This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: rTR+PKNBwupiIhaXgcSj7DqyuU/auqF2Ki/LzhC0deg= Subject key identifier: 9E:52:48:AA:40:92:60:56:D6:22:86:D9:75:79:22:1A:3D:6E:67:B6 Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 542A324BCFE6E28AEFF924EBA6FBA3E58AFB951C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 01C9 Signing time: Fri 05 Dec 2025 14:51:35 +0000 Manifest this update: Fri 05 Dec 2025 14:46:35 +0000 Manifest next update: Mon 08 Dec 2025 17:45:35 +0000 Files and hashes: 1: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: wEsK3iiKD5h88dghdgr986ykkqYg/s1oMXgn67uXrAw=) 2: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: Qxhmm+FrOJl9N2gO3uMNdKcckPxH2c3YLUPCuEz7Xsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2a:32:4b:cf:e6:e2:8a:ef:f9:24:eb:a6:fb:a3:e5:8a:fb:95:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Dec 5 14:46:35 2025 GMT Not After : Dec 8 17:45:35 2025 GMT Subject: CN=9E5248AA40926056D62286D97579221A3D6E67B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:31:14:40:d9:ad:ea:ad:66:6a:6d:15:19: 89:6e:2b:2a:fa:55:c3:8d:7f:33:cc:4b:ff:c2:93: d7:a6:32:a9:a0:aa:c5:a5:93:9c:c7:b1:66:b2:fb: b9:fc:89:65:0d:0e:f9:a2:3f:82:63:57:d8:6e:90: ea:eb:11:a5:b2:9b:77:5f:b6:6a:eb:bf:71:de:7d: 51:cc:b4:39:9f:04:bc:fc:da:51:2d:d3:ae:4c:36: b6:a5:9c:be:2b:4c:e9:1f:f8:8e:8f:8d:2a:fc:ac: 3f:7b:8b:bd:04:06:42:a5:70:8d:21:18:b4:0d:3d: 24:aa:e3:27:c8:48:30:a1:cb:37:e3:8c:ef:2f:72: 4a:7d:1a:37:2d:89:1a:71:3b:9b:f7:ab:9b:69:17: ee:a5:c6:0b:0b:ac:94:43:ca:ac:2a:05:ad:89:cd: 0d:58:38:43:84:5d:11:ff:f3:c3:88:4c:93:04:e3: 34:41:bd:48:e2:50:b7:b2:03:38:a3:da:16:a9:6b: b6:7d:ac:ce:38:78:8a:a5:22:33:b3:8a:79:5f:7b: 9c:76:b7:3b:a8:2d:ea:7e:a9:e3:c2:e1:4f:1f:e9: f2:3d:7d:13:0b:c0:55:4c:ea:02:2e:8d:54:e6:8c: df:37:88:56:e8:d5:5a:b9:f0:56:cd:47:c8:97:ae: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:52:48:AA:40:92:60:56:D6:22:86:D9:75:79:22:1A:3D:6E:67:B6 X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:48:e8:4f:ba:d4:45:33:67:73:31:ea:81:80:8c:03:63:70: 17:f9:c8:30:27:74:ac:0b:e7:54:90:c0:e9:85:53:d8:43:f4: be:02:73:37:d9:b9:87:62:89:d1:7d:67:af:22:e1:9d:4b:ed: e6:58:a8:4e:cb:a4:c3:f8:95:27:52:cb:d2:86:7f:68:bf:8d: 66:57:3f:b8:45:94:1b:96:cb:2e:f3:2b:d1:95:9c:ea:9c:40: 23:0b:0b:4f:d9:34:72:40:32:17:1d:f7:f6:25:ef:46:20:27: 2d:4d:d4:ed:04:a2:6f:0c:fc:e6:a1:7f:b7:80:6e:c0:3c:6a: d7:53:81:56:89:03:ce:45:48:8a:f9:0a:7c:90:f3:71:2d:6f: 15:3b:bd:23:b9:77:21:b1:4e:37:f7:4b:5a:88:98:80:d1:e3: 0c:a7:b8:38:65:70:e0:37:16:9d:82:21:a3:0f:56:2f:4b:a5: c0:e6:b5:56:f6:e1:2b:06:e8:34:58:61:57:6d:c3:f6:9d:4b: ff:86:2b:58:5d:53:7b:53:e2:70:13:47:95:d7:fb:ac:bc:2e: 04:ba:0f:c8:59:3a:40:c0:55:6b:7f:60:6d:06:17:ff:3e:38: c8:7c:9e:68:78:0e:03:e8:ae:30:20:72:f5:97:6d:71:64:10: 86:3f:2b:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCoyS8/m4orv+STrpvuj5Yr7lRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNTEyMDUxNDQ2MzVaFw0yNTEyMDgxNzQ1MzVaMDMxMTAvBgNV BAMTKDlFNTI0OEFBNDA5MjYwNTZENjIyODZEOTc1NzkyMjFBM0Q2RTY3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2jEUQNmt6q1mam0VGYluKyr6 VcONfzPMS//Ck9emMqmgqsWlk5zHsWay+7n8iWUNDvmiP4JjV9hukOrrEaWym3df tmrrv3HefVHMtDmfBLz82lEt065MNralnL4rTOkf+I6PjSr8rD97i70EBkKlcI0h GLQNPSSq4yfISDChyzfjjO8vckp9GjctiRpxO5v3q5tpF+6lxgsLrJRDyqwqBa2J zQ1YOEOEXRH/88OITJME4zRBvUjiULeyAzij2hapa7Z9rM44eIqlIjOzinlfe5x2 tzuoLep+qePC4U8f6fI9fRMLwFVM6gIujVTmjN83iFbo1Vq58FbNR8iXrjlbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnlJIqkCSYFbWIobZdXkiGj1uZ7YwHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRI6E+61EUzZ3Mx6oGAjANjcBf5yDAndKwL 51SQwOmFU9hD9L4CczfZuYdiidF9Z68i4Z1L7eZYqE7LpMP4lSdSy9KGf2i/jWZX P7hFlBuWyy7zK9GVnOqcQCMLC0/ZNHJAMhcd9/Yl70YgJy1N1O0Eom8M/Oahf7eA bsA8atdTgVaJA85FSIr5CnyQ83EtbxU7vSO5dyGxTjf3S1qImIDR4wynuDhlcOA3 Fp2CIaMPVi9LpcDmtVb24SsG6DRYYVdtw/adS/+GK1hdU3tT4nATR5XX+6y8LgS6 D8hZOkDAVWt/YG0GF/8+OMh8nmh4DgPorjAgcvWXbXFkEIY/Kzc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:53 2025 by rpki-client