This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: zPombyrfMs3/+ieGiPXSyFtJcCSeSMt1ophpma0v/Dc= Subject key identifier: FF:46:68:B1:E3:77:7E:8D:49:A7:95:40:39:4B:5F:E3:3E:60:8D:93 Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 7577C673C0B99E503D0331AF6902F03B84CB4A22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 021A Signing time: Sat 06 Dec 2025 17:21:35 +0000 Manifest this update: Sat 06 Dec 2025 17:16:35 +0000 Manifest next update: Tue 09 Dec 2025 22:30:35 +0000 Files and hashes: 1: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) 2: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) 3: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: 9nLKommN3eegWsxJrg0m8UnLRty1iDNP8JvMK/ifFmk=) 4: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:77:c6:73:c0:b9:9e:50:3d:03:31:af:69:02:f0:3b:84:cb:4a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Dec 6 17:16:35 2025 GMT Not After : Dec 9 22:30:35 2025 GMT Subject: CN=FF4668B1E3777E8D49A79540394B5FE33E608D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:b0:3f:6a:c2:cd:f3:13:f7:6d:fa:8c:cb: e0:32:2f:97:a9:9a:cd:30:89:11:b7:34:d4:fe:06: 98:70:27:7c:a7:ac:31:b2:24:51:d7:49:3b:f9:0e: f3:a9:9c:66:a5:c0:20:e0:16:31:ea:91:f2:26:66: fe:37:9c:5d:ce:07:a6:78:af:77:32:91:b5:31:09: 12:d2:94:e1:97:5f:a4:8c:8c:c4:21:31:04:89:33: 12:c4:78:ae:40:3c:94:b8:56:6d:30:0c:4a:1c:9b: e7:c3:c0:3f:f2:47:0b:0a:08:40:aa:00:57:f8:e1: f5:19:5a:f3:e0:c0:a2:e7:2b:84:48:05:06:3c:5f: 90:8e:dd:ac:43:fe:d4:08:d4:c2:7c:69:26:97:94: 32:18:1d:01:32:b6:bd:3c:78:7c:d9:f6:53:ec:24: 3e:e0:64:c4:f5:7e:5e:f5:65:84:8d:1c:67:6d:a1: 05:d9:69:3c:92:a5:2a:6a:26:84:6c:e8:54:db:15: 78:1b:52:62:4f:68:6d:05:f0:79:2d:c8:07:8c:75: d4:bb:4b:2d:77:1e:27:bf:8d:ae:a8:95:24:04:82: 40:14:f2:15:71:19:5b:61:66:0a:72:9a:e0:05:7c: 07:58:a5:af:dd:a6:2d:de:72:7f:2b:51:39:0e:bc: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:46:68:B1:E3:77:7E:8D:49:A7:95:40:39:4B:5F:E3:3E:60:8D:93 X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:aa:eb:07:38:e4:fe:6f:52:7c:47:f0:ac:81:35:82:19:de: e4:1e:07:9e:57:b8:eb:c5:54:8d:12:16:5e:0a:90:e0:ac:55: 60:5e:0f:b7:c0:95:6e:05:00:db:87:d9:38:07:41:44:4d:dc: 31:87:63:55:66:80:43:fd:54:e5:69:a8:39:97:64:a3:4e:44: fc:62:cf:9b:f0:97:5d:31:38:56:ce:53:75:e8:45:68:9a:26: 57:ac:4e:9e:62:24:2a:e0:68:1a:f4:f8:9c:f4:92:29:9d:ab: c8:c5:2a:e2:5b:34:0a:bf:c1:c6:70:e9:98:79:fa:5e:24:68: cc:3d:98:79:9b:f1:ed:4e:5d:97:02:8c:12:70:ee:f9:81:18: 18:40:97:9f:f8:7e:92:68:02:fb:d5:bd:c0:e5:18:48:8c:97: 77:fe:d8:2c:7c:6d:cd:ab:d6:e1:9a:e7:df:d1:15:74:f1:68: 5c:3c:e3:15:9a:b7:9c:a0:79:d2:e1:22:9c:e5:1a:e1:a1:ef: 89:eb:d7:e2:f1:51:9f:dd:b9:ba:ed:89:f2:92:99:6c:52:6e: f7:29:21:81:d1:24:72:60:a7:a8:e0:87:7f:4a:e1:c1:dd:be: 50:8f:b8:d3:f8:16:8f:6c:6d:53:25:75:c1:76:8a:ac:1f:5d: b7:b8:28:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXfGc8C5nlA9AzGvaQLwO4TLSiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNTEyMDYxNzE2MzVaFw0yNTEyMDkyMjMwMzVaMDMxMTAvBgNV BAMTKEZGNDY2OEIxRTM3NzdFOEQ0OUE3OTU0MDM5NEI1RkUzM0U2MDhEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/bA/asLN8xP3bfqMy+AyL5ep ms0wiRG3NNT+BphwJ3ynrDGyJFHXSTv5DvOpnGalwCDgFjHqkfImZv43nF3OB6Z4 r3cykbUxCRLSlOGXX6SMjMQhMQSJMxLEeK5APJS4Vm0wDEocm+fDwD/yRwsKCECq AFf44fUZWvPgwKLnK4RIBQY8X5CO3axD/tQI1MJ8aSaXlDIYHQEytr08eHzZ9lPs JD7gZMT1fl71ZYSNHGdtoQXZaTySpSpqJoRs6FTbFXgbUmJPaG0F8HktyAeMddS7 Sy13Hie/ja6olSQEgkAU8hVxGVthZgpymuAFfAdYpa/dpi3ecn8rUTkOvGhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/0ZoseN3fo1Jp5VAOUtf4z5gjZMwHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByq6wc45P5vUnxH8KyBNYIZ3uQeB55XuOvF VI0SFl4KkOCsVWBeD7fAlW4FANuH2TgHQURN3DGHY1VmgEP9VOVpqDmXZKNORPxi z5vwl10xOFbOU3XoRWiaJlesTp5iJCrgaBr0+Jz0kimdq8jFKuJbNAq/wcZw6Zh5 +l4kaMw9mHmb8e1OXZcCjBJw7vmBGBhAl5/4fpJoAvvVvcDlGEiMl3f+2Cx8bc2r 1uGa59/RFXTxaFw84xWat5ygedLhIpzlGuGh74nr1+LxUZ/dubrtifKSmWxSbvcp IYHRJHJgp6jgh39K4cHdvlCPuNP4Fo9sbVMldcF2iqwfXbe4KBM= -----END CERTIFICATE-----Generated at Sun Dec 7 07:02:20 2025 by rpki-client