This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: zz4/0jfJV3i00lqsfiAVLNXI94RWGHDmmQ90sZjOKgM= Subject key identifier: 58:79:07:C4:CD:25:A0:FF:E2:5B:43:1C:38:21:CF:43:02:EA:32:DA Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 0E0219805FC94703221F969A8EB8D7C78016EC32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 01B6 Signing time: Thu 04 Dec 2025 22:20:49 +0000 Manifest this update: Thu 04 Dec 2025 22:15:49 +0000 Manifest next update: Mon 08 Dec 2025 08:07:49 +0000 Files and hashes: 1: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: VomOLLm0pyzpQVcSioftMth6h/bDKA/igiX54Fy3upI=) 2: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:02:19:80:5f:c9:47:03:22:1f:96:9a:8e:b8:d7:c7:80:16:ec:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Dec 4 22:15:49 2025 GMT Not After : Dec 8 08:07:49 2025 GMT Subject: CN=587907C4CD25A0FFE25B431C3821CF4302EA32DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:01:c9:dd:79:8e:13:ba:40:6c:ec:36:9c: d9:d6:08:2c:12:b7:92:04:60:12:63:58:c9:cb:99: 7f:5d:dc:34:86:6c:e0:af:38:95:3c:58:b1:ff:43: 67:b3:7a:41:0d:b7:87:c7:38:06:2a:b9:b3:d2:92: 47:f0:c1:a3:e2:03:25:f7:ec:e1:a6:84:45:87:8c: ec:a7:cb:50:9b:7c:2a:c7:85:90:02:91:ae:c4:9c: 0d:b1:95:72:17:d1:8a:c9:fe:83:89:0a:71:29:b5: b8:c2:5c:a4:26:09:2f:d4:ad:59:ac:12:77:ca:ff: 11:36:c1:db:29:12:43:e4:a9:07:5f:b3:c0:44:4c: 14:38:90:45:71:12:0d:4f:34:6a:eb:98:be:52:92: 38:4a:bf:89:30:2d:36:33:18:61:0a:f6:92:ae:35: b6:55:d2:7b:4d:b2:b8:dd:ef:73:35:32:4c:e3:30: 46:16:c5:b3:b2:3b:4e:c8:7e:71:3a:38:73:7c:bf: 01:16:8d:4c:6a:4f:d9:b6:82:90:b3:d9:91:f6:88: 9e:e7:1a:8d:59:1c:61:42:54:86:5a:28:2e:58:e9: be:de:38:73:af:60:94:44:76:d1:f1:bc:e9:a0:c1: ac:07:ab:38:32:31:7c:83:fb:eb:be:07:9a:b0:34: ad:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:79:07:C4:CD:25:A0:FF:E2:5B:43:1C:38:21:CF:43:02:EA:32:DA X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2b:d9:61:df:b4:09:80:ac:93:71:13:50:ee:60:35:25:60: 2a:fb:58:80:af:03:82:69:e0:19:54:e6:d0:16:72:2f:31:b8: 47:d7:c8:2b:b7:9e:cb:72:b4:8c:ba:8b:e7:d7:08:78:28:20: b8:bf:8a:24:d2:e9:c0:df:2c:1b:8c:e5:3c:2b:01:0f:c1:0f: e2:87:63:65:64:50:c4:de:9c:69:82:04:d7:c9:ed:35:10:0e: e4:c7:1a:25:2d:04:16:bb:c4:3e:d0:02:6b:49:6d:6a:40:0e: 68:df:d9:b9:0e:b7:63:6b:0c:37:30:21:ad:c4:f8:5f:ae:e2: 28:be:6d:8e:0d:8d:9a:24:e6:45:30:4e:8d:16:12:08:c0:a1: 6d:4a:0b:29:68:d4:6d:3f:9a:f7:59:ec:a4:5c:28:3a:f6:7c: 43:87:93:74:73:cf:70:b4:b3:33:c5:2f:0f:56:6a:21:85:9d: 4d:28:bc:a6:a8:b7:67:5e:9f:0c:59:75:7e:74:0a:47:21:a2: 2b:b2:a2:df:4b:ab:a7:47:e2:cb:9e:8f:4a:8d:b7:ae:71:f8: ed:ae:76:b3:2e:1a:1c:fd:df:b1:13:0b:6e:5f:77:a3:d8:a8: b7:1b:f8:96:31:e3:39:f1:6c:f8:3e:a8:0c:08:df:ae:a3:69: 79:fe:c2:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDgIZgF/JRwMiH5aajrjXx4AW7DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTEyMDQyMjE1NDlaFw0yNTEyMDgwODA3NDlaMDMxMTAvBgNV BAMTKDU4NzkwN0M0Q0QyNUEwRkZFMjVCNDMxQzM4MjFDRjQzMDJFQTMyREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVwHJ3XmOE7pAbOw2nNnWCCwS t5IEYBJjWMnLmX9d3DSGbOCvOJU8WLH/Q2ezekENt4fHOAYqubPSkkfwwaPiAyX3 7OGmhEWHjOyny1CbfCrHhZACka7EnA2xlXIX0YrJ/oOJCnEptbjCXKQmCS/UrVms EnfK/xE2wdspEkPkqQdfs8BETBQ4kEVxEg1PNGrrmL5SkjhKv4kwLTYzGGEK9pKu NbZV0ntNsrjd73M1MkzjMEYWxbOyO07IfnE6OHN8vwEWjUxqT9m2gpCz2ZH2iJ7n Go1ZHGFCVIZaKC5Y6b7eOHOvYJREdtHxvOmgwawHqzgyMXyD++u+B5qwNK1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWHkHxM0loP/iW0McOCHPQwLqMtowHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8r2WHftAmArJNxE1DuYDUlYCr7WICvA4Jp 4BlU5tAWci8xuEfXyCu3nstytIy6i+fXCHgoILi/iiTS6cDfLBuM5TwrAQ/BD+KH Y2VkUMTenGmCBNfJ7TUQDuTHGiUtBBa7xD7QAmtJbWpADmjf2bkOt2NrDDcwIa3E +F+u4ii+bY4NjZok5kUwTo0WEgjAoW1KCylo1G0/mvdZ7KRcKDr2fEOHk3Rzz3C0 szPFLw9WaiGFnU0ovKaot2denwxZdX50Ckchoiuyot9Lq6dH4suej0qNt65x+O2u drMuGhz937ETC25fd6PYqLcb+JYx4znxbPg+qAwI366jaXn+wow= -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:04 2025 by rpki-client