This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: ejVv8/FsKwGH187RDcChys/jKQ8ZIClD6ehSVbecgW0= Subject key identifier: 0B:B0:D0:69:93:7B:ED:DC:57:94:76:D1:D2:8E:79:10:A0:A4:44:72 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 3E62BC098AC720916489D064C8CC94AD7D4B63F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0350 Signing time: Sat 06 Dec 2025 12:32:17 +0000 Manifest this update: Sat 06 Dec 2025 12:27:17 +0000 Manifest next update: Tue 09 Dec 2025 22:14:17 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) 2: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) 3: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 4: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: zeVB8LIJeIXAHhI6a2yTf5UXMBg3fz/SkOaU/rDow4U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:62:bc:09:8a:c7:20:91:64:89:d0:64:c8:cc:94:ad:7d:4b:63:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Dec 6 12:27:17 2025 GMT Not After : Dec 9 22:14:17 2025 GMT Subject: CN=0BB0D069937BEDDC579476D1D28E7910A0A44472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:81:79:f0:51:d2:57:3b:26:e6:75:f7:15: b9:78:00:b2:b2:01:f4:f8:53:1d:a1:a3:dc:8d:e7: 33:f0:85:36:4c:93:4f:99:89:9f:9d:f9:a5:80:28: 52:b2:de:e5:54:f8:be:ec:81:95:4e:e1:65:7f:23: aa:aa:ab:96:89:4a:5d:6c:d7:93:57:12:04:8a:80: 7d:4b:06:e7:5f:79:23:78:f9:39:fd:b5:ea:75:3c: 36:db:81:a2:8a:42:fc:82:36:d2:fa:14:3f:62:ec: 5c:b6:26:a3:92:28:64:1f:98:47:cb:02:3c:5d:54: de:fb:ca:e8:e6:47:be:22:d5:fb:13:42:e1:70:62: 6c:e2:e1:29:06:56:3f:e7:0e:bb:ce:35:6b:d2:9d: 64:f9:3b:a7:35:54:0b:a0:bd:92:02:9f:3a:7a:bc: 81:6a:cf:22:ac:1c:05:3a:b2:ea:6f:5c:fc:a5:6e: 88:c8:96:89:cf:f4:66:c5:43:6f:8b:7a:b3:19:66: ae:aa:b9:32:c6:6b:17:fb:af:e5:7a:2c:6c:a3:86: 09:80:60:46:c9:23:16:21:60:37:82:bc:b4:ce:53: b7:f1:29:72:28:53:69:3c:c6:39:03:c4:e2:67:8c: d2:a6:49:b9:93:b6:d1:dc:71:98:94:9b:13:d4:87: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B0:D0:69:93:7B:ED:DC:57:94:76:D1:D2:8E:79:10:A0:A4:44:72 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:0d:51:fb:19:ea:3e:77:f1:fb:48:64:fb:6c:81:95:b9:5a: 44:8b:14:e0:c7:3e:14:54:22:c0:00:b2:51:59:ee:58:f0:6f: 34:35:ff:f0:36:ac:36:46:83:21:e2:4b:23:4d:52:01:e8:b7: f4:df:2e:34:74:ab:ba:7f:d4:81:d1:9a:09:72:2f:53:43:c7: b2:57:e9:91:34:2d:9b:85:b6:75:02:80:7c:7c:d5:dc:f2:7d: 66:d7:2d:93:9e:a9:05:2f:93:08:eb:d7:4e:2a:2c:e0:24:99: 7a:fc:aa:34:6d:bf:2e:72:86:d9:4f:26:4a:ef:53:64:71:84: d1:80:25:18:08:f3:81:5f:f7:b8:c3:3a:d8:45:8f:4e:ad:5a: bd:78:c6:43:46:3c:0b:6d:05:7d:13:d8:ac:ac:51:8f:f5:4c: 5c:1d:7d:1c:f6:55:c1:6a:df:6c:cb:e1:c0:87:13:54:46:e4: 11:18:2d:5b:ac:93:99:bb:0c:88:0b:3e:e0:e6:da:aa:44:6f: 54:61:a6:fe:25:24:02:96:f6:12:64:58:c7:d4:cd:37:38:02: 31:cb:bb:2b:0a:3a:02:b6:46:2b:c4:a5:84:b1:51:c9:56:cc: 2d:9b:78:c6:9c:75:1d:6a:22:b9:bb:01:69:cb:2e:71:3c:bc: 70:ce:38:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmK8CYrHIJFkidBkyMyUrX1LY/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTEyMDYxMjI3MTdaFw0yNTEyMDkyMjE0MTdaMDMxMTAvBgNV BAMTKDBCQjBEMDY5OTM3QkVEREM1Nzk0NzZEMUQyOEU3OTEwQTBBNDQ0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aYF58FHSVzsm5nX3Fbl4ALKy AfT4Ux2ho9yN5zPwhTZMk0+ZiZ+d+aWAKFKy3uVU+L7sgZVO4WV/I6qqq5aJSl1s 15NXEgSKgH1LBudfeSN4+Tn9tep1PDbbgaKKQvyCNtL6FD9i7Fy2JqOSKGQfmEfL AjxdVN77yujmR74i1fsTQuFwYmzi4SkGVj/nDrvONWvSnWT5O6c1VAugvZICnzp6 vIFqzyKsHAU6supvXPylbojIlonP9GbFQ2+LerMZZq6quTLGaxf7r+V6LGyjhgmA YEbJIxYhYDeCvLTOU7fxKXIoU2k8xjkDxOJnjNKmSbmTttHccZiUmxPUh98PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC7DQaZN77dxXlHbR0o55EKCkRHIwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcNUfsZ6j538ftIZPtsgZW5WkSLFODHPhRU IsAAslFZ7ljwbzQ1//A2rDZGgyHiSyNNUgHot/TfLjR0q7p/1IHRmglyL1NDx7JX 6ZE0LZuFtnUCgHx81dzyfWbXLZOeqQUvkwjr104qLOAkmXr8qjRtvy5yhtlPJkrv U2RxhNGAJRgI84Ff97jDOthFj06tWr14xkNGPAttBX0T2KysUY/1TFwdfRz2VcFq 32zL4cCHE1RG5BEYLVusk5m7DIgLPuDm2qpEb1Rhpv4lJAKW9hJkWMfUzTc4AjHL uysKOgK2RivEpYSxUclWzC2beMacdR1qIrm7AWnLLnE8vHDOON0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:19 2025 by rpki-client