This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: W7EkwZK7SkRNyqoFVHtx42qVQJn7nDIHXZEHkWJfC+E= Subject key identifier: 37:55:5D:BB:5A:FA:F3:72:40:8B:47:D9:03:CA:7E:E4:3E:49:46:A5 Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 1A6F9E004967CA74706D531D7F64CDA2C6BF5879 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 0193 Signing time: Wed 17 Dec 2025 08:00:44 +0000 Manifest this update: Wed 17 Dec 2025 07:55:44 +0000 Manifest next update: Sat 20 Dec 2025 10:21:44 +0000 Files and hashes: 1: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: Aki+oFoHokfXVnFx8iECudNiZf00Yeiu2fPWucnpDI4=) 2: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6f:9e:00:49:67:ca:74:70:6d:53:1d:7f:64:cd:a2:c6:bf:58:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Dec 17 07:55:44 2025 GMT Not After : Dec 20 10:21:44 2025 GMT Subject: CN=37555DBB5AFAF372408B47D903CA7EE43E4946A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:e2:51:63:2b:49:22:f5:42:1b:07:d1:8c: dc:48:07:74:54:c2:06:54:ae:60:84:b1:44:f2:1b: 10:e9:c2:90:68:f2:03:b3:36:ab:9c:23:b9:a0:d4: f7:a4:56:2e:59:fc:d0:39:c8:ca:30:b2:02:47:6b: 67:5a:0e:15:e7:aa:f2:92:51:f6:6d:fa:1c:33:65: bd:d7:4f:72:ef:92:b8:b7:b8:64:26:4e:0b:67:45: f8:67:7e:62:17:3f:81:1d:2b:d1:19:23:38:b0:2c: 76:48:c3:09:e1:b3:b8:75:65:49:b6:83:f3:ec:be: f0:ba:78:c1:2c:a5:59:9b:4b:05:d1:b7:da:ce:c1: 6f:53:d2:ff:a2:fc:58:ab:a5:8e:b8:ad:76:99:4a: 11:27:4a:6c:b8:0c:82:e5:32:a7:63:5b:97:f0:cc: 1d:82:10:b2:52:b8:d1:4a:90:85:ed:ad:f4:cc:be: c4:05:96:ab:46:8e:df:19:8d:ba:8d:5c:50:5a:c8: 3c:aa:d6:e8:37:d7:f1:75:56:c4:c6:f0:43:ac:c1: 02:65:4c:aa:39:19:d0:ca:10:42:38:e9:87:18:88: f4:1b:b6:96:fa:fb:70:d3:20:8e:84:7e:3e:b3:2e: 53:83:78:55:db:9e:e8:ce:91:27:ff:2d:a1:c7:b3: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:55:5D:BB:5A:FA:F3:72:40:8B:47:D9:03:CA:7E:E4:3E:49:46:A5 X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a0:01:0e:55:ac:49:da:d2:15:30:74:cc:83:98:a5:52:58: 2b:3d:a6:0b:cf:41:5c:0b:64:79:21:99:d5:39:e2:28:4f:6c: 21:89:b0:42:fa:74:11:d3:0a:ed:b0:ca:7b:b2:07:47:aa:50: e5:61:e3:b1:dd:94:fa:5a:87:de:dd:ad:71:34:a3:b7:27:fa: e8:f5:2e:93:08:b3:c5:4f:7e:5a:01:82:00:9b:2b:af:63:42: b8:55:0a:dc:da:2c:71:31:7b:65:84:14:3d:1e:bd:01:64:76: d1:08:2f:f6:d3:6e:66:ed:c5:78:bf:85:8c:0f:fc:73:3b:e3: 11:dc:6a:1b:63:87:73:df:4b:34:9f:de:90:74:06:90:54:c6: 50:61:98:d3:dc:f2:1c:37:ef:ed:f3:47:ae:30:64:0d:16:94: 6b:8d:43:b9:09:e3:3b:05:71:05:cb:d5:2a:bb:f0:81:c0:2c: 9d:13:6b:88:98:5c:5f:a6:8b:32:08:09:40:24:9b:ef:b2:ee: dd:54:70:91:cc:c6:4f:dc:52:c9:fc:5d:61:a4:c3:96:17:fb: 86:b4:e4:1f:89:7c:41:ba:12:e0:86:f5:6e:e1:a6:63:e6:e3: ae:9a:65:70:57:9c:0e:42:a1:26:60:15:f0:66:ed:5e:3d:5b: 35:fb:00:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGm+eAElnynRwbVMdf2TNosa/WHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNTEyMTcwNzU1NDRaFw0yNTEyMjAxMDIxNDRaMDMxMTAvBgNV BAMTKDM3NTU1REJCNUFGQUYzNzI0MDhCNDdEOTAzQ0E3RUU0M0U0OTQ2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17OJRYytJIvVCGwfRjNxIB3RU wgZUrmCEsUTyGxDpwpBo8gOzNqucI7mg1PekVi5Z/NA5yMowsgJHa2daDhXnqvKS UfZt+hwzZb3XT3Lvkri3uGQmTgtnRfhnfmIXP4EdK9EZIziwLHZIwwnhs7h1ZUm2 g/PsvvC6eMEspVmbSwXRt9rOwW9T0v+i/FirpY64rXaZShEnSmy4DILlMqdjW5fw zB2CELJSuNFKkIXtrfTMvsQFlqtGjt8ZjbqNXFBayDyq1ug31/F1VsTG8EOswQJl TKo5GdDKEEI46YcYiPQbtpb6+3DTII6Efj6zLlODeFXbnujOkSf/LaHHs0+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN1Vdu1r683JAi0fZA8p+5D5JRqUwHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6gAQ5VrEna0hUwdMyDmKVSWCs9pgvPQVwL ZHkhmdU54ihPbCGJsEL6dBHTCu2wynuyB0eqUOVh47HdlPpah97drXE0o7cn+uj1 LpMIs8VPfloBggCbK69jQrhVCtzaLHExe2WEFD0evQFkdtEIL/bTbmbtxXi/hYwP /HM74xHcahtjh3PfSzSf3pB0BpBUxlBhmNPc8hw37+3zR64wZA0WlGuNQ7kJ4zsF cQXL1Sq78IHALJ0Ta4iYXF+mizIICUAkm++y7t1UcJHMxk/cUsn8XWGkw5YX+4a0 5B+JfEG6EuCG9W7hpmPm466aZXBXnA5CoSZgFfBm7V49WzX7AIE= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:42 2025 by rpki-client