This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json) Hash identifier: 7hvllV6qhflOUJXCKOa2zfvPcZ6T7PL62912vv4ccKw= Subject key identifier: 71:29:7D:DA:FF:13:91:3D:0A:60:CD:C6:72:44:46:F7:47:7B:71:22 Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 7D2BFF6A901BA4A346D5E4413D1FA2A667837610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft Manifest number: 0151 Signing time: Tue 16 Dec 2025 03:02:28 +0000 Manifest this update: Tue 16 Dec 2025 02:57:28 +0000 Manifest next update: Fri 19 Dec 2025 09:44:28 +0000 Files and hashes: 1: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: nwEHa3/WlV/z4/EUCjtnhlcu3D5Y4h6NQPei0E4YMNc=) 2: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: Gg4PjaHJJ2ELmK/kINP16QwFpCzFc3eTiKaJ4v4sLgo=) 3: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: osFwS3xf1DonSoJwht99d9Tc2cqBOTGD/HEV1v4fujI=) 4: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: UkSU3ofAJMwQMSBV8CLkdD+7q/O7V/69EnZpNB0eiWY=) 5: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: iEADXTh8P0ToH5dwffhOAFfBVe3MaPhCzTyd54qqlUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 09:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2b:ff:6a:90:1b:a4:a3:46:d5:e4:41:3d:1f:a2:a6:67:83:76:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: Dec 16 02:57:28 2025 GMT Not After : Dec 19 09:44:28 2025 GMT Subject: CN=71297DDAFF13913D0A60CDC6724446F7477B7122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:60:46:3e:f0:7c:37:6b:7f:e3:12:2c:03: 93:74:3e:d5:8a:7e:15:da:e1:ac:64:cd:84:b5:3a: c8:c0:04:dc:1d:2e:72:a0:96:2e:9d:17:2f:46:a4: 82:43:42:5b:4f:72:1a:ab:2f:0d:48:77:78:ff:20: 1e:2c:eb:8f:c7:bb:b7:01:ee:95:53:ed:b9:d8:f6: bf:59:90:f8:80:6f:2c:a2:05:ae:fc:e5:42:e7:83: 9b:b3:53:b7:fd:c0:c5:e1:c6:46:2a:a3:53:3a:fe: 63:6c:29:df:92:a5:e4:1f:f3:01:bf:8a:c4:e6:6b: 8c:bb:85:6d:c2:ef:8f:12:7e:d7:a2:b5:f6:5a:3c: 6c:e2:bd:2b:19:a1:38:6b:29:9c:53:52:57:e7:0c: 24:ee:aa:a3:70:cf:d3:c0:1f:30:8b:84:8b:2d:fe: 3f:55:ca:5c:73:7e:4b:0e:5e:0d:38:80:4d:cc:9f: 9f:30:3b:6a:99:38:79:89:3a:1a:95:64:ac:03:6c: ee:b8:09:87:e9:81:33:56:29:3a:85:07:e9:4b:0d: 0d:6c:2b:c5:7e:36:5f:be:3a:86:eb:8d:1b:9e:12: 8a:a3:96:1e:a7:29:54:63:24:76:4d:0e:fa:2a:ba: 9a:d9:01:8b:cb:55:03:6f:34:20:52:29:49:66:73: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:29:7D:DA:FF:13:91:3D:0A:60:CD:C6:72:44:46:F7:47:7B:71:22 X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:9a:20:33:e1:6c:8e:df:b7:26:c5:a0:74:65:b8:7d:72:bb: 33:3e:35:98:21:71:69:62:60:c9:3d:39:62:c1:53:02:cd:b8: 0c:0b:ba:ae:93:4e:f3:c7:74:e7:47:3e:36:24:72:5c:68:b2: 98:7e:e5:9f:c0:2d:29:22:44:c3:5e:07:8f:60:11:e9:57:e3: 90:03:b5:af:e5:27:22:98:4c:8f:6a:e9:9a:cc:90:d0:dc:cb: ad:db:35:4e:d4:60:c2:2b:5d:45:43:f7:ab:69:a4:97:3c:12: b1:3e:0f:dc:ea:c6:d3:75:13:0b:8f:62:5f:35:e7:c6:cb:40: 8c:92:13:1f:fc:f0:5a:79:24:b5:4b:5a:11:1c:0d:6d:1a:e9: 12:6a:b7:cc:47:fb:9a:16:54:a5:46:a0:57:b4:4a:41:5c:88: 2c:92:37:6d:8b:10:bb:1c:85:af:39:2f:18:b4:65:90:bd:cf: a4:b4:85:41:e1:fc:3a:ec:a6:40:82:13:90:51:e6:74:d0:c0: d2:74:80:db:a0:02:6b:8b:bf:b3:d9:89:d3:fe:26:1b:11:37: e8:5e:64:67:a2:37:e9:5c:cb:fb:6a:b8:8d:9c:30:33:2d:8c: 83:46:c9:49:35:9a:91:a5:d6:7c:66:b3:f9:a8:10:b6:20:1f: 66:ec:92:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSv/apAbpKNG1eRBPR+ipmeDdhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNTEyMTYwMjU3MjhaFw0yNTEyMTkwOTQ0MjhaMDMxMTAvBgNV BAMTKDcxMjk3RERBRkYxMzkxM0QwQTYwQ0RDNjcyNDQ0NkY3NDc3QjcxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfmBGPvB8N2t/4xIsA5N0PtWK fhXa4axkzYS1OsjABNwdLnKgli6dFy9GpIJDQltPchqrLw1Id3j/IB4s64/Hu7cB 7pVT7bnY9r9ZkPiAbyyiBa785ULng5uzU7f9wMXhxkYqo1M6/mNsKd+SpeQf8wG/ isTma4y7hW3C748SfteitfZaPGzivSsZoThrKZxTUlfnDCTuqqNwz9PAHzCLhIst /j9VylxzfksOXg04gE3Mn58wO2qZOHmJOhqVZKwDbO64CYfpgTNWKTqFB+lLDQ1s K8V+Nl++OobrjRueEoqjlh6nKVRjJHZNDvoquprZAYvLVQNvNCBSKUlmc/5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSl92v8TkT0KYM3GckRG90d7cSIwHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOaIDPhbI7ftybFoHRluH1yuzM+NZghcWli YMk9OWLBUwLNuAwLuq6TTvPHdOdHPjYkclxosph+5Z/ALSkiRMNeB49gEelX45AD ta/lJyKYTI9q6ZrMkNDcy63bNU7UYMIrXUVD96tppJc8ErE+D9zqxtN1EwuPYl81 58bLQIySEx/88Fp5JLVLWhEcDW0a6RJqt8xH+5oWVKVGoFe0SkFciCySN22LELsc ha85Lxi0ZZC9z6S0hUHh/DrspkCCE5BR5nTQwNJ0gNugAmuLv7PZidP+JhsRN+he ZGeiN+lcy/tquI2cMDMtjINGyUk1mpGl1nxms/moELYgH2bsklM= -----END CERTIFICATE-----Generated at Thu Dec 18 07:14:50 2025 by rpki-client