This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: ZmiAw6Pf2KKwkmvwAgzREx4glmYatLuhCfNAc9dr9YA= Subject key identifier: 67:B2:B8:0F:11:61:0B:36:F4:5D:89:83:D2:C7:11:04:E2:D2:C0:8A Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 599348EC8272CB7061E73D88FB0E7E39ED1AB217 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: 012C Signing time: Wed 17 Dec 2025 15:51:13 +0000 Manifest this update: Wed 17 Dec 2025 15:46:13 +0000 Manifest next update: Sat 20 Dec 2025 22:34:13 +0000 Files and hashes: 1: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: i0x0feg84SXnZTA6YAhR7gaeqiaJ42pYwpQJgdgXQFw=) 2: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: geAKj9+TOtyfNH9PasUiph/Br+j89slGEUwYIqBnSpQ=) 3: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:93:48:ec:82:72:cb:70:61:e7:3d:88:fb:0e:7e:39:ed:1a:b2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Dec 17 15:46:13 2025 GMT Not After : Dec 20 22:34:13 2025 GMT Subject: CN=67B2B80F11610B36F45D8983D2C71104E2D2C08A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:26:8b:62:32:74:4b:7e:f7:40:2f:43:38: 75:69:24:12:6a:be:76:a3:33:ab:6c:5e:98:48:ae: 89:00:4e:e7:94:47:1e:de:19:48:f6:a5:48:71:73: 2b:72:43:bd:df:48:b1:f7:0c:c4:7a:cc:12:bf:e0: 6e:5d:78:25:44:67:a2:8a:c4:76:5b:66:5a:c3:e7: d9:53:6c:29:46:76:0e:92:38:c1:7e:a6:3f:7d:5b: 31:5f:4f:ad:0c:dd:44:6a:f0:f1:d1:f4:5f:f6:a0: 01:e1:7e:2e:3a:ba:ec:3b:a5:28:a4:8b:df:ac:bc: ea:12:96:24:81:68:8e:8c:c6:7d:85:51:3a:ee:58: 67:85:37:91:76:34:0e:92:26:cc:d9:e6:78:24:a8: 50:67:8f:0d:77:51:5f:7b:71:ee:7e:9c:5c:13:ab: 23:f7:4b:0d:f6:94:91:17:cd:df:49:b1:28:ee:c3: 8c:d6:c8:76:c5:28:01:f0:30:1b:dc:a4:df:56:19: 2a:59:bd:45:d2:fc:08:4d:f8:9a:1b:d9:4f:83:f8: 2a:71:53:47:42:7e:5b:bc:3d:60:56:d8:78:5a:b7: 5b:76:62:29:80:2d:5e:ac:72:6b:8d:bd:77:4a:19: 98:58:ac:43:6c:09:ae:e2:3b:9b:ff:57:2d:cc:17: f4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B2:B8:0F:11:61:0B:36:F4:5D:89:83:D2:C7:11:04:E2:D2:C0:8A X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b4:a6:1f:ad:50:50:ae:3e:9b:48:8e:5f:69:a2:d2:82:98: 51:14:a9:c8:89:8a:eb:fd:15:d0:e9:2a:f2:84:28:7d:14:10: 63:17:42:12:6e:0e:47:65:b3:30:fa:c3:e3:77:b7:ce:12:91: 1e:9a:00:31:71:2d:99:16:fd:06:b7:4f:96:5a:6c:b8:09:89: 33:e0:88:72:86:62:12:f9:ab:92:bb:4b:6a:61:86:8a:03:00: 14:ea:38:66:41:53:45:6f:08:e7:07:17:03:6a:a3:03:e0:2e: da:d9:35:0a:81:a8:95:69:29:78:be:ac:d1:2f:41:15:58:7a: 2f:aa:a2:f7:56:bc:41:7b:5b:93:aa:b8:8b:11:99:8f:f0:fd: 49:9e:18:04:4d:97:61:8e:9b:37:14:c2:8b:eb:f3:ab:31:60: d5:06:ac:1a:5a:bd:fd:01:c2:8d:1a:ca:2e:11:0e:c4:2b:c3: 75:0d:67:80:9a:11:72:0b:6b:17:4b:a0:64:8f:da:02:8c:63: 76:ad:0c:72:91:8f:c3:a1:eb:d7:d7:d1:11:43:04:7d:68:13: 1f:d8:bf:d1:c6:e0:7b:a4:5d:3a:78:65:c8:b8:98:6d:54:80: cd:f8:7e:c8:6b:be:86:78:6d:ae:af:d5:74:a7:d1:64:a9:67: c5:e4:a2:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZNI7IJyy3Bh5z2I+w5+Oe0ashcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTEyMTcxNTQ2MTNaFw0yNTEyMjAyMjM0MTNaMDMxMTAvBgNV BAMTKDY3QjJCODBGMTE2MTBCMzZGNDVEODk4M0QyQzcxMTA0RTJEMkMwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCSaLYjJ0S373QC9DOHVpJBJq vnajM6tsXphIrokATueURx7eGUj2pUhxcytyQ73fSLH3DMR6zBK/4G5deCVEZ6KK xHZbZlrD59lTbClGdg6SOMF+pj99WzFfT60M3URq8PHR9F/2oAHhfi46uuw7pSik i9+svOoSliSBaI6Mxn2FUTruWGeFN5F2NA6SJszZ5ngkqFBnjw13UV97ce5+nFwT qyP3Sw32lJEXzd9JsSjuw4zWyHbFKAHwMBvcpN9WGSpZvUXS/AhN+Job2U+D+Cpx U0dCflu8PWBW2Hhat1t2YimALV6scmuNvXdKGZhYrENsCa7iO5v/Vy3MF/QFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ7K4DxFhCzb0XYmD0scRBOLSwIowHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+0ph+tUFCuPptIjl9potKCmFEUqciJiuv9 FdDpKvKEKH0UEGMXQhJuDkdlszD6w+N3t84SkR6aADFxLZkW/Qa3T5ZabLgJiTPg iHKGYhL5q5K7S2phhooDABTqOGZBU0VvCOcHFwNqowPgLtrZNQqBqJVpKXi+rNEv QRVYei+qovdWvEF7W5OquIsRmY/w/UmeGARNl2GOmzcUwovr86sxYNUGrBpavf0B wo0ayi4RDsQrw3UNZ4CaEXILaxdLoGSP2gKMY3atDHKRj8Oh69fX0RFDBH1oEx/Y v9HG4HukXTp4Zci4mG1UgM34fshrvoZ4ba6v1XSn0WSpZ8Xkoq4= -----END CERTIFICATE-----Generated at Fri Dec 19 18:48:53 2025 by rpki-client