This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft File: E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft (raw, json) Hash identifier: ZRZSYsmGFVP8h9I7qrfGsJTETgpuYpqEha2G10+cv/0= Subject key identifier: 33:6F:42:C2:01:8B:72:A4:EE:A1:1E:47:C9:26:37:E3:7C:DC:AA:BA Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 Certificate issuer: /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Certificate serial: 156A91441E3F12E92433702ACF7613184EA5DE54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft Manifest number: 022C Signing time: Sun 21 Dec 2025 00:21:53 +0000 Manifest this update: Sun 21 Dec 2025 00:16:53 +0000 Manifest next update: Wed 24 Dec 2025 01:05:53 +0000 Files and hashes: 1: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (hash: 0eR/sossty6R9CW6sl77Vt0ZhuUxrN0f/0JSjyj94i0=) 2: E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl (hash: wI2b7dBGWWHC1EANYcaWgz2VFLme7NBN9CRcO/wkARA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 01:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6a:91:44:1e:3f:12:e9:24:33:70:2a:cf:76:13:18:4e:a5:de:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Validity Not Before: Dec 21 00:16:53 2025 GMT Not After : Dec 24 01:05:53 2025 GMT Subject: CN=336F42C2018B72A4EEA11E47C92637E37CDCAABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:19:fb:c4:43:97:07:76:c9:6f:40:ff:e0: 36:71:67:fb:7f:f7:41:47:2c:49:43:a3:18:11:24: 12:98:f0:e0:62:d2:ba:46:e5:10:3f:4e:84:11:d9: 30:11:a2:86:8c:cc:ec:54:8f:0c:2a:6f:50:d9:72: e5:a5:c0:d5:88:c3:15:53:31:85:17:68:67:c6:33: 66:c0:4f:b6:85:e6:d0:ed:85:77:49:c8:fa:17:19: 6d:ff:81:a9:7d:a2:0f:9c:b8:e7:1a:09:e7:1e:38: 3e:ff:d0:a9:c2:97:b2:b7:ac:22:f0:2b:c4:b5:7e: dd:eb:ae:e4:40:0c:f3:2b:35:46:76:b3:55:19:c0: c1:f9:e6:44:59:45:99:3d:38:5a:ef:33:8c:03:cb: 35:86:1c:c2:30:c4:2b:96:f5:ab:78:06:38:f8:20: c2:2f:e0:c1:27:c3:53:92:a6:27:fa:6d:02:44:45: 48:ca:a4:8f:91:33:4b:21:26:c6:1e:66:67:e3:af: 67:b9:82:53:41:df:87:f5:96:ab:d5:d7:bb:ee:c4: af:95:b9:f2:24:d9:e8:77:a7:ee:c6:e9:ba:c1:9b: 5b:b0:3a:55:44:e9:51:30:f7:3d:46:8e:10:b9:ac: 12:a6:ca:b3:b9:7e:62:7f:07:80:40:91:6f:af:6e: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6F:42:C2:01:8B:72:A4:EE:A1:1E:47:C9:26:37:E3:7C:DC:AA:BA X509v3 Authority Key Identifier: keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:09:5b:80:8a:1e:ad:61:16:a0:d6:88:23:f2:89:a7:3f:46: 53:50:30:f0:95:43:8c:5b:fe:68:a4:9c:bc:70:da:8a:c6:46: 2f:fc:f3:61:4d:81:94:91:c6:8b:15:56:ca:b2:16:ba:c3:1e: 97:ba:e1:15:58:39:66:d5:4b:da:22:82:ea:8f:92:2c:6e:3c: 2a:0f:24:4c:c8:68:06:6b:04:17:53:84:1c:df:79:34:db:86: 7f:e4:9b:bd:49:47:10:f0:44:7b:02:22:9e:d3:82:78:e7:b2: 10:eb:89:e6:79:14:65:f2:ea:a0:55:cb:c1:81:cc:12:f2:53: cc:4b:25:2e:b4:91:6c:48:c6:26:86:66:0b:ec:e9:d9:3a:39: 5a:a3:ef:07:e1:89:8b:3a:5c:11:df:cb:48:6b:9c:3b:1e:6f: fd:0b:9a:ea:93:64:a0:b3:7f:06:bb:da:be:49:c2:bc:a5:20: eb:b6:90:6b:61:a6:6b:c8:6e:83:17:41:07:08:da:59:02:6b: 36:e5:c2:f0:20:e6:dc:cd:70:48:2e:84:7b:57:22:79:61:1e: ba:43:bb:63:b2:d1:4a:86:91:9a:ea:c2:74:6a:85:50:9e:91: d1:e4:b4:8b:55:91:3b:d4:1d:37:16:ae:c6:86:17:a6:9f:88: 4e:73:af:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWqRRB4/EukkM3Aqz3YTGE6l3lQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG MTU2MDRENTAeFw0yNTEyMjEwMDE2NTNaFw0yNTEyMjQwMTA1NTNaMDMxMTAvBgNV BAMTKDMzNkY0MkMyMDE4QjcyQTRFRUExMUU0N0M5MjYzN0UzN0NEQ0FBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiqRn7xEOXB3bJb0D/4DZxZ/t/ 90FHLElDoxgRJBKY8OBi0rpG5RA/ToQR2TARooaMzOxUjwwqb1DZcuWlwNWIwxVT MYUXaGfGM2bAT7aF5tDthXdJyPoXGW3/gal9og+cuOcaCeceOD7/0KnCl7K3rCLw K8S1ft3rruRADPMrNUZ2s1UZwMH55kRZRZk9OFrvM4wDyzWGHMIwxCuW9at4Bjj4 IMIv4MEnw1OSpif6bQJERUjKpI+RM0shJsYeZmfjr2e5glNB34f1lqvV17vuxK+V ufIk2eh3p+7G6brBm1uwOlVE6VEw9z1GjhC5rBKmyrO5fmJ/B4BAkW+vburPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM29CwgGLcqTuoR5HySY343zcqrowHwYDVR0j BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2 MDRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmZmI0M2ItZjhiNS00ZjFmLTli OGYtNWIwMmRkYmI2ZmNmLzAvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3 NDdGMTU2MDRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgJW4CKHq1hFqDWiCPyiac/RlNQMPCVQ4xb /miknLxw2orGRi/882FNgZSRxosVVsqyFrrDHpe64RVYOWbVS9oiguqPkixuPCoP JEzIaAZrBBdThBzfeTTbhn/km71JRxDwRHsCIp7TgnjnshDrieZ5FGXy6qBVy8GB zBLyU8xLJS60kWxIxiaGZgvs6dk6OVqj7wfhiYs6XBHfy0hrnDseb/0LmuqTZKCz fwa72r5JwrylIOu2kGthpmvIboMXQQcI2lkCazblwvAg5tzNcEguhHtXInlhHrpD u2Oy0UqGkZrqwnRqhVCekdHktItVkTvUHTcWrsaGF6afiE5zr94= -----END CERTIFICATE-----Generated at Sun Dec 21 05:52:14 2025 by rpki-client