This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: J2izUf3Q0DavLFSguv6zTBk4HF321ZvHikGRQvxhSb0= Subject key identifier: E5:9B:78:5E:F7:7B:CF:D1:D7:BF:F4:04:07:DF:7F:CD:C6:8F:23:6C Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 42BCE8D5AFBEEAA4CEAC6EDADC48ED959EB3E9B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 0541 Signing time: Wed 24 Dec 2025 05:12:32 +0000 Manifest this update: Wed 24 Dec 2025 05:07:32 +0000 Manifest next update: Sat 27 Dec 2025 12:18:32 +0000 Files and hashes: 1: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) 2: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: X+R4pnNvVfCEPC6Ri6iGm9NUQX1vMjmrXdB72GL+Fvo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bc:e8:d5:af:be:ea:a4:ce:ac:6e:da:dc:48:ed:95:9e:b3:e9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Dec 24 05:07:32 2025 GMT Not After : Dec 27 12:18:32 2025 GMT Subject: CN=E59B785EF77BCFD1D7BFF40407DF7FCDC68F236C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5d:32:d7:14:9e:cb:ee:41:2b:ed:2d:eb:8f: b2:3c:b2:1c:c4:8a:20:d2:e3:7f:dd:cf:65:b2:39: 08:21:95:25:78:64:92:17:3c:b5:4c:0e:7e:5e:79: 97:0e:65:cf:40:ff:ab:9a:3f:fe:65:4f:d4:7c:6c: f3:b2:b9:07:51:e0:ae:c2:4d:29:cd:06:95:91:99: 1a:56:3e:90:1b:22:77:01:c6:5a:18:72:29:65:7f: bb:69:17:6f:2d:93:d6:98:63:fb:df:5f:92:6b:9f: 6d:0e:5a:74:0c:4a:c0:b1:99:60:9c:69:b7:1d:c4: 35:5b:bb:14:a1:b3:3a:20:a2:31:ad:1c:ef:34:4d: 9e:31:6c:d4:8d:ac:16:71:5d:62:fd:cc:a2:f8:f5: 31:ec:1e:cb:14:90:68:fd:f5:96:56:60:d7:00:0c: e6:4e:5e:b7:84:33:51:70:a0:5c:14:36:5d:1c:67: 73:63:e1:69:f5:b3:20:d3:7b:e9:b8:24:3b:ee:1f: 85:83:ce:73:b2:9c:36:5d:4d:01:93:60:7c:a3:02: ec:a9:16:60:5c:28:37:69:b8:ef:9d:41:03:bc:c8: 6b:4e:bc:36:3a:68:1b:58:8e:99:34:46:0c:b7:59: aa:0c:81:d6:c6:41:a2:ac:4e:bd:14:90:04:6d:26: 43:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9B:78:5E:F7:7B:CF:D1:D7:BF:F4:04:07:DF:7F:CD:C6:8F:23:6C X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5e:02:c5:2d:88:08:74:aa:81:8e:77:c8:04:78:06:53:0e: 3c:ea:49:ac:c1:4b:0d:f5:11:8a:89:67:1e:bb:4c:6e:3b:e1: a3:d4:b6:7c:11:5c:d8:e7:d3:ff:4b:35:42:82:60:7a:cc:be: 79:fc:71:48:8d:d2:92:cf:92:e5:67:9f:ac:17:d4:0b:6c:ca: 4b:06:70:15:b8:89:c1:cb:c8:eb:67:7f:8f:90:5f:b9:93:84: a8:fd:04:ed:bf:35:97:f8:98:00:0a:1f:78:71:15:17:3a:5e: 82:76:ad:22:e4:03:e0:bb:c8:75:01:1a:46:14:46:f2:b4:9d: 4e:30:b0:1b:75:dd:8f:93:54:0a:11:02:c8:98:08:52:b4:5a: d4:0f:af:12:e5:d0:ea:9c:79:4d:66:e6:21:dc:66:93:10:e9: 2f:98:59:d3:8d:4c:7d:ec:41:d3:c7:3e:2e:11:28:82:da:83: 6c:d5:93:73:0d:b3:8a:5a:36:f9:8c:6d:74:9a:9a:84:f9:42: db:61:24:69:b0:67:4c:e3:cb:bf:17:d8:89:ca:f8:ff:b9:51: 0e:60:50:a8:43:67:ac:ff:11:0d:3a:e2:95:cf:b2:b2:5f:32: 70:be:c1:e1:7b:7c:ed:e7:0d:ce:d1:b3:ae:4a:1a:e5:75:f2: 2a:1f:7a:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrzo1a++6qTOrG7a3EjtlZ6z6bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTEyMjQwNTA3MzJaFw0yNTEyMjcxMjE4MzJaMDMxMTAvBgNV BAMTKEU1OUI3ODVFRjc3QkNGRDFEN0JGRjQwNDA3REY3RkNEQzY4RjIzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXTLXFJ7L7kEr7S3rj7I8shzE iiDS43/dz2WyOQghlSV4ZJIXPLVMDn5eeZcOZc9A/6uaP/5lT9R8bPOyuQdR4K7C TSnNBpWRmRpWPpAbIncBxloYcillf7tpF28tk9aYY/vfX5Jrn20OWnQMSsCxmWCc abcdxDVbuxShszogojGtHO80TZ4xbNSNrBZxXWL9zKL49THsHssUkGj99ZZWYNcA DOZOXreEM1FwoFwUNl0cZ3Nj4Wn1syDTe+m4JDvuH4WDznOynDZdTQGTYHyjAuyp FmBcKDdpuO+dQQO8yGtOvDY6aBtYjpk0Rgy3WaoMgdbGQaKsTr0UkARtJkMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Zt4Xvd7z9HXv/QEB99/zcaPI2wwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxeAsUtiAh0qoGOd8gEeAZTDjzqSazBSw31 EYqJZx67TG474aPUtnwRXNjn0/9LNUKCYHrMvnn8cUiN0pLPkuVnn6wX1AtsyksG cBW4icHLyOtnf4+QX7mThKj9BO2/NZf4mAAKH3hxFRc6XoJ2rSLkA+C7yHUBGkYU RvK0nU4wsBt13Y+TVAoRAsiYCFK0WtQPrxLl0OqceU1m5iHcZpMQ6S+YWdONTH3s QdPHPi4RKILag2zVk3MNs4paNvmMbXSamoT5QtthJGmwZ0zjy78X2InK+P+5UQ5g UKhDZ6z/EQ064pXPsrJfMnC+weF7fO3nDc7Rs65KGuV18iofeiY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:55 2025 by rpki-client