This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: hIljrVaHhru0giCD9Xe/qB9SShUdGHghbjjthAZlS4U= Subject key identifier: 68:37:34:40:CC:07:B9:C0:11:5B:FC:86:94:54:7A:BA:68:A4:62:F7 Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 34816ACD88A422CB6F22ED2537FF0622575C31C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 0250 Signing time: Wed 17 Dec 2025 06:31:34 +0000 Manifest this update: Wed 17 Dec 2025 06:26:34 +0000 Manifest next update: Sat 20 Dec 2025 10:38:34 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: RVrxEz/4nLif2NXhGKi9xASQ9PX0GsnvjqV1VnOpc5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:81:6a:cd:88:a4:22:cb:6f:22:ed:25:37:ff:06:22:57:5c:31:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Dec 17 06:26:34 2025 GMT Not After : Dec 20 10:38:34 2025 GMT Subject: CN=68373440CC07B9C0115BFC8694547ABA68A462F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:7a:9c:d4:c5:f1:37:fa:ea:43:19:3b:1d: 47:26:70:df:34:c5:88:d0:f1:d2:46:cc:fc:e4:55: c0:67:3d:9c:07:14:a5:a8:14:9b:52:b0:41:a6:c1: bc:6a:ee:85:d3:9e:0a:ef:8a:f2:54:b8:e2:c0:5a: 5d:16:6e:49:46:20:c7:e4:c8:b6:3a:30:ed:09:5c: 1e:34:6a:be:55:80:1d:ab:49:b0:a1:ee:cd:60:82: c0:3b:b8:d1:8e:77:39:91:f7:a5:ea:9b:bf:ec:84: bd:57:58:0a:a9:bb:6d:ff:27:6d:b3:67:e3:c9:7f: c1:f2:72:56:d7:c4:3a:cd:27:fd:52:73:80:51:84: 08:42:c6:48:ab:5d:90:6a:e9:41:a4:52:e6:41:50: cf:86:03:93:bf:dc:de:18:60:6e:35:e9:e6:bb:9e: bb:a3:be:9a:7e:77:2b:24:84:2c:92:96:10:35:f9: 25:54:50:10:1d:dc:83:de:91:51:79:55:e8:2c:f5: 24:9d:04:74:f5:8c:8a:4d:76:23:13:b6:c4:35:dc: 8d:0d:ba:b9:bd:39:54:45:87:ec:25:9a:86:73:87: f8:42:64:25:55:8f:45:e7:e3:31:f8:a2:7b:3f:7b: b1:5a:8a:98:c9:3a:19:94:80:58:95:fa:81:88:a4: a2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:37:34:40:CC:07:B9:C0:11:5B:FC:86:94:54:7A:BA:68:A4:62:F7 X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:11:9f:8c:35:cb:a3:8b:6f:2f:c2:98:28:60:2a:5e:1f:bc: 3a:b4:05:f8:b6:36:a9:c4:a3:91:2f:a8:81:64:27:d9:81:c9: 85:86:b6:3b:e9:6a:8a:e2:ae:63:5c:38:9e:49:44:73:ff:19: f1:33:73:aa:2c:c1:99:27:c7:eb:d2:9a:32:85:61:e9:3b:39: 5c:13:35:cd:f9:b1:b1:35:4b:1a:43:9a:13:dd:4d:75:6e:b2: a7:15:16:40:9c:08:b5:bd:22:48:24:f2:b0:2f:65:23:dc:97: ba:00:26:1d:85:70:ad:35:63:cf:12:3d:65:00:dd:95:17:ce: 77:33:1f:aa:00:98:11:cf:a3:d0:0c:4c:ff:10:95:e3:12:81: 7a:72:e5:c8:a3:b7:84:2c:68:e1:0c:eb:da:bd:f2:f8:b4:69: 8e:46:61:33:d2:80:42:f1:41:41:da:a4:82:72:48:3a:0e:e4: 04:d1:81:69:3f:0e:76:15:44:5e:80:9b:cb:08:b0:4b:85:4a: 83:f7:53:13:fc:5a:46:38:4f:0c:b4:4b:32:d4:fc:94:73:9e: 64:9c:57:9f:ae:94:d2:9e:ee:ca:2a:7f:ba:9c:b5:ad:6f:dc: 32:ce:eb:8a:dc:64:70:e3:e3:0a:b7:e8:c3:07:f4:b4:59:10: e0:ce:4f:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIFqzYikIstvIu0lN/8GIldcMcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTEyMTcwNjI2MzRaFw0yNTEyMjAxMDM4MzRaMDMxMTAvBgNV BAMTKDY4MzczNDQwQ0MwN0I5QzAxMTVCRkM4Njk0NTQ3QUJBNjhBNDYyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RHqc1MXxN/rqQxk7HUcmcN80 xYjQ8dJGzPzkVcBnPZwHFKWoFJtSsEGmwbxq7oXTngrvivJUuOLAWl0WbklGIMfk yLY6MO0JXB40ar5VgB2rSbCh7s1ggsA7uNGOdzmR96Xqm7/shL1XWAqpu23/J22z Z+PJf8HyclbXxDrNJ/1Sc4BRhAhCxkirXZBq6UGkUuZBUM+GA5O/3N4YYG416ea7 nrujvpp+dyskhCySlhA1+SVUUBAd3IPekVF5Vegs9SSdBHT1jIpNdiMTtsQ13I0N urm9OVRFh+wlmoZzh/hCZCVVj0Xn4zH4ons/e7FaipjJOhmUgFiV+oGIpKKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaDc0QMwHucARW/yGlFR6umikYvcwHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8Rn4w1y6OLby/CmChgKl4fvDq0Bfi2NqnE o5EvqIFkJ9mByYWGtjvpaorirmNcOJ5JRHP/GfEzc6oswZknx+vSmjKFYek7OVwT Nc35sbE1SxpDmhPdTXVusqcVFkCcCLW9Ikgk8rAvZSPcl7oAJh2FcK01Y88SPWUA 3ZUXznczH6oAmBHPo9AMTP8QleMSgXpy5cijt4QsaOEM69q98vi0aY5GYTPSgELx QUHapIJySDoO5ATRgWk/DnYVRF6Am8sIsEuFSoP3UxP8WkY4Twy0SzLU/JRznmSc V5+ulNKe7soqf7qcta1v3DLO64rcZHDj4wq36MMH9LRZEODOT28= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:29 2025 by rpki-client