This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: RRWkrFDwCj4V6wFLLphZ3ApH3EuG7hCAS4WIdVXttFE= Subject key identifier: AA:2D:B0:2C:C2:51:4C:1D:E3:47:B0:19:10:8E:E7:EA:94:8F:7B:23 Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 446737424BBD554B2B7D74B88773D02032E342FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 052C Signing time: Sat 06 Dec 2025 18:12:10 +0000 Manifest this update: Sat 06 Dec 2025 18:07:10 +0000 Manifest next update: Tue 09 Dec 2025 22:05:10 +0000 Files and hashes: 1: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 2: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: VY0reLZgneAzg7R84Tad2iOKQP0XACwiXAAd1W212Yc=) 3: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) 4: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 5: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: bfCtQ2ci3KBRRWu0Z0lBpxeSvQB9UNHjYs6f6t+OCL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:67:37:42:4b:bd:55:4b:2b:7d:74:b8:87:73:d0:20:32:e3:42:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Dec 6 18:07:10 2025 GMT Not After : Dec 9 22:05:10 2025 GMT Subject: CN=AA2DB02CC2514C1DE347B019108EE7EA948F7B23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:b1:97:32:a1:c1:37:57:a1:81:df:c3:ca: d1:9e:d8:6a:c4:c3:8d:88:d3:01:8e:23:d8:35:20: d2:e6:7b:54:90:f1:87:2f:6b:40:6c:fa:b9:41:48: c6:aa:65:a9:50:fc:50:99:f1:dd:87:e2:29:0f:fb: b5:57:3a:3e:e5:6f:7d:4a:76:c4:b5:1f:db:20:21: f0:60:bb:07:78:b2:12:bc:23:bc:2e:97:da:22:18: 45:00:2c:f2:29:92:46:e4:d5:8d:c3:53:9e:9c:34: e0:61:44:ee:48:0e:04:68:f5:e8:54:b6:73:91:c7: b2:e7:af:bc:e9:25:02:8b:d1:75:d7:a0:89:e8:69: 54:5d:92:ec:d2:42:4e:d4:cf:74:59:dc:c0:03:e3: 90:27:44:3f:f7:5f:06:9b:49:48:a0:35:70:83:1d: fa:7f:65:f5:8e:52:58:c8:e3:73:6c:8e:94:53:f6: 2c:92:f7:37:6a:24:1d:b1:91:40:c0:f9:23:6c:7c: 29:42:78:50:b7:a2:37:67:7c:98:ba:af:49:e7:db: a9:26:ff:5e:48:24:34:1d:65:07:72:e4:0b:bb:0d: 65:7d:34:c8:84:35:e7:00:33:de:b3:3f:3c:c0:8c: 02:71:f3:0e:65:a6:ca:4e:b7:dc:1d:f2:46:d0:6c: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:B0:2C:C2:51:4C:1D:E3:47:B0:19:10:8E:E7:EA:94:8F:7B:23 X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:7b:9c:ce:1d:72:03:dd:62:de:0c:6e:57:a4:21:db:3e:3e: 38:e0:88:c4:dc:cb:28:e5:d1:34:d7:52:f7:e1:fc:49:5b:a8: 51:36:30:00:f2:ac:df:cd:2a:f2:53:96:7a:bd:a0:f5:6d:7d: d3:7a:54:4e:f2:e1:8d:76:09:e1:7e:ab:4d:ac:f2:11:a4:fd: c8:a2:5c:99:04:a4:95:01:92:8a:4b:ed:3e:7a:fe:af:ef:0c: 9d:17:79:06:23:28:2c:78:64:0c:83:10:aa:4e:42:c8:5d:91: c9:9e:9d:7f:ff:36:d2:6e:53:0a:da:58:b0:af:63:74:6a:ff: 32:7c:7e:21:6d:ab:2c:ed:2c:24:ad:87:e6:cd:15:ba:9d:f4: ec:b9:c7:ed:6c:ff:79:f8:dd:23:dd:94:b7:b6:be:62:f2:0d: 9f:89:0e:43:df:f9:e5:2e:69:a1:a9:ec:4e:69:cf:99:1c:43: 2b:a1:a1:dc:c3:99:f0:1f:bf:45:70:78:3e:5d:f3:25:76:dc: a5:07:a5:1c:b6:12:f8:4a:25:6b:e3:e0:ab:ba:76:ec:4b:eb: 40:91:50:1f:4d:44:e9:ed:fe:57:d6:1d:4d:d1:ad:7b:9c:c5: e2:b5:60:71:f6:bb:59:4f:64:a9:75:06:e0:b4:9e:e5:c1:82: 1a:71:0d:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGc3Qku9VUsrfXS4h3PQIDLjQv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNTEyMDYxODA3MTBaFw0yNTEyMDkyMjA1MTBaMDMxMTAvBgNV BAMTKEFBMkRCMDJDQzI1MTRDMURFMzQ3QjAxOTEwOEVFN0VBOTQ4RjdCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wLGXMqHBN1ehgd/DytGe2GrE w42I0wGOI9g1INLme1SQ8Ycva0Bs+rlBSMaqZalQ/FCZ8d2H4ikP+7VXOj7lb31K dsS1H9sgIfBguwd4shK8I7wul9oiGEUALPIpkkbk1Y3DU56cNOBhRO5IDgRo9ehU tnORx7Lnr7zpJQKL0XXXoInoaVRdkuzSQk7Uz3RZ3MAD45AnRD/3XwabSUigNXCD Hfp/ZfWOUljI43NsjpRT9iyS9zdqJB2xkUDA+SNsfClCeFC3ojdnfJi6r0nn26km /15IJDQdZQdy5Au7DWV9NMiENecAM96zPzzAjAJx8w5lpspOt9wd8kbQbM+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqi2wLMJRTB3jR7AZEI7n6pSPeyMwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEB7nM4dcgPdYt4MblekIds+PjjgiMTcyyjl 0TTXUvfh/ElbqFE2MADyrN/NKvJTlnq9oPVtfdN6VE7y4Y12CeF+q02s8hGk/cii XJkEpJUBkopL7T56/q/vDJ0XeQYjKCx4ZAyDEKpOQshdkcmenX//NtJuUwraWLCv Y3Rq/zJ8fiFtqyztLCSth+bNFbqd9Oy5x+1s/3n43SPdlLe2vmLyDZ+JDkPf+eUu aaGp7E5pz5kcQyuhodzDmfAfv0VweD5d8yV23KUHpRy2EvhKJWvj4Ku6duxL60CR UB9NROnt/lfWHU3RrXucxeK1YHH2u1lPZKl1BuC0nuXBghpxDRw= -----END CERTIFICATE-----Generated at Sun Dec 7 02:15:58 2025 by rpki-client