This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json) Hash identifier: xJogHnjUNWEq5o1L5CwaEm7TvABrWZz39ppZdZkPROE= Subject key identifier: 23:9A:46:BF:E1:61:E5:50:1B:BD:5D:59:1A:DF:91:43:6D:C5:42:A1 Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Certificate serial: 1D2201B7FACCAE635D47BE99207A9DD8AC393186 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft Manifest number: 0530 Signing time: Wed 17 Dec 2025 21:31:15 +0000 Manifest this update: Wed 17 Dec 2025 21:26:15 +0000 Manifest next update: Sun 21 Dec 2025 01:00:15 +0000 Files and hashes: 1: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: nMDgXdMuTl5Gaj/0cfpdy4w6DFUD93M8mfSffzeOHAI=) 2: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: GxaX4eV/kFPfj8NmbOkhswC/G4Bnl9v3vVSuFyouusY=) 3: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: A1pg6GpZFjYyhGEeCVl6G4t4Mmj6bG3hF/2pgiRzD7c=) 4: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: Od61s2CG7Pl8XbUZdUJwcwOoJ91FfP8RQCV9emNwZ0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:22:01:b7:fa:cc:ae:63:5d:47:be:99:20:7a:9d:d8:ac:39:31:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Validity Not Before: Dec 17 21:26:15 2025 GMT Not After : Dec 21 01:00:15 2025 GMT Subject: CN=239A46BFE161E5501BBD5D591ADF91436DC542A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:e4:e1:7e:dd:e2:7b:c9:f6:72:79:5d:cc: 1b:29:8a:69:3e:23:4f:29:b4:28:b6:42:95:b8:92: 0b:1b:d9:ab:c1:a2:dd:e6:5e:a2:9d:a1:19:e1:8a: d5:2e:ed:93:af:81:be:42:ed:30:0d:c7:d5:a1:21: 8d:6b:38:08:25:15:e9:1d:d7:6d:83:51:3f:0c:da: 98:9e:dd:02:a9:3b:2f:f4:a5:2b:53:7c:d3:d7:42: 26:b7:e7:6c:b7:90:66:b9:95:95:8c:d1:3e:be:ee: b8:50:09:c5:96:cd:14:9c:86:4d:38:0a:27:73:df: 35:d2:7c:c6:9a:fd:9f:92:07:97:51:25:ac:00:a4: 39:d2:ca:e6:d8:77:e8:f9:a9:17:44:e7:e8:67:33: 17:19:05:4c:91:c7:00:5b:a4:79:ba:2f:8e:00:0d: a5:03:ca:35:7b:00:d5:14:81:87:c6:04:41:7d:62: 43:e4:42:e6:9b:61:ef:a7:12:59:f9:b3:fd:c1:c4: 9c:5c:c8:aa:fb:d6:58:66:d1:1c:f9:4b:13:93:cb: f9:7f:a1:32:da:f2:c5:ff:6d:3d:a3:44:fa:c9:ef: 72:ad:da:e5:c6:3d:bb:36:3a:c2:59:03:4c:9a:73: 97:7e:f6:81:0c:37:21:9a:49:c1:23:0b:38:31:a8: 22:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9A:46:BF:E1:61:E5:50:1B:BD:5D:59:1A:DF:91:43:6D:C5:42:A1 X509v3 Authority Key Identifier: keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a8:c3:af:68:8a:04:21:3f:da:8f:b2:79:f7:ac:ca:e8:cc: 50:82:84:fb:59:98:0d:20:30:e8:80:57:23:b9:c9:c4:cb:9a: 23:9f:3d:d2:3d:6c:46:67:1b:e5:df:c4:49:4f:b5:7d:1e:75: 73:77:dd:a2:06:84:26:d1:0d:12:e1:80:05:f8:99:80:33:23: ec:45:22:38:d6:f2:28:4e:d3:7b:23:ad:71:e5:fc:a2:a4:7f: 56:99:6b:8b:23:4e:c4:b1:80:f5:df:4d:6a:2a:23:a7:e2:a7: 81:11:65:d0:2b:4d:44:fa:f7:06:ed:30:8b:31:93:00:12:ae: 32:c7:18:09:82:b6:4e:99:a4:c2:8a:9a:78:82:59:58:7c:e6: 05:cb:f6:7e:93:24:09:18:c0:ae:34:f8:44:55:cf:f7:f8:f0: e5:83:98:f2:5a:4d:7f:19:b2:83:57:e7:d7:91:55:91:b8:cf: 3d:21:d5:a2:9d:0b:3f:50:b3:90:46:28:f2:16:f1:bc:d7:38: 49:30:28:44:fb:8c:f6:a3:fb:6b:fc:9a:88:1e:5e:e7:2d:ae: ef:08:79:50:61:d9:6d:cb:44:0c:fe:01:44:28:86:ae:72:df: 35:a5:f7:e8:e5:8f:26:5a:4d:8d:85:39:4e:64:8a:1a:c7:9f: ee:a6:22:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSIBt/rMrmNdR76ZIHqd2Kw5MYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZE ODBDRjk3NzAeFw0yNTEyMTcyMTI2MTVaFw0yNTEyMjEwMTAwMTVaMDMxMTAvBgNV BAMTKDIzOUE0NkJGRTE2MUU1NTAxQkJENUQ1OTFBREY5MTQzNkRDNTQyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5beThft3ie8n2cnldzBspimk+ I08ptCi2QpW4kgsb2avBot3mXqKdoRnhitUu7ZOvgb5C7TANx9WhIY1rOAglFekd 122DUT8M2pie3QKpOy/0pStTfNPXQia352y3kGa5lZWM0T6+7rhQCcWWzRSchk04 Cidz3zXSfMaa/Z+SB5dRJawApDnSyubYd+j5qRdE5+hnMxcZBUyRxwBbpHm6L44A DaUDyjV7ANUUgYfGBEF9YkPkQuabYe+nEln5s/3BxJxcyKr71lhm0Rz5SxOTy/l/ oTLa8sX/bT2jRPrJ73Kt2uXGPbs2OsJZA0yac5d+9oEMNyGaScEjCzgxqCKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI5pGv+Fh5VAbvV1ZGt+RQ23FQqEwHwYDVR0j BBgwFoAU4ia0+oQtzmw4ZEnxT4whz9gM+XcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMjI2QjRGQTg0 MkRDRTZDMzg2NDQ5RjE0RjhDMjFDRkQ4MENGOTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZEODBD Rjk3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIx Q0ZEODBDRjk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImow69oigQhP9qPsnn3rMrozFCChPtZmA0g MOiAVyO5ycTLmiOfPdI9bEZnG+XfxElPtX0edXN33aIGhCbRDRLhgAX4mYAzI+xF IjjW8ihO03sjrXHl/KKkf1aZa4sjTsSxgPXfTWoqI6fip4ERZdArTUT69wbtMIsx kwASrjLHGAmCtk6ZpMKKmniCWVh85gXL9n6TJAkYwK40+ERVz/f48OWDmPJaTX8Z soNX59eRVZG4zz0h1aKdCz9Qs5BGKPIW8bzXOEkwKET7jPaj+2v8mogeXuctru8I eVBh2W3LRAz+AUQohq5y3zWl9+jljyZaTY2FOU5kihrHn+6mIsM= -----END CERTIFICATE-----Generated at Sat Dec 20 10:22:06 2025 by rpki-client