This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: w1jg8LlpF3Rsqf8wcQn1hZokTKB6SQY19kmH81UxlL4= Subject key identifier: 26:9B:4D:00:76:ED:16:03:0E:51:3D:94:EC:74:AB:2B:00:76:15:0F Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 0E57B7A9BA6D0327D4E0B41014AEE689D53FE5F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 052F Signing time: Fri 05 Dec 2025 07:12:21 +0000 Manifest this update: Fri 05 Dec 2025 07:07:21 +0000 Manifest next update: Mon 08 Dec 2025 12:06:21 +0000 Files and hashes: 1: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: ovU+Z5hVHOIV+duMW0tqAzdwDiSGW8ibqcRwZgTQNIk=) 2: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) 3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: M/EH2rI4ldQhZaUe9MI4EQP0BkiCCMhjU2Ci0XOya8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:57:b7:a9:ba:6d:03:27:d4:e0:b4:10:14:ae:e6:89:d5:3f:e5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Dec 5 07:07:21 2025 GMT Not After : Dec 8 12:06:21 2025 GMT Subject: CN=269B4D0076ED16030E513D94EC74AB2B0076150F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:a5:b1:82:f6:12:2b:c8:ed:24:a2:46:e4: 14:b4:43:8f:14:05:40:8b:53:c2:41:90:b6:87:41: ef:f3:f8:d4:44:91:b9:62:78:50:79:ba:05:63:52: 2f:7a:ac:6a:02:08:6b:82:32:97:dc:11:44:ff:07: 68:7d:b7:ec:ee:fd:18:a6:b3:3a:24:ee:4c:a5:cd: c2:df:9b:6e:ef:bf:3f:50:b3:f1:9e:57:ef:5d:79: b1:07:60:e8:fb:44:39:f5:5d:42:4b:53:b6:4c:5d: b4:8d:39:e1:ed:07:4c:35:4c:79:ea:ec:9c:7d:0a: 46:90:66:0f:14:1a:e0:18:be:ba:fc:ad:fe:16:73: 7e:45:57:39:72:c1:97:01:38:15:ef:82:fc:c5:30: ef:15:51:a2:80:8b:19:2d:35:d0:52:da:bf:14:eb: 41:41:fb:99:c5:95:26:66:f6:47:02:65:21:89:24: a1:88:2d:f3:83:54:83:49:38:20:24:e7:a5:cc:15: 20:1b:f6:2b:c1:21:6c:64:d0:be:8e:ae:89:a3:e5: 38:a0:32:75:e5:f7:f2:45:c5:c5:3e:f1:e4:af:3b: df:95:25:99:6f:ab:55:56:d1:da:ad:1c:b7:c3:12: 7c:20:b1:0d:59:f3:9e:50:f8:48:a3:6a:0e:a8:d0: 6b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9B:4D:00:76:ED:16:03:0E:51:3D:94:EC:74:AB:2B:00:76:15:0F X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f1:c8:aa:80:f4:36:0f:86:58:cf:a6:63:11:ed:3e:3b:f9: ed:59:66:23:63:a7:42:dc:4d:ec:54:0d:0d:d4:e3:36:c3:ca: 7c:99:02:0f:31:e8:a9:2a:60:45:a3:ca:d2:c9:de:71:2f:fe: 93:d3:c4:67:2b:bd:11:9a:70:ea:c1:03:42:0f:d4:87:03:69: a4:9d:a2:99:2a:70:ac:60:db:16:9d:83:0e:45:e3:c0:4a:9e: a8:90:a0:69:cf:ea:8e:df:36:87:17:2c:11:34:6f:f6:e6:c8: 1d:cd:c0:c8:83:35:b0:74:bd:72:11:16:d1:c2:9c:4b:c0:5a: 21:12:3d:85:0c:e6:c2:48:59:b2:49:34:a0:0f:66:5c:55:bc: 8d:73:56:a0:05:63:bd:ca:47:10:20:be:40:d4:7b:86:c8:dc: 97:22:f0:4a:06:f9:55:6a:fb:3d:0e:4e:69:e4:46:88:44:c5: 03:29:12:b3:99:33:42:85:2d:45:7b:4c:ed:5c:2a:a2:23:47: 35:26:aa:56:0f:1d:ed:35:6e:cf:0c:d3:96:ce:b4:4f:ec:62: 5b:b1:6e:3a:23:14:5b:82:6e:79:ec:de:96:d4:cc:66:63:b5: d3:aa:f9:31:c1:1a:a3:61:f8:26:3e:76:cf:72:b0:d7:75:fe: 81:a6:2d:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDle3qbptAyfU4LQQFK7midU/5fAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTEyMDUwNzA3MjFaFw0yNTEyMDgxMjA2MjFaMDMxMTAvBgNV BAMTKDI2OUI0RDAwNzZFRDE2MDMwRTUxM0Q5NEVDNzRBQjJCMDA3NjE1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+eKWxgvYSK8jtJKJG5BS0Q48U BUCLU8JBkLaHQe/z+NREkblieFB5ugVjUi96rGoCCGuCMpfcEUT/B2h9t+zu/Rim szok7kylzcLfm27vvz9Qs/GeV+9debEHYOj7RDn1XUJLU7ZMXbSNOeHtB0w1THnq 7Jx9CkaQZg8UGuAYvrr8rf4Wc35FVzlywZcBOBXvgvzFMO8VUaKAixktNdBS2r8U 60FB+5nFlSZm9kcCZSGJJKGILfODVINJOCAk56XMFSAb9ivBIWxk0L6Oromj5Tig MnXl9/JFxcU+8eSvO9+VJZlvq1VW0dqtHLfDEnwgsQ1Z855Q+Eijag6o0GuTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJptNAHbtFgMOUT2U7HSrKwB2FQ8wHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDxyKqA9DYPhljPpmMR7T47+e1ZZiNjp0Lc TexUDQ3U4zbDynyZAg8x6KkqYEWjytLJ3nEv/pPTxGcrvRGacOrBA0IP1IcDaaSd opkqcKxg2xadgw5F48BKnqiQoGnP6o7fNocXLBE0b/bmyB3NwMiDNbB0vXIRFtHC nEvAWiESPYUM5sJIWbJJNKAPZlxVvI1zVqAFY73KRxAgvkDUe4bI3Jci8EoG+VVq +z0OTmnkRohExQMpErOZM0KFLUV7TO1cKqIjRzUmqlYPHe01bs8M05bOtE/sYlux bjojFFuCbnns3pbUzGZjtdOq+THBGqNh+CY+ds9ysNd1/oGmLfM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:45 2025 by rpki-client