This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: rVBjaHqf+9GZ/Q0NxnhyrbMO5LbT8NvusF0r8e4cPHE= Subject key identifier: FB:4D:39:51:DF:DE:4A:07:DE:DD:DC:C9:A3:EB:29:51:E7:63:28:2C Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 1C9A4398420DCE1C73F85329B5415FBA1001B02B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 020C Signing time: Sat 06 Dec 2025 10:21:04 +0000 Manifest this update: Sat 06 Dec 2025 10:16:04 +0000 Manifest next update: Tue 09 Dec 2025 20:01:04 +0000 Files and hashes: 1: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) 2: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) 3: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 4: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) 5: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: iOiay0AV4SWhsJikwH/Bgw5OXPKAETR+vPXYUDKFEuc=) 6: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) 7: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 8: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 9: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) 10: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9a:43:98:42:0d:ce:1c:73:f8:53:29:b5:41:5f:ba:10:01:b0:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Dec 6 10:16:04 2025 GMT Not After : Dec 9 20:01:04 2025 GMT Subject: CN=FB4D3951DFDE4A07DEDDDCC9A3EB2951E763282C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6a:24:33:b3:e9:5b:40:08:8e:cd:34:cf:44: 7e:80:80:ec:73:36:a1:d2:76:50:9a:10:c3:9c:a5: 3d:ab:1b:ac:91:62:ce:06:07:1e:2e:25:00:c9:33: 45:18:b8:37:eb:c5:17:cb:07:b0:2c:fc:6a:fa:b2: 0c:7b:3a:4e:a0:82:2f:f5:49:d3:f3:11:26:d4:7c: 32:de:4c:03:f7:a0:4f:0e:54:8a:58:3b:4b:8a:38: 6e:c2:58:69:71:0c:ad:be:fc:18:3b:35:3d:eb:3c: 24:5c:c7:ff:7d:4b:7d:1b:f8:99:cd:66:98:bb:89: a3:85:6d:28:a3:a9:fb:ea:af:2b:85:6a:16:28:44: 3b:17:00:4b:08:a1:1e:d1:8b:54:27:f3:f6:aa:53: f9:40:ad:1b:35:d4:75:3a:17:18:e4:58:81:91:27: aa:64:6d:35:56:3c:21:45:7b:f4:b1:b0:99:45:50: 3c:1b:5d:c3:46:8a:ae:53:c6:0f:d8:e8:37:e5:32: c1:35:63:93:56:4f:12:ec:da:18:56:c8:6b:3f:de: 83:7a:a0:8b:c3:02:86:ef:55:70:28:cc:5f:ec:9d: 56:01:46:73:14:c2:c1:05:24:2d:6e:ab:67:9f:ac: 37:79:42:d7:8d:ac:99:4b:37:f6:00:d7:c1:8e:a2: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4D:39:51:DF:DE:4A:07:DE:DD:DC:C9:A3:EB:29:51:E7:63:28:2C X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e9:8b:0d:88:98:a7:b9:23:1c:39:9b:f1:b2:f7:db:61:36: 9d:1c:ac:3d:19:9b:d9:aa:c7:65:d7:d1:4a:81:61:a2:56:49: e7:70:8a:bf:0f:8c:ac:b7:c6:14:22:e9:7d:e2:61:0f:c4:c8: 0d:ee:36:49:20:3e:ba:8d:f0:5e:64:45:01:0b:4e:2c:fa:51: 4d:51:a8:a7:87:bf:a8:f9:80:5c:c0:cd:ff:7b:09:6c:50:8a: 51:c2:2f:25:cc:c7:a8:b1:2f:83:91:dc:15:48:f0:15:8f:96: 4d:e2:ed:07:93:22:86:9e:0e:85:a5:d8:b1:b6:ec:11:7a:7a: 78:fb:61:85:38:08:c4:02:6b:ce:9a:c7:02:e7:7a:60:f6:f5: 8d:c0:95:a0:ad:12:1d:33:44:fc:07:48:67:1b:22:f2:74:22: 15:da:6c:08:56:bf:dc:1c:38:18:3e:7b:90:35:5f:bf:8a:ad: bf:dd:f9:e8:37:65:89:43:85:ce:de:19:3d:38:7b:dd:76:8d: 33:fc:91:48:4f:13:9f:0d:83:8f:34:4e:cc:df:f2:89:fe:46: 10:3a:f3:32:8d:21:87:a1:8e:85:3a:29:97:b6:af:bc:54:38: 80:bf:2e:47:3b:6c:a3:91:ae:da:57:88:3b:ee:5c:6f:23:af: 5d:30:e1:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJpDmEINzhxz+FMptUFfuhABsCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTEyMDYxMDE2MDRaFw0yNTEyMDkyMDAxMDRaMDMxMTAvBgNV BAMTKEZCNEQzOTUxREZERTRBMDdERURERENDOUEzRUIyOTUxRTc2MzI4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoaiQzs+lbQAiOzTTPRH6AgOxz NqHSdlCaEMOcpT2rG6yRYs4GBx4uJQDJM0UYuDfrxRfLB7As/Gr6sgx7Ok6ggi/1 SdPzESbUfDLeTAP3oE8OVIpYO0uKOG7CWGlxDK2+/Bg7NT3rPCRcx/99S30b+JnN Zpi7iaOFbSijqfvqryuFahYoRDsXAEsIoR7Ri1Qn8/aqU/lArRs11HU6FxjkWIGR J6pkbTVWPCFFe/SxsJlFUDwbXcNGiq5Txg/Y6DflMsE1Y5NWTxLs2hhWyGs/3oN6 oIvDAobvVXAozF/snVYBRnMUwsEFJC1uq2efrDd5QteNrJlLN/YA18GOoryxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+005Ud/eSgfe3dzJo+spUedjKCwwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjpiw2ImKe5Ixw5m/Gy99thNp0crD0Zm9mq x2XX0UqBYaJWSedwir8PjKy3xhQi6X3iYQ/EyA3uNkkgPrqN8F5kRQELTiz6UU1R qKeHv6j5gFzAzf97CWxQilHCLyXMx6ixL4OR3BVI8BWPlk3i7QeTIoaeDoWl2LG2 7BF6enj7YYU4CMQCa86axwLnemD29Y3AlaCtEh0zRPwHSGcbIvJ0IhXabAhWv9wc OBg+e5A1X7+Krb/d+eg3ZYlDhc7eGT04e912jTP8kUhPE58Ng480Tszf8on+RhA6 8zKNIYehjoU6KZe2r7xUOIC/Lkc7bKORrtpXiDvuXG8jr10w4Sg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:39 2025 by rpki-client