This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: +1dSrQ43M6g4aoasNFucNmq0fhcMMhRbNsI0e0n40m4= Subject key identifier: 57:3E:A7:A2:2F:EF:24:11:37:D8:B1:0D:30:35:70:2E:0C:B3:9A:46 Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 0ADBDAE7021FFE8DF04C2547B9460773745E60D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 024F Signing time: Fri 05 Dec 2025 10:31:20 +0000 Manifest this update: Fri 05 Dec 2025 10:26:20 +0000 Manifest next update: Mon 08 Dec 2025 19:44:20 +0000 Files and hashes: 1: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=) 2: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: YzVfaVis3FJwUEYjeaMaYddb5/lMpeQmQcJZwtYoIgA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:db:da:e7:02:1f:fe:8d:f0:4c:25:47:b9:46:07:73:74:5e:60:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Dec 5 10:26:20 2025 GMT Not After : Dec 8 19:44:20 2025 GMT Subject: CN=573EA7A22FEF241137D8B10D3035702E0CB39A46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cf:32:d9:1f:23:fb:e5:16:3b:5f:01:f8:c7: dc:37:01:aa:17:0a:65:21:9b:51:97:a6:f5:55:12: 17:86:8c:ed:75:45:97:f4:f3:a5:2f:85:15:b6:b4: 0f:00:4e:9e:fd:2f:c2:11:bb:ff:54:15:9a:88:c6: 0b:f3:5b:b6:e4:d1:8f:84:45:52:b3:85:d9:a6:5a: 11:1d:8d:b3:fa:61:65:bc:58:cc:ae:9a:e4:fb:77: b2:d0:74:b8:9c:ff:36:45:a1:e1:7f:0c:bb:c4:35: 05:34:6c:37:1d:c1:fd:84:a6:31:d0:9a:ef:f9:eb: 1b:d8:9f:3c:3a:a1:15:21:b5:21:0c:c4:59:29:57: b4:2c:4a:df:01:30:1b:77:39:c8:c7:fb:af:e6:08: 38:11:82:3c:ff:6a:fc:b1:81:28:b4:04:e5:68:e7: c8:98:52:68:48:f4:79:d8:69:da:a1:c3:f4:79:c6: 8e:e6:1a:cb:2a:73:13:15:c3:bf:45:f9:52:e5:1b: 60:b1:d5:71:16:a6:a1:28:1a:90:be:82:48:7b:92: 36:e6:c4:8f:60:12:ac:1f:bf:a3:a6:9b:bb:43:0d: 4c:88:6c:49:8d:d1:f0:30:7d:33:85:6d:56:79:2c: ad:22:1d:f6:d2:48:1d:2a:93:9a:f0:54:c0:5e:b7: a5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3E:A7:A2:2F:EF:24:11:37:D8:B1:0D:30:35:70:2E:0C:B3:9A:46 X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:76:90:b8:44:6d:71:d9:29:14:6f:07:73:8e:eb:b4:ae:db: ec:99:f3:60:f9:fe:72:16:79:87:b8:12:a4:7d:d8:3a:f6:bd: d5:fc:eb:15:24:20:b8:a3:86:2c:cb:ac:09:95:e5:a2:c0:11: 96:42:f4:b6:aa:d6:48:e7:53:4e:91:5c:38:f8:30:06:38:2b: f4:b8:38:db:80:dd:1c:cf:57:18:39:7e:ce:3e:dd:b7:74:4f: 87:f6:66:11:3a:d7:05:64:74:50:9b:e6:20:df:93:26:b5:63: 2a:e4:42:32:44:87:77:fd:08:6b:e0:49:d3:2e:05:06:23:0d: 4a:22:a7:6e:28:cd:9a:34:21:18:81:97:c6:bc:ea:1d:29:af: 87:98:97:4a:6d:61:02:0b:22:e1:57:0c:ac:e4:ec:e0:23:c5: 36:07:08:fb:6b:d2:4c:e8:35:2d:24:6a:96:f6:74:64:13:0e: b1:6a:7b:93:80:25:bb:eb:dc:1f:83:55:26:4d:48:b0:fe:f8: f7:ab:03:64:0a:08:7c:23:05:67:ed:79:f3:ad:ac:0c:1e:53: 80:8a:eb:eb:fb:5d:7d:f9:24:a0:ba:f1:98:a6:11:40:49:d5: 96:22:ab:4d:7f:d5:5a:fe:cc:21:7d:73:fa:85:4b:29:f2:32: 55:7c:00:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtva5wIf/o3wTCVHuUYHc3ReYNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTEyMDUxMDI2MjBaFw0yNTEyMDgxOTQ0MjBaMDMxMTAvBgNV BAMTKDU3M0VBN0EyMkZFRjI0MTEzN0Q4QjEwRDMwMzU3MDJFMENCMzlBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzzLZHyP75RY7XwH4x9w3AaoX CmUhm1GXpvVVEheGjO11RZf086UvhRW2tA8ATp79L8IRu/9UFZqIxgvzW7bk0Y+E RVKzhdmmWhEdjbP6YWW8WMyumuT7d7LQdLic/zZFoeF/DLvENQU0bDcdwf2EpjHQ mu/56xvYnzw6oRUhtSEMxFkpV7QsSt8BMBt3OcjH+6/mCDgRgjz/avyxgSi0BOVo 58iYUmhI9HnYadqhw/R5xo7mGssqcxMVw79F+VLlG2Cx1XEWpqEoGpC+gkh7kjbm xI9gEqwfv6Omm7tDDUyIbEmN0fAwfTOFbVZ5LK0iHfbSSB0qk5rwVMBet6WNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVz6noi/vJBE32LENMDVwLgyzmkYwHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIB2kLhEbXHZKRRvB3OO67Su2+yZ82D5/nIW eYe4EqR92Dr2vdX86xUkILijhizLrAmV5aLAEZZC9Laq1kjnU06RXDj4MAY4K/S4 ONuA3RzPVxg5fs4+3bd0T4f2ZhE61wVkdFCb5iDfkya1YyrkQjJEh3f9CGvgSdMu BQYjDUoip24ozZo0IRiBl8a86h0pr4eYl0ptYQILIuFXDKzk7OAjxTYHCPtr0kzo NS0kapb2dGQTDrFqe5OAJbvr3B+DVSZNSLD++PerA2QKCHwjBWftefOtrAweU4CK 6+v7XX35JKC68ZimEUBJ1ZYiq01/1Vr+zCF9c/qFSynyMlV8ABA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:53 2025 by rpki-client