This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: qDtM/IWI4Kth2vXcrhm13rqJMwrTU7GCck05TCrDWUY= Subject key identifier: 60:0D:27:BB:E1:1B:B3:73:70:D8:C8:98:14:DC:AC:82:EA:1F:13:DA Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 738DB93BD7D88820D56AC6873A13AA01EA902056 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 01BB Signing time: Tue 16 Dec 2025 00:50:50 +0000 Manifest this update: Tue 16 Dec 2025 00:45:50 +0000 Manifest next update: Fri 19 Dec 2025 12:30:50 +0000 Files and hashes: 1: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) 2: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) 3: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: ud2HzAs5FYcnQ8XGyZ9CqPn+XwG1qi5lRUuKEwdrMRY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 10:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8d:b9:3b:d7:d8:88:20:d5:6a:c6:87:3a:13:aa:01:ea:90:20:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Dec 16 00:45:50 2025 GMT Not After : Dec 19 12:30:50 2025 GMT Subject: CN=600D27BBE11BB37370D8C89814DCAC82EA1F13DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:5f:98:d6:d2:87:17:ae:c2:ed:20:7b:83: 12:e9:3a:a2:86:0d:34:48:0a:91:2c:c9:f8:e2:6c: de:07:d7:18:fc:f2:d8:9d:c5:9a:9d:3f:51:d2:e8: 3c:f6:85:98:e4:a5:70:03:ac:4f:a0:f6:9c:da:c9: 2a:2a:d3:ce:1c:36:e3:d4:3f:f3:2a:79:8b:67:c3: 4f:e6:86:60:ac:82:63:6d:68:2b:b4:4b:00:8f:18: 1c:3e:ea:23:2b:bf:a5:f5:4b:db:28:70:e4:12:87: 65:6e:7f:8a:39:f0:bf:13:b1:8c:33:0a:ee:c8:42: f3:ad:9a:89:90:98:6c:11:01:1c:40:7a:90:af:d5: 08:e8:47:17:c5:57:2c:0a:e2:c5:f5:15:68:f7:bc: f5:6b:ce:21:a8:50:a5:48:92:37:3e:dd:ae:4b:48: fc:5a:31:d4:c0:5b:08:7f:ec:29:a8:94:e4:98:a6: a6:ce:4e:09:15:fc:ed:b8:71:df:ac:dc:99:5d:34: 4a:eb:52:c0:1b:13:7c:7d:7d:0d:97:e4:53:15:ab: 1e:30:86:b5:ed:13:03:48:96:5f:cb:dd:38:d7:6d: 24:ea:7e:5a:8b:ce:37:a1:08:ea:08:a4:43:bc:b9: 1c:b9:91:52:9c:86:7c:a0:51:94:76:e6:84:7b:e6: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0D:27:BB:E1:1B:B3:73:70:D8:C8:98:14:DC:AC:82:EA:1F:13:DA X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b8:b2:d1:4f:33:ea:ad:15:2d:51:41:95:7f:e1:09:28:f5: a3:65:7b:88:fa:cd:77:c7:0d:ff:d1:f9:19:c6:32:c2:8e:b3: 00:1b:e8:9c:8f:18:15:ea:ad:3e:6e:a7:8f:1a:ba:98:6e:64: 68:5f:e7:65:71:02:6e:39:52:df:c3:96:17:e7:b0:7f:6e:48: b5:f9:31:07:80:22:86:5c:0e:f5:45:81:f3:31:3e:b2:95:bd: 9f:5a:bd:0a:b0:69:51:fc:c2:26:d2:e3:8a:15:6e:7e:96:8d: 04:ef:31:a0:68:c6:bf:9a:b5:f7:e3:c7:f2:1f:3c:36:48:2b: e7:54:a9:6b:e1:a1:bd:b7:f4:69:23:46:a7:9a:cf:2e:ee:3f: 19:ef:bc:09:ff:a5:4c:77:99:62:70:4a:5a:53:13:5c:06:d3: 5b:fb:90:d6:6b:25:e3:2f:1e:eb:89:4a:e6:54:d2:1d:d3:8d: 26:39:bf:e8:a5:85:92:e4:82:55:e4:fc:8b:fb:d0:6e:0e:0f: fd:e4:a7:65:85:ec:a5:4b:55:15:7d:c9:fe:af:89:fc:47:33: 43:f8:b7:a1:66:6d:0e:15:ec:a5:67:57:1e:d6:c0:5c:07:cd: 87:d5:4d:af:cc:a2:5a:6e:fc:70:5c:ac:f8:7e:63:65:4d:41: 9b:cb:17:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc425O9fYiCDVasaHOhOqAeqQIFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTEyMTYwMDQ1NTBaFw0yNTEyMTkxMjMwNTBaMDMxMTAvBgNV BAMTKDYwMEQyN0JCRTExQkIzNzM3MEQ4Qzg5ODE0RENBQzgyRUExRjEzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEl+Y1tKHF67C7SB7gxLpOqKG DTRICpEsyfjibN4H1xj88tidxZqdP1HS6Dz2hZjkpXADrE+g9pzaySoq084cNuPU P/MqeYtnw0/mhmCsgmNtaCu0SwCPGBw+6iMrv6X1S9socOQSh2Vuf4o58L8TsYwz Cu7IQvOtmomQmGwRARxAepCv1QjoRxfFVywK4sX1FWj3vPVrziGoUKVIkjc+3a5L SPxaMdTAWwh/7CmolOSYpqbOTgkV/O24cd+s3JldNErrUsAbE3x9fQ2X5FMVqx4w hrXtEwNIll/L3TjXbSTqflqLzjehCOoIpEO8uRy5kVKchnygUZR25oR75rQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYA0nu+Ebs3Nw2MiYFNysguofE9owHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABG4stFPM+qtFS1RQZV/4Qko9aNle4j6zXfH Df/R+RnGMsKOswAb6JyPGBXqrT5up48auphuZGhf52VxAm45Ut/DlhfnsH9uSLX5 MQeAIoZcDvVFgfMxPrKVvZ9avQqwaVH8wibS44oVbn6WjQTvMaBoxr+atffjx/If PDZIK+dUqWvhob239GkjRqeazy7uPxnvvAn/pUx3mWJwSlpTE1wG01v7kNZrJeMv HuuJSuZU0h3TjSY5v+ilhZLkglXk/Iv70G4OD/3kp2WF7KVLVRV9yf6vifxHM0P4 t6FmbQ4V7KVnVx7WwFwHzYfVTa/Molpu/HBcrPh+Y2VNQZvLFw4= -----END CERTIFICATE-----Generated at Tue Dec 16 10:58:47 2025 by rpki-client