This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: /eNA2x9z5uf986pSrineke6eauY4zmvBpQkAp60dFnk= Subject key identifier: 22:67:82:F1:7E:F8:64:6C:DC:D8:B7:05:ED:0F:01:50:62:1E:C4:1F Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 5E7F08B3C851904DA89A10EE8BA2B60D9A2EDDD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: E4 Signing time: Fri 05 Dec 2025 20:31:45 +0000 Manifest this update: Fri 05 Dec 2025 20:26:45 +0000 Manifest next update: Tue 09 Dec 2025 07:32:45 +0000 Files and hashes: 1: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: K+l/g4p9y6cTiWHXp9qbhWcap/gI8HD7/DZcp0av7uY=) 2: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: mdXPhgzUanuZLh4S1gcQUWiEmR6H0PfIhEAFj37L1aw=) 3: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: TsqNIUGKVArIBEGfFPOQj0RJMusrdrLAysbKak+tetA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7f:08:b3:c8:51:90:4d:a8:9a:10:ee:8b:a2:b6:0d:9a:2e:dd:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: Dec 5 20:26:45 2025 GMT Not After : Dec 9 07:32:45 2025 GMT Subject: CN=226782F17EF8646CDCD8B705ED0F0150621EC41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:1a:42:96:f2:12:f2:4d:0e:47:2c:5e:5a: cc:3e:6c:38:08:cc:c9:04:a7:7c:3c:f7:9d:40:60: 76:36:80:d4:4c:e2:35:a7:a2:99:5d:a1:fa:c9:ff: 90:d0:fa:2f:8f:9d:c6:92:09:6c:92:4b:c2:b1:4e: 58:43:92:32:10:36:ac:3b:24:b6:0e:41:f9:da:d8: 07:bb:cc:85:f5:30:8a:86:a0:48:c8:e3:31:18:3a: 53:71:7e:2e:69:c1:f6:33:6b:6e:5f:0a:d6:29:b4: e9:bf:48:41:4a:d3:50:2e:2e:1b:96:1c:8d:fd:e3: d4:f7:9f:fd:55:6f:78:24:ba:86:c3:cd:98:40:dc: 89:e9:75:45:fb:79:7f:9e:c8:12:72:cf:86:73:44: 08:b1:10:9c:9d:92:44:ed:fd:4d:af:28:4b:3f:0f: 7b:6a:22:a6:4a:73:70:36:84:c9:43:65:68:47:0e: cb:bc:d0:37:fc:70:7f:6a:ff:62:ae:a6:24:c4:98: ca:d7:aa:6a:73:63:cf:5c:fa:11:8d:c9:76:59:50: 92:4a:b8:80:ac:45:a0:ba:4b:3b:57:0d:cf:15:63: 37:2a:53:30:66:e9:ea:ec:81:33:34:29:b4:4c:24: a3:c9:97:90:fd:42:38:40:45:1d:18:4f:16:73:d1: b9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:67:82:F1:7E:F8:64:6C:DC:D8:B7:05:ED:0F:01:50:62:1E:C4:1F X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:5e:b3:2b:de:0f:32:1d:d4:99:84:40:f0:ab:86:91:81:ad: c5:cd:f5:1e:31:9f:6e:86:9e:22:a8:6c:c7:9d:cb:c4:8a:c2: 08:84:24:71:b2:22:b5:6c:53:d3:48:dc:ef:1f:d3:05:70:2b: 87:91:8d:23:d6:a0:49:6a:74:83:b0:77:87:5d:64:0b:2d:32: a2:71:b9:33:03:f9:4f:12:03:2e:1b:22:87:e7:18:58:7e:ec: 28:f1:07:ab:ea:27:5f:4e:ca:43:33:2f:d3:63:69:42:24:1d: e9:6a:ab:e8:fd:06:af:aa:70:7f:b7:b9:95:67:9d:fa:e7:99: b0:7b:c2:d2:0e:89:99:7e:bb:7b:ba:a8:fb:3d:b4:60:e2:ba: c9:aa:2d:eb:62:d8:77:a2:66:e6:b6:21:e4:1c:0e:0d:a1:c5: ec:a9:d6:fa:b0:36:08:56:c1:62:2d:e6:7c:9f:62:18:00:9f: c4:b2:8e:ee:03:92:7d:d1:0f:c0:5c:78:a4:e1:6b:89:82:bf: 3b:46:0d:64:91:6a:ac:80:c6:8b:19:a4:4a:61:f1:bf:ca:63: 05:39:4f:d0:bf:40:fa:59:76:e4:22:3d:c7:64:4f:03:50:b4: 96:34:75:43:a2:38:a4:75:7b:6f:80:34:8e:a0:ed:36:3c:0e: f7:22:79:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXn8Is8hRkE2omhDui6K2DZou3dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNTEyMDUyMDI2NDVaFw0yNTEyMDkwNzMyNDVaMDMxMTAvBgNV BAMTKDIyNjc4MkYxN0VGODY0NkNEQ0Q4QjcwNUVEMEYwMTUwNjIxRUM0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yRpClvIS8k0ORyxeWsw+bDgI zMkEp3w8951AYHY2gNRM4jWnopldofrJ/5DQ+i+PncaSCWySS8KxTlhDkjIQNqw7 JLYOQfna2Ae7zIX1MIqGoEjI4zEYOlNxfi5pwfYza25fCtYptOm/SEFK01AuLhuW HI3949T3n/1Vb3gkuobDzZhA3InpdUX7eX+eyBJyz4ZzRAixEJydkkTt/U2vKEs/ D3tqIqZKc3A2hMlDZWhHDsu80Df8cH9q/2KupiTEmMrXqmpzY89c+hGNyXZZUJJK uICsRaC6SztXDc8VYzcqUzBm6ersgTM0KbRMJKPJl5D9QjhARR0YTxZz0blNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUImeC8X74ZGzc2LcF7Q8BUGIexB8wHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALResyveDzId1JmEQPCrhpGBrcXN9R4xn26G niKobMedy8SKwgiEJHGyIrVsU9NI3O8f0wVwK4eRjSPWoElqdIOwd4ddZAstMqJx uTMD+U8SAy4bIofnGFh+7CjxB6vqJ19OykMzL9NjaUIkHelqq+j9Bq+qcH+3uZVn nfrnmbB7wtIOiZl+u3u6qPs9tGDiusmqLeti2HeiZua2IeQcDg2hxeyp1vqwNghW wWIt5nyfYhgAn8Syju4Dkn3RD8BceKTha4mCvztGDWSRaqyAxosZpEph8b/KYwU5 T9C/QPpZduQiPcdkTwNQtJY0dUOiOKR1e2+ANI6g7TY8DvcieQc= -----END CERTIFICATE-----Generated at Sun Dec 7 05:15:19 2025 by rpki-client