This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: ZMhLJs3kY/tLbsKddJIF4BBtenzNrItHElfJKKrGttU= Subject key identifier: 7C:A8:00:96:63:6F:5F:AA:FD:BB:9C:53:C2:06:47:72:7A:8C:B4:73 Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 38DED7E22006AA325E7AA4F797CEB83253476B2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 0728 Signing time: Fri 05 Dec 2025 15:20:04 +0000 Manifest this update: Fri 05 Dec 2025 15:15:04 +0000 Manifest next update: Mon 08 Dec 2025 18:29:04 +0000 Files and hashes: 1: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: zeYZwol+an7d0sh3EVjh6AgqC8mVbSefnmTLa2FUjng=) 2: AS24203.roa (hash: C68gmTP9H6AGgXibFFHApE8cuP0Li5Pg7Pn1ljOTa6g=) 3: AS17885.roa (hash: RX8oo/DiJqJzJBqmubTqeGmmpOVT1csa63gvxFqyKec=) 4: AS139994.roa (hash: mQEJNXJ3XVh/s4Uqn72Xq0FcwJo74FkotAw0eOv4kCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:de:d7:e2:20:06:aa:32:5e:7a:a4:f7:97:ce:b8:32:53:47:6b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Dec 5 15:15:04 2025 GMT Not After : Dec 8 18:29:04 2025 GMT Subject: CN=7CA80096636F5FAAFDBB9C53C20647727A8CB473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8c:34:56:a6:52:4f:5d:ed:dc:0a:60:a0:2d: 16:85:fc:93:ff:81:a8:53:e8:b5:88:e0:c9:fa:6b: 85:b9:c6:07:28:02:34:25:fa:b7:18:64:fe:17:39: 25:63:33:7b:70:79:bf:67:07:57:8b:44:92:ee:44: 8f:74:0d:2a:0f:87:9b:95:78:d6:55:b0:ab:b1:72: a2:46:04:1b:bd:7d:04:a0:68:35:c5:78:93:f6:5d: 5f:06:7e:c0:63:64:a7:1b:bd:4c:80:27:83:7d:97: 88:c4:99:65:b9:86:9c:1e:11:73:49:5e:57:a9:fc: 42:45:5e:41:97:4d:3f:72:90:ba:3e:76:78:3b:c9: d1:a8:83:04:24:3a:e7:9a:38:57:3a:10:eb:5c:c9: 8a:07:14:85:47:f3:b4:c6:d5:55:71:33:c1:12:a6: 10:4c:f4:36:e7:ca:37:7a:fa:10:7f:df:66:c4:90: 8d:42:57:c3:3b:1b:fc:5b:85:38:53:5b:99:3f:42: 36:85:ef:08:e6:e8:4e:89:3b:cb:92:e4:05:6f:ed: 3f:44:6c:ff:98:64:d1:cc:cd:6f:bd:98:cc:e6:93: 09:e2:29:c2:75:11:36:23:e4:16:2e:81:e1:d7:9f: e1:80:74:42:a1:30:9d:ba:de:96:e2:3a:8e:9e:83: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A8:00:96:63:6F:5F:AA:FD:BB:9C:53:C2:06:47:72:7A:8C:B4:73 X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2b:4a:28:f7:4e:06:7e:18:6f:0b:b9:89:40:81:4a:1e:54: c7:90:01:2f:3c:66:7e:dd:12:a7:e4:bd:54:12:63:06:c0:65: ad:fa:45:65:52:ea:d0:d2:fb:ed:7b:c4:b7:03:d8:71:4a:96: f6:ae:d2:43:39:ca:99:cc:d4:33:34:17:4d:8d:8c:5a:19:a9: 28:7c:12:2b:bd:ad:9f:b0:0a:4a:38:af:93:d6:bb:d1:a4:d9: d5:25:44:d1:a9:6d:19:85:ba:84:0c:c0:0a:8f:47:73:6d:1b: 41:0a:47:97:4d:80:b3:59:a0:dc:3e:2a:f8:c7:90:0d:34:e4: f8:8a:85:cb:ab:77:87:5f:af:b9:b6:92:de:d2:6c:60:90:4c: 3d:ad:dc:7e:e7:5e:f4:eb:47:b9:44:a1:4a:02:2a:aa:d8:98: 0a:68:79:6d:96:1a:ad:10:9f:f9:47:e1:c2:df:6e:3c:0f:38: 84:5a:57:10:bb:1c:1b:6a:61:52:27:99:e7:ea:40:cc:9b:e1: f9:fc:fd:08:88:80:6d:d2:c9:61:6e:44:f6:d5:fc:2d:20:37: 84:7d:d3:c3:16:c8:7b:e6:6e:5c:24:80:fb:48:f6:7f:79:62: c9:6e:2e:ef:03:7c:17:e2:2d:63:da:c5:7a:c4:ca:c1:6a:50: 1f:64:11:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUON7X4iAGqjJeeqT3l864MlNHaywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTEyMDUxNTE1MDRaFw0yNTEyMDgxODI5MDRaMDMxMTAvBgNV BAMTKDdDQTgwMDk2NjM2RjVGQUFGREJCOUM1M0MyMDY0NzcyN0E4Q0I0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejDRWplJPXe3cCmCgLRaF/JP/ gahT6LWI4Mn6a4W5xgcoAjQl+rcYZP4XOSVjM3tweb9nB1eLRJLuRI90DSoPh5uV eNZVsKuxcqJGBBu9fQSgaDXFeJP2XV8GfsBjZKcbvUyAJ4N9l4jEmWW5hpweEXNJ Xlep/EJFXkGXTT9ykLo+dng7ydGogwQkOueaOFc6EOtcyYoHFIVH87TG1VVxM8ES phBM9Dbnyjd6+hB/32bEkI1CV8M7G/xbhThTW5k/QjaF7wjm6E6JO8uS5AVv7T9E bP+YZNHMzW+9mMzmkwniKcJ1ETYj5BYugeHXn+GAdEKhMJ263pbiOo6eg3YnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfKgAlmNvX6r9u5xTwgZHcnqMtHMwHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0rSij3TgZ+GG8LuYlAgUoeVMeQAS88Zn7d EqfkvVQSYwbAZa36RWVS6tDS++17xLcD2HFKlvau0kM5ypnM1DM0F02NjFoZqSh8 Eiu9rZ+wCko4r5PWu9Gk2dUlRNGpbRmFuoQMwAqPR3NtG0EKR5dNgLNZoNw+KvjH kA005PiKhcurd4dfr7m2kt7SbGCQTD2t3H7nXvTrR7lEoUoCKqrYmApoeW2WGq0Q n/lH4cLfbjwPOIRaVxC7HBtqYVInmefqQMyb4fn8/QiIgG3SyWFuRPbV/C0gN4R9 08MWyHvmblwkgPtI9n95YsluLu8DfBfiLWPaxXrEysFqUB9kEcg= -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:16 2025 by rpki-client