This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft File: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json) Hash identifier: mWApANjmhbb4rxvA3cgU+GPCbL1t8Ak7WCzbtQvDoZ4= Subject key identifier: 1C:44:F8:56:B0:E7:52:7A:A6:4D:40:A1:26:FA:41:AA:FC:38:AA:A5 Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 0153365D86A1A24B2C4079A25B0100DACE4AD72A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft Manifest number: 04C1 Signing time: Sun 14 Dec 2025 23:51:11 +0000 Manifest this update: Sun 14 Dec 2025 23:46:11 +0000 Manifest next update: Thu 18 Dec 2025 02:34:11 +0000 Files and hashes: 1: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: mevAhM5443uB5w78f++4hcwTY8vcOKFPl7i6kYttnO4=) 2: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: l49m39jXKYCF0i+yS6Pt0Dh2rMmORNN+T/ZXB60UPuY=) 3: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: w2a2u6qdVWhlCkR970rhojHnih1HccbKX6TZhhdF+IA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 02:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:53:36:5d:86:a1:a2:4b:2c:40:79:a2:5b:01:00:da:ce:4a:d7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Dec 14 23:46:11 2025 GMT Not After : Dec 18 02:34:11 2025 GMT Subject: CN=1C44F856B0E7527AA64D40A126FA41AAFC38AAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:ff:15:74:b8:73:4a:e2:01:50:03:0b:b3: fc:c5:6e:e4:dc:f5:f6:2d:ba:99:c8:fa:86:a3:cc: 33:5a:57:25:e1:f1:63:73:cc:49:d9:eb:da:94:47: 21:4d:45:59:a4:39:87:98:93:47:b8:c1:df:d0:fd: ab:6a:06:de:aa:20:e2:4e:26:12:a9:d1:1b:ea:5e: 58:85:df:8b:d2:9a:27:e0:8e:7c:99:e8:df:1b:4a: 57:3e:67:ad:4b:bb:8e:85:fd:6e:08:00:fc:82:c3: 08:14:36:7d:36:b1:87:1a:87:ad:56:07:74:3b:c3: c0:94:1b:52:69:6f:e4:6a:86:a2:19:6e:8d:cf:f2: 92:2b:1b:94:42:bb:a7:19:1d:4c:cb:98:dd:d9:35: 00:c5:45:70:06:cb:bc:39:fe:6e:e3:70:62:58:3a: d3:e1:c7:cf:fe:68:c4:73:e4:72:4b:30:6c:c8:a0: 6f:12:ee:8d:27:63:f0:95:25:75:b1:fe:4b:f4:64: 30:d4:b3:49:a9:b9:58:00:9a:ea:22:27:b5:76:5a: 7e:8c:1d:58:8d:a7:bf:bf:93:05:8a:fe:f1:55:c5: f5:15:1d:b9:00:8a:29:ed:0a:8a:98:f8:50:26:34: 36:79:db:b3:67:74:89:d8:c6:d3:f9:00:0a:94:9e: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:44:F8:56:B0:E7:52:7A:A6:4D:40:A1:26:FA:41:AA:FC:38:AA:A5 X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d4:45:42:b0:79:59:72:89:60:1a:34:7e:cb:bb:a8:d8:b8: 68:9d:dc:1c:ad:1e:a6:07:bb:55:cc:a4:51:ce:59:94:d5:ff: 9b:5e:bd:44:b1:b9:00:ef:fe:d8:f1:ac:d3:e4:32:2f:5f:a8: 99:19:f4:bc:56:8d:08:06:d9:ce:4c:58:4a:af:78:cd:86:52: ea:4a:e0:72:a8:b2:01:81:93:f4:e7:c9:89:95:a4:7d:db:e0: ed:f7:61:84:94:e9:74:5a:5e:f9:1b:df:61:95:0d:ef:a8:92: b1:5e:1f:61:d0:45:1c:d6:db:dd:7f:a9:58:f9:ac:7a:a9:31: c0:c8:8d:f5:00:26:78:83:60:2a:bd:b1:83:55:20:0f:d5:b2: b4:ed:86:a0:f0:6e:32:2c:5c:fe:2b:ba:ed:98:2e:c1:c0:19: 81:66:b6:2f:eb:ea:dd:27:cb:d7:52:73:e4:37:98:c5:46:f4: be:8b:8d:b1:e8:fe:c5:25:18:da:56:b2:1a:39:01:71:0d:13: 69:b9:b4:53:17:52:23:27:5f:22:56:56:87:84:6f:83:76:d7: 7f:f3:b7:3a:93:ac:1e:27:f1:d8:a5:2c:48:03:37:b1:a2:c6: 2b:2c:29:62:5a:04:24:c5:e3:91:d5:78:53:04:92:41:a3:03: 43:9e:d4:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVM2XYahokssQHmiWwEA2s5K1yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNTEyMTQyMzQ2MTFaFw0yNTEyMTgwMjM0MTFaMDMxMTAvBgNV BAMTKDFDNDRGODU2QjBFNzUyN0FBNjRENDBBMTI2RkE0MUFBRkMzOEFBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDk/8VdLhzSuIBUAMLs/zFbuTc 9fYtupnI+oajzDNaVyXh8WNzzEnZ69qURyFNRVmkOYeYk0e4wd/Q/atqBt6qIOJO JhKp0RvqXliF34vSmifgjnyZ6N8bSlc+Z61Lu46F/W4IAPyCwwgUNn02sYcah61W B3Q7w8CUG1Jpb+RqhqIZbo3P8pIrG5RCu6cZHUzLmN3ZNQDFRXAGy7w5/m7jcGJY OtPhx8/+aMRz5HJLMGzIoG8S7o0nY/CVJXWx/kv0ZDDUs0mpuVgAmuoiJ7V2Wn6M HViNp7+/kwWK/vFVxfUVHbkAiintCoqY+FAmNDZ527NndInYxtP5AAqUngWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHET4VrDnUnqmTUChJvpBqvw4qqUwHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5 NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfURUKweVlyiWAaNH7Lu6jYuGid3BytHqYH u1XMpFHOWZTV/5tevUSxuQDv/tjxrNPkMi9fqJkZ9LxWjQgG2c5MWEqveM2GUupK 4HKosgGBk/TnyYmVpH3b4O33YYSU6XRaXvkb32GVDe+okrFeH2HQRRzW291/qVj5 rHqpMcDIjfUAJniDYCq9sYNVIA/VsrTthqDwbjIsXP4ruu2YLsHAGYFmti/r6t0n y9dSc+Q3mMVG9L6LjbHo/sUlGNpWsho5AXENE2m5tFMXUiMnXyJWVoeEb4N213/z tzqTrB4n8dilLEgDN7GixissKWJaBCTF45HVeFMEkkGjA0Oe1Jw= -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:29 2025 by rpki-client