This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier: x/317euXeJX35d3T/pHCh9/r+SpESL1KMNvv4GTTpqc=
Subject key identifier: 63:B4:67:8D:F9:22:CC:7D:C0:6A:7A:C5:92:03:4A:56:D2:A7:84:5A
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial: 5510DDFDF77952648439179578824F319A7A7249
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number: 0101
Signing time: Sat 06 Dec 2025 15:01:28 +0000
Manifest this update: Sat 06 Dec 2025 14:56:28 +0000
Manifest next update: Tue 09 Dec 2025 22:19:28 +0000
Files and hashes: 1: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE=)
2: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: jwvNujssv5IpW6wUm1bDQwCkCbwLEP4pJ6+PadQVpUw=)
3: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: hFSaz/g1QnbG2lr8TgOJJdh8bcxNOKHTZPQyaXMiTuo=)
4: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
5: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo=)
6: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE=)
7: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
8: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo=)
9: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: faTcPr5R7d5SON6aopxvVZHUN4/VFaOooXiyhEzUbUA=)
10: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: ajp2RV8pB0t7xjb6AMg24tD94YiYauZ1iojKxpZ1J3o=)
11: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0=)
12: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: 4uXivfruDrV6vIQDaw3CdwZggXYUI8C5CzvO1Aezvw8=)
13: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
14: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: gn2/r20AbD2uViS+8zhRzeJ5t2tATmFXJR9LQsg6Kjs=)
15: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: jqvg3e8AqoLRJ/K75B/MsSSeNm5CmK8WuhFVMvH1GPY=)
16: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
17: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
18: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo=)
19: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: BVieKtpjSLtSo/dKiDHRcHA8rEhJMn29aKZFmH29jqw=)
20: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: xiP480ZV+GHJ2/4depZViI+46Z/6Gy8Oy9ISHx8BOoQ=)
21: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
22: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: ASP8j+vBPIfNxGlKZjOVhw8wDXvVplT0wShhkxku/nY=)
23: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: QP61IhleORRzGf5/ZoBkFFGoF5n6EhGqldep0K1H6sA=)
24: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: EApvDBvKIpb3TW1OvFKqCBw8otauBBFdv2Yvyf2DIxU=)
25: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
26: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc=)
27: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: /2j20KxiHUqPzb25Ob8Vnswz982vobPobznvUU3v3l0=)
28: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: 3REo8lPESzPESEgFYfKabImyxXr3e1MH5zR+5WqeqWA=)
29: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: 8BghnefMyUfpQWuZ7yB+zaBc31qeLaaDPm1YLasmkKU=)
30: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
31: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=)
32: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=)
33: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg=)
34: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 5B2JZlTjn+LkK2wM5nDYDuRQs9xZXGxH5pBH421APJg=)
35: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
36: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: N6mGANoBckRU2bg5hxStsxuo2HX2wdIPxHilFclib3s=)
37: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs=)
38: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lNdW3pOZi8eT+J9dyaHX5GGSIEb0ecFMMO3Pho99eNg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:10:dd:fd:f7:79:52:64:84:39:17:95:78:82:4f:31:9a:7a:72:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Validity
Not Before: Dec 6 14:56:28 2025 GMT
Not After : Dec 9 22:19:28 2025 GMT
Subject: CN=63B4678DF922CC7DC06A7AC592034A56D2A7845A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:f0:b6:97:1f:ef:46:a8:c4:79:c3:69:83:
e3:21:0b:35:f4:00:93:ae:60:93:69:64:7b:c8:c2:
b5:5a:38:c8:09:31:08:db:d8:11:ac:a5:2b:d3:ac:
a7:21:04:3d:66:a4:8d:24:89:73:7c:9a:b8:11:a5:
53:15:34:79:c1:9c:f3:9e:c4:87:3b:e6:d4:54:ee:
10:65:4d:c7:e1:1c:fa:09:21:b5:80:da:8b:fd:0e:
b4:e7:11:ce:2a:f3:80:10:1b:6e:3e:0a:17:a9:ac:
8b:1d:c1:f1:ea:9d:1f:e8:0a:3d:1b:65:20:0b:35:
99:3a:2d:f4:94:95:b5:e5:ac:dc:b7:ad:33:21:3e:
d2:cf:31:d6:16:f4:74:af:c6:dd:5a:7a:54:bb:a5:
fc:19:f5:67:25:25:a8:29:c7:a0:a9:d6:3c:e6:c2:
6a:b9:c0:d1:9b:75:ad:57:01:24:67:49:47:f3:d9:
30:98:26:93:a5:85:07:31:d8:4a:aa:0a:f8:c1:79:
05:92:d0:7f:b8:c3:80:20:67:55:78:56:a9:26:e3:
d9:55:ff:24:77:55:d0:e3:73:0e:16:0d:f6:95:f0:
07:eb:79:af:8a:a7:2b:65:81:3e:d0:b2:bf:68:8f:
08:01:45:1a:ca:5a:81:53:97:be:7a:b3:b2:39:56:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B4:67:8D:F9:22:CC:7D:C0:6A:7A:C5:92:03:4A:56:D2:A7:84:5A
X509v3 Authority Key Identifier:
keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:61:73:76:9d:24:33:03:39:28:0a:24:7f:bc:09:ac:d1:36:
ca:9f:2d:ea:e3:18:5e:0e:de:2a:7f:d0:b8:7b:0c:29:01:fe:
3d:e7:c3:3e:46:75:c8:1b:3a:f7:20:34:cd:e9:86:19:e8:09:
a0:31:c0:b4:f2:0e:0e:a5:a7:ab:4d:00:f0:e4:b1:b8:84:2d:
41:57:e1:4a:ba:cb:b6:48:0d:6b:fe:35:0b:80:2e:83:2c:93:
33:d6:dc:6e:de:ac:ea:c7:0f:f0:33:96:6f:2a:5b:cf:ed:f5:
4a:cb:76:84:b6:dd:1d:cb:a5:47:64:c9:d3:b5:46:00:f3:cb:
d5:85:54:7d:57:93:53:31:b1:74:f6:2f:dc:63:b1:01:0f:18:
7f:9d:8a:7d:0e:1f:72:4b:67:50:86:01:93:ec:5f:4a:18:74:
57:a7:e1:a1:d5:8e:44:11:35:d3:88:6c:0d:e7:d9:88:a0:72:
b0:c2:46:67:5f:94:78:65:c4:3d:4c:8b:14:52:8f:2d:b9:2d:
58:ed:d0:64:81:0d:9d:25:df:13:3e:68:c6:66:c4:eb:4d:a7:
9d:d6:8a:26:7b:8f:9f:c6:e2:53:84:06:31:d2:4d:8a:30:78:
a5:af:6e:35:dc:09:60:8a:fa:ff:16:52:fc:cd:f9:4e:2e:1b:
3a:5e:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:56:48 2025 by rpki-client