This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: PUBQOagejBMEKG/8pLMOLNfpSqeykEyyHTLPQkx40Sk= Subject key identifier: DC:15:2F:BF:03:8E:CD:88:3C:27:9E:AD:62:DE:FA:26:96:EF:28:C9 Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 0AC619C8EC78F95F9CD2E3E1E8730FC91C025B73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 0258 Signing time: Wed 24 Dec 2025 07:21:02 +0000 Manifest this update: Wed 24 Dec 2025 07:16:02 +0000 Manifest next update: Sat 27 Dec 2025 08:19:02 +0000 Files and hashes: 1: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: o9UBSnw07nM9ViLEnXPrl1MZAHV9TwAeAXLiC93YoKg=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: PyDXoIlT1NIef5VwI6vIhfIo1ytHrmrJtk3n+sEFsT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 08:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c6:19:c8:ec:78:f9:5f:9c:d2:e3:e1:e8:73:0f:c9:1c:02:5b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Dec 24 07:16:02 2025 GMT Not After : Dec 27 08:19:02 2025 GMT Subject: CN=DC152FBF038ECD883C279EAD62DEFA2696EF28C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:d0:4c:c1:fc:a4:0c:b4:71:a0:24:36:ea: dc:6a:6a:90:71:0e:74:66:fe:67:1f:a3:74:85:07: d2:16:5b:ea:3b:69:84:cc:d9:18:f9:04:e7:1d:e9: ad:58:17:00:ac:bc:a8:09:2a:e0:39:73:79:04:ac: aa:b4:d5:2d:2e:22:3f:bf:f8:5d:ec:7e:e4:c1:48: a1:77:46:25:36:17:24:58:0d:78:44:56:73:df:b2: 19:e5:3e:a5:ba:76:e4:cc:05:c1:54:b0:d9:52:c0: 7f:be:79:35:3c:04:e3:6a:16:36:7c:be:3b:9f:b1: 2a:61:db:9b:f9:72:2c:47:08:59:72:9e:7d:d9:9a: ec:c5:f9:bc:e4:7c:18:6a:59:00:c9:1d:f1:60:08: d6:bc:3e:1a:ad:57:8b:2c:ee:4d:dd:4e:95:c2:a3: 57:d9:58:a1:1f:c5:ee:54:3b:9e:91:7d:54:ea:3e: 2e:76:cd:3a:c4:58:bc:57:91:9b:ff:6d:f8:3a:d9: d1:87:59:73:aa:50:7b:74:e5:25:7d:d4:8f:b7:ea: 8b:bb:e0:86:2e:1c:9b:f2:12:97:37:15:cb:8d:0e: 50:f9:22:04:88:0b:b2:36:ee:8f:d6:f7:5d:a9:be: f3:00:a2:55:81:6d:95:0c:33:b8:8a:84:b3:5d:0b: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:15:2F:BF:03:8E:CD:88:3C:27:9E:AD:62:DE:FA:26:96:EF:28:C9 X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:dd:18:89:de:71:7c:7d:5c:25:38:2b:65:1d:21:a5:a5:35: a8:80:58:6b:f6:68:65:ec:83:43:61:70:8f:cc:9d:33:91:ae: 77:d8:44:a7:9e:4f:ed:c2:ac:4f:11:2a:1c:06:0f:28:8e:ac: 0b:84:67:ff:66:73:90:04:8c:4d:f5:9e:b5:67:58:85:35:26: da:85:04:f1:de:10:4a:58:7e:57:76:fd:77:22:b8:e8:1f:50: 57:37:ce:a1:a8:8b:7a:ed:70:bf:7b:5e:59:18:38:b7:d2:ba: 77:03:3f:a2:66:08:04:5e:fe:bb:bf:43:de:ee:f0:e0:f4:03: 98:e6:31:a2:2f:ba:61:1c:52:b9:02:a3:4f:77:32:46:53:40: 44:ea:4e:50:c6:f7:dd:18:11:bb:00:47:cd:a5:87:24:b1:e1: 5d:40:68:c9:9a:60:56:43:11:dc:d8:8a:23:12:ae:9c:b8:4e: 55:78:c4:e5:4f:b3:77:57:c8:90:27:68:5c:14:a8:c2:51:cc: 9d:93:c2:40:54:da:84:50:68:1a:c9:39:4e:13:a9:49:4d:e5: f8:fb:6c:ee:40:2f:e3:65:14:c5:32:61:ae:6c:33:df:19:38: cd:46:04:f5:8f:bf:72:6c:e7:1c:b1:96:c6:32:d3:62:71:bc: 7d:63:13:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsYZyOx4+V+c0uPh6HMPyRwCW3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNTEyMjQwNzE2MDJaFw0yNTEyMjcwODE5MDJaMDMxMTAvBgNV BAMTKERDMTUyRkJGMDM4RUNEODgzQzI3OUVBRDYyREVGQTI2OTZFRjI4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJtBMwfykDLRxoCQ26txqapBx DnRm/mcfo3SFB9IWW+o7aYTM2Rj5BOcd6a1YFwCsvKgJKuA5c3kErKq01S0uIj+/ +F3sfuTBSKF3RiU2FyRYDXhEVnPfshnlPqW6duTMBcFUsNlSwH++eTU8BONqFjZ8 vjufsSph25v5cixHCFlynn3ZmuzF+bzkfBhqWQDJHfFgCNa8PhqtV4ss7k3dTpXC o1fZWKEfxe5UO56RfVTqPi52zTrEWLxXkZv/bfg62dGHWXOqUHt05SV91I+36ou7 4IYuHJvyEpc3FcuNDlD5IgSIC7I27o/W912pvvMAolWBbZUMM7iKhLNdCzjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3BUvvwOOzYg8J56tYt76JpbvKMkwHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfdGInecXx9XCU4K2UdIaWlNaiAWGv2aGXs g0NhcI/MnTORrnfYRKeeT+3CrE8RKhwGDyiOrAuEZ/9mc5AEjE31nrVnWIU1JtqF BPHeEEpYfld2/XciuOgfUFc3zqGoi3rtcL97XlkYOLfSuncDP6JmCARe/ru/Q97u 8OD0A5jmMaIvumEcUrkCo093MkZTQETqTlDG990YEbsAR82lhySx4V1AaMmaYFZD EdzYiiMSrpy4TlV4xOVPs3dXyJAnaFwUqMJRzJ2TwkBU2oRQaBrJOU4TqUlN5fj7 bO5AL+NlFMUyYa5sM98ZOM1GBPWPv3Js5xyxlsYy02JxvH1jEwM= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:48 2025 by rpki-client