This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: nVS5UMsPmLa1Asb0gTVyhb1vHC0RZvnvGYFyZBI5eeY= Subject key identifier: DE:49:66:30:CB:DA:E5:47:D9:42:82:67:00:99:6C:48:96:39:45:D2 Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 2077FA39BD9FAECCE6FE7C5A83F05B539A9A209E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 01EB Signing time: Thu 18 Dec 2025 16:11:36 +0000 Manifest this update: Thu 18 Dec 2025 16:06:36 +0000 Manifest next update: Mon 22 Dec 2025 03:38:36 +0000 Files and hashes: 1: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=) 2: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=) 3: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: RGFunCPNJM5O2vtIouVAJ94Rib5vQNM0f3XylPIqocc=) 4: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:77:fa:39:bd:9f:ae:cc:e6:fe:7c:5a:83:f0:5b:53:9a:9a:20:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Dec 18 16:06:36 2025 GMT Not After : Dec 22 03:38:36 2025 GMT Subject: CN=DE496630CBDAE547D942826700996C48963945D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:10:9d:e2:a4:75:28:11:07:95:87:02:15: db:d2:a9:c7:a6:e0:e7:d0:21:f5:a2:3c:6d:77:e5: af:95:27:ae:1e:0d:cb:a0:0b:28:04:3d:e1:c5:a9: 82:d8:59:99:06:ef:91:91:eb:d3:6d:fb:43:a4:88: 12:e1:8a:6f:55:36:99:b9:fe:0d:4e:c4:3b:fc:c1: fa:26:96:77:76:0c:7e:f5:7f:1f:d3:ae:47:f6:03: 10:22:78:4d:0f:bc:ae:a4:24:6f:67:d5:01:34:f5: d7:7b:79:dd:8a:f4:09:ea:ba:81:93:a9:1b:27:cb: 41:ac:05:43:32:2e:cb:26:75:6b:e2:81:c8:c4:98: 33:a4:fa:df:a0:d5:82:ec:b7:3b:53:a8:e2:fb:7a: 04:a2:d2:9c:69:dd:ed:a9:40:72:bd:16:c3:d4:48: dd:b3:b9:bd:2a:1c:8d:12:45:d1:88:a0:2d:7b:6b: a7:16:f9:8a:32:8c:ea:9e:43:c0:1a:8b:7b:79:7f: 4a:f1:19:e9:4b:fe:1d:5d:a0:45:ad:cf:94:a7:1e: f9:8a:a6:4f:39:fa:5a:55:3b:86:21:30:f8:2a:81: 62:bc:cc:79:09:38:17:52:3d:fa:1f:48:5f:6f:89: a4:7a:4b:57:7d:a9:89:37:0f:80:8d:b2:4f:dd:9d: 49:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:49:66:30:CB:DA:E5:47:D9:42:82:67:00:99:6C:48:96:39:45:D2 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4e:55:0e:aa:82:a3:bd:b2:e5:16:40:12:dc:a0:4c:ca:fc: 6b:2c:9b:72:2e:28:49:08:94:52:88:d9:53:e8:d7:a6:54:8a: 2d:df:76:e8:77:7a:5c:b9:e3:7b:61:d1:d3:a6:44:0f:1d:7c: 13:65:b9:6f:ec:44:cc:21:51:fe:5d:42:6d:65:78:14:b9:9b: 2e:7b:f4:4d:d3:51:55:8c:15:8f:35:da:ad:ad:62:a5:21:09: fe:2a:6c:97:a5:29:0a:20:42:15:1c:2f:3b:0d:3f:92:9f:ed: 6b:10:cf:4d:20:28:e0:e1:ee:59:6e:fa:af:86:19:ab:b5:e2: 1b:8e:fe:da:00:7f:54:d3:c7:f6:6f:29:e5:27:a6:5d:26:a9: 18:8f:32:b8:29:c3:1a:e8:c8:fd:e5:41:14:b5:cf:81:a5:13: 9c:e1:84:fa:78:cb:a3:dc:98:0d:aa:f3:6c:96:95:f2:13:89: d4:34:f1:13:9f:b7:71:03:4b:b5:2e:b3:96:15:a8:64:4d:5e: 6d:84:4d:d0:00:5e:d4:a1:20:c7:51:be:0c:4a:c6:28:23:6b: 7c:a8:fc:47:c3:7d:67:6e:d7:c8:01:4f:ad:41:14:71:d0:f1: 81:6e:ec:f7:82:35:08:24:6b:61:8c:e2:bb:9e:6c:d0:cb:06: ea:e1:e0:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHf6Ob2frszm/nxag/BbU5qaIJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNTEyMTgxNjA2MzZaFw0yNTEyMjIwMzM4MzZaMDMxMTAvBgNV BAMTKERFNDk2NjMwQ0JEQUU1NDdEOTQyODI2NzAwOTk2QzQ4OTYzOTQ1RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45hCd4qR1KBEHlYcCFdvSqcem 4OfQIfWiPG135a+VJ64eDcugCygEPeHFqYLYWZkG75GR69Nt+0OkiBLhim9VNpm5 /g1OxDv8wfomlnd2DH71fx/Trkf2AxAieE0PvK6kJG9n1QE09dd7ed2K9AnquoGT qRsny0GsBUMyLssmdWvigcjEmDOk+t+g1YLstztTqOL7egSi0pxp3e2pQHK9FsPU SN2zub0qHI0SRdGIoC17a6cW+YoyjOqeQ8Aai3t5f0rxGelL/h1doEWtz5SnHvmK pk85+lpVO4YhMPgqgWK8zHkJOBdSPfofSF9viaR6S1d9qYk3D4CNsk/dnUkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3klmMMva5UfZQoJnAJlsSJY5RdIwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZOVQ6qgqO9suUWQBLcoEzK/Gssm3IuKEkI lFKI2VPo16ZUii3fduh3ely543th0dOmRA8dfBNluW/sRMwhUf5dQm1leBS5my57 9E3TUVWMFY812q2tYqUhCf4qbJelKQogQhUcLzsNP5Kf7WsQz00gKODh7llu+q+G Gau14huO/toAf1TTx/ZvKeUnpl0mqRiPMrgpwxroyP3lQRS1z4GlE5zhhPp4y6Pc mA2q82yWlfITidQ08ROft3EDS7Uus5YVqGRNXm2ETdAAXtShIMdRvgxKxigja3yo /EfDfWdu18gBT61BFHHQ8YFu7PeCNQgka2GM4ruebNDLBurh4OU= -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:46 2025 by rpki-client