4:af:bf:f9:6b:f1:6e:81:de:bc:fa:be:0c:06:b1:d4: da:65:d3:99:05:5e:53:ae:ab:19:da:3c:cf:a5:c3:82:b4:6d: f8:12:d5:51:92:d2:51:8c:c9:47:d2:e2:c9:eb:fa:8f:53:8f: 49:40:bd:74:eb:35:2e:5c:c3:a3:7c:6a:68:39:d2:7e:7d:88: 95:f1:7a:93:6a:b5:f7:92:f9:f7:d7:7e:ba:39:6a:e0:1f:3d: bb:a8:97:8f:4f:2c:8f:ee:f4:89:ed:cf:fd:bd:1f:b6:23:b4: 75:e6:da:dd:9f:8b:ba:8c:28:d5:1d:a4:01:a1:ed:6a:a9:c0: c0:90:9d:5e:62:3e:2a:4a:f9:50:34:cd:44:74:e2:c0:09:43: fd:46:1c:a7:58:08:8e:b3:ed:cb:2d:1a:bc:51:db:32:4c:50: 5a:5a:4a:ff:67:68:24:dc:0d:50:96:ef:a4:bc:14:fb:e0:e0: b6:06:aa:51:2a:71:c9:8e:de:34:fb:ed:6b:99:a4:29:49:45: e7:d7:61:aa:11:33:0f:ec:9f:b2:5b:3a:46:11:90:e0:56:d2: d3:8d:70:0e:f1:e1:cc:bb:2b:24:2d:3a:88:d1:a2:6b:97:04: 12:f1:76:3a:66:0b:ae:b7:47:f0:37:0f:d1:89:c9:a8:ce:03: 50:9c:88:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkewDpxv0p1NeQvBKqKdfIfJViAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNTEyMTgyMTU1NDlaFw0yNTEyMjIwMTI2NDlaMDMxMTAvBgNV BAMTKDY3MEY2NDQxNjNBREFDNDJGRTExQjMyRUJFNzFFOTQwNzJBNDk3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiS9bFgcN/tLR+ORUN0nt9ZQMk Quw8Xe0l2PTrzo8OHLJdkKwfBhImPz42BPAdjg3y3bc416O/tSSVIFFWwkJ4y/BE tnCh4NmSZOYVZryEWWqakHsT6OPRwIG5nItmL4Yhw+UwM9XP11C5bHrqwx7i3Uyy 6jgc39QOTF7ME6Pk85mrvOMykKIHKXp2s2C/l6CocUmxxeFbF9DJeNUsuSVH2AHS oua2DDkMa9G2Knmm13u5jga+Rw/U59Bn3o1nuND6Z6CH+BexjdKIpT4YZGPPT0dS NOhh4RKQzaOQt8HZBQIP9FSpPgTLSpJXRakvlvwiwXNBLm/z1cpXj21aYk77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZw9kQWOtrEL+EbMuvnHpQHKklyowHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuZxK+/+WvxboHevPq+DAax1Npl05kFXlOu qxnaPM+lw4K0bfgS1VGS0lGMyUfS4snr+o9Tj0lAvXTrNS5cw6N8amg50n59iJXx epNqtfeS+ffXfro5auAfPbuol49PLI/u9Intz/29H7YjtHXm2t2fi7qMKNUdpAGh 7WqpwMCQnV5iPipK+VA0zUR04sAJQ/1GHKdYCI6z7cstGrxR2zJMUFpaSv9naCTc DVCW76S8FPvg4LYGqlEqccmO3jT77WuZpClJRefXYaoRMw/sn7JbOkYRkOBW0tON cA7x4cy7KyQtOojRomuXBBLxdjpmC663R/A3D9GJyajOA1CciGk= -----END CERTIFICATE-----Generated at Fri Dec 19 15:58:43 2025 by rpki-client