This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: UyZAHpgFNw7hAXCg9aOj8hyxse+6K1wCegWtx8+pc8o= Subject key identifier: 85:4B:2B:5A:12:1C:4E:DB:30:A6:8A:CF:3C:7B:EB:69:B7:40:74:75 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 65D8D3E5E7331159DCEA5DA76B7CB1D1AB228425 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 0212 Signing time: Fri 19 Dec 2025 18:01:10 +0000 Manifest this update: Fri 19 Dec 2025 17:56:10 +0000 Manifest next update: Mon 22 Dec 2025 21:51:10 +0000 Files and hashes: 1: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) 2: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 3: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 4: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: 5rUmspUf0LyVPMjhN2kQD32glYt4Me0i1liRvHdjQhA=) 5: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) 6: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) 7: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) 8: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 9: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) 10: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 21:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d8:d3:e5:e7:33:11:59:dc:ea:5d:a7:6b:7c:b1:d1:ab:22:84:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Dec 19 17:56:10 2025 GMT Not After : Dec 22 21:51:10 2025 GMT Subject: CN=854B2B5A121C4EDB30A68ACF3C7BEB69B7407475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:b2:2b:34:ff:3e:26:62:28:72:c8:42:49: 1d:dd:36:9b:ed:0e:15:9b:e9:3f:b8:50:c7:4f:87: af:19:b9:dc:93:54:49:a3:f7:67:73:21:bf:16:a8: a6:8a:b3:50:60:9e:b5:8d:c2:bf:c5:e0:f6:00:75: 62:e1:63:39:82:23:37:26:ee:c4:de:9c:0b:1b:3b: 9c:82:ae:15:98:e0:e1:ca:e6:b9:07:b2:f1:cc:46: f9:11:38:69:bd:e7:2b:41:10:8f:46:87:52:cb:9d: 1c:7a:89:d7:15:22:db:1b:c3:15:43:3a:5b:1d:3e: 50:c7:b1:dc:4d:69:f5:e3:c2:a8:2a:e2:3d:30:ef: 54:c1:b0:10:14:43:78:21:20:38:e9:1b:62:d1:0d: cf:eb:bc:d8:2d:1f:f6:ec:29:b4:18:67:ca:42:fa: 7d:89:4b:e5:63:fe:31:06:c0:4c:7b:63:af:9c:e4: df:90:1a:f0:be:22:7b:f6:43:63:74:7c:44:8a:d8: aa:b7:b1:af:a3:ba:19:d3:de:5e:0a:81:cb:cb:fb: 6d:2f:3b:3c:03:f3:1c:e3:e6:a1:28:6a:c6:05:a9: 06:73:be:fc:2e:31:a5:44:08:c1:d0:f2:38:bc:de: 56:47:60:ce:b2:8f:34:88:c9:d3:5f:23:4a:7e:0d: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4B:2B:5A:12:1C:4E:DB:30:A6:8A:CF:3C:7B:EB:69:B7:40:74:75 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e8:47:7b:20:ce:eb:e4:a8:f3:1a:e4:ad:c7:d6:ae:c8:64: f3:96:19:53:33:ad:34:91:53:22:58:50:e3:d6:5c:7a:5b:65: 7d:0e:13:2d:c9:a6:4a:27:fe:5e:16:a7:59:5c:b3:60:42:26: d1:8f:40:d6:27:0f:88:0d:82:8c:5d:58:6f:d8:73:34:f8:27: 34:a3:00:2d:59:23:14:a2:eb:3f:1a:ae:01:66:16:8b:9b:a3: 21:7d:92:99:d8:c3:01:26:1a:ee:b0:9d:90:e3:7f:43:75:1b: 3f:8d:01:f3:c1:89:f1:fc:e5:06:c0:54:0d:30:d7:39:27:30: dd:d6:48:13:aa:92:5b:20:4c:02:34:09:bf:8d:9e:69:8d:1c: 5f:8f:9b:e5:1a:68:3c:03:d8:78:38:14:d3:89:a8:08:65:1d: 88:62:de:b0:de:b5:fc:2a:cc:98:f9:04:d5:95:87:9b:71:94: ce:b6:5e:0e:37:6e:fd:3e:13:d3:2f:29:43:a8:01:71:65:0c: 6a:c6:11:0e:b9:e8:b5:7f:c9:7d:61:f9:dc:a7:ff:10:cc:ec: c1:2b:87:16:38:aa:6e:45:b5:03:92:38:48:e5:55:3e:2e:ff: 12:87:39:06:ee:7f:b6:dc:20:49:bd:b5:0e:a0:fd:34:8d:4a: 8a:34:11:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdjT5eczEVnc6l2na3yx0asihCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTEyMTkxNzU2MTBaFw0yNTEyMjIyMTUxMTBaMDMxMTAvBgNV BAMTKDg1NEIyQjVBMTIxQzRFREIzMEE2OEFDRjNDN0JFQjY5Qjc0MDc0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rLIrNP8+JmIocshCSR3dNpvt DhWb6T+4UMdPh68ZudyTVEmj92dzIb8WqKaKs1BgnrWNwr/F4PYAdWLhYzmCIzcm 7sTenAsbO5yCrhWY4OHK5rkHsvHMRvkROGm95ytBEI9Gh1LLnRx6idcVItsbwxVD OlsdPlDHsdxNafXjwqgq4j0w71TBsBAUQ3ghIDjpG2LRDc/rvNgtH/bsKbQYZ8pC +n2JS+Vj/jEGwEx7Y6+c5N+QGvC+Inv2Q2N0fESK2Kq3sa+juhnT3l4KgcvL+20v OzwD8xzj5qEoasYFqQZzvvwuMaVECMHQ8ji83lZHYM6yjzSIydNfI0p+DZc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhUsrWhIcTtswporPPHvrabdAdHUwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInoR3sgzuvkqPMa5K3H1q7IZPOWGVMzrTSR UyJYUOPWXHpbZX0OEy3Jpkon/l4Wp1lcs2BCJtGPQNYnD4gNgoxdWG/YczT4JzSj AC1ZIxSi6z8argFmFouboyF9kpnYwwEmGu6wnZDjf0N1Gz+NAfPBifH85QbAVA0w 1zknMN3WSBOqklsgTAI0Cb+NnmmNHF+Pm+UaaDwD2Hg4FNOJqAhlHYhi3rDetfwq zJj5BNWVh5txlM62Xg43bv0+E9MvKUOoAXFlDGrGEQ656LV/yX1h+dyn/xDM7MEr hxY4qm5FtQOSOEjlVT4u/xKHOQbuf7bcIEm9tQ6g/TSNSoo0ES0= -----END CERTIFICATE-----Generated at Sat Dec 20 20:54:06 2025 by rpki-client