This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: lF/1qtLrI1xh6Vs5Wo5tcHSybQEcPBnzVA6FQITC4rA= Subject key identifier: 35:DC:A4:B5:50:AD:14:0C:F9:7E:DF:86:83:63:E7:F0:4E:C4:D8:43 Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 5C84F92D82352198B64A0CBED01A7322D670FD24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 01DA Signing time: Thu 25 Dec 2025 17:30:53 +0000 Manifest this update: Thu 25 Dec 2025 17:25:53 +0000 Manifest next update: Sun 28 Dec 2025 22:50:53 +0000 Files and hashes: 1: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: fibpaoWLGLqVlSh+YVe38FiOvASMtn5m89vjXOwhkBg=) 2: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: 3IPWWkSr+CRIxbooLiHD2sYaMVl9ZCy+eS+fZpZLV/I=) 3: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) 4: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: I7HhnpSvkFDZUoWFmt6Ly8GVNyzeTvG6z/NNTlwMpTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 22:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:84:f9:2d:82:35:21:98:b6:4a:0c:be:d0:1a:73:22:d6:70:fd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Dec 25 17:25:53 2025 GMT Not After : Dec 28 22:50:53 2025 GMT Subject: CN=35DCA4B550AD140CF97EDF868363E7F04EC4D843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:25:e9:d5:0d:4a:87:1f:12:b9:10:be:23: 5a:86:3d:69:a6:03:c2:ab:cb:d0:15:5e:aa:53:15: 2c:3f:98:43:cb:a2:64:11:84:84:48:6a:78:2c:da: 30:d2:02:56:2f:3a:38:7a:77:c4:fd:2b:ac:e5:a1: c1:3a:1d:eb:66:fe:8f:f7:35:6e:ec:21:84:a2:3b: 5b:c2:6f:7d:61:73:f9:48:70:08:0f:a8:b4:b1:6c: 3d:8e:92:87:2a:84:8e:68:96:52:6b:43:35:8c:5b: cd:77:6d:97:46:2e:fd:27:2e:0b:f0:ec:7e:86:26: d9:39:a0:17:83:77:b6:fc:f5:83:96:fa:c2:dd:02: ec:a7:49:aa:12:81:f4:a9:43:bd:6d:72:2f:57:e4: 66:ac:67:21:b5:f6:eb:e4:22:4a:d2:30:0b:3a:c9: 35:ae:d6:18:78:d6:6f:9a:9c:b2:52:46:53:7b:0e: 4e:9d:1d:07:d4:c3:60:20:ac:9e:b7:66:6f:2c:f6: 61:32:44:c3:ef:73:0c:a5:80:70:17:7c:30:f4:61: a0:1d:6d:0f:73:85:dd:33:4e:07:f0:41:3f:1e:48: 0c:fa:4b:fb:ab:2f:d8:86:f3:8a:f8:2c:4f:5e:9e: 1f:c7:90:11:57:05:4f:ab:03:3b:b5:6f:af:3e:01: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DC:A4:B5:50:AD:14:0C:F9:7E:DF:86:83:63:E7:F0:4E:C4:D8:43 X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1a:4a:58:59:be:9c:34:0b:da:c0:ab:e9:0c:15:4e:48:eb: 23:4f:5d:0d:6a:af:9f:1e:76:d3:8d:d0:a6:d8:00:9b:7d:02: a0:65:f5:43:86:85:60:cc:ea:2a:29:43:46:84:49:96:5a:04: ae:bb:ca:7f:6d:ed:76:7a:f2:7c:cc:29:d4:ef:aa:91:57:1c: c0:25:34:03:1f:56:43:1c:be:d4:a6:f0:fc:2b:1b:a8:2d:28: 59:cd:43:7e:47:8c:07:d1:ab:0c:1f:10:18:79:16:7e:80:9d: 48:ec:4d:0c:34:f4:a8:66:ea:b1:76:04:9c:9b:c3:7a:6c:68: cd:de:2d:ca:86:da:de:db:75:b4:e9:64:fa:70:45:42:a3:d7: 04:ac:b9:04:f7:82:89:66:51:7d:c4:93:1d:d0:e8:f4:c4:38: b8:d1:dc:53:3c:84:0b:6f:f8:7b:74:00:e0:fa:31:8d:3e:89: 20:47:fa:fd:da:a0:a7:5d:d9:cf:ec:c7:9d:65:18:ef:59:92: 12:05:1b:fe:56:fc:34:ce:5e:05:41:38:99:6d:a4:07:c7:73: 40:31:89:0d:4d:8e:fd:0b:f6:bb:84:9a:fb:51:a7:46:f3:69: 9b:a5:5e:17:c8:2f:2a:69:01:87:29:8b:fe:e4:33:31:4a:67: 24:f1:7d:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIT5LYI1IZi2Sgy+0BpzItZw/SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTEyMjUxNzI1NTNaFw0yNTEyMjgyMjUwNTNaMDMxMTAvBgNV BAMTKDM1RENBNEI1NTBBRDE0MENGOTdFREY4NjgzNjNFN0YwNEVDNEQ4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYBSXp1Q1Khx8SuRC+I1qGPWmm A8Kry9AVXqpTFSw/mEPLomQRhIRIangs2jDSAlYvOjh6d8T9K6zlocE6Hetm/o/3 NW7sIYSiO1vCb31hc/lIcAgPqLSxbD2OkocqhI5ollJrQzWMW813bZdGLv0nLgvw 7H6GJtk5oBeDd7b89YOW+sLdAuynSaoSgfSpQ71tci9X5GasZyG19uvkIkrSMAs6 yTWu1hh41m+anLJSRlN7Dk6dHQfUw2AgrJ63Zm8s9mEyRMPvcwylgHAXfDD0YaAd bQ9zhd0zTgfwQT8eSAz6S/urL9iG84r4LE9enh/HkBFXBU+rAzu1b68+Ac9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNdyktVCtFAz5ft+Gg2Pn8E7E2EMwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQaSlhZvpw0C9rAq+kMFU5I6yNPXQ1qr58e dtON0KbYAJt9AqBl9UOGhWDM6iopQ0aESZZaBK67yn9t7XZ68nzMKdTvqpFXHMAl NAMfVkMcvtSm8PwrG6gtKFnNQ35HjAfRqwwfEBh5Fn6AnUjsTQw09Khm6rF2BJyb w3psaM3eLcqG2t7bdbTpZPpwRUKj1wSsuQT3golmUX3Ekx3Q6PTEOLjR3FM8hAtv +Ht0AOD6MY0+iSBH+v3aoKdd2c/sx51lGO9ZkhIFG/5W/DTOXgVBOJltpAfHc0Ax iQ1Njv0L9ruEmvtRp0bzaZulXhfILyppAYcpi/7kMzFKZyTxfco= -----END CERTIFICATE-----Generated at Sat Dec 27 07:23:24 2025 by rpki-client