This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: 3+4nxhOWVfwc7A5TOrjOQGMRUUlMfKoauCxGJvZHdks= Subject key identifier: F8:33:80:23:14:77:6E:6F:80:9D:1F:91:F8:BE:8A:2C:6C:70:0D:A9 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 32EBAB0CA74798B7D42C90F264AEDCC97892075E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 0533 Signing time: Mon 22 Dec 2025 02:51:23 +0000 Manifest this update: Mon 22 Dec 2025 02:46:23 +0000 Manifest next update: Thu 25 Dec 2025 14:06:23 +0000 Files and hashes: 1: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: Bt+0KSKc3FVIpWWtrXtl3RO/t81PuzQOqbDmcP5q9aA=) 2: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) 3: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:eb:ab:0c:a7:47:98:b7:d4:2c:90:f2:64:ae:dc:c9:78:92:07:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Dec 22 02:46:23 2025 GMT Not After : Dec 25 14:06:23 2025 GMT Subject: CN=F833802314776E6F809D1F91F8BE8A2C6C700DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5f:e8:7d:6d:41:c7:52:aa:f5:98:d4:88:10: f9:80:a3:97:3e:48:ad:55:4e:b4:68:f8:8d:92:94: 62:b2:79:c4:04:d2:4b:38:48:3a:1d:ef:6a:19:8b: fd:24:9d:88:17:06:f6:25:ce:0f:3e:61:ab:6e:96: 77:b6:2a:8d:19:11:d8:30:f6:ff:ab:08:d9:92:bc: 5c:54:fd:bc:85:ff:3c:cb:d1:dd:14:da:45:fd:72: f4:13:6b:00:77:2f:ed:61:29:1d:a8:7b:9e:ea:df: 58:66:20:bd:e2:b1:61:92:97:24:3b:9a:89:b9:c2: 75:72:2f:af:2c:ff:5a:b4:cb:f7:5c:59:82:e0:98: 77:a9:96:b4:8f:01:fa:5a:92:e8:8a:ca:f6:80:f7: 5b:1f:9d:3f:b3:36:b7:a1:57:58:3c:b2:04:51:08: 7e:5b:62:3a:27:e4:9e:c3:7a:e8:5e:7d:21:36:50: 77:fb:d3:7d:47:1e:7d:4f:dc:66:63:73:a5:4d:c8: 9b:29:59:d9:44:d3:78:8d:78:12:d7:1b:59:79:4d: ad:90:38:7c:08:3b:97:c7:0f:41:8f:9a:53:54:37: 2f:b4:60:ed:f3:eb:06:1f:d9:f7:1f:59:2d:78:47: 81:ac:17:10:72:10:c9:36:b5:7d:0b:40:cb:fc:76: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:80:23:14:77:6E:6F:80:9D:1F:91:F8:BE:8A:2C:6C:70:0D:A9 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:fe:15:3d:cb:ac:d4:3e:ac:76:e4:67:21:87:4a:20:c7:48: a8:c7:42:96:e9:fc:bc:7d:b6:19:ec:f8:23:53:9e:66:8b:d8: cb:2a:0e:36:81:28:84:39:42:e5:2f:1b:6f:d2:ed:54:c0:55: cc:11:37:cd:9d:ff:7b:fb:db:12:3f:c9:53:88:5e:ac:5e:fc: b3:9a:a0:3e:ae:33:fd:77:ce:4e:43:76:88:90:fc:89:19:3a: 84:cf:d8:d0:41:b2:bd:60:69:4f:ab:69:d0:51:a1:c5:db:21: 45:53:d6:f1:06:66:98:32:88:62:da:86:26:a0:2f:73:b9:a0: a0:f2:57:f4:d5:2b:10:98:cb:4d:68:48:de:40:e2:c8:80:cd: a7:75:40:4e:a2:fe:13:02:d7:9a:1f:ac:9c:1d:43:a0:9b:66: b1:10:86:95:af:07:8a:9a:50:17:38:ce:18:81:1f:e5:1a:71: e4:be:4b:97:6f:ca:96:39:2a:ec:19:3c:69:72:3d:e8:96:d0: 08:94:7d:72:97:94:2e:63:db:2f:20:62:88:05:8a:4e:6e:bd: 0e:f6:c6:42:d1:5a:30:ad:ee:a0:f2:92:2b:30:6a:50:7d:d6: 36:de:24:4f:3d:93:e5:08:f4:46:2e:a4:73:b5:b8:eb:b0:21: fc:57:67:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuurDKdHmLfULJDyZK7cyXiSB14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTEyMjIwMjQ2MjNaFw0yNTEyMjUxNDA2MjNaMDMxMTAvBgNV BAMTKEY4MzM4MDIzMTQ3NzZFNkY4MDlEMUY5MUY4QkU4QTJDNkM3MDBEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWX+h9bUHHUqr1mNSIEPmAo5c+ SK1VTrRo+I2SlGKyecQE0ks4SDod72oZi/0knYgXBvYlzg8+Yatulne2Ko0ZEdgw 9v+rCNmSvFxU/byF/zzL0d0U2kX9cvQTawB3L+1hKR2oe57q31hmIL3isWGSlyQ7 mom5wnVyL68s/1q0y/dcWYLgmHeplrSPAfpakuiKyvaA91sfnT+zNrehV1g8sgRR CH5bYjon5J7DeuhefSE2UHf7031HHn1P3GZjc6VNyJspWdlE03iNeBLXG1l5Ta2Q OHwIO5fHD0GPmlNUNy+0YO3z6wYf2fcfWS14R4GsFxByEMk2tX0LQMv8dvfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+DOAIxR3bm+AnR+R+L6KLGxwDakwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEL+FT3LrNQ+rHbkZyGHSiDHSKjHQpbp/Lx9 thns+CNTnmaL2MsqDjaBKIQ5QuUvG2/S7VTAVcwRN82d/3v72xI/yVOIXqxe/LOa oD6uM/13zk5DdoiQ/IkZOoTP2NBBsr1gaU+radBRocXbIUVT1vEGZpgyiGLahiag L3O5oKDyV/TVKxCYy01oSN5A4siAzad1QE6i/hMC15ofrJwdQ6CbZrEQhpWvB4qa UBc4zhiBH+UaceS+S5dvypY5KuwZPGlyPeiW0AiUfXKXlC5j2y8gYogFik5uvQ72 xkLRWjCt7qDykiswalB91jbeJE89k+UI9EYupHO1uOuwIfxXZ80= -----END CERTIFICATE-----Generated at Wed Dec 24 16:18:24 2025 by rpki-client