This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: lqC8V75DFonIqmsETmkq2vifE4mJ5O5EIi3Rjyi33Sw= Subject key identifier: 1F:D1:C3:E4:C2:B3:CE:9D:83:00:27:CD:DF:1C:5D:D4:A3:90:ED:B6 Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 4B8786247D3F9E1CBABC0A56FD474D295B4CBC10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 01CE Signing time: Tue 16 Dec 2025 16:51:32 +0000 Manifest this update: Tue 16 Dec 2025 16:46:32 +0000 Manifest next update: Fri 19 Dec 2025 22:03:32 +0000 Files and hashes: 1: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: EEIRp1kO/o/SRYyp1XarIe19DDssMdWx7mLU5GCw3yI=) 2: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: Qxhmm+FrOJl9N2gO3uMNdKcckPxH2c3YLUPCuEz7Xsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 22:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:87:86:24:7d:3f:9e:1c:ba:bc:0a:56:fd:47:4d:29:5b:4c:bc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Dec 16 16:46:32 2025 GMT Not After : Dec 19 22:03:32 2025 GMT Subject: CN=1FD1C3E4C2B3CE9D830027CDDF1C5DD4A390EDB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:db:f3:65:ac:8c:07:ef:ab:98:4e:94:4e:76: 65:64:c2:58:91:f7:a1:a3:4a:12:93:70:aa:9b:80: 4a:72:fd:ae:44:48:cf:c4:95:71:0f:90:a4:48:53: af:4c:7a:8b:1e:5b:b3:35:aa:41:c1:1c:95:87:6c: 7d:c3:8d:3e:1f:d6:27:2c:8f:5a:d1:dd:2e:2c:f1: ec:5a:f8:4d:c4:98:51:79:98:5d:41:e6:4a:47:e9: 31:2e:78:78:38:65:1a:bf:a9:a9:d8:0c:f3:5f:14: c8:e5:76:39:c4:8f:7d:ee:f6:c9:2c:07:38:19:61: 8a:c2:48:b1:b2:e4:e1:c7:3c:9d:ae:f2:99:2e:71: d6:95:17:08:94:a9:ec:a7:93:d9:77:b0:38:c4:94: ee:ae:ac:db:1a:8c:57:0b:99:16:1d:99:56:4d:64: fd:0e:29:f5:18:9f:3e:c9:65:42:b6:8e:87:00:27: fa:9a:4a:61:bf:86:f3:cb:68:9b:4a:51:c9:11:49: 3b:72:c1:f2:cb:ae:c9:b0:52:e9:ab:c0:f5:9e:de: 83:9b:8b:51:f9:a3:26:cd:13:1a:f9:d9:20:64:6a: ce:8d:70:1e:aa:a2:fe:08:67:4d:cf:bf:d7:f4:da: 7d:5f:da:04:62:46:02:82:90:41:d1:44:d6:b2:bc: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D1:C3:E4:C2:B3:CE:9D:83:00:27:CD:DF:1C:5D:D4:A3:90:ED:B6 X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d1:2c:b5:45:ee:3f:af:59:5d:4f:70:63:9b:2a:77:d1:94: f5:59:e1:02:e1:91:cd:b8:8a:7b:86:0d:97:67:a5:dc:42:a4: 2b:e4:8f:0f:b6:86:40:64:c3:3d:1e:54:04:54:03:fd:58:cf: 8d:51:5c:fc:5f:dc:d1:6c:5a:7c:fb:1d:90:87:8b:2b:c4:d4: 11:9a:75:80:62:37:eb:fc:ad:1e:d3:fe:98:b0:f9:d1:32:36: 78:07:d8:35:33:dc:5c:ad:0e:b8:79:06:a8:20:7a:91:f9:0b: 5b:64:c0:78:01:01:b5:bf:21:4c:cd:1c:79:b4:eb:63:7b:2e: be:d6:ce:43:37:95:ee:40:61:89:71:ae:84:69:12:60:4a:65: f1:99:7f:95:d6:02:ab:80:93:cc:59:11:48:ce:1f:f2:72:29: bd:aa:c1:19:18:78:60:65:2b:cc:ab:5b:49:9e:9f:e0:55:89: d0:b6:ca:12:cd:01:38:5b:11:9f:d7:71:e0:46:eb:9e:c3:94: 6b:d6:13:96:41:d3:34:ce:b8:e0:14:4e:5c:16:b1:a4:d1:62: 4b:99:ab:76:5c:db:55:22:9d:7b:f1:1f:fa:0c:76:f7:cd:9c: 4d:79:f1:b0:b4:ee:62:81:0a:f8:1d:0f:bf:dc:c2:55:63:3b: 29:2f:0d:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4eGJH0/nhy6vApW/UdNKVtMvBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNTEyMTYxNjQ2MzJaFw0yNTEyMTkyMjAzMzJaMDMxMTAvBgNV BAMTKDFGRDFDM0U0QzJCM0NFOUQ4MzAwMjdDRERGMUM1REQ0QTM5MEVEQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2/NlrIwH76uYTpROdmVkwliR 96GjShKTcKqbgEpy/a5ESM/ElXEPkKRIU69MeoseW7M1qkHBHJWHbH3DjT4f1ics j1rR3S4s8exa+E3EmFF5mF1B5kpH6TEueHg4ZRq/qanYDPNfFMjldjnEj33u9sks BzgZYYrCSLGy5OHHPJ2u8pkucdaVFwiUqeynk9l3sDjElO6urNsajFcLmRYdmVZN ZP0OKfUYnz7JZUK2jocAJ/qaSmG/hvPLaJtKUckRSTtywfLLrsmwUumrwPWe3oOb i1H5oybNExr52SBkas6NcB6qov4IZ03Pv9f02n1f2gRiRgKCkEHRRNayvMm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9HD5MKzzp2DACfN3xxd1KOQ7bYwHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfRLLVF7j+vWV1PcGObKnfRlPVZ4QLhkc24 inuGDZdnpdxCpCvkjw+2hkBkwz0eVARUA/1Yz41RXPxf3NFsWnz7HZCHiyvE1BGa dYBiN+v8rR7T/piw+dEyNngH2DUz3FytDrh5BqggepH5C1tkwHgBAbW/IUzNHHm0 62N7Lr7WzkM3le5AYYlxroRpEmBKZfGZf5XWAquAk8xZEUjOH/JyKb2qwRkYeGBl K8yrW0men+BVidC2yhLNAThbEZ/XceBG657DlGvWE5ZB0zTOuOAUTlwWsaTRYkuZ q3Zc21UinXvxH/oMdvfNnE158bC07mKBCvgdD7/cwlVjOykvDVI= -----END CERTIFICATE-----Generated at Thu Dec 18 21:51:44 2025 by rpki-client