This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft File: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json) Hash identifier: +GyZ9TI6zdgva3X1hWKvYe1enLBxAOuD9mu50HGB5Uk= Subject key identifier: 96:D1:32:D3:59:72:0A:04:29:84:AD:18:F6:37:4E:03:63:70:E9:B4 Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Certificate serial: 3B77597974969B24B416FD268E5D88558312C843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft Manifest number: 02DD Signing time: Thu 04 Dec 2025 21:01:38 +0000 Manifest this update: Thu 04 Dec 2025 20:56:38 +0000 Manifest next update: Sun 07 Dec 2025 23:24:38 +0000 Files and hashes: 1: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: XkLmfviGVp2EGPILR+re9nqIYX0YPT0FpVRTvK0kmBs=) 2: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: NTu0pfg5O9FNTQVT/y9O87yuBsSqMNv0sxLjGwJCf2Y=) 3: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=) 4: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: HFA9NaOp7hy0/ytLMLJe0DV7R7pVpqyDdvh05Rvqgvg=) 5: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: GdSTW/OHYTEI/PWuMmTToeVUXPmcixtoxCsRQug+8zk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 23:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:77:59:79:74:96:9b:24:b4:16:fd:26:8e:5d:88:55:83:12:c8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Validity Not Before: Dec 4 20:56:38 2025 GMT Not After : Dec 7 23:24:38 2025 GMT Subject: CN=96D132D359720A042984AD18F6374E036370E9B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:ba:a2:fd:e3:b8:5e:5f:ee:8a:3a:22:84: 24:03:12:30:ac:2b:19:be:eb:77:92:7d:87:c7:db: 3c:bd:cf:73:84:09:d7:01:a3:4c:3a:ed:8a:77:57: 5a:b5:d9:a3:aa:a6:c7:9e:a7:ec:8b:ab:c5:93:e7: 32:0e:c2:30:3a:16:1f:e6:9f:54:62:56:05:21:aa: 64:bf:7a:7c:85:70:2f:b3:7a:ba:c5:48:cf:6b:19: b2:f6:2d:f1:cd:65:5d:a3:7d:88:02:b2:1b:32:1c: a1:c9:d3:c7:e3:ed:d3:81:7d:86:5d:cd:9f:3d:0f: 70:06:23:3b:8c:1c:a9:0a:d5:15:d7:70:60:66:cb: af:46:63:9f:d2:fe:a5:87:56:8e:06:72:02:75:e4: 76:72:f3:28:07:33:d8:94:2b:0f:6e:d3:e9:90:76: d5:22:f2:f5:c5:85:3f:a6:26:18:78:05:3f:91:b1: f6:dc:ff:b5:b5:d3:e4:2f:bd:6b:0f:d5:25:10:4b: d6:62:e1:95:55:50:96:59:7a:88:47:c5:ee:9f:5a: 2f:89:4d:31:e2:aa:02:7f:d3:be:8d:9a:d9:ea:37: 2a:8c:7e:dc:22:56:1f:dc:56:13:36:6d:1a:74:cd: 82:82:09:1f:3f:47:88:9a:7e:15:f3:43:c2:5d:3e: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D1:32:D3:59:72:0A:04:29:84:AD:18:F6:37:4E:03:63:70:E9:B4 X509v3 Authority Key Identifier: keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6a:1a:09:5b:06:ed:68:b6:85:0e:78:b8:f6:25:d0:c1:37: e1:5e:e8:3e:39:99:b8:6c:69:bd:ce:5c:b3:4c:11:65:a6:ed: 0b:a1:c4:c0:47:f1:b5:b6:f4:f8:c7:7d:dd:b2:3a:af:e8:bf: 2c:66:9d:cb:4d:3d:47:8b:71:9a:8f:0c:0a:5b:27:b3:c6:ad: 6f:fa:6d:a9:2d:19:e8:97:b0:f2:c3:e4:6f:e1:3c:fa:dc:36: 7e:cb:c2:98:a1:a6:be:bd:73:22:43:8a:08:db:ea:c4:e1:bc: a4:eb:a3:bb:e6:2e:12:83:22:1b:c8:1c:24:18:a3:e8:ee:19: fc:1e:f5:a3:c1:78:bc:59:7a:2b:ca:e3:18:a9:8a:88:87:25: 46:86:3d:7e:51:b5:63:20:9a:15:7b:88:bb:3d:83:33:ff:d6: 1f:84:81:f7:c8:98:78:94:35:1b:a0:62:81:d0:c9:78:23:bb: 32:0c:fa:08:ff:e2:6a:fa:8d:13:ab:e8:3d:78:ac:f6:9c:1b: cd:9b:ef:1f:73:0b:a4:4f:43:a4:ef:4b:b6:53:b0:bd:e6:9f: f1:96:12:7a:e0:52:10:4f:97:e7:60:df:07:5a:39:14:e5:e3: b0:c0:7b:2c:0d:79:bd:2d:b6:41:66:0a:0e:ce:9c:f6:c8:0b: 4b:43:0b:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3dZeXSWmyS0Fv0mjl2IVYMSyEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2 MTczQUVBQjAeFw0yNTEyMDQyMDU2MzhaFw0yNTEyMDcyMzI0MzhaMDMxMTAvBgNV BAMTKDk2RDEzMkQzNTk3MjBBMDQyOTg0QUQxOEY2Mzc0RTAzNjM3MEU5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5B7qi/eO4Xl/uijoihCQDEjCs Kxm+63eSfYfH2zy9z3OECdcBo0w67Yp3V1q12aOqpseep+yLq8WT5zIOwjA6Fh/m n1RiVgUhqmS/enyFcC+zerrFSM9rGbL2LfHNZV2jfYgCshsyHKHJ08fj7dOBfYZd zZ89D3AGIzuMHKkK1RXXcGBmy69GY5/S/qWHVo4GcgJ15HZy8ygHM9iUKw9u0+mQ dtUi8vXFhT+mJhh4BT+Rsfbc/7W10+QvvWsP1SUQS9Zi4ZVVUJZZeohHxe6fWi+J TTHiqgJ/076NmtnqNyqMftwiVh/cVhM2bRp0zYKCCR8/R4iafhXzQ8JdPnnnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUltEy01lyCgQphK0Y9jdOA2Nw6bQwHwYDVR0j BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1 QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz QUVBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYx MEE2MTczQUVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9qGglbBu1otoUOeLj2JdDBN+Fe6D45mbhs ab3OXLNMEWWm7QuhxMBH8bW29PjHfd2yOq/ovyxmnctNPUeLcZqPDApbJ7PGrW/6 baktGeiXsPLD5G/hPPrcNn7Lwpihpr69cyJDigjb6sThvKTro7vmLhKDIhvIHCQY o+juGfwe9aPBeLxZeivK4xipioiHJUaGPX5RtWMgmhV7iLs9gzP/1h+EgffImHiU NRugYoHQyXgjuzIM+gj/4mr6jROr6D14rPacG82b7x9zC6RPQ6TvS7ZTsL3mn/GW EnrgUhBPl+dg3wdaORTl47DAeywNeb0ttkFmCg7OnPbIC0tDCxw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:45 2025 by rpki-client