This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: 4OY+ZHMpKPNdHwOktgaIIQOX53yyi9D8wzZyFW4BeJI= Subject key identifier: B9:C3:B6:82:92:98:6E:6A:13:8B:F2:8D:AA:B8:63:E5:2D:3E:3E:3D Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 55C99DDAAA128B4C34C9CD686CF8B9053B25CE20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 022F Signing time: Sat 06 Dec 2025 15:51:10 +0000 Manifest this update: Sat 06 Dec 2025 15:46:10 +0000 Manifest next update: Tue 09 Dec 2025 23:00:10 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: jJ+/Tw5gHBvMd+YWjNSfc1u19FGo6kY37f6I6QmewQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c9:9d:da:aa:12:8b:4c:34:c9:cd:68:6c:f8:b9:05:3b:25:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Dec 6 15:46:10 2025 GMT Not After : Dec 9 23:00:10 2025 GMT Subject: CN=B9C3B68292986E6A138BF28DAAB863E52D3E3E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:3d:ae:77:0d:d4:cf:9c:e9:ac:d1:f4:52: 9e:a6:48:06:48:60:37:0e:7a:aa:fd:4d:b7:f3:ec: bd:46:49:6e:8a:f9:a9:c4:b6:01:48:43:19:40:05: 0d:9f:e8:56:0a:12:e1:5b:85:06:08:e5:7e:ce:10: 16:98:1e:c3:2d:32:12:14:04:02:43:39:f4:85:56: 81:81:5c:9e:46:61:cd:2d:81:88:86:1e:d4:b6:57: 3b:1c:4b:8b:61:91:38:7c:95:10:51:3e:bb:2c:0e: f6:34:d1:2b:ee:0a:08:ae:ab:2f:80:50:c8:b7:94: 8b:3c:f5:df:ff:76:58:e8:a3:89:68:8a:d2:2f:05: 6e:04:eb:73:09:5d:ac:50:c0:29:0c:ea:4f:2c:8a: ba:d6:14:f4:cc:de:e5:3c:1e:bb:bd:bb:6a:7c:9c: bd:4a:e5:b3:60:36:f3:72:cc:da:7c:e8:68:44:a4: c5:d7:2b:73:57:d1:d1:f3:4a:fd:f0:66:ff:e6:e5: f3:76:80:b3:20:c9:2b:78:4d:39:42:0c:d5:39:74: 83:2c:a9:9e:5e:4c:01:4f:36:4e:88:36:f0:2a:59: 66:d6:26:1a:ef:20:d4:2b:35:a1:f7:44:bf:69:5f: f4:df:11:dc:7d:c4:68:30:f8:94:bb:57:03:9e:a9: 1d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C3:B6:82:92:98:6E:6A:13:8B:F2:8D:AA:B8:63:E5:2D:3E:3E:3D X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0f:18:82:dd:8c:b7:11:42:ec:43:11:2d:63:59:a7:8f:20: 00:ab:c9:43:99:59:26:85:74:5e:20:3a:12:ef:90:67:b3:7b: d0:74:34:63:ff:0c:f6:64:93:db:f1:48:fb:48:04:e0:05:08: 18:91:d1:46:7a:5c:13:62:85:3f:88:52:c4:05:4b:d8:8a:6a: f8:eb:4f:07:bf:b7:58:25:f5:5d:65:99:b1:9a:e8:14:2a:31: 50:73:63:74:df:ee:65:cb:9a:ac:22:78:38:d5:7e:d8:be:75: 4b:ce:fe:c8:3c:70:76:a4:c8:84:10:aa:1e:66:fc:7a:10:50: bf:42:c7:c1:40:4d:10:36:a3:44:94:14:37:fb:59:6c:4c:f4: bf:12:b8:83:be:07:07:f5:3d:eb:ff:2b:ab:a4:5d:f0:28:c0: d0:a8:d2:a2:a4:1d:fa:f5:6c:e2:ca:6d:71:9c:9a:5a:ea:1b: 45:0f:f0:0f:25:70:ec:be:17:f3:83:8a:a6:78:bd:2e:ae:03: a1:1c:f9:89:c7:9c:1c:7a:f3:0b:35:eb:6a:e4:3c:a0:ae:56: dc:f1:59:ff:81:bd:d7:ad:6e:09:08:2f:e7:29:3f:b1:9a:3f: 7b:62:0b:fb:11:ad:c5:10:94:d0:74:47:c7:d2:a0:cf:1f:7e: db:d7:2c:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVcmd2qoSi0w0yc1obPi5BTslziAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNTEyMDYxNTQ2MTBaFw0yNTEyMDkyMzAwMTBaMDMxMTAvBgNV BAMTKEI5QzNCNjgyOTI5ODZFNkExMzhCRjI4REFBQjg2M0U1MkQzRTNFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWj2udw3Uz5zprNH0Up6mSAZI YDcOeqr9Tbfz7L1GSW6K+anEtgFIQxlABQ2f6FYKEuFbhQYI5X7OEBaYHsMtMhIU BAJDOfSFVoGBXJ5GYc0tgYiGHtS2VzscS4thkTh8lRBRPrssDvY00SvuCgiuqy+A UMi3lIs89d//dljoo4loitIvBW4E63MJXaxQwCkM6k8sirrWFPTM3uU8Hru9u2p8 nL1K5bNgNvNyzNp86GhEpMXXK3NX0dHzSv3wZv/m5fN2gLMgySt4TTlCDNU5dIMs qZ5eTAFPNk6INvAqWWbWJhrvINQrNaH3RL9pX/TfEdx9xGgw+JS7VwOeqR0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUucO2gpKYbmoTi/KNqrhj5S0+Pj0wHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYPGILdjLcRQuxDES1jWaePIACryUOZWSaF dF4gOhLvkGeze9B0NGP/DPZkk9vxSPtIBOAFCBiR0UZ6XBNihT+IUsQFS9iKavjr Twe/t1gl9V1lmbGa6BQqMVBzY3Tf7mXLmqwieDjVfti+dUvO/sg8cHakyIQQqh5m /HoQUL9Cx8FATRA2o0SUFDf7WWxM9L8SuIO+Bwf1Pev/K6ukXfAowNCo0qKkHfr1 bOLKbXGcmlrqG0UP8A8lcOy+F/ODiqZ4vS6uA6Ec+YnHnBx68ws162rkPKCuVtzx Wf+BvdetbgkIL+cpP7GaP3tiC/sRrcUQlNB0R8fSoM8fftvXLDc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:50 2025 by rpki-client