This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: z2vzQ8BFVmhA4o4vpk29VfuyyIu3ZJxO6JvKGuW4u6Q= Subject key identifier: 6F:B2:0D:4E:EE:7F:EC:21:FD:A4:C8:AE:40:A2:94:77:CC:DB:E5:16 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 3DBE79654DE8BECBBF659429A381A4103958E2F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 0237 Signing time: Fri 05 Dec 2025 18:20:48 +0000 Manifest this update: Fri 05 Dec 2025 18:15:48 +0000 Manifest next update: Tue 09 Dec 2025 01:57:48 +0000 Files and hashes: 1: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: UrGzpQyb4OcG13ECSRKSWIFvQeDrPkoBtijveesvtFQ=) 2: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: apVP/jy1/opxg+mOA7HpIN97BhqeX+tCnmp66XsnrKQ=) 3: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 1IuZ+1sb5CuVWfx/fjE2EJ1GmWjRaqNz5VL2CGRsg+c=) 4: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) 5: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: 3PeI4c1+04C9ghzq6F40f5013YnnignJ8PNDhSKl9BY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:be:79:65:4d:e8:be:cb:bf:65:94:29:a3:81:a4:10:39:58:e2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Dec 5 18:15:48 2025 GMT Not After : Dec 9 01:57:48 2025 GMT Subject: CN=6FB20D4EEE7FEC21FDA4C8AE40A29477CCDBE516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:75:a3:32:8b:06:3d:f1:06:86:9a:fe:37:6e: 3d:f5:77:68:21:d0:ef:ed:a2:5d:54:af:75:7c:23: 2e:35:25:fe:e1:3e:08:e0:41:b3:67:f2:a4:cf:ae: 1a:93:dc:92:5d:df:29:c2:1f:24:4a:b9:a9:9d:f3: 0e:b3:e9:ab:05:c0:bc:3d:ba:c4:75:2a:77:c8:cc: 86:22:6b:8a:9a:eb:84:38:20:e9:c2:38:8f:da:a7: f3:c9:0d:d6:cb:36:5a:f5:53:95:a7:3b:1f:e3:bf: 8d:3c:e2:56:ac:02:2f:0d:88:66:07:28:05:a2:48: 07:6d:30:54:32:ea:8c:0e:ea:b4:19:24:11:74:7f: 97:a3:74:2e:94:52:eb:53:fe:48:12:87:2d:da:6e: ca:4b:7b:c5:47:55:97:4e:8a:17:d4:91:76:7f:18: b8:c9:3c:48:84:f0:a2:2c:1b:5b:71:2a:16:e2:a0: 95:bc:df:c9:6c:87:2d:1f:dd:83:1b:c8:12:77:0b: 1d:a3:77:a1:6d:ce:ca:55:da:ff:ea:2c:68:77:ed: 2c:b8:20:9f:d4:6d:00:3c:68:8b:f3:10:f7:43:24: e7:6c:0a:42:08:74:93:7e:0c:e0:5a:ab:f6:9f:c2: 2c:c3:50:a6:11:3f:6d:be:dc:5b:0e:19:e1:99:1c: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B2:0D:4E:EE:7F:EC:21:FD:A4:C8:AE:40:A2:94:77:CC:DB:E5:16 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:3a:7f:4b:8d:ec:fa:31:f0:4f:8b:d1:3a:76:65:ff:94:c3: 00:91:16:99:91:4f:f2:07:ba:d9:e5:a3:cb:c8:2d:c1:d2:d0: 58:65:47:81:91:db:5f:f2:17:e6:c7:c4:49:04:d7:b9:cd:f5: 44:9e:4c:9d:17:8b:5c:25:47:ac:84:02:23:d4:ea:74:48:46: a7:a4:2b:ff:65:a9:d2:ec:36:bc:77:00:16:54:33:38:7f:e9: 1e:30:06:2a:2b:bd:f3:10:f4:c5:0c:87:56:67:65:c4:12:f1: c2:ba:8c:36:a1:ea:1e:a6:fc:e0:97:05:ae:b0:dc:6e:8f:76: 5a:da:9d:d1:9d:fb:36:66:4a:95:ca:79:26:2d:e6:80:3a:c2: 74:b6:84:86:fb:07:c6:bc:de:ff:7a:c2:20:bb:4a:b0:19:0d: 8c:18:f9:7d:15:fb:dd:e4:f3:e4:c1:56:92:f5:25:22:09:bf: 71:91:29:45:87:51:70:0a:cb:cf:88:0f:e2:9b:8e:c0:18:4c: ee:d2:68:22:04:c1:40:5d:32:6c:8b:aa:4a:6d:3b:a3:ac:b3: 09:56:6e:3e:73:29:06:70:66:77:6b:6c:e6:60:6f:10:12:83: ea:a2:90:28:b8:31:11:67:ad:ea:2b:e9:f7:db:7a:25:b6:50: c3:53:0d:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPb55ZU3ovsu/ZZQpo4GkEDlY4vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNTEyMDUxODE1NDhaFw0yNTEyMDkwMTU3NDhaMDMxMTAvBgNV BAMTKDZGQjIwRDRFRUU3RkVDMjFGREE0QzhBRTQwQTI5NDc3Q0NEQkU1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdaMyiwY98QaGmv43bj31d2gh 0O/tol1Ur3V8Iy41Jf7hPgjgQbNn8qTPrhqT3JJd3ynCHyRKuamd8w6z6asFwLw9 usR1KnfIzIYia4qa64Q4IOnCOI/ap/PJDdbLNlr1U5WnOx/jv4084lasAi8NiGYH KAWiSAdtMFQy6owO6rQZJBF0f5ejdC6UUutT/kgShy3abspLe8VHVZdOihfUkXZ/ GLjJPEiE8KIsG1txKhbioJW838lshy0f3YMbyBJ3Cx2jd6FtzspV2v/qLGh37Sy4 IJ/UbQA8aIvzEPdDJOdsCkIIdJN+DOBaq/afwizDUKYRP22+3FsOGeGZHHJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb7INTu5/7CH9pMiuQKKUd8zb5RYwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALU6f0uN7Pox8E+L0Tp2Zf+UwwCRFpmRT/IH utnlo8vILcHS0FhlR4GR21/yF+bHxEkE17nN9USeTJ0Xi1wlR6yEAiPU6nRIRqek K/9lqdLsNrx3ABZUMzh/6R4wBiorvfMQ9MUMh1ZnZcQS8cK6jDah6h6m/OCXBa6w 3G6PdlrandGd+zZmSpXKeSYt5oA6wnS2hIb7B8a83v96wiC7SrAZDYwY+X0V+93k 8+TBVpL1JSIJv3GRKUWHUXAKy8+ID+KbjsAYTO7SaCIEwUBdMmyLqkptO6OsswlW bj5zKQZwZndrbOZgbxASg+qikCi4MRFnreor6ffbeiW2UMNTDZc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:43 2025 by rpki-client