This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft File: E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json) Hash identifier: D839yoLwKnF+uRFISwZyrr7X5tVJQuCONpVl60K34W4= Subject key identifier: D5:C4:B5:E0:03:0E:94:37:0E:8A:53:24:C1:48:50:C3:56:A7:73:27 Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Certificate serial: 15170A57D27505F90B579C5587B1434299702AA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft Manifest number: 04BB Signing time: Tue 23 Dec 2025 21:41:54 +0000 Manifest this update: Tue 23 Dec 2025 21:36:54 +0000 Manifest next update: Sat 27 Dec 2025 00:00:54 +0000 Files and hashes: 1: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=) 2: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: TiBDscIwDM8LXa+oZsdSozLCIgCynFE1SJZ86LD1GBs=) 3: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: ri5IYE8jHwhRJob9+4ycOLYFz8fN7w0C2R6jbclO57k=) 4: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: U5G6WyuhUeeAyAkhv6VtLWLCxLc3eTUGqsMy7Fb3zes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:17:0a:57:d2:75:05:f9:0b:57:9c:55:87:b1:43:42:99:70:2a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Validity Not Before: Dec 23 21:36:54 2025 GMT Not After : Dec 27 00:00:54 2025 GMT Subject: CN=D5C4B5E0030E94370E8A5324C14850C356A77327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b8:ce:1b:e2:b7:d3:48:39:75:6a:1e:7a:eb: 46:b7:4c:21:e3:de:ce:6c:72:61:47:b8:9c:f1:c3: 6e:6e:07:cc:46:38:b0:c5:50:8a:ee:c3:f7:ec:ce: ba:c1:91:73:ae:68:b6:7c:a7:96:2d:10:56:fd:81: 2f:50:fb:4d:6a:52:e6:52:0b:1d:5d:a3:3a:75:f6: dd:19:0d:63:c3:59:bb:b1:d6:8a:9f:71:d6:a8:25: ac:90:69:43:a0:f9:eb:8d:8e:fd:84:ff:91:03:e8: ca:57:45:21:75:a9:be:d3:22:89:94:12:d9:dd:06: c8:1b:d3:77:1c:6c:f4:d3:0c:62:ec:1e:4e:6f:db: 4c:f7:0d:41:df:29:06:ac:9c:1a:f9:24:c6:2e:b1: 0e:b7:04:bd:83:59:fb:8a:cb:67:e3:f4:ef:17:06: 93:e6:7e:a4:e9:92:f0:c0:d4:b8:33:bc:15:44:a4: 76:9d:bb:7e:4f:0a:1c:55:bf:8e:46:0a:42:be:dc: 30:db:cc:d8:15:21:1a:63:64:1a:fc:fe:c4:ca:7a: fb:61:fa:45:dc:06:4c:bc:3c:c8:27:1e:4b:38:c7: fa:e8:7d:66:36:11:58:f5:14:f6:59:5c:01:e9:ae: ea:a2:1c:17:4e:5e:f3:5d:e7:aa:77:89:a9:f3:25: fa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C4:B5:E0:03:0E:94:37:0E:8A:53:24:C1:48:50:C3:56:A7:73:27 X509v3 Authority Key Identifier: keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0c:3b:a6:6a:0a:e5:f0:8d:15:d9:8c:66:80:23:da:80:d5: 88:cc:67:95:d3:80:1f:99:41:85:bf:a8:d9:76:ee:7e:fc:c1: 09:92:55:1f:7d:27:25:56:1b:f5:15:1e:54:2a:62:d7:cd:60: 88:b5:9b:28:62:87:ed:b0:87:fc:42:ca:35:3c:c5:94:32:ed: da:9f:f0:15:8d:5c:a5:5e:3c:90:a1:aa:36:af:c6:30:8c:41: 08:76:f2:87:a7:e5:06:cc:26:cc:16:f8:8c:72:44:88:50:49: 15:86:60:c2:34:f0:2b:33:12:8e:31:78:1a:23:e1:b9:c7:6a: 58:ba:12:ac:e4:4e:95:12:7e:c6:36:5d:a1:ad:de:39:f2:8a: eb:ac:54:9e:2e:e0:7e:18:7e:e8:79:a7:a0:93:f5:ff:13:99: bd:38:ca:8c:46:06:58:41:7b:db:85:14:d4:aa:3d:22:0b:17: 8c:f2:54:71:a5:91:45:ff:d9:d3:fa:fa:85:72:c3:4f:ee:ae: 0a:96:34:7f:c4:78:26:e2:e7:01:3a:78:a7:f5:58:9b:37:a3: 1d:57:62:38:f4:35:0f:25:70:3f:ec:fa:c4:57:50:3a:b1:a9: 78:c8:cf:e3:59:a0:39:ad:44:40:54:66:da:a2:98:cc:a7:7d: 03:b3:8e:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFRcKV9J1BfkLV5xVh7FDQplwKqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQy MDg3MEZFQjAeFw0yNTEyMjMyMTM2NTRaFw0yNTEyMjcwMDAwNTRaMDMxMTAvBgNV BAMTKEQ1QzRCNUUwMDMwRTk0MzcwRThBNTMyNEMxNDg1MEMzNTZBNzczMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeuM4b4rfTSDl1ah5660a3TCHj 3s5scmFHuJzxw25uB8xGOLDFUIruw/fszrrBkXOuaLZ8p5YtEFb9gS9Q+01qUuZS Cx1dozp19t0ZDWPDWbux1oqfcdaoJayQaUOg+euNjv2E/5ED6MpXRSF1qb7TIomU EtndBsgb03ccbPTTDGLsHk5v20z3DUHfKQasnBr5JMYusQ63BL2DWfuKy2fj9O8X BpPmfqTpkvDA1LgzvBVEpHadu35PChxVv45GCkK+3DDbzNgVIRpjZBr8/sTKevth +kXcBky8PMgnHks4x/rofWY2EVj1FPZZXAHpruqiHBdOXvNd56p3ianzJfpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1cS14AMOlDcOilMkwUhQw1ancycwHwYDVR0j BBgwFoAU5CsHUtX/qyVMPw4iFJn2dCCHD+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzUxMjllNC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC9FNDJCMDc1MkQ1 RkZBQjI1NEMzRjBFMjIxNDk5RjY3NDIwODcwRkVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQyMDg3 MEZFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2 NzQyMDg3MEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsMO6ZqCuXwjRXZjGaAI9qA1YjMZ5XTgB+Z QYW/qNl27n78wQmSVR99JyVWG/UVHlQqYtfNYIi1myhih+2wh/xCyjU8xZQy7dqf 8BWNXKVePJChqjavxjCMQQh28oen5QbMJswW+IxyRIhQSRWGYMI08CszEo4xeBoj 4bnHali6EqzkTpUSfsY2XaGt3jnyiuusVJ4u4H4Yfuh5p6CT9f8Tmb04yoxGBlhB e9uFFNSqPSILF4zyVHGlkUX/2dP6+oVyw0/urgqWNH/EeCbi5wE6eKf1WJs3ox1X Yjj0NQ8lcD/s+sRXUDqxqXjIz+NZoDmtREBUZtqimMynfQOzjlQ= -----END CERTIFICATE-----Generated at Thu Dec 25 00:40:02 2025 by rpki-client