This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft File: 4412C369832E86CF255C7255EB1ECA7938910246.mft (raw, json) Hash identifier: Dxorl2QFCjUsJCoQbkgzay7WsaiB9ZPL8NTwYHXFbFs= Subject key identifier: 85:29:C2:75:84:83:E3:3F:64:93:9C:06:A7:FB:C8:55:0B:F9:4D:78 Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246 Certificate serial: 78D2D59A307B9648818A82370BF5EE16C79A4CE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft Manifest number: 04C0 Signing time: Thu 04 Dec 2025 16:20:56 +0000 Manifest this update: Thu 04 Dec 2025 16:15:56 +0000 Manifest next update: Mon 08 Dec 2025 03:11:56 +0000 Files and hashes: 1: 323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (hash: HPsSqRVXNC2X//zSidaG64Nq6wN6hLBRPgB5Ogk0SaQ=) 2: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (hash: BsPjaPAJfoOsDEE1I3aoHNDcatuZ5kuXKVlMx6806B8=) 3: 4412C369832E86CF255C7255EB1ECA7938910246.crl (hash: GOhrqTm3ONRxR4b3hJ5+P2nHqyxC88Ppfa5GX8XH3Q0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 03:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d2:d5:9a:30:7b:96:48:81:8a:82:37:0b:f5:ee:16:c7:9a:4c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246 Validity Not Before: Dec 4 16:15:56 2025 GMT Not After : Dec 8 03:11:56 2025 GMT Subject: CN=8529C2758483E33F64939C06A7FBC8550BF94D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c0:ff:a6:8e:d2:cb:4d:2f:29:b5:cd:a8:82: eb:6f:c0:5a:13:9d:8f:9f:99:01:79:e7:e2:26:6e: c5:75:22:85:84:e5:02:eb:2c:c7:da:33:c3:3b:10: 6a:0a:63:49:ba:ae:fe:b2:00:9a:fb:bc:3a:0c:70: 27:6a:bb:b5:9e:95:2f:76:0b:44:39:ca:57:33:28: 02:83:d6:8a:93:5f:aa:3f:ce:5c:ee:50:a4:b6:7c: 20:af:01:49:dd:ef:83:d2:f2:8c:a8:f6:2d:93:c3: 0b:20:52:ac:8d:4b:51:54:62:f3:fa:26:f8:3c:9a: a1:96:2a:4e:bc:b4:a3:b8:74:45:d2:bb:1b:7b:ff: 66:29:0e:c1:d3:b4:56:1a:34:36:00:45:6a:af:1b: 8a:74:4e:0b:2f:47:e3:16:2e:5c:09:92:2d:46:68: ab:eb:44:bc:86:a2:a2:64:84:32:d2:b5:32:52:5b: 27:62:b8:d8:0d:3d:94:b3:3f:5b:81:1c:fc:31:5f: 94:2e:12:7b:99:85:95:e8:34:86:89:84:82:06:f6: df:2d:90:d5:e2:41:20:5c:80:d1:76:b8:35:71:88: f0:6b:dd:d4:28:2d:62:af:ff:9e:d4:e7:99:2a:f8: 75:a1:43:1d:46:ce:0c:e5:4b:7d:6e:3a:57:11:67: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:29:C2:75:84:83:E3:3F:64:93:9C:06:A7:FB:C8:55:0B:F9:4D:78 X509v3 Authority Key Identifier: keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:bf:c6:98:c6:02:4f:e4:0c:d8:3c:bc:aa:96:46:5c:90:ac: 14:dd:04:33:56:76:77:22:29:86:d9:27:e0:bc:b7:31:35:38: 84:ae:61:19:4c:a8:cc:82:89:74:b0:89:0a:0c:b8:57:02:35: 88:ad:7b:cb:18:d8:0e:6e:63:f4:e0:06:30:77:71:a0:4f:09: f8:9b:d9:a5:87:6a:11:21:07:76:a9:a9:87:41:36:92:a5:da: a0:37:9f:0f:a1:ba:c0:1c:52:b3:5b:a9:59:a6:e6:04:50:2e: 3f:91:ec:a0:30:fb:2f:e0:2b:fa:cb:f9:ec:1b:57:64:87:e3: 4a:d5:f1:9e:a5:76:4d:d8:19:8a:fb:d9:01:f6:1b:6e:83:65: 1d:6b:32:63:98:af:82:40:10:1c:39:2b:02:11:22:92:2a:dc: b7:0a:8c:b5:7d:01:7f:ee:a9:a8:4c:19:87:7f:e8:a9:cf:61: 76:c9:bb:07:19:bd:21:d8:92:bd:fa:aa:00:36:9d:a7:ed:4f: 04:92:6c:1e:b5:4a:7b:40:3c:c9:d7:d0:12:16:41:50:2b:50: e8:e4:a4:17:c4:8f:9a:3d:e0:45:ac:26:50:8b:61:f0:68:c3: c2:89:fc:35:2f:5c:bf:84:17:20:59:ce:12:51:ac:b6:0b:68: cf:47:40:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNLVmjB7lkiBioI3C/XuFseaTOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkz ODkxMDI0NjAeFw0yNTEyMDQxNjE1NTZaFw0yNTEyMDgwMzExNTZaMDMxMTAvBgNV BAMTKDg1MjlDMjc1ODQ4M0UzM0Y2NDkzOUMwNkE3RkJDODU1MEJGOTRENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwP+mjtLLTS8ptc2ogutvwFoT nY+fmQF55+ImbsV1IoWE5QLrLMfaM8M7EGoKY0m6rv6yAJr7vDoMcCdqu7WelS92 C0Q5ylczKAKD1oqTX6o/zlzuUKS2fCCvAUnd74PS8oyo9i2TwwsgUqyNS1FUYvP6 Jvg8mqGWKk68tKO4dEXSuxt7/2YpDsHTtFYaNDYARWqvG4p0TgsvR+MWLlwJki1G aKvrRLyGoqJkhDLStTJSWydiuNgNPZSzP1uBHPwxX5QuEnuZhZXoNIaJhIIG9t8t kNXiQSBcgNF2uDVxiPBr3dQoLWKv/57U55kq+HWhQx1GzgzlS31uOlcRZ8bzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhSnCdYSD4z9kk5wGp/vIVQv5TXgwHwYDVR0j BBgwFoAURBLDaYMuhs8lXHJV6x7KeTiRAkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMC80NDEyQzM2OTgz MkU4NkNGMjU1QzcyNTVFQjFFQ0E3OTM4OTEwMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkzODkx MDI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJjNTExYmUtNjdhMi00NGM5LWIx ODItYTkxMWJhOTViZTAwLzAvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNB NzkzODkxMDI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJK/xpjGAk/kDNg8vKqWRlyQrBTdBDNWdnci KYbZJ+C8tzE1OISuYRlMqMyCiXSwiQoMuFcCNYite8sY2A5uY/TgBjB3caBPCfib 2aWHahEhB3apqYdBNpKl2qA3nw+husAcUrNbqVmm5gRQLj+R7KAw+y/gK/rL+ewb V2SH40rV8Z6ldk3YGYr72QH2G26DZR1rMmOYr4JAEBw5KwIRIpIq3LcKjLV9AX/u qahMGYd/6KnPYXbJuwcZvSHYkr36qgA2naftTwSSbB61SntAPMnX0BIWQVArUOjk pBfEj5o94EWsJlCLYfBow8KJ/DUvXL+EFyBZzhJRrLYLaM9HQHc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:43:19 2025 by rpki-client