This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json) Hash identifier: ioV58rj0udLF2MDTB3iq7diUL+Mov0WaYHnNgE0tqqs= Subject key identifier: B7:16:7E:3B:B8:9F:8C:C6:38:73:D7:27:A5:02:BC:BB:61:BD:F3:A1 Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Certificate serial: 70EF042D072E496A0CD4BD17E64DFD3CC66F4FEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft Manifest number: 020A Signing time: Sat 06 Dec 2025 22:01:25 +0000 Manifest this update: Sat 06 Dec 2025 21:56:25 +0000 Manifest next update: Wed 10 Dec 2025 09:14:25 +0000 Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: nwERk99Xea/m2JAMpD8M1tyOPgOks9QW+tYoWkAwjCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ef:04:2d:07:2e:49:6a:0c:d4:bd:17:e6:4d:fd:3c:c6:6f:4f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Validity Not Before: Dec 6 21:56:25 2025 GMT Not After : Dec 10 09:14:25 2025 GMT Subject: CN=B7167E3BB89F8CC63873D727A502BCBB61BDF3A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:c9:be:d3:44:b6:b8:76:98:57:33:84:8c: d6:cf:41:d1:a6:0e:3f:cc:e0:24:89:0e:db:5e:43: bd:5f:a6:71:37:ed:0b:16:ff:26:00:b7:4a:f0:77: 7d:c1:e9:b5:7e:b4:a7:f3:91:d9:d7:8b:51:36:5a: fc:06:bd:b6:99:4e:d9:8b:1f:8f:51:38:67:b1:00: f9:5e:78:fe:8e:84:b6:5e:d7:67:3a:c3:8b:09:7f: bf:51:68:cf:39:4f:ee:e1:95:94:97:7c:94:00:b9: 56:bd:af:93:39:ad:3f:46:c3:7f:9f:aa:0e:c2:eb: 85:43:1a:f6:e0:4d:66:16:55:38:9c:69:01:44:c7: c3:8f:4f:4f:eb:e0:4b:82:2f:36:95:31:21:12:cb: 5c:15:75:d4:21:bf:95:da:93:6b:2a:5d:12:9a:3c: b8:08:49:1a:29:a7:d5:66:4a:26:9f:75:1e:dd:27: 02:5b:99:04:1a:be:01:f6:c9:75:f3:ed:ae:ef:04: ec:6f:f5:9a:cf:b6:36:4a:76:8d:05:1c:84:a7:c2: fe:44:f7:55:6e:0d:6d:fa:fa:ae:04:73:35:df:0f: e4:95:7f:6d:0c:f0:8f:7b:62:26:1f:1b:ae:e7:2c: 9a:0f:e6:8b:2b:a1:ed:6e:d6:98:cf:6f:aa:ec:a4: d3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:16:7E:3B:B8:9F:8C:C6:38:73:D7:27:A5:02:BC:BB:61:BD:F3:A1 X509v3 Authority Key Identifier: keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ba:f2:75:e4:e6:34:e3:ac:32:e5:90:4d:c3:59:09:fa:1a: 4e:e0:b2:c9:32:ba:d6:a8:09:9b:d4:ba:21:e0:31:5f:bb:c3: 9f:ef:0e:c8:9e:8f:b7:e0:70:18:13:bc:d9:59:96:87:37:f6: dd:a1:bb:6d:6d:82:74:81:52:15:0e:fd:9c:de:3a:ed:5a:1b: fc:c3:ef:84:8c:7e:c3:67:74:19:af:2c:53:ed:d5:89:3e:e2: 2c:93:40:d8:37:ba:e0:c6:3e:b4:45:a7:f5:c1:7b:6a:ad:b8: df:27:38:75:09:97:fc:0c:fb:74:8e:cb:6b:92:a3:ab:a9:38: ba:37:4c:b1:60:96:12:d2:c6:59:fb:b1:0b:0b:5e:e2:11:e5: 18:b2:b5:70:ed:d8:74:cf:30:1a:5a:e3:27:00:0e:b6:28:36: e1:82:9b:f7:92:61:03:a8:dd:cd:9c:74:1a:c4:a7:7f:b0:2c: d7:a8:c6:c2:b7:ec:9f:d3:d9:be:36:5d:f3:ba:bc:de:1d:f5: ae:68:0c:b0:53:1c:69:5c:2b:7c:90:d3:13:14:e1:b7:ec:ec: 73:80:95:75:c2:6c:39:cb:3e:cc:a0:6f:57:59:31:78:41:bf: 55:26:9e:e6:1b:cc:07:01:c9:17:6a:36:b6:d3:b5:86:04:8d: c3:99:56:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcO8ELQcuSWoM1L0X5k39PMZvT+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3 OTdDNDE2NTAeFw0yNTEyMDYyMTU2MjVaFw0yNTEyMTAwOTE0MjVaMDMxMTAvBgNV BAMTKEI3MTY3RTNCQjg5RjhDQzYzODczRDcyN0E1MDJCQ0JCNjFCREYzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEsm+00S2uHaYVzOEjNbPQdGm Dj/M4CSJDtteQ71fpnE37QsW/yYAt0rwd33B6bV+tKfzkdnXi1E2WvwGvbaZTtmL H49ROGexAPleeP6OhLZe12c6w4sJf79RaM85T+7hlZSXfJQAuVa9r5M5rT9Gw3+f qg7C64VDGvbgTWYWVTicaQFEx8OPT0/r4EuCLzaVMSESy1wVddQhv5Xak2sqXRKa PLgISRopp9VmSiafdR7dJwJbmQQavgH2yXXz7a7vBOxv9ZrPtjZKdo0FHISnwv5E 91VuDW36+q4EczXfD+SVf20M8I97YiYfG67nLJoP5osroe1u1pjPb6rspNNLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtxZ+O7ifjMY4c9cnpQK8u2G986EwHwYDVR0j BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4 OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADq68nXk5jTjrDLlkE3DWQn6Gk7gsskyutao CZvUuiHgMV+7w5/vDsiej7fgcBgTvNlZloc39t2hu21tgnSBUhUO/ZzeOu1aG/zD 74SMfsNndBmvLFPt1Yk+4iyTQNg3uuDGPrRFp/XBe2qtuN8nOHUJl/wM+3SOy2uS o6upOLo3TLFglhLSxln7sQsLXuIR5RiytXDt2HTPMBpa4ycADrYoNuGCm/eSYQOo 3c2cdBrEp3+wLNeoxsK37J/T2b42XfO6vN4d9a5oDLBTHGlcK3yQ0xMU4bfs7HOA lXXCbDnLPsygb1dZMXhBv1UmnuYbzAcByRdqNrbTtYYEjcOZVmI= -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:16 2025 by rpki-client