This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: Jg/+Dl597B3wdEJn+ldTRAsLXzOCPmmGOuSTUz1BqGs= Subject key identifier: E5:54:98:98:03:99:6A:88:EE:B9:D7:C5:E6:57:AC:2F:56:E0:18:0B Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 5BD33AD9E74BCE35C578A7692C254241D9C38F14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 01AA Signing time: Wed 24 Dec 2025 01:21:59 +0000 Manifest this update: Wed 24 Dec 2025 01:16:59 +0000 Manifest next update: Sat 27 Dec 2025 07:27:59 +0000 Files and hashes: 1: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: VZdsZ2jfAc77srihnQlpiC22JkQufKJk6XNNNcqtQBU=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 07:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d3:3a:d9:e7:4b:ce:35:c5:78:a7:69:2c:25:42:41:d9:c3:8f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Dec 24 01:16:59 2025 GMT Not After : Dec 27 07:27:59 2025 GMT Subject: CN=E554989803996A88EEB9D7C5E657AC2F56E0180B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:2d:f7:ac:27:50:35:ee:7c:1f:1c:93:50: 56:27:5b:d8:14:90:da:7e:a7:0d:40:33:36:9c:54: 0f:b5:64:37:67:f8:f5:55:69:81:0b:3a:dc:fa:75: fd:9d:34:06:6f:92:ef:1e:36:03:76:d2:e9:cf:d8: 4e:9c:4b:4a:10:b3:35:6a:53:0b:b4:6b:61:4f:d1: fd:fe:c8:85:db:8a:c1:7d:e1:c0:0a:a3:15:d8:63: 09:36:6a:88:24:1a:f6:0d:b2:ea:4c:ae:64:1d:ac: 5b:2d:23:5b:9a:0f:f3:32:39:04:b5:05:75:99:53: 50:7d:ea:79:c6:21:7c:05:cc:cf:f7:e1:2c:6a:9b: 5b:4a:e5:de:f2:36:0b:cb:1d:13:ce:50:13:78:73: 11:de:11:56:68:f9:48:08:1a:9a:9a:73:9c:b5:28: 42:ec:40:69:28:f2:1c:13:db:ac:9a:2f:14:bc:d9: fa:20:df:ad:85:f8:69:57:a8:19:25:ee:24:dc:b3: 6f:fa:b6:2d:a7:f1:07:21:03:18:a2:91:db:80:70: 5f:0d:e3:03:68:5d:47:70:c5:e1:0b:9f:8c:b1:c0: fe:84:ec:e4:a4:71:be:35:00:1b:90:1d:3c:3d:8d: 91:ec:9f:af:01:94:c0:91:bc:d7:bf:61:fc:93:12: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:54:98:98:03:99:6A:88:EE:B9:D7:C5:E6:57:AC:2F:56:E0:18:0B X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:28:ae:2e:66:48:20:11:e0:f1:b6:79:56:fb:b3:83:73:7c: c5:1b:be:ec:00:b6:8d:0f:df:5a:b6:8e:f1:80:b4:3e:1d:86: 72:9c:34:3b:86:71:30:ca:10:56:f1:8c:46:81:b1:b3:0b:56: c0:1a:3b:e7:8c:6b:89:d3:2f:45:04:41:25:71:96:09:11:f2: 03:b3:fc:62:49:07:bf:56:9d:af:b1:8f:5f:99:e0:58:93:23: 7a:ba:56:75:09:09:dd:48:ac:22:3e:16:76:63:c0:9a:32:41: aa:3e:35:dd:15:94:2f:26:ec:fa:25:42:d8:4c:32:f8:db:ce: 47:43:0c:7a:a2:9b:0f:af:1e:75:d4:0f:e9:0f:03:3e:8a:2a: ea:bf:b2:23:2e:f3:8b:fb:e3:50:87:f3:0c:29:03:7d:2c:24: bb:26:90:ac:ef:c7:6a:63:3e:8a:b6:0f:8b:0a:39:d4:1c:cc: 85:6e:c9:39:f4:79:06:af:56:9f:67:cf:cd:90:8b:87:cc:25: d1:5a:b7:35:9d:df:22:26:90:c8:9c:51:b4:66:b8:ea:46:e5: 6f:34:b0:32:96:39:76:b5:d7:7f:32:d8:4d:2e:c2:79:8a:c6: da:38:3a:97:8d:9b:9c:e4:b1:6c:91:cd:69:aa:46:e2:cd:a8: 24:af:f3:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW9M62edLzjXFeKdpLCVCQdnDjxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNTEyMjQwMTE2NTlaFw0yNTEyMjcwNzI3NTlaMDMxMTAvBgNV BAMTKEU1NTQ5ODk4MDM5OTZBODhFRUI5RDdDNUU2NTdBQzJGNTZFMDE4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ty33rCdQNe58HxyTUFYnW9gU kNp+pw1AMzacVA+1ZDdn+PVVaYELOtz6df2dNAZvku8eNgN20unP2E6cS0oQszVq Uwu0a2FP0f3+yIXbisF94cAKoxXYYwk2aogkGvYNsupMrmQdrFstI1uaD/MyOQS1 BXWZU1B96nnGIXwFzM/34Sxqm1tK5d7yNgvLHRPOUBN4cxHeEVZo+UgIGpqac5y1 KELsQGko8hwT26yaLxS82fog362F+GlXqBkl7iTcs2/6ti2n8QchAxiikduAcF8N 4wNoXUdwxeELn4yxwP6E7OSkcb41ABuQHTw9jZHsn68BlMCRvNe/YfyTEpfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5VSYmAOZaojuudfF5lesL1bgGAswHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8ori5mSCAR4PG2eVb7s4NzfMUbvuwAto0P 31q2jvGAtD4dhnKcNDuGcTDKEFbxjEaBsbMLVsAaO+eMa4nTL0UEQSVxlgkR8gOz /GJJB79Wna+xj1+Z4FiTI3q6VnUJCd1IrCI+FnZjwJoyQao+Nd0VlC8m7PolQthM MvjbzkdDDHqimw+vHnXUD+kPAz6KKuq/siMu84v741CH8wwpA30sJLsmkKzvx2pj Poq2D4sKOdQczIVuyTn0eQavVp9nz82Qi4fMJdFatzWd3yImkMicUbRmuOpG5W80 sDKWOXa1138y2E0uwnmKxto4OpeNm5zksWyRzWmqRuLNqCSv88E= -----END CERTIFICATE-----Generated at Thu Dec 25 11:18:42 2025 by rpki-client