This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: TDOPuYffE3i7w80A6w9MSPVq9NPqj7lxnvmhLgz79so= Subject key identifier: DC:2C:75:5F:DF:FC:CB:2C:4E:A7:5B:40:CF:C2:5B:EA:B7:C9:9B:16 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 6D43E4979FB50EBD51FA89912761012D5C01CA05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 0243 Signing time: Fri 05 Dec 2025 19:42:52 +0000 Manifest this update: Fri 05 Dec 2025 19:37:52 +0000 Manifest next update: Tue 09 Dec 2025 00:43:52 +0000 Files and hashes: 1: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) 2: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: YSQuMUqUvlCVBzZ9BeBHtO9vABK/yNfF3fV/0fCvyf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:43:e4:97:9f:b5:0e:bd:51:fa:89:91:27:61:01:2d:5c:01:ca:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Dec 5 19:37:52 2025 GMT Not After : Dec 9 00:43:52 2025 GMT Subject: CN=DC2C755FDFFCCB2C4EA75B40CFC25BEAB7C99B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:6a:d9:ce:97:d9:78:e9:c9:25:66:a1:df: 16:74:72:60:f5:18:5e:dc:cd:18:f6:6f:f6:71:04: 15:1a:c2:e4:43:7c:86:f4:49:47:15:3d:64:9f:55: de:69:ef:ff:9e:23:76:61:44:89:c6:d0:8c:bf:b1: 2e:18:b8:5f:2f:bf:3f:ed:bd:ea:63:4e:ed:b8:d3: 67:85:ad:a4:5b:5a:50:b7:4a:d7:f5:e3:1c:2e:5b: ea:20:f0:4c:3b:20:0c:62:90:dd:35:83:c1:52:4e: d1:aa:c7:c5:da:e3:f3:1f:81:9d:e0:7d:80:02:91: 22:4d:c0:56:0f:68:d7:b1:d5:cf:e9:5f:d2:89:92: 73:57:fc:d2:7d:95:0a:26:44:8b:43:de:5c:0c:7e: d6:80:42:4d:d9:e7:a5:f9:b6:05:36:50:91:52:00: 49:13:9e:8f:9f:c1:c9:26:b5:b7:dd:eb:d6:68:83: 70:6e:1d:90:38:53:0d:d5:15:98:5d:42:9c:af:1d: 78:14:16:76:17:72:a4:01:3f:23:f8:a9:1e:a0:46: e0:e3:00:07:cd:57:01:01:17:21:7b:d8:cb:25:a4: e2:a0:71:8e:5f:92:1f:60:8c:0f:51:34:56:6e:61: ae:f8:08:00:b6:f9:65:a0:ae:d8:52:0e:e9:8e:16: 6e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2C:75:5F:DF:FC:CB:2C:4E:A7:5B:40:CF:C2:5B:EA:B7:C9:9B:16 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2d:38:17:f6:84:db:c1:91:da:07:b4:31:15:f2:e0:1e:8c: 36:18:ee:4b:41:85:8a:38:ac:12:7e:92:49:7f:fb:09:f6:e7: 0e:48:d6:1a:17:1b:79:b2:6a:93:1c:b1:54:9f:82:a0:e3:e4: 70:58:6a:69:fd:0e:22:b8:3f:81:6e:ce:d3:3c:2f:ec:f0:1b: cc:94:9c:67:07:45:27:07:5f:ba:26:86:db:1b:4f:c8:b9:6d: be:53:ee:22:f8:0d:38:96:90:8d:6d:f3:7d:d9:ae:bf:ad:fa: 39:50:88:ab:db:72:2f:67:fa:f2:ca:57:f0:0b:0f:c6:33:5e: 7a:b7:0e:be:a8:53:2a:f9:76:6a:48:c1:85:a0:73:80:24:2a: 54:98:f5:1e:2a:a9:4e:2b:90:f7:96:05:0a:4c:5f:9d:91:8f: 20:81:fc:47:9d:f1:c1:70:bd:72:37:df:73:73:86:6a:27:60: 2b:36:99:77:28:f1:73:61:7e:b0:56:48:7f:e8:28:d3:e8:76: bc:c0:b6:39:db:09:17:c3:0a:30:d8:29:45:74:fa:22:a5:42: 45:e4:0b:b0:31:f7:7c:ca:a8:27:92:4e:b8:51:07:bd:d3:ac: b9:0c:4f:fc:bc:55:05:d6:90:b6:cd:a3:71:2e:a5:68:58:ef: b2:d8:76:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUPkl5+1Dr1R+omRJ2EBLVwBygUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTEyMDUxOTM3NTJaFw0yNTEyMDkwMDQzNTJaMDMxMTAvBgNV BAMTKERDMkM3NTVGREZGQ0NCMkM0RUE3NUI0MENGQzI1QkVBQjdDOTlCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxWrZzpfZeOnJJWah3xZ0cmD1 GF7czRj2b/ZxBBUawuRDfIb0SUcVPWSfVd5p7/+eI3ZhRInG0Iy/sS4YuF8vvz/t vepjTu2402eFraRbWlC3Stf14xwuW+og8Ew7IAxikN01g8FSTtGqx8Xa4/MfgZ3g fYACkSJNwFYPaNex1c/pX9KJknNX/NJ9lQomRItD3lwMftaAQk3Z56X5tgU2UJFS AEkTno+fwckmtbfd69Zog3BuHZA4Uw3VFZhdQpyvHXgUFnYXcqQBPyP4qR6gRuDj AAfNVwEBFyF72MslpOKgcY5fkh9gjA9RNFZuYa74CAC2+WWgrthSDumOFm4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Cx1X9/8yyxOp1tAz8Jb6rfJmxYwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUtOBf2hNvBkdoHtDEV8uAejDYY7ktBhYo4 rBJ+kkl/+wn25w5I1hoXG3myapMcsVSfgqDj5HBYamn9DiK4P4FuztM8L+zwG8yU nGcHRScHX7omhtsbT8i5bb5T7iL4DTiWkI1t833Zrr+t+jlQiKvbci9n+vLKV/AL D8YzXnq3Dr6oUyr5dmpIwYWgc4AkKlSY9R4qqU4rkPeWBQpMX52RjyCB/Eed8cFw vXI333NzhmonYCs2mXco8XNhfrBWSH/oKNPodrzAtjnbCRfDCjDYKUV0+iKlQkXk C7Ax93zKqCeSTrhRB73TrLkMT/y8VQXWkLbNo3EupWhY77LYdg8= -----END CERTIFICATE-----Generated at Sun Dec 7 07:24:04 2025 by rpki-client