This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft File: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft (raw, json) Hash identifier: sBx6crKJ/6fgV+AYmFuyWlrK9KwngSP0MqbmW45teBo= Subject key identifier: E2:28:39:4C:F6:32:C6:2A:1E:2A:55:A4:8A:8C:85:A1:AB:40:15:1A Authority key identifier: B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A Certificate issuer: /CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Certificate serial: 2D0AC0530A3C93C21C3B4CE71C8CF22B407061FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft Manifest number: 76 Signing time: Sat 06 Dec 2025 18:51:39 +0000 Manifest this update: Sat 06 Dec 2025 18:46:39 +0000 Manifest next update: Tue 09 Dec 2025 21:06:39 +0000 Files and hashes: 1: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl (hash: NAjU4kfN9NTIW7zLmQ5c2Ow/FpEkrfTHCp+TifFbF+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0a:c0:53:0a:3c:93:c2:1c:3b:4c:e7:1c:8c:f2:2b:40:70:61:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Validity Not Before: Dec 6 18:46:39 2025 GMT Not After : Dec 9 21:06:39 2025 GMT Subject: CN=E228394CF632C62A1E2A55A48A8C85A1AB40151A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:56:5d:ff:3d:00:5e:c9:48:d4:b1:64:de: 57:0c:be:79:cd:4d:f3:74:2b:e2:94:57:7d:15:13: 32:5a:ad:d5:e2:61:0e:38:e5:5b:a7:31:d9:f2:2f: 21:46:f6:90:c1:3c:55:39:ff:3a:b6:69:f7:ad:58: d7:03:28:8f:80:57:e9:12:cd:bd:46:cd:e6:15:a5: 13:ce:32:1c:5b:39:56:43:10:79:1c:31:17:05:ef: c3:1b:30:ee:3e:22:71:30:72:11:ea:ae:a9:f5:4e: 71:da:b6:2e:35:03:bc:88:28:c7:98:31:db:6d:a8: 6d:41:05:3a:27:e6:31:36:88:7a:ee:c5:bd:43:78: ca:ee:02:6d:8c:72:a8:aa:84:b2:ac:79:e3:07:8b: 81:0a:8f:41:c8:72:28:8f:06:8a:b8:8e:9f:69:f6: d8:d9:b7:28:3b:3f:d3:d3:ff:e4:f1:87:b4:ee:26: bb:94:ba:85:a0:e6:81:10:10:ea:57:69:db:4d:d1: d1:68:5d:f3:14:e5:88:76:34:9a:05:bc:95:aa:56: 29:e6:5b:e2:14:3b:4e:45:7f:ca:e5:b5:f1:fa:13: 5a:27:b3:0c:d9:3b:67:f4:d6:0e:4b:53:b8:93:cf: 25:06:6d:93:d2:21:f7:44:ba:88:50:27:71:67:d9: e0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:28:39:4C:F6:32:C6:2A:1E:2A:55:A4:8A:8C:85:A1:AB:40:15:1A X509v3 Authority Key Identifier: keyid:B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a8:4f:8c:f9:44:93:b1:2c:6b:91:87:ff:66:b2:f1:fb:96: 2d:b9:dc:e6:e8:50:06:67:53:c3:9b:08:46:a9:fe:f2:1e:5d: 1c:97:1c:65:2f:7d:56:85:60:40:b7:2d:ca:ee:06:a0:53:0e: d2:e9:e4:b1:04:a0:58:2b:7f:5a:24:9c:ab:01:0d:30:3c:41: b1:bf:99:e8:50:e1:8e:bf:31:27:e6:a6:94:d8:8b:e9:a5:fd: 22:44:54:47:bf:24:3f:2b:c8:1d:bd:d6:ae:ac:9f:b8:b8:c6: 7b:55:29:2e:ba:d3:f9:0a:a4:b7:db:d0:5d:dd:c1:c7:da:60: 6f:47:f1:9e:01:b4:67:a0:be:46:86:9e:a9:7d:f2:74:20:73: d6:37:2e:84:7d:fe:1e:c4:44:02:67:19:c0:a4:d4:1f:c6:ae: 40:70:f5:bd:57:cb:d0:76:96:cd:09:59:3b:8f:d8:89:36:38: 7f:10:52:18:c7:4d:74:19:dd:65:fa:42:b0:80:b2:2f:a6:77: ac:e9:64:ad:0e:03:63:67:5a:1b:0f:be:58:aa:b4:51:b3:ea: 6c:fb:6a:21:32:74:f1:ec:aa:d7:0c:8a:17:79:35:da:32:03: 9f:5b:a7:4d:28:8a:bb:cf:cd:5c:b6:6c:6b:27:8e:15:96:e2: 4f:29:51:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQrAUwo8k8IcO0znHIzyK0BwYf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1 M0E3RkI3QTAeFw0yNTEyMDYxODQ2MzlaFw0yNTEyMDkyMTA2MzlaMDMxMTAvBgNV BAMTKEUyMjgzOTRDRjYzMkM2MkExRTJBNTVBNDhBOEM4NUExQUI0MDE1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOVZd/z0AXslI1LFk3lcMvnnN TfN0K+KUV30VEzJardXiYQ445VunMdnyLyFG9pDBPFU5/zq2afetWNcDKI+AV+kS zb1GzeYVpRPOMhxbOVZDEHkcMRcF78MbMO4+InEwchHqrqn1TnHati41A7yIKMeY MdttqG1BBTon5jE2iHruxb1DeMruAm2McqiqhLKseeMHi4EKj0HIciiPBoq4jp9p 9tjZtyg7P9PT/+Txh7TuJruUuoWg5oEQEOpXadtN0dFoXfMU5Yh2NJoFvJWqVinm W+IUO05Ff8rltfH6E1onswzZO2f01g5LU7iTzyUGbZPSIfdEuohQJ3Fn2eBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ig5TPYyxioeKlWkioyFoatAFRowHwYDVR0j BBgwFoAUtEFUYbbvcNPUqB7WiPJJfVOn+3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjMzMGQwNi1mOTJkLTQ5NWItOWJhMC1hY2RkODE3YjE0ODMvMC9CNDQxNTQ2MUI2 RUY3MEQzRDRBODFFRDY4OEYyNDk3RDUzQTdGQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1M0E3 RkI3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5 N0Q1M0E3RkI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAioT4z5RJOxLGuRh/9msvH7li253OboUAZn U8ObCEap/vIeXRyXHGUvfVaFYEC3LcruBqBTDtLp5LEEoFgrf1oknKsBDTA8QbG/ mehQ4Y6/MSfmppTYi+ml/SJEVEe/JD8ryB291q6sn7i4xntVKS660/kKpLfb0F3d wcfaYG9H8Z4BtGegvkaGnql98nQgc9Y3LoR9/h7ERAJnGcCk1B/GrkBw9b1Xy9B2 ls0JWTuP2Ik2OH8QUhjHTXQZ3WX6QrCAsi+md6zpZK0OA2NnWhsPvliqtFGz6mz7 aiEydPHsqtcMihd5NdoyA59bp00oirvPzVy2bGsnjhWW4k8pUWM= -----END CERTIFICATE-----Generated at Sun Dec 7 04:29:22 2025 by rpki-client