This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json) Hash identifier: qal9MSlcFSyS8nFTp3zFtI7yQXfUgCASyK8S+hBAiS0= Subject key identifier: 12:F5:20:01:EB:23:68:67:88:7F:9F:5B:3A:2B:31:EC:D5:63:59:D8 Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Certificate serial: 4BE82695DB197A87E3A06E869563E203D4B87EEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft Manifest number: 01BD Signing time: Fri 05 Dec 2025 20:20:46 +0000 Manifest this update: Fri 05 Dec 2025 20:15:45 +0000 Manifest next update: Tue 09 Dec 2025 03:20:45 +0000 Files and hashes: 1: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: H8auSRebds2J33fqyI35g62j14OOISp/2tVGTFdwJS4=) 2: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: G2lV5U9+p39d6xSgHB2TJ310g1uTGGU7EbB7g2ly4zQ=) 3: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: y3JEoAzXm85iAZbdeyBRtgaEYRsohXOZAIq9VTQKw9c=) 4: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ydDiCNEc8GtyBNnN5/EnWTfulbTrIFBSv+6Rl5EThhQ=) 5: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: UPFhiEMBDems0zWz2OGvP6Plw6xXO45CzyYtHtmgZjU=) 6: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: nVKz/Z4lzOOXkiUaEAcb0AwZb+JTb9lrVFfeSZMfmCY=) 7: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: Pd8St+ikqWO1fGrUN5HXXiSM76VpvJPSZDK4vFya57U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e8:26:95:db:19:7a:87:e3:a0:6e:86:95:63:e2:03:d4:b8:7e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Validity Not Before: Dec 5 20:15:45 2025 GMT Not After : Dec 9 03:20:45 2025 GMT Subject: CN=12F52001EB236867887F9F5B3A2B31ECD56359D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:7b:83:5d:3f:26:ad:b4:96:67:46:4e:96: 52:aa:ab:25:b1:a1:ba:06:b0:7f:c6:4f:f3:67:3c: 06:54:4e:28:13:ba:29:ca:18:68:21:d6:22:87:17: 86:ce:fe:8d:00:79:80:dd:bf:f6:71:7a:99:74:ba: aa:e1:91:76:57:f7:fc:fe:1b:b8:d0:20:a3:4c:09: f1:6d:15:05:9f:e0:c5:42:7f:d6:dd:84:9e:d5:64: 81:df:eb:62:07:50:da:2f:b2:04:72:89:31:f0:54: 54:23:91:d6:5b:07:09:78:57:e8:a3:b7:a2:a8:01: f4:d9:6e:f6:38:d3:6b:0e:14:52:ae:ea:f5:bc:3b: 3c:09:db:f7:9b:84:db:7d:74:11:69:32:63:49:57: c4:21:a1:20:8d:9f:15:62:af:cf:ff:2a:be:a5:15: 64:8c:e4:73:6e:89:29:9c:d7:bf:f9:da:fe:4a:da: 04:89:bc:41:70:3a:6e:4a:20:a8:88:57:6b:f7:5e: dc:e8:cc:94:39:0d:d2:71:6f:9d:eb:72:dd:e7:62: b0:5b:77:d5:1c:47:00:59:dc:0d:34:72:e9:09:4e: b6:d2:d8:c1:e5:57:25:f0:af:88:9a:b8:c0:74:2a: 76:03:7e:95:39:d0:f3:5c:27:c8:6b:f9:35:6a:47: b5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F5:20:01:EB:23:68:67:88:7F:9F:5B:3A:2B:31:EC:D5:63:59:D8 X509v3 Authority Key Identifier: keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:d7:77:09:a3:99:6a:7d:d1:14:59:c4:34:e0:39:4c:18:c5: 90:7c:65:00:c5:fc:51:41:2e:40:bd:e8:af:1a:5f:5f:1e:f2: 2d:6b:10:72:c6:5c:a2:a1:6e:d9:27:10:e7:b9:52:9c:09:ce: 22:e9:67:81:5d:e0:4f:16:f9:b6:81:ab:b3:86:92:58:a3:80: 60:9f:2c:91:c4:d8:98:40:51:ff:a7:42:04:8c:94:42:50:c5: a6:64:4b:c2:81:02:17:3c:49:a3:a7:6f:0d:4d:9b:7c:a9:cc: fb:c3:6f:cd:1a:9d:b6:7b:50:f4:67:5b:c9:8d:19:15:90:44: c5:50:aa:3c:8e:a4:28:5f:98:f2:6e:39:09:3b:ef:60:04:0e: 1a:31:27:f7:42:b5:74:38:27:8d:96:b5:f8:f7:37:02:79:53: c3:89:32:48:0f:fe:b1:8e:18:06:7e:f6:5e:bd:f4:a2:4f:51: c3:5e:f6:bf:13:a5:f7:a8:c8:6e:82:99:0a:87:b0:a5:65:1a: 6a:8f:87:62:06:d7:07:0a:8f:af:68:3f:18:ba:e9:60:b3:5f: c3:23:28:71:8d:66:84:67:2b:46:2a:25:3e:c6:bd:65:6e:76: 35:69:61:86:cf:68:39:82:be:44:31:b8:03:15:62:2f:d5:5e: 41:40:08:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+gmldsZeofjoG6GlWPiA9S4fuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFG MjEyM0U2RjAeFw0yNTEyMDUyMDE1NDVaFw0yNTEyMDkwMzIwNDVaMDMxMTAvBgNV BAMTKDEyRjUyMDAxRUIyMzY4Njc4ODdGOUY1QjNBMkIzMUVDRDU2MzU5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUXuDXT8mrbSWZ0ZOllKqqyWx oboGsH/GT/NnPAZUTigTuinKGGgh1iKHF4bO/o0AeYDdv/Zxepl0uqrhkXZX9/z+ G7jQIKNMCfFtFQWf4MVCf9bdhJ7VZIHf62IHUNovsgRyiTHwVFQjkdZbBwl4V+ij t6KoAfTZbvY402sOFFKu6vW8OzwJ2/ebhNt9dBFpMmNJV8QhoSCNnxVir8//Kr6l FWSM5HNuiSmc17/52v5K2gSJvEFwOm5KIKiIV2v3XtzozJQ5DdJxb53rct3nYrBb d9UcRwBZ3A00cukJTrbS2MHlVyXwr4iauMB0KnYDfpU50PNcJ8hr+TVqR7WvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEvUgAesjaGeIf59bOisx7NVjWdgwHwYDVR0j BBgwFoAUpKxJxPVb9dSvPUIQSopewfISPm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzI4MDQwMC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9BNEFDNDlDNEY1 NUJGNUQ0QUYzRDQyMTA0QThBNUVDMUYyMTIzRTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFGMjEy M0U2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVF QzFGMjEyM0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMbXdwmjmWp90RRZxDTgOUwYxZB8ZQDF/FFB LkC96K8aX18e8i1rEHLGXKKhbtknEOe5UpwJziLpZ4Fd4E8W+baBq7OGklijgGCf LJHE2JhAUf+nQgSMlEJQxaZkS8KBAhc8SaOnbw1Nm3ypzPvDb80anbZ7UPRnW8mN GRWQRMVQqjyOpChfmPJuOQk772AEDhoxJ/dCtXQ4J42Wtfj3NwJ5U8OJMkgP/rGO GAZ+9l699KJPUcNe9r8TpfeoyG6CmQqHsKVlGmqPh2IG1wcKj69oPxi66WCzX8Mj KHGNZoRnK0YqJT7GvWVudjVpYYbPaDmCvkQxuAMVYi/VXkFACOY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:06 2025 by rpki-client