This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: Jb2HB/gRwLZFTVUusUV4AyV+A/oU/V5Pspg4Z9ZNvfw= Subject key identifier: 29:5E:66:B4:55:77:C7:B1:C2:A4:6E:9E:1E:F8:89:E6:A1:2B:B6:85 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 49554C9481CC83EACC36FE93278BFD859DF29DD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 0407 Signing time: Tue 23 Dec 2025 11:43:10 +0000 Manifest this update: Tue 23 Dec 2025 11:38:10 +0000 Manifest next update: Fri 26 Dec 2025 17:48:10 +0000 Files and hashes: 1: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: Yl+rA1y1RiJMk8qdUM9dTZ+l5aY1Orl7hNXuvO5pSyE=) 2: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=) 3: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: CUX/FZUFqFLVmfqcGn4Uxf38ndBFpWWkwqBCc1O0Nwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:55:4c:94:81:cc:83:ea:cc:36:fe:93:27:8b:fd:85:9d:f2:9d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Dec 23 11:38:10 2025 GMT Not After : Dec 26 17:48:10 2025 GMT Subject: CN=295E66B45577C7B1C2A46E9E1EF889E6A12BB685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f5:58:5b:58:6c:1a:02:61:f2:26:2d:2c:ff: 07:10:8c:23:c3:ec:c1:61:74:3c:be:c9:d3:42:64: 26:15:d9:24:3b:29:9a:5a:95:1d:14:ba:2e:ea:ea: 79:39:67:2b:e0:4e:00:b7:c6:9a:6a:81:a6:7b:68: f6:79:8f:b4:4f:45:d4:c8:a6:bc:30:98:5f:e8:9f: 85:64:1c:1b:dd:f9:b5:f0:ec:e0:7d:50:a2:50:94: 7d:4c:15:56:82:8f:91:e6:7c:07:90:c8:eb:d1:34: d7:63:a2:5d:16:af:9b:a7:f6:93:d1:b8:03:01:ac: 40:c5:27:e1:80:0a:ea:ed:4a:05:03:e7:e5:3e:67: b5:2e:83:71:dc:6c:fe:d4:a0:6d:dd:f5:bf:01:39: c9:57:fd:f1:1e:b7:5a:74:02:4c:bb:0c:79:b3:ff: db:e6:91:19:7b:59:81:fa:c4:ef:4f:01:3c:9d:64: 33:b9:ed:35:01:cd:ad:aa:99:10:8a:66:4b:ca:c8: 3f:8b:f5:6a:36:95:d2:ef:00:09:81:61:1f:a8:39: b2:3e:2b:0b:e6:cd:61:60:e3:5b:39:cc:72:8c:9e: 37:eb:de:07:13:64:a2:41:34:06:98:a7:ad:a8:0e: 1b:86:53:fd:f0:d0:d2:6b:f7:40:fd:30:3c:61:58: 88:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5E:66:B4:55:77:C7:B1:C2:A4:6E:9E:1E:F8:89:E6:A1:2B:B6:85 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:54:2b:9b:9d:1b:68:43:6e:e8:91:96:17:53:6a:e2:14:c3: ad:20:28:c0:7f:0f:59:58:a8:88:79:2f:5b:88:75:98:ac:bb: e4:11:da:bd:21:78:c1:d3:b4:bb:c4:dc:56:7a:9d:2f:93:70: e3:95:12:99:cb:87:f7:5f:c7:8a:24:36:7f:0c:0c:71:5c:bb: a4:60:d9:42:52:cc:d1:a8:34:b3:08:48:f2:5a:63:65:00:fc: 28:5a:a9:08:d6:12:d3:4a:ae:da:38:1c:ab:e6:f9:4b:ab:bc: a6:22:1f:a9:b9:fb:ef:2c:f0:0e:ba:3a:56:67:a3:34:cc:c8: c0:4d:ae:8c:35:57:16:df:1e:4e:34:a4:e1:a2:5d:0d:cf:b5: 15:00:88:e9:11:88:8f:3b:58:2e:7c:a9:42:5c:75:ef:f7:b4: af:d4:45:5d:16:15:db:95:54:24:92:8e:cb:08:c2:d1:6c:42: b2:40:c0:84:18:f5:1e:a9:ae:5a:c1:a7:2e:ee:26:f4:ec:8f: 7f:58:23:f5:57:48:16:98:00:1f:97:95:9f:25:db:5f:08:4f: e5:52:8b:7f:9a:9d:8d:cd:d9:85:b3:cd:38:17:b4:fc:22:8b: d6:85:ca:13:d1:72:b7:ef:68:31:ee:6b:87:1c:d6:9a:af:96: 83:0e:29:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVVMlIHMg+rMNv6TJ4v9hZ3yndkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTEyMjMxMTM4MTBaFw0yNTEyMjYxNzQ4MTBaMDMxMTAvBgNV BAMTKDI5NUU2NkI0NTU3N0M3QjFDMkE0NkU5RTFFRjg4OUU2QTEyQkI2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9VhbWGwaAmHyJi0s/wcQjCPD 7MFhdDy+ydNCZCYV2SQ7KZpalR0Uui7q6nk5ZyvgTgC3xppqgaZ7aPZ5j7RPRdTI prwwmF/on4VkHBvd+bXw7OB9UKJQlH1MFVaCj5HmfAeQyOvRNNdjol0Wr5un9pPR uAMBrEDFJ+GACurtSgUD5+U+Z7Uug3HcbP7UoG3d9b8BOclX/fEet1p0Aky7DHmz /9vmkRl7WYH6xO9PATydZDO57TUBza2qmRCKZkvKyD+L9Wo2ldLvAAmBYR+oObI+ KwvmzWFg41s5zHKMnjfr3gcTZKJBNAaYp62oDhuGU/3w0NJr90D9MDxhWIjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKV5mtFV3x7HCpG6eHviJ5qErtoUwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxUK5udG2hDbuiRlhdTauIUw60gKMB/D1lY qIh5L1uIdZisu+QR2r0heMHTtLvE3FZ6nS+TcOOVEpnLh/dfx4okNn8MDHFcu6Rg 2UJSzNGoNLMISPJaY2UA/ChaqQjWEtNKrto4HKvm+UurvKYiH6m5++8s8A66OlZn ozTMyMBNrow1VxbfHk40pOGiXQ3PtRUAiOkRiI87WC58qUJcde/3tK/URV0WFduV VCSSjssIwtFsQrJAwIQY9R6prlrBpy7uJvTsj39YI/VXSBaYAB+XlZ8l218IT+VS i3+anY3N2YWzzTgXtPwii9aFyhPRcrfvaDHua4cc1pqvloMOKQ4= -----END CERTIFICATE-----Generated at Thu Dec 25 01:00:57 2025 by rpki-client