This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft (raw, json) Hash identifier: bgUUHMJxASMEKqp270ZOAgMvtXg5VRi+41VLqFpPRqQ= Subject key identifier: 59:59:65:5D:DD:86:CD:B4:F0:7C:5A:00:55:61:D7:E6:4F:16:49:47 Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Certificate serial: 07F1500339024AAD93CEA0769F30AF7CB28B5D86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft Manifest number: 0536 Signing time: Wed 24 Dec 2025 00:50:00 +0000 Manifest this update: Wed 24 Dec 2025 00:45:00 +0000 Manifest next update: Sat 27 Dec 2025 11:25:00 +0000 Files and hashes: 1: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl (hash: 4EuW4M7LKiRLb+Ow2Adb631b4thQPZWKzcJXjQ1YK78=) 2: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: mhHbC7IIWFFORZdV/WAdZvBGn0b08EabDQByz7GAvr4=) 3: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: 7t1UfL5E/ZJwSEO7orDivflRDFpoQvNkURGau+OZ9WE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f1:50:03:39:02:4a:ad:93:ce:a0:76:9f:30:af:7c:b2:8b:5d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Validity Not Before: Dec 24 00:45:00 2025 GMT Not After : Dec 27 11:25:00 2025 GMT Subject: CN=5959655DDD86CDB4F07C5A005561D7E64F164947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:1c:58:51:40:5f:6a:fb:d6:5c:ee:2a:d7: 8d:c5:08:69:ae:74:08:28:d6:59:e3:ec:a2:25:a5: 7b:a6:7b:a4:65:5e:e4:f3:a7:6f:ba:22:6a:1e:f7: 62:fd:22:8e:43:70:68:a3:2f:2f:ea:87:e8:49:37: d9:42:12:ed:61:af:79:62:27:05:68:b5:b3:d3:f7: ed:b2:69:8a:2c:51:07:00:41:74:be:1d:00:14:09: 08:26:e1:76:96:38:b2:63:4e:a2:0b:da:6f:b8:8e: f1:26:ed:37:10:e0:f1:c0:74:05:03:db:4c:af:58: e6:e7:97:f8:04:68:b1:1e:0f:25:d8:d6:69:08:ce: 79:d9:91:82:7b:e2:c7:7d:74:d9:e2:f1:6b:34:39: bb:65:72:ce:e3:77:f8:ed:c5:53:e6:c0:5c:c0:18: db:9c:57:9d:7b:4a:46:d0:70:ef:3c:e1:b0:68:e9: 0f:9f:1b:22:9d:16:e4:dc:d3:4a:d2:46:64:a0:55: 91:2a:3e:ea:97:87:dc:6d:95:89:7c:3b:83:c3:35: b3:b2:fe:4e:ab:ad:23:ce:50:a1:f9:fb:c2:25:6c: f9:aa:e0:aa:a0:80:e7:1f:e2:58:e9:05:3c:55:85: 44:5f:ef:2b:e9:96:6c:3f:09:4c:9a:10:c5:b9:de: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:59:65:5D:DD:86:CD:B4:F0:7C:5A:00:55:61:D7:E6:4F:16:49:47 X509v3 Authority Key Identifier: keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:bc:6b:9b:91:6c:7f:1f:e7:15:aa:d1:2e:86:9d:87:96:9c: 88:9b:18:8f:9d:aa:74:b8:f3:63:86:cb:f4:7e:1e:a5:56:63: e8:40:04:fd:dc:ac:6a:d0:99:b0:da:13:d2:40:80:e3:a4:6b: be:cb:aa:9c:3e:b7:43:c9:b3:54:bf:b0:e7:9d:6b:74:d8:79: 83:21:b3:05:a8:91:fc:b6:48:50:e8:2c:9d:f6:fb:a7:44:1a: c7:c1:95:b1:7f:b9:40:48:81:f2:83:60:be:d9:7d:c9:8a:b3: ca:bb:ef:41:76:8d:60:26:58:b9:bf:6a:b7:7a:20:50:7d:39: 87:29:f8:71:44:18:d5:cb:56:3f:50:da:56:e9:19:5a:ad:0e: 36:cc:b8:91:56:e8:f1:eb:6c:01:37:6d:b6:58:6c:25:f1:47: b8:ef:3f:a9:db:a7:e8:00:2f:b8:5d:88:a3:fb:09:d6:65:59: 25:87:da:89:73:78:92:95:10:21:63:21:12:ac:c8:31:ca:3f: 55:eb:a8:32:15:92:f8:94:9f:d8:1c:9c:90:9a:08:f9:27:a5: eb:73:95:c3:28:fe:56:7e:08:1e:39:f3:0d:f6:9f:e2:62:77: 29:66:f8:d5:db:2d:79:89:78:b0:6a:ae:df:7e:73:61:51:8d: 4b:2d:67:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/FQAzkCSq2TzqB2nzCvfLKLXYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB NDc4RkQxQzAeFw0yNTEyMjQwMDQ1MDBaFw0yNTEyMjcxMTI1MDBaMDMxMTAvBgNV BAMTKDU5NTk2NTVEREQ4NkNEQjRGMDdDNUEwMDU1NjFEN0U2NEYxNjQ5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkhxYUUBfavvWXO4q143FCGmu dAgo1lnj7KIlpXume6RlXuTzp2+6Imoe92L9Io5DcGijLy/qh+hJN9lCEu1hr3li JwVotbPT9+2yaYosUQcAQXS+HQAUCQgm4XaWOLJjTqIL2m+4jvEm7TcQ4PHAdAUD 20yvWObnl/gEaLEeDyXY1mkIznnZkYJ74sd9dNni8Ws0Obtlcs7jd/jtxVPmwFzA GNucV517SkbQcO884bBo6Q+fGyKdFuTc00rSRmSgVZEqPuqXh9xtlYl8O4PDNbOy /k6rrSPOUKH5+8IlbPmq4KqggOcf4ljpBTxVhURf7yvplmw/CUyaEMW53s35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWVllXd2GzbTwfFoAVWHX5k8WSUcwHwYDVR0j BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4 RkQxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3 QUVBNDc4RkQxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAS8a5uRbH8f5xWq0S6GnYeWnIibGI+dqnS4 82OGy/R+HqVWY+hABP3crGrQmbDaE9JAgOOka77Lqpw+t0PJs1S/sOeda3TYeYMh swWokfy2SFDoLJ32+6dEGsfBlbF/uUBIgfKDYL7ZfcmKs8q770F2jWAmWLm/ard6 IFB9OYcp+HFEGNXLVj9Q2lbpGVqtDjbMuJFW6PHrbAE3bbZYbCXxR7jvP6nbp+gA L7hdiKP7CdZlWSWH2olzeJKVECFjIRKsyDHKP1XrqDIVkviUn9gcnJCaCPknpetz lcMo/lZ+CB458w32n+Jidylm+NXbLXmJeLBqrt9+c2FRjUstZ+k= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:50 2025 by rpki-client