This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: AaD7ltpuofCjOfeSdn7h7if/WmrOLfYlUR2HgVIwBAY= Subject key identifier: 98:D1:8E:BA:E2:D1:39:3E:84:34:04:91:9C:A6:14:18:8D:D7:5C:E2 Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 1877D3D3B3F552BC6E93213169C5190132512998 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 01B4 Signing time: Tue 23 Dec 2025 05:51:49 +0000 Manifest this update: Tue 23 Dec 2025 05:46:49 +0000 Manifest next update: Fri 26 Dec 2025 11:17:49 +0000 Files and hashes: 1: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: InrImlNizXyRaZ5OSZAbKYKNMEMqIX4WAQ1A/9whx7w=) 2: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: SlgJAnXitisojjf9kkVRbYBEt+qYeoblmk0PgmocAWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 11:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:77:d3:d3:b3:f5:52:bc:6e:93:21:31:69:c5:19:01:32:51:29:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Dec 23 05:46:49 2025 GMT Not After : Dec 26 11:17:49 2025 GMT Subject: CN=98D18EBAE2D1393E843404919CA614188DD75CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:2e:4c:04:37:6e:4e:ef:88:53:6b:b3:64: 9f:3d:ed:3f:b3:15:cd:bb:b7:da:92:40:06:fc:ac: 8c:08:b7:81:06:4d:f8:33:46:ca:ad:f8:dc:3a:6c: 65:51:ec:68:e2:85:b1:50:13:b1:2b:08:83:d5:02: 34:0a:24:a7:b8:a8:ab:1d:fa:2b:fe:e2:9a:33:be: c8:21:c2:af:ce:aa:4a:2f:5d:00:ac:0c:4d:2e:b5: 55:ad:63:f6:75:92:53:c4:a9:ad:ef:fb:b9:cd:2a: 0a:86:6e:97:00:fb:3b:53:db:1a:6a:44:07:6b:8c: 2a:7e:e9:cf:bf:cc:56:69:95:5e:29:16:8e:2d:b5: b4:10:26:4a:b0:de:57:42:7a:9a:fb:91:ac:c1:76: ad:ea:69:3e:8a:ad:d7:18:8f:13:43:88:85:97:ae: 2f:33:5c:df:c9:13:24:b9:69:d4:b8:8d:f9:9e:ba: ae:e3:67:a1:11:61:f8:47:5d:ed:7b:ff:a4:c9:7a: 59:c3:ce:46:0c:2e:73:aa:a8:7d:89:96:ef:30:3a: d1:7b:c3:b1:0a:e7:9c:0c:91:de:be:a2:6e:54:ad: 69:7b:c4:ae:f3:64:7e:c3:f7:c4:64:92:77:d4:62: ae:9c:74:c5:75:31:04:ec:79:a2:cc:43:72:23:ea: b6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D1:8E:BA:E2:D1:39:3E:84:34:04:91:9C:A6:14:18:8D:D7:5C:E2 X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:11:c9:12:bf:50:1e:a7:34:83:02:55:61:82:20:68:ce:8e: 4f:e2:3d:5a:34:d9:1e:54:b3:93:09:de:5a:65:04:62:5e:31: 11:60:36:61:c0:68:22:1e:c5:56:ce:66:48:49:85:74:a3:35: 63:f6:87:08:5e:5a:2f:53:2d:7e:4e:70:35:bc:fb:de:9d:b4: 16:c8:01:c0:97:89:1e:0e:85:97:4d:89:c2:4a:59:19:28:55: af:0d:cb:52:40:1b:a5:41:26:26:82:f7:22:fd:d2:b9:8d:ba: 4b:eb:cf:d2:78:71:ae:d1:a6:cf:9c:29:d1:11:87:8a:d1:83: c1:f2:6c:02:88:31:68:d0:e4:42:b9:4a:ae:0c:02:2b:ea:04: de:8f:8d:4e:b3:4f:65:ad:07:00:ee:05:44:23:70:38:c0:0e: 56:3e:8e:e1:1e:94:1c:bf:0f:ff:ac:b3:04:b5:2f:1b:8d:ab: f4:62:ec:cd:dd:c4:80:30:86:6b:3d:90:23:a6:5c:98:75:df: bb:e7:66:c7:eb:4d:ef:52:33:21:d6:ea:8a:18:2e:87:cb:e9: 28:09:49:7e:95:66:bb:df:69:0a:dc:84:5e:88:18:c9:bc:7f: fd:f8:db:c4:63:19:aa:16:17:d2:41:0b:f4:2c:b5:53:0e:2f: 6b:1d:d2:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHfT07P1UrxukyExacUZATJRKZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNTEyMjMwNTQ2NDlaFw0yNTEyMjYxMTE3NDlaMDMxMTAvBgNV BAMTKDk4RDE4RUJBRTJEMTM5M0U4NDM0MDQ5MTlDQTYxNDE4OERENzVDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCi5MBDduTu+IU2uzZJ897T+z Fc27t9qSQAb8rIwIt4EGTfgzRsqt+Nw6bGVR7GjihbFQE7ErCIPVAjQKJKe4qKsd +iv+4pozvsghwq/OqkovXQCsDE0utVWtY/Z1klPEqa3v+7nNKgqGbpcA+ztT2xpq RAdrjCp+6c+/zFZplV4pFo4ttbQQJkqw3ldCepr7kazBdq3qaT6KrdcYjxNDiIWX ri8zXN/JEyS5adS4jfmeuq7jZ6ERYfhHXe17/6TJelnDzkYMLnOqqH2Jlu8wOtF7 w7EK55wMkd6+om5UrWl7xK7zZH7D98RkknfUYq6cdMV1MQTseaLMQ3Ij6rbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmNGOuuLROT6ENASRnKYUGI3XXOIwHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8RyRK/UB6nNIMCVWGCIGjOjk/iPVo02R5U s5MJ3lplBGJeMRFgNmHAaCIexVbOZkhJhXSjNWP2hwheWi9TLX5OcDW8+96dtBbI AcCXiR4OhZdNicJKWRkoVa8Ny1JAG6VBJiaC9yL90rmNukvrz9J4ca7Rps+cKdER h4rRg8HybAKIMWjQ5EK5Sq4MAivqBN6PjU6zT2WtBwDuBUQjcDjADlY+juEelBy/ D/+sswS1LxuNq/Ri7M3dxIAwhms9kCOmXJh137vnZsfrTe9SMyHW6ooYLofL6SgJ SX6VZrvfaQrchF6IGMm8f/3428RjGaoWF9JBC/QstVMOL2sd0ko= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:43 2025 by rpki-client