This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: t6U4O1ryL1S3wDKLaUVqJ6I3ot0aV7/ozmHfVjggOqc= Subject key identifier: 72:42:0B:B1:20:8D:0F:89:75:88:59:DD:8A:36:F3:28:B6:07:89:F3 Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 09893BBC099F98857C157E02FCE450074DCB63BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 052B Signing time: Sun 07 Dec 2025 04:12:04 +0000 Manifest this update: Sun 07 Dec 2025 04:07:04 +0000 Manifest next update: Wed 10 Dec 2025 14:24:04 +0000 Files and hashes: 1: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) 2: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) 3: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: c3YytgRO7ZgZ77dlBi1PZoOz5UpFV9d5gTYDUNqjjLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:89:3b:bc:09:9f:98:85:7c:15:7e:02:fc:e4:50:07:4d:cb:63:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Dec 7 04:07:04 2025 GMT Not After : Dec 10 14:24:04 2025 GMT Subject: CN=72420BB1208D0F89758859DD8A36F328B60789F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:03:9c:f9:0e:b5:3e:36:a1:33:96:7c:36: 7b:4d:01:9d:d5:85:4c:88:51:a1:63:cb:7b:a7:8d: 1e:c0:0e:fd:92:0c:0a:d3:69:5b:e7:c1:82:e9:f5: 8e:0c:7c:af:bb:e6:c0:0f:53:15:2b:51:b2:ca:72: 35:e3:22:9b:62:fd:95:c4:50:33:18:4e:d8:d9:f3: 06:30:89:df:33:95:ad:9f:76:b4:6f:5c:e4:9e:87: a5:e3:9d:aa:f6:93:90:d1:a3:30:43:8a:9d:b2:90: 38:7a:ee:8a:05:92:37:ae:0d:44:ed:81:0a:92:37: 11:a5:0a:bd:0a:63:fb:b6:5b:d0:02:d4:76:4a:d3: 00:c6:3e:6d:fd:9f:4d:66:e3:4d:a6:d4:80:f2:1e: a8:24:b1:56:98:b0:cb:df:98:85:52:5f:2a:e2:8d: 53:3f:9d:e8:bd:8c:5c:32:4d:0b:73:f5:e2:21:97: 89:0f:2f:f7:d2:36:2b:a2:38:8e:ff:7f:e9:8e:82: 04:20:48:20:9e:48:d9:23:e3:1e:2e:20:94:06:3d: 38:17:ec:42:66:1c:db:ed:3f:0f:a6:fa:32:9d:cf: 6d:1c:3e:05:ad:44:b3:20:92:aa:4e:04:9d:4e:d3: a0:b6:cc:84:60:ad:82:9c:23:0a:c7:f2:9c:ce:45: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:42:0B:B1:20:8D:0F:89:75:88:59:DD:8A:36:F3:28:B6:07:89:F3 X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:36:f6:82:f4:f5:97:f0:6c:29:cc:1b:c3:0b:e0:cf:ab:9b: 4b:63:ac:17:59:d0:2e:72:76:2f:15:a7:80:c4:53:2e:1b:45: 8d:0a:3c:0a:3d:b2:00:7d:36:1e:57:9b:43:03:a5:e0:6d:84: f7:7e:b0:02:a8:f2:63:83:3c:ec:b8:69:ce:cf:b0:01:2d:a0: f8:8a:2f:03:85:c5:df:ad:09:e1:c1:13:ae:e2:51:47:ae:c4: e6:3c:56:44:92:82:c9:46:d0:a8:59:fe:32:a8:30:27:6b:23: 64:f3:56:a8:b6:66:6d:60:04:8f:6d:97:b2:f4:f9:99:c0:1d: a5:58:10:9f:18:70:2a:ba:69:aa:a1:88:da:1b:45:6c:bb:ab: 6c:f4:42:d3:b2:98:84:14:5b:a0:fb:38:b5:ff:0e:95:30:7d: 5f:f6:1f:08:a3:cb:7e:2d:c9:c0:c5:da:bf:1c:c2:21:dc:76: 23:42:c2:6b:8e:93:2a:ee:b5:49:3f:bc:9e:b8:33:c2:66:90: 28:2a:bf:e4:51:48:ba:61:23:11:eb:ff:0c:89:4e:07:84:33: e8:cd:e9:3b:c8:b8:37:b5:49:d5:d1:7b:ae:36:37:a6:0e:ec: 8e:93:b7:9b:06:3c:d0:74:2d:0c:c0:f4:27:d1:8a:a8:3b:b7: 91:45:c7:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYk7vAmfmIV8FX4C/ORQB03LY7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTEyMDcwNDA3MDRaFw0yNTEyMTAxNDI0MDRaMDMxMTAvBgNV BAMTKDcyNDIwQkIxMjA4RDBGODk3NTg4NTlERDhBMzZGMzI4QjYwNzg5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2QOc+Q61PjahM5Z8NntNAZ3V hUyIUaFjy3unjR7ADv2SDArTaVvnwYLp9Y4MfK+75sAPUxUrUbLKcjXjIpti/ZXE UDMYTtjZ8wYwid8zla2fdrRvXOSeh6Xjnar2k5DRozBDip2ykDh67ooFkjeuDUTt gQqSNxGlCr0KY/u2W9AC1HZK0wDGPm39n01m402m1IDyHqgksVaYsMvfmIVSXyri jVM/nei9jFwyTQtz9eIhl4kPL/fSNiuiOI7/f+mOggQgSCCeSNkj4x4uIJQGPTgX 7EJmHNvtPw+m+jKdz20cPgWtRLMgkqpOBJ1O06C2zIRgrYKcIwrH8pzORY8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUckILsSCND4l1iFndijbzKLYHifMwHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw29oL09ZfwbCnMG8ML4M+rm0tjrBdZ0C5y di8Vp4DEUy4bRY0KPAo9sgB9Nh5Xm0MDpeBthPd+sAKo8mODPOy4ac7PsAEtoPiK LwOFxd+tCeHBE67iUUeuxOY8VkSSgslG0KhZ/jKoMCdrI2TzVqi2Zm1gBI9tl7L0 +ZnAHaVYEJ8YcCq6aaqhiNobRWy7q2z0QtOymIQUW6D7OLX/DpUwfV/2Hwijy34t ycDF2r8cwiHcdiNCwmuOkyrutUk/vJ64M8JmkCgqv+RRSLphIxHr/wyJTgeEM+jN 6TvIuDe1SdXRe642N6YO7I6Tt5sGPNB0LQzA9CfRiqg7t5FFx/0= -----END CERTIFICATE-----Generated at Sun Dec 7 06:05:08 2025 by rpki-client