This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft File: 50D9825940B483F044841C179E5B7712607CAB2A.mft (raw, json) Hash identifier: dbtqHcYFWdutLvep1osWqFq2LVzRV5XpCgewaOPQrr0= Subject key identifier: CB:CE:4A:8D:4B:65:2C:25:D7:08:03:A1:E9:F9:7A:D5:ED:2B:A6:A5 Authority key identifier: 50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A Certificate issuer: /CN=50D9825940B483F044841C179E5B7712607CAB2A Certificate serial: 3F621A357A3DB551993C1D28DF26C8D867DE3A64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft Manifest number: 023F Signing time: Fri 05 Dec 2025 10:11:53 +0000 Manifest this update: Fri 05 Dec 2025 10:06:53 +0000 Manifest next update: Mon 08 Dec 2025 11:02:53 +0000 Files and hashes: 1: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: 8ucdhC8+G/GM9sLgWMqJbTh8/P5IkKccW0COx5GovCw=) 2: 50D9825940B483F044841C179E5B7712607CAB2A.crl (hash: 0y+Sjq9aaNVMxaTNycSr2zeSsQ2yX8C/91q3wkYyNFI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:62:1a:35:7a:3d:b5:51:99:3c:1d:28:df:26:c8:d8:67:de:3a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50D9825940B483F044841C179E5B7712607CAB2A Validity Not Before: Dec 5 10:06:53 2025 GMT Not After : Dec 8 11:02:53 2025 GMT Subject: CN=CBCE4A8D4B652C25D70803A1E9F97AD5ED2BA6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:bd:a0:be:a5:c9:f9:76:3c:5d:88:38:8f: d0:90:17:a2:6a:01:9d:80:69:93:f2:34:f6:65:f2: 40:a7:85:ec:61:4c:cb:19:1d:22:cb:b7:ea:4a:fd: 02:85:9e:3f:2c:b3:4b:49:59:ea:cc:a3:4b:dd:34: 7d:7d:6d:cb:47:27:46:d3:14:4e:0f:7b:22:43:af: 02:84:b1:2f:af:fb:e4:7d:ef:e8:a9:09:5f:b4:bb: 79:ba:7e:1d:5d:db:ee:fb:26:40:ed:e8:f6:8c:9f: 5c:3c:2a:90:a9:15:e5:f3:30:76:19:5c:46:93:37: 85:0e:3d:58:6b:be:6e:70:52:29:a5:b6:72:84:3b: 75:b2:4f:64:cd:74:4e:53:5a:8b:6d:06:d9:18:c2: 2a:94:2e:d4:a4:83:b5:39:02:41:b7:3a:7c:f8:af: 27:88:18:aa:1f:74:18:08:8f:ac:da:af:cb:6c:cc: fd:47:b9:f2:8f:ea:ad:b8:17:84:cf:d3:37:81:0e: f6:2c:37:f5:c8:4d:d2:d9:8c:48:73:5a:21:31:30: 1d:a7:da:e7:bf:82:7a:3f:00:9b:99:38:52:96:40: aa:e0:22:db:f6:84:02:b7:a8:40:00:b4:6a:a8:0c: 46:14:f2:c3:b9:18:2c:f7:77:9f:61:7e:e8:6c:23: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CE:4A:8D:4B:65:2C:25:D7:08:03:A1:E9:F9:7A:D5:ED:2B:A6:A5 X509v3 Authority Key Identifier: keyid:50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b0:5f:62:59:88:dc:59:e6:5f:ce:e9:20:10:42:35:9c:78: 3a:fd:d7:c8:5a:82:93:43:fd:38:4c:8f:04:0f:ff:8c:99:34: 3d:74:61:53:88:7d:ab:7a:ec:8f:f3:34:42:33:42:6b:b1:61: 29:3a:bf:5b:45:68:db:27:68:b6:31:ad:7b:60:9f:c6:0b:27: 4b:6f:47:cd:91:53:49:86:11:ad:46:25:05:b7:31:7a:78:af: 4b:35:b6:b5:81:e9:fb:14:32:72:3c:45:1a:59:35:91:f0:07: 08:33:55:b0:03:a6:35:44:58:2f:b3:2a:1e:17:cf:02:fc:01: f2:90:c4:76:d1:96:e7:48:62:9d:95:95:7e:e5:22:37:8d:4d: 0b:fd:3f:f1:d1:7d:7a:38:9b:c5:c1:5a:fa:84:7b:e2:83:07: d6:82:5b:00:fa:c7:ea:60:b9:b2:73:dc:fa:26:04:8e:19:08: a9:22:d7:39:44:54:45:f7:8b:8f:aa:e7:f8:d5:6f:c3:74:6d: ea:4a:98:c6:d7:b5:20:ae:0c:92:b0:f4:ec:27:92:ba:22:bb: da:c8:de:f8:4c:2c:11:67:9c:8e:d6:73:61:7b:55:14:dc:e8: 14:51:88:66:41:25:be:04:5f:6f:df:37:cc:db:95:87:4e:77: 8d:a5:63:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP2IaNXo9tVGZPB0o3ybI2GfeOmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2 MDdDQUIyQTAeFw0yNTEyMDUxMDA2NTNaFw0yNTEyMDgxMTAyNTNaMDMxMTAvBgNV BAMTKENCQ0U0QThENEI2NTJDMjVENzA4MDNBMUU5Rjk3QUQ1RUQyQkE2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfL2gvqXJ+XY8XYg4j9CQF6Jq AZ2AaZPyNPZl8kCnhexhTMsZHSLLt+pK/QKFnj8ss0tJWerMo0vdNH19bctHJ0bT FE4PeyJDrwKEsS+v++R97+ipCV+0u3m6fh1d2+77JkDt6PaMn1w8KpCpFeXzMHYZ XEaTN4UOPVhrvm5wUimltnKEO3WyT2TNdE5TWottBtkYwiqULtSkg7U5AkG3Onz4 ryeIGKofdBgIj6zar8tszP1HufKP6q24F4TP0zeBDvYsN/XITdLZjEhzWiExMB2n 2ue/gno/AJuZOFKWQKrgItv2hAK3qEAAtGqoDEYU8sO5GCz3d59hfuhsI3sXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy85KjUtlLCXXCAOh6fl61e0rpqUwHwYDVR0j BBgwFoAUUNmCWUC0g/BEhBwXnlt3EmB8qyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDQ2YTU2NC02MzQ3LTQwZWYtYmFkMy00ZGFhZTMwNmQ0MjEvMC81MEQ5ODI1OTQw QjQ4M0YwNDQ4NDFDMTc5RTVCNzcxMjYwN0NBQjJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2MDdD QUIyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh ZDMtNGRhYWUzMDZkNDIxLzAvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3 MTI2MDdDQUIyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuwX2JZiNxZ5l/O6SAQQjWceDr918hagpND /ThMjwQP/4yZND10YVOIfat67I/zNEIzQmuxYSk6v1tFaNsnaLYxrXtgn8YLJ0tv R82RU0mGEa1GJQW3MXp4r0s1trWB6fsUMnI8RRpZNZHwBwgzVbADpjVEWC+zKh4X zwL8AfKQxHbRludIYp2VlX7lIjeNTQv9P/HRfXo4m8XBWvqEe+KDB9aCWwD6x+pg ubJz3PomBI4ZCKki1zlEVEX3i4+q5/jVb8N0bepKmMbXtSCuDJKw9Ownkroiu9rI 3vhMLBFnnI7Wc2F7VRTc6BRRiGZBJb4EX2/fN8zblYdOd42lYz0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:49 2025 by rpki-client