This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: HhES7xt1K/hS8B8HeYr6EhKXElzyVkh2t4S8fv4Xzsw= Subject key identifier: 2B:42:B0:D0:C0:18:48:E9:38:C5:01:E6:85:23:C3:A2:83:2C:BC:39 Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 63A811CC95BB472756E59B6E2D11E2604E50F38D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 0103 Signing time: Sun 21 Dec 2025 01:01:05 +0000 Manifest this update: Sun 21 Dec 2025 00:56:05 +0000 Manifest next update: Wed 24 Dec 2025 03:31:05 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) 2: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: 1dOMSU6URyoHOTj9EH0VWItufiypj8tqjj7PwK0urIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a8:11:cc:95:bb:47:27:56:e5:9b:6e:2d:11:e2:60:4e:50:f3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Dec 21 00:56:05 2025 GMT Not After : Dec 24 03:31:05 2025 GMT Subject: CN=2B42B0D0C01848E938C501E68523C3A2832CBC39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:d2:0b:14:d9:e3:40:f1:b7:a5:b8:ab:7b: be:ce:84:71:ee:cb:df:88:ff:aa:cd:8f:57:e2:9a: a0:a5:1b:8f:66:16:e4:63:97:f5:31:a8:39:4a:5d: 1a:f7:2b:da:92:78:e8:c5:c7:2b:b4:36:8d:f9:e3: 6a:20:a8:5f:e4:51:2c:86:44:3e:c3:bf:fe:ed:d5: 33:72:4e:11:0f:a2:71:d1:55:43:85:8a:bc:60:e7: e3:49:0b:7f:98:0c:28:72:ef:73:40:e8:71:b2:bf: fa:60:65:cc:45:fc:a7:78:9d:3f:fd:48:6a:66:18: e9:00:23:bb:32:e3:a9:15:39:7f:55:90:72:6f:c2: ef:47:d3:0e:b9:4c:c7:6a:ff:fa:65:3a:be:53:5b: da:d9:31:3a:4a:a2:e1:cc:3e:9e:d5:4d:06:64:53: fe:fa:bd:ca:43:1a:c4:09:58:3d:4f:2a:80:78:6d: 4b:8f:95:ce:96:48:54:f1:dc:ed:94:fe:95:ed:78: 65:4f:da:e8:34:dd:44:b1:1d:9c:7d:bf:a3:db:00: 55:35:cc:5b:f9:aa:86:ed:1e:e0:5f:06:bb:c1:0f: c2:c5:f1:e4:75:05:1e:91:3a:13:bb:9d:64:a5:3c: 09:25:2f:c2:7b:7c:1c:0d:ec:a2:63:6c:7a:6f:4c: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:42:B0:D0:C0:18:48:E9:38:C5:01:E6:85:23:C3:A2:83:2C:BC:39 X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:49:b6:31:17:47:1a:80:b0:79:06:26:71:9c:66:df:62:94: 50:2a:4d:fe:3e:2a:cc:93:c8:bd:e3:59:96:e3:9f:b3:61:8a: d9:94:26:29:38:9e:8e:3a:64:55:7c:92:87:c3:b8:fc:19:f4: e5:40:e8:d7:d2:f8:ec:46:f1:fc:f9:89:53:5f:a8:e4:7a:72: 21:1e:66:e0:c0:5a:25:a7:d3:bd:fc:85:c5:c8:e5:7f:d3:17: e9:9c:60:4e:e2:20:3b:dc:cb:27:a8:ac:0e:64:00:d7:40:fb: 0b:48:09:89:43:c3:6b:f6:b9:10:e2:29:d5:3f:44:b8:2f:62: e0:61:8f:f2:f4:08:5e:47:9c:e8:d5:86:20:37:37:0b:df:38: 7d:08:00:a3:7c:59:1a:60:d9:95:11:c0:21:1a:a0:4b:03:4f: f8:d0:e2:c7:78:be:06:bf:2a:9b:45:b3:ad:a6:4c:44:35:31: e7:83:6d:26:ef:4e:54:41:5d:ba:08:de:94:38:55:61:5b:e2: ba:6f:da:45:a2:39:3d:aa:9f:42:c5:ec:2d:c0:ca:b1:0f:7c: 38:b6:33:0d:cf:6b:97:95:08:af:70:b7:f7:43:d3:1e:c3:c0: 18:cd:35:88:7f:44:62:77:c4:bb:57:60:bf:98:77:92:43:cd: 4e:e6:e9:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6gRzJW7RydW5ZtuLRHiYE5Q840wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNTEyMjEwMDU2MDVaFw0yNTEyMjQwMzMxMDVaMDMxMTAvBgNV BAMTKDJCNDJCMEQwQzAxODQ4RTkzOEM1MDFFNjg1MjNDM0EyODMyQ0JDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVNILFNnjQPG3pbire77OhHHu y9+I/6rNj1fimqClG49mFuRjl/UxqDlKXRr3K9qSeOjFxyu0No3542ogqF/kUSyG RD7Dv/7t1TNyThEPonHRVUOFirxg5+NJC3+YDChy73NA6HGyv/pgZcxF/Kd4nT/9 SGpmGOkAI7sy46kVOX9VkHJvwu9H0w65TMdq//plOr5TW9rZMTpKouHMPp7VTQZk U/76vcpDGsQJWD1PKoB4bUuPlc6WSFTx3O2U/pXteGVP2ug03USxHZx9v6PbAFU1 zFv5qobtHuBfBrvBD8LF8eR1BR6ROhO7nWSlPAklL8J7fBwN7KJjbHpvTNTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0Kw0MAYSOk4xQHmhSPDooMsvDkwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1JtjEXRxqAsHkGJnGcZt9ilFAqTf4+KsyT yL3jWZbjn7NhitmUJik4no46ZFV8kofDuPwZ9OVA6NfS+OxG8fz5iVNfqOR6ciEe ZuDAWiWn0738hcXI5X/TF+mcYE7iIDvcyyeorA5kANdA+wtICYlDw2v2uRDiKdU/ RLgvYuBhj/L0CF5HnOjVhiA3NwvfOH0IAKN8WRpg2ZURwCEaoEsDT/jQ4sd4vga/ KptFs62mTEQ1MeeDbSbvTlRBXboI3pQ4VWFb4rpv2kWiOT2qn0LF7C3AyrEPfDi2 Mw3Pa5eVCK9wt/dD0x7DwBjNNYh/RGJ3xLtXYL+Yd5JDzU7m6dI= -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:14 2025 by rpki-client