This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft File: 461B039429CF609C76235D70C58DE1D0AB6EA915.mft (raw, json) Hash identifier: Xr1ZlULI4V9eNngCrJNmd8L096JxgxDNZCujSBb8z9s= Subject key identifier: 18:DD:68:CC:54:6B:35:D3:AF:F2:22:34:0E:E0:BD:5B:7E:65:33:A3 Authority key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 Certificate issuer: /CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Certificate serial: 0F422AC55D1015CA8989351770B7A5B7DF391F98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft Manifest number: 011A Signing time: Sat 06 Dec 2025 09:41:34 +0000 Manifest this update: Sat 06 Dec 2025 09:36:34 +0000 Manifest next update: Tue 09 Dec 2025 12:46:34 +0000 Files and hashes: 1: 461B039429CF609C76235D70C58DE1D0AB6EA915.crl (hash: ZR3R0jn9Hwqot01osELM2PLT3qEjcDd0r/vxLtZ8l50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:42:2a:c5:5d:10:15:ca:89:89:35:17:70:b7:a5:b7:df:39:1f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Validity Not Before: Dec 6 09:36:34 2025 GMT Not After : Dec 9 12:46:34 2025 GMT Subject: CN=18DD68CC546B35D3AFF222340EE0BD5B7E6533A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:c6:d9:86:a7:a1:20:f0:5f:4e:99:1d:6b: 99:a7:66:e6:79:a0:6f:e1:ff:cc:72:23:39:21:3b: c6:ac:6a:99:04:be:0b:ea:1a:d2:4b:3f:99:bd:aa: 53:b2:fb:ef:b8:e1:15:0f:24:15:da:42:1e:41:23: ba:50:19:f9:a7:ed:95:f3:08:a7:74:bd:68:62:34: 98:22:2a:a9:c6:40:00:b8:c9:98:ec:e2:cc:df:94: 1d:66:66:a2:93:21:d2:53:57:bb:33:56:a8:e4:84: ff:6a:83:b3:a4:03:cc:b3:44:2f:fd:c8:bd:5f:88: b5:e3:2a:af:78:2f:9c:09:e6:a2:00:47:64:c4:e1: c6:07:75:ca:2d:3a:2b:7c:b1:36:e3:e8:c2:90:97: bd:c9:b9:74:fe:9c:c0:fc:2b:8e:28:a3:c3:cd:80: c3:23:d6:78:bb:ed:f5:54:41:f2:3a:d7:30:d5:20: ea:9d:92:16:08:36:56:a4:c2:46:9b:e2:90:8a:47: d6:a6:12:ca:67:12:c1:c6:68:e3:dc:08:94:dc:d0: 77:71:c7:eb:3e:03:48:08:c8:ce:d5:11:e9:46:6e: e4:ed:ea:44:b9:fe:6b:da:42:ec:52:d0:90:10:7a: 3a:19:48:1e:dc:db:9f:84:5b:2c:da:fb:15:21:12: 5c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DD:68:CC:54:6B:35:D3:AF:F2:22:34:0E:E0:BD:5B:7E:65:33:A3 X509v3 Authority Key Identifier: keyid:46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f7:f7:12:0f:bd:96:dc:5d:3e:a4:af:c8:17:88:e2:ea:70: 95:15:1d:36:a5:63:5c:ae:a3:8b:98:e5:e5:8c:06:68:ec:9a: 3d:ec:19:1e:22:f7:2f:4a:11:33:e9:2f:5b:7e:b9:a3:6c:a4: 21:c9:63:fa:18:ff:75:ca:4c:6b:d1:ea:6e:66:c2:85:9b:be: 80:4e:98:29:6f:73:bc:ea:f2:f5:6d:26:3b:ac:44:1c:09:e5: f7:57:08:16:29:ac:4f:f6:ea:a3:f0:3a:c3:0c:9f:68:71:b9: df:36:fc:64:fe:f9:e9:67:33:21:ef:74:ef:15:83:cd:50:93: ac:eb:4f:65:87:01:6c:74:97:92:59:66:c2:cc:ef:f3:c6:47: b7:cb:83:bf:4c:9e:86:b9:43:f3:e4:b9:92:90:d6:cb:46:d4: 6c:90:ca:81:d9:c9:cb:ca:c4:d9:b3:08:3c:48:af:6c:e9:82: d0:8b:9e:0e:87:3c:ea:f3:32:0d:11:7c:6d:27:ab:c6:f6:ff: 3b:f9:c6:05:32:d5:c2:99:29:24:4f:96:6e:8c:ba:4d:bd:b0: 17:c3:7f:db:b0:0d:b2:99:44:f9:bb:9f:e2:c5:f5:df:2f:3d: 67:2f:5e:49:77:24:de:f5:ad:b0:14:d0:59:91:f1:49:67:56: a0:44:03:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0IqxV0QFcqJiTUXcLelt985H5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBB QjZFQTkxNTAeFw0yNTEyMDYwOTM2MzRaFw0yNTEyMDkxMjQ2MzRaMDMxMTAvBgNV BAMTKDE4REQ2OENDNTQ2QjM1RDNBRkYyMjIzNDBFRTBCRDVCN0U2NTMzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/OMbZhqehIPBfTpkda5mnZuZ5 oG/h/8xyIzkhO8asapkEvgvqGtJLP5m9qlOy+++44RUPJBXaQh5BI7pQGfmn7ZXz CKd0vWhiNJgiKqnGQAC4yZjs4szflB1mZqKTIdJTV7szVqjkhP9qg7OkA8yzRC/9 yL1fiLXjKq94L5wJ5qIAR2TE4cYHdcotOit8sTbj6MKQl73JuXT+nMD8K44oo8PN gMMj1ni77fVUQfI61zDVIOqdkhYINlakwkab4pCKR9amEspnEsHGaOPcCJTc0Hdx x+s+A0gIyM7VEelGbuTt6kS5/mvaQuxS0JAQejoZSB7c25+EWyza+xUhElwzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGN1ozFRrNdOv8iI0DuC9W35lM6MwHwYDVR0j BBgwFoAURhsDlCnPYJx2I11wxY3h0KtuqRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDI3ZmEwMi1lNDlmLTQyMTUtODYyYi03ZmFhZWZkOGFiM2UvMC80NjFCMDM5NDI5 Q0Y2MDlDNzYyMzVENzBDNThERTFEMEFCNkVBOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBBQjZF QTkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUx RDBBQjZFQTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP39xIPvZbcXT6kr8gXiOLqcJUVHTalY1yu o4uY5eWMBmjsmj3sGR4i9y9KETPpL1t+uaNspCHJY/oY/3XKTGvR6m5mwoWbvoBO mClvc7zq8vVtJjusRBwJ5fdXCBYprE/26qPwOsMMn2hxud82/GT++elnMyHvdO8V g81Qk6zrT2WHAWx0l5JZZsLM7/PGR7fLg79Mnoa5Q/PkuZKQ1stG1GyQyoHZycvK xNmzCDxIr2zpgtCLng6HPOrzMg0RfG0nq8b2/zv5xgUy1cKZKSRPlm6Muk29sBfD f9uwDbKZRPm7n+LF9d8vPWcvXkl3JN71rbAU0FmR8UlnVqBEA00= -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:48 2025 by rpki-client