This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: xEDuKGh+gYRrI3MZOgcXG6Yf7I25SS3Hfk0y3OJJBcc= Subject key identifier: 5A:A9:A9:54:D5:4A:2A:13:9B:50:D6:47:1B:9F:99:E2:DB:B0:E8:1C Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 5871C7AAE186328EC03CA2A382772A58C1739C72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 03F0 Signing time: Fri 05 Dec 2025 23:21:07 +0000 Manifest this update: Fri 05 Dec 2025 23:16:07 +0000 Manifest next update: Tue 09 Dec 2025 11:12:07 +0000 Files and hashes: 1: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: WEnAw6cEL+EVAveF46WanZI2DahqeiUGZKKbUfkwnT4=) 2: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) 3: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) 4: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 11:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:71:c7:aa:e1:86:32:8e:c0:3c:a2:a3:82:77:2a:58:c1:73:9c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Dec 5 23:16:07 2025 GMT Not After : Dec 9 11:12:07 2025 GMT Subject: CN=5AA9A954D54A2A139B50D6471B9F99E2DBB0E81C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:6d:a1:3e:bf:af:83:68:6e:dc:22:f1:cd: 33:6e:51:01:f5:02:25:a0:6f:74:a9:31:98:04:1b: 46:93:b5:e5:76:b1:15:a5:d1:5e:85:79:ba:66:82: d1:db:5c:03:3b:fb:d4:5b:a7:f4:2e:0b:aa:88:e7: 62:13:1a:53:60:94:51:32:ed:8a:f9:df:f5:b3:ba: 62:6a:c3:92:95:e3:8c:18:8a:84:24:de:0a:37:ef: c2:84:3b:b1:1d:dd:02:0d:6e:d9:e6:52:de:7a:95: 50:7d:da:fb:4b:09:8d:73:c5:bf:e8:84:9f:06:50: 14:11:db:03:ac:3d:97:2c:ca:c3:d8:71:4f:64:d6: 7c:c1:62:78:80:42:a2:b7:3e:f6:dd:ef:e2:75:b7: 8a:d4:6c:7a:d8:2f:1c:63:f3:e9:29:8e:40:2b:02: f4:fe:45:ae:23:b0:0f:6e:11:eb:f1:1b:b5:48:ba: b0:cd:28:5f:17:d0:c1:2c:f8:3e:ec:9d:7a:f6:cb: 7b:41:ef:42:e3:60:1e:00:d4:1b:67:d6:4e:88:08: 95:0c:18:23:9d:c1:a0:9c:c6:29:56:65:26:9a:ad: 9b:35:d1:f1:2d:13:88:95:d1:cc:db:7c:e3:8e:2c: de:b0:86:3d:24:42:a4:5e:42:ba:13:35:f4:fc:24: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A9:A9:54:D5:4A:2A:13:9B:50:D6:47:1B:9F:99:E2:DB:B0:E8:1C X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3f:ca:55:89:02:d7:71:e7:bd:97:ea:33:47:26:f5:6f:d9: e0:1f:42:36:32:87:6e:ce:22:6c:f0:20:17:3a:2a:62:96:34: ca:f3:96:18:61:6d:6e:db:24:7a:03:1a:8c:2c:35:18:7d:6f: bf:ad:b6:26:04:11:e2:d0:f0:1e:29:3a:31:29:b3:e5:2e:06: 98:ad:42:02:42:db:fd:18:0b:63:c0:5d:69:e3:7f:2d:f4:f4: c6:0f:54:10:4a:2a:2e:57:0d:a8:a0:45:53:03:db:f2:8d:1b: aa:bf:65:0d:57:73:07:08:74:bd:91:93:8a:4e:cf:ff:17:29: 5d:eb:d7:0c:ac:1a:2c:69:8b:f1:1f:24:fc:5a:22:fa:c0:b0: b5:d8:df:96:51:51:78:39:e0:04:40:8c:30:7f:7d:87:0a:7a: 63:54:28:f0:8b:33:01:8e:ce:a6:86:03:cd:52:8a:9f:a8:9b: 99:9f:02:51:b8:86:31:04:f8:eb:95:14:0e:6f:2f:78:b1:73: f2:9f:e1:9a:e5:2b:c2:40:52:b0:1c:0d:82:55:0f:b4:79:6c: f3:13:00:91:11:70:63:9b:01:4c:c6:3e:a0:69:e8:38:0a:23: db:82:d0:cc:3b:cc:60:ad:69:6a:ef:60:d4:fa:cd:c4:bf:06: e8:53:c1:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHHHquGGMo7APKKjgncqWMFznHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTEyMDUyMzE2MDdaFw0yNTEyMDkxMTEyMDdaMDMxMTAvBgNV BAMTKDVBQTlBOTU0RDU0QTJBMTM5QjUwRDY0NzFCOUY5OUUyREJCMEU4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8R22hPr+vg2hu3CLxzTNuUQH1 AiWgb3SpMZgEG0aTteV2sRWl0V6FebpmgtHbXAM7+9Rbp/QuC6qI52ITGlNglFEy 7Yr53/WzumJqw5KV44wYioQk3go378KEO7Ed3QINbtnmUt56lVB92vtLCY1zxb/o hJ8GUBQR2wOsPZcsysPYcU9k1nzBYniAQqK3Pvbd7+J1t4rUbHrYLxxj8+kpjkAr AvT+Ra4jsA9uEevxG7VIurDNKF8X0MEs+D7snXr2y3tB70LjYB4A1Btn1k6ICJUM GCOdwaCcxilWZSaarZs10fEtE4iV0czbfOOOLN6whj0kQqReQroTNfT8JLINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqmpVNVKKhObUNZHG5+Z4tuw6BwwHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADA/ylWJAtdx572X6jNHJvVv2eAfQjYyh27O ImzwIBc6KmKWNMrzlhhhbW7bJHoDGowsNRh9b7+ttiYEEeLQ8B4pOjEps+UuBpit QgJC2/0YC2PAXWnjfy309MYPVBBKKi5XDaigRVMD2/KNG6q/ZQ1XcwcIdL2Rk4pO z/8XKV3r1wysGixpi/EfJPxaIvrAsLXY35ZRUXg54ARAjDB/fYcKemNUKPCLMwGO zqaGA81Sip+om5mfAlG4hjEE+OuVFA5vL3ixc/Kf4ZrlK8JAUrAcDYJVD7R5bPMT AJERcGObAUzGPqBp6DgKI9uC0Mw7zGCtaWrvYNT6zcS/BuhTwcg= -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:54 2025 by rpki-client