This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: D9mB/3WzO9TIxREPBqEYFIW3k7269jzU62SmW0a0MKY= Subject key identifier: D2:C1:82:F1:94:EE:69:4B:4F:3F:B4:04:A6:77:93:5B:7F:31:AA:C0 Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 12C7F8D4FA85F8D930DCF6B71D2C1F9219A7C94B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 04F8 Signing time: Fri 05 Dec 2025 19:40:53 +0000 Manifest this update: Fri 05 Dec 2025 19:35:53 +0000 Manifest next update: Tue 09 Dec 2025 05:10:53 +0000 Files and hashes: 1: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=) 2: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=) 3: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=) 4: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: 91e4OeOQVt6oyy5Nrl1cimJ6NVy5UrUHtoFQMIWtGgA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c7:f8:d4:fa:85:f8:d9:30:dc:f6:b7:1d:2c:1f:92:19:a7:c9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Dec 5 19:35:53 2025 GMT Not After : Dec 9 05:10:53 2025 GMT Subject: CN=D2C182F194EE694B4F3FB404A677935B7F31AAC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:b6:54:fd:e9:4c:ac:b4:47:96:03:e6:e7: 5d:80:1d:2d:c6:e9:b7:59:36:1e:14:3f:8b:5d:6d: 07:ac:28:87:6e:66:e4:ef:84:ac:6f:bd:c9:02:fc: a8:e4:02:02:7c:9b:2b:a9:23:27:55:c4:84:79:48: 6e:74:ee:9a:87:43:03:9a:10:a1:d6:cc:d7:bf:60: 3c:2c:20:d2:56:8d:94:ef:86:a0:df:19:08:ca:0a: 52:9c:5b:a6:ab:e8:80:d0:65:88:74:97:21:e0:84: 22:37:bd:92:f2:cb:04:62:e5:3e:c5:cd:8f:91:c3: da:62:ba:75:95:a8:e5:20:cb:d1:1f:52:ca:6b:fa: e6:4c:7c:e0:fe:76:5d:10:65:19:d4:8d:d3:0e:c4: d0:86:39:87:ab:60:e6:1f:48:f0:76:1e:1d:2a:24: 0c:e8:f4:f2:f0:55:03:62:32:c2:55:36:b4:c8:42: 4f:c4:6f:d7:36:5b:d9:dc:83:cf:3f:f4:cf:fe:1f: d1:46:16:00:83:d8:63:ca:29:a1:84:ed:42:7d:5a: 55:e2:fd:89:1c:8b:71:04:78:3a:84:d2:7b:2f:ef: ed:d4:a2:0c:e1:23:fb:4f:ab:a4:91:21:65:4a:e4: 8c:23:1f:e1:e4:79:0a:e3:9b:aa:fa:fa:31:6b:e4: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C1:82:F1:94:EE:69:4B:4F:3F:B4:04:A6:77:93:5B:7F:31:AA:C0 X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:be:ac:0e:15:11:84:ef:04:24:5d:42:b7:9e:db:9c:a2:89: cb:a3:2f:77:c5:3a:25:8e:32:f9:cf:5e:8d:7a:a0:bd:45:d8: 59:3d:57:d9:38:92:b7:89:e1:2f:30:df:27:24:66:a7:de:30: ff:64:8e:99:9a:ea:3a:48:40:51:ae:d5:fe:40:16:ed:bb:bd: b1:27:4c:94:81:2b:3d:b0:28:a6:1b:67:a2:cf:f3:17:e7:6d: 8f:3e:a5:03:44:eb:f7:3e:21:cd:82:70:42:23:1f:69:d0:f2: ee:84:64:90:63:85:89:19:2b:8a:03:d6:d2:53:72:5b:46:cd: 49:23:5a:2b:f8:a4:03:ec:43:18:3b:2f:4b:06:ec:9f:54:4f: d6:d0:7c:3c:db:91:8c:b2:4c:c2:10:cb:9f:92:0c:fe:13:89: 88:65:69:69:89:39:d6:5a:aa:32:96:e2:f9:07:11:7c:1d:cc: b2:86:82:8f:7f:e9:b6:29:52:d6:e0:61:79:98:7d:41:95:de: ae:de:41:46:7a:37:47:e2:e9:45:f1:c0:dc:c9:8b:92:e0:23: ae:b7:9e:6a:d2:73:19:74:a6:f1:7b:7a:3f:09:3c:d9:22:26: b8:ce:b6:f6:64:2d:44:83:16:a2:36:c1:4c:b0:ff:a3:ed:a8: eb:31:b3:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsf41PqF+Nkw3Pa3HSwfkhmnyUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNTEyMDUxOTM1NTNaFw0yNTEyMDkwNTEwNTNaMDMxMTAvBgNV BAMTKEQyQzE4MkYxOTRFRTY5NEI0RjNGQjQwNEE2Nzc5MzVCN0YzMUFBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvbZU/elMrLRHlgPm512AHS3G 6bdZNh4UP4tdbQesKIduZuTvhKxvvckC/KjkAgJ8myupIydVxIR5SG507pqHQwOa EKHWzNe/YDwsINJWjZTvhqDfGQjKClKcW6ar6IDQZYh0lyHghCI3vZLyywRi5T7F zY+Rw9piunWVqOUgy9EfUspr+uZMfOD+dl0QZRnUjdMOxNCGOYerYOYfSPB2Hh0q JAzo9PLwVQNiMsJVNrTIQk/Eb9c2W9ncg88/9M/+H9FGFgCD2GPKKaGE7UJ9WlXi /Ykci3EEeDqE0nsv7+3UogzhI/tPq6SRIWVK5IwjH+HkeQrjm6r6+jFr5CFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0sGC8ZTuaUtPP7QEpneTW38xqsAwHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa+rA4VEYTvBCRdQree25yiicujL3fFOiWO MvnPXo16oL1F2Fk9V9k4kreJ4S8w3yckZqfeMP9kjpma6jpIQFGu1f5AFu27vbEn TJSBKz2wKKYbZ6LP8xfnbY8+pQNE6/c+Ic2CcEIjH2nQ8u6EZJBjhYkZK4oD1tJT cltGzUkjWiv4pAPsQxg7L0sG7J9UT9bQfDzbkYyyTMIQy5+SDP4TiYhlaWmJOdZa qjKW4vkHEXwdzLKGgo9/6bYpUtbgYXmYfUGV3q7eQUZ6N0fi6UXxwNzJi5LgI663 nmrScxl0pvF7ej8JPNkiJrjOtvZkLUSDFqI2wUyw/6PtqOsxs88= -----END CERTIFICATE-----Generated at Sun Dec 7 04:48:00 2025 by rpki-client