This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: J5vroPPxvRGy1ah6mlBMk1PghiRJSiq7WjBJlwn557U= Subject key identifier: 72:E7:26:19:AC:C6:24:9C:93:38:BB:37:F5:82:A1:30:E6:E1:AD:9B Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 440CF7F8FDFDB7820E4DF71B9B9FEFE8298D6E89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: 011D Signing time: Wed 24 Dec 2025 03:32:39 +0000 Manifest this update: Wed 24 Dec 2025 03:27:39 +0000 Manifest next update: Sat 27 Dec 2025 08:36:39 +0000 Files and hashes: 1: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: uT7l3MCkD+UCi56/gIqjts/fXmzS/RrsmgU4NTQTECw=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 08:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0c:f7:f8:fd:fd:b7:82:0e:4d:f7:1b:9b:9f:ef:e8:29:8d:6e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Dec 24 03:27:39 2025 GMT Not After : Dec 27 08:36:39 2025 GMT Subject: CN=72E72619ACC6249C9338BB37F582A130E6E1AD9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:ab:9b:07:52:2f:67:39:84:c1:c3:73:78: 95:31:97:5e:22:df:fd:ff:be:fa:4c:9b:0e:31:e3: 04:7f:47:38:bf:de:96:b7:ed:69:b0:e3:16:c7:10: 6c:ac:a3:97:9a:f4:16:11:95:56:bf:4e:62:92:f8: 5b:39:79:98:47:57:5e:8b:30:37:56:97:24:4e:74: 81:b7:00:5e:00:84:e0:58:35:a3:86:22:5a:07:37: 0b:0b:06:6c:12:de:c0:52:22:0f:e4:c5:a8:4e:da: 56:76:23:85:32:07:90:10:ac:be:9f:01:f7:4a:79: 99:60:b5:b8:62:d2:43:a1:51:7b:4d:21:e2:b0:d8: 7e:6b:87:8b:98:d6:f4:97:f3:9b:a6:20:7c:78:09: 6c:b8:79:7d:6f:f9:b8:8f:64:d4:0d:82:ba:e0:9c: 62:5e:03:97:e4:28:ac:07:7f:a7:86:23:ee:9f:a6: 7f:37:cc:96:51:53:c4:e0:6a:f9:7b:37:e1:15:f6: 7e:8d:7b:72:c4:6a:d0:8d:23:a9:8a:39:b7:77:f9: 68:1a:e1:6e:1a:12:39:61:4a:2b:d5:98:2d:a8:36: 58:af:b3:6f:00:45:83:c3:b0:57:b0:67:1a:2e:15: 70:62:4a:5e:60:33:df:e0:12:75:8c:78:5c:31:57: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E7:26:19:AC:C6:24:9C:93:38:BB:37:F5:82:A1:30:E6:E1:AD:9B X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ef:d7:cf:39:dc:71:85:11:fa:9f:84:67:a5:70:9e:ff:7e: ba:64:cc:1d:3b:b6:21:f5:d7:c9:ac:48:50:b3:1f:33:48:3c: bd:ed:42:b4:dd:4b:c3:27:c9:9c:4e:e6:9e:3d:24:96:1d:c8: 7a:5f:d8:a2:60:dc:59:35:a5:ee:99:d2:47:a9:ca:5f:6a:87: 6e:61:60:a6:18:f5:9c:65:04:74:6e:a4:9b:2f:64:27:9e:dc: 43:e3:59:92:80:e9:85:d4:ea:8c:17:8f:bc:39:98:c3:30:b3: 19:e8:86:39:19:c5:04:56:f5:6f:5a:04:81:73:76:47:58:4d: 67:6c:99:ec:eb:a1:d1:a9:ca:e8:bf:0e:a1:a7:2d:33:33:1e: 0a:cd:ae:26:3b:cf:d1:bf:42:2f:1d:34:b4:ba:36:eb:8c:09: 74:31:88:b4:73:e7:a5:35:04:63:f9:4c:c2:cf:90:37:4d:79: 28:b8:a0:6f:cf:6c:63:01:15:7b:be:23:3f:4a:0c:6a:42:a6: b2:3c:7c:2c:b7:a8:07:28:c5:a2:88:8a:9f:50:26:4c:d8:12: 82:b3:aa:d9:00:dd:ed:ed:70:ef:3a:f7:56:2d:77:fd:8c:cc: 98:cd:6d:60:12:74:cd:db:8e:aa:d9:40:10:b1:2f:c6:d4:a4: 3a:7c:9c:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAz3+P39t4IOTfcbm5/v6CmNbokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTEyMjQwMzI3MzlaFw0yNTEyMjcwODM2MzlaMDMxMTAvBgNV BAMTKDcyRTcyNjE5QUNDNjI0OUM5MzM4QkIzN0Y1ODJBMTMwRTZFMUFEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdHKubB1IvZzmEwcNzeJUxl14i 3/3/vvpMmw4x4wR/Rzi/3pa37Wmw4xbHEGyso5ea9BYRlVa/TmKS+Fs5eZhHV16L MDdWlyROdIG3AF4AhOBYNaOGIloHNwsLBmwS3sBSIg/kxahO2lZ2I4UyB5AQrL6f AfdKeZlgtbhi0kOhUXtNIeKw2H5rh4uY1vSX85umIHx4CWy4eX1v+biPZNQNgrrg nGJeA5fkKKwHf6eGI+6fpn83zJZRU8Tgavl7N+EV9n6Ne3LEatCNI6mKObd3+Wga 4W4aEjlhSivVmC2oNlivs28ARYPDsFewZxouFXBiSl5gM9/gEnWMeFwxV84bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcucmGazGJJyTOLs39YKhMObhrZswHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnv18853HGFEfqfhGelcJ7/frpkzB07tiH1 18msSFCzHzNIPL3tQrTdS8MnyZxO5p49JJYdyHpf2KJg3Fk1pe6Z0kepyl9qh25h YKYY9ZxlBHRupJsvZCee3EPjWZKA6YXU6owXj7w5mMMwsxnohjkZxQRW9W9aBIFz dkdYTWdsmezrodGpyui/DqGnLTMzHgrNriY7z9G/Qi8dNLS6NuuMCXQxiLRz56U1 BGP5TMLPkDdNeSi4oG/PbGMBFXu+Iz9KDGpCprI8fCy3qAcoxaKIip9QJkzYEoKz qtkA3e3tcO8691Ytd/2MzJjNbWASdM3bjqrZQBCxL8bUpDp8nIM= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:47 2025 by rpki-client