This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft File: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft (raw, json) Hash identifier: sJQQB4/wPfOa7LbjIbFuxQfDwY9lB/64HRmeSkj4cxY= Subject key identifier: C8:EC:F6:E4:43:46:30:6C:1B:6D:3B:9A:B3:C7:CF:B5:F0:A7:DD:23 Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 Certificate issuer: /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Certificate serial: 5F31D08679B5E7F55BFCED0575902BB1F782EED1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft Manifest number: 0220 Signing time: Tue 23 Dec 2025 01:50:57 +0000 Manifest this update: Tue 23 Dec 2025 01:45:57 +0000 Manifest next update: Fri 26 Dec 2025 07:55:57 +0000 Files and hashes: 1: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: LKby0ViyWSUSxyx6by+Sa+3JQIcYE0HMocb+PoIEh0U=) 2: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: buLsY1iWxn5uAX/tlzA+XQSdGjGRQVTlyaSVt5UiGA8=) 3: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl (hash: u8CSMkpVK8WsC4uTyKddc4Mdn7zRxXz4z50KLJFFrHU=) 4: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: wWf96mUt4wCBbqfalQK0TLTz6ApBKN5hLe7UYoC3TzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:31:d0:86:79:b5:e7:f5:5b:fc:ed:05:75:90:2b:b1:f7:82:ee:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Validity Not Before: Dec 23 01:45:57 2025 GMT Not After : Dec 26 07:55:57 2025 GMT Subject: CN=C8ECF6E44346306C1B6D3B9AB3C7CFB5F0A7DD23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:02:33:47:29:d1:1c:f9:7e:be:45:41:40: ea:ff:e8:24:a9:f5:e4:ce:d3:1d:3c:2e:22:c8:eb: 28:46:a1:c5:eb:57:58:b4:f5:bb:2b:b6:70:b3:37: b7:9a:3d:a8:47:90:64:be:fa:fe:33:d0:2e:fc:3f: 33:ee:e3:20:6a:e2:ec:80:6b:c7:88:33:dd:cd:0c: 83:10:49:71:6a:6a:f7:58:47:a3:16:2d:d7:2c:f6: 90:75:0a:cb:2e:71:12:90:15:f3:00:58:ad:66:2e: ab:82:6b:2b:65:ec:24:10:d6:80:e3:8c:8c:d4:9b: a1:0f:48:6a:4a:12:dc:97:7f:ea:e0:74:a4:83:6f: 77:7a:e2:2b:dd:43:f0:b2:da:07:8e:5d:cb:58:aa: 6d:13:3f:8d:0a:31:00:84:e7:2f:1d:88:1c:9c:38: e3:c2:35:14:b7:ae:4d:c7:21:be:e5:7e:d3:be:db: de:4b:35:bd:b7:c5:9c:ec:3b:4d:2f:db:84:0a:1b: d6:6e:83:a9:8b:8c:2e:be:30:59:69:58:c0:5d:29: ff:d9:b0:a5:ff:de:18:0d:ec:ca:ca:96:d1:f3:f4: 3d:fd:5b:a2:d5:0a:5d:b2:50:fa:51:ea:58:67:c3: 89:38:03:1d:65:11:d7:70:32:17:d1:0e:6f:ff:48: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EC:F6:E4:43:46:30:6C:1B:6D:3B:9A:B3:C7:CF:B5:F0:A7:DD:23 X509v3 Authority Key Identifier: keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e3:af:49:d3:aa:90:a6:ca:1c:b2:ba:ab:82:ef:72:28:9c: 65:99:e3:78:15:12:da:2c:d8:74:1e:2b:17:47:67:f8:5b:79: a5:9e:a9:42:52:44:7a:5b:de:f7:a3:3b:be:6a:80:57:df:3e: c1:23:aa:9d:72:63:42:0b:67:cc:96:00:2f:d5:be:32:3d:41: 8e:57:7f:97:17:90:8d:2b:60:24:bb:4f:e4:8b:03:21:1a:cc: ae:ea:3d:ea:69:ac:43:aa:33:93:81:76:dd:63:b6:6d:f6:1e: 9d:02:a0:04:e9:36:12:c2:d3:8d:33:eb:71:59:1f:19:01:4e: f1:5c:1d:8a:6d:48:f7:36:26:90:a4:16:31:e6:8b:10:fb:60: 5b:a1:cc:b1:aa:b6:ce:16:30:3b:93:e2:23:45:52:59:01:c6: 10:e1:64:f3:0b:dd:a7:56:fc:69:8e:58:f2:97:b4:d8:a5:1e: 60:07:df:91:28:1b:a8:f4:9f:5d:bc:c8:ef:e8:7f:fb:67:b4: 29:d3:28:d9:80:4c:6f:51:96:c1:52:9b:50:92:70:73:68:a8: e7:e7:64:94:37:5c:a7:b8:a5:f0:9e:9e:ec:be:83:cd:43:c8: 95:71:e0:8a:f9:d6:2c:91:86:09:ec:ca:f4:35:89:4f:53:91: 5d:12:b8:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzHQhnm15/Vb/O0FdZArsfeC7tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3 MzQyMEUzODAeFw0yNTEyMjMwMTQ1NTdaFw0yNTEyMjYwNzU1NTdaMDMxMTAvBgNV BAMTKEM4RUNGNkU0NDM0NjMwNkMxQjZEM0I5QUIzQzdDRkI1RjBBN0REMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrwIzRynRHPl+vkVBQOr/6CSp 9eTO0x08LiLI6yhGocXrV1i09bsrtnCzN7eaPahHkGS++v4z0C78PzPu4yBq4uyA a8eIM93NDIMQSXFqavdYR6MWLdcs9pB1CssucRKQFfMAWK1mLquCaytl7CQQ1oDj jIzUm6EPSGpKEtyXf+rgdKSDb3d64ivdQ/Cy2geOXctYqm0TP40KMQCE5y8diByc OOPCNRS3rk3HIb7lftO+295LNb23xZzsO00v24QKG9Zug6mLjC6+MFlpWMBdKf/Z sKX/3hgN7MrKltHz9D39W6LVCl2yUPpR6lhnw4k4Ax1lEddwMhfRDm//SMvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyOz25ENGMGwbbTuas8fPtfCn3SMwHwYDVR0j BBgwFoAU5Rp39dv7FrFgbeGk/239BXNCDjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDBlMWYyMC1iMGNkLTQ2OWItOTEwNi0xZWEwMDA3OTVmOWYvMC9FNTFBNzdGNURC RkIxNkIxNjA2REUxQTRGRjZERkQwNTczNDIwRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3MzQy MEUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZE MDU3MzQyMEUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLjr0nTqpCmyhyyuquC73IonGWZ43gVEtos 2HQeKxdHZ/hbeaWeqUJSRHpb3vejO75qgFffPsEjqp1yY0ILZ8yWAC/VvjI9QY5X f5cXkI0rYCS7T+SLAyEazK7qPepprEOqM5OBdt1jtm32Hp0CoATpNhLC040z63FZ HxkBTvFcHYptSPc2JpCkFjHmixD7YFuhzLGqts4WMDuT4iNFUlkBxhDhZPML3adW /GmOWPKXtNilHmAH35EoG6j0n128yO/of/tntCnTKNmATG9RlsFSm1CScHNoqOfn ZJQ3XKe4pfCenuy+g81DyJVx4Ir51iyRhgnsyvQ1iU9TkV0SuEs= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:52 2025 by rpki-client