This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json) Hash identifier: J+ypQALNrxWpt+bcoFMZ5uV9VyS1CZGZPo9bis4C+GI= Subject key identifier: D1:3F:EB:33:5F:20:A8:11:E2:A6:40:DF:4F:DD:86:7A:AA:B6:11:B1 Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Certificate serial: 35AA0554F6D8AB8A34EB7AE862408CA1DE733B20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft Manifest number: 01CB Signing time: Fri 05 Dec 2025 17:40:58 +0000 Manifest this update: Fri 05 Dec 2025 17:35:58 +0000 Manifest next update: Tue 09 Dec 2025 00:01:58 +0000 Files and hashes: 1: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: mdX1MImpwtTzIIZ3XoIfzWcwbmibtZiSaG1J68to2tw=) 2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: qiaxwvksmM66atpVD6z5NciBUAyVEKleM/kHb9VhlSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:aa:05:54:f6:d8:ab:8a:34:eb:7a:e8:62:40:8c:a1:de:73:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Validity Not Before: Dec 5 17:35:58 2025 GMT Not After : Dec 9 00:01:58 2025 GMT Subject: CN=D13FEB335F20A811E2A640DF4FDD867AAAB611B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:ad:a0:be:7e:54:ff:0e:9f:fe:58:65:76: d5:00:88:35:1d:68:7a:d8:39:7e:19:b0:dc:6d:14: 33:24:24:1c:b4:8b:49:7e:fd:21:46:25:12:d6:f5: 7e:60:20:17:67:87:0e:da:ea:c5:95:83:4a:8f:7d: 30:a6:f6:e6:94:7d:5b:24:cf:1d:73:a6:d1:f1:30: 26:6b:28:c5:6f:0d:6b:98:6c:e7:52:b4:89:0d:00: a4:1c:4e:da:e5:14:1b:39:f6:75:21:a9:48:92:2d: 0f:fd:d1:c7:96:c8:4e:45:df:10:5c:36:35:f0:b6: ae:76:d4:21:35:d1:49:35:b7:cd:dc:51:d9:a2:e9: ab:f2:65:f7:80:f9:6c:15:a9:71:d1:28:eb:a3:59: cf:1b:af:52:0c:aa:c4:ec:58:76:a5:4e:f0:0f:49: 25:30:96:32:d4:cc:47:8c:d3:41:4e:82:07:dc:73: 39:5f:75:0d:b3:9e:95:91:e2:f0:d7:52:14:d1:3c: 57:96:19:cf:ef:e0:5f:92:39:d7:64:53:17:ba:ad: 1c:c3:db:a9:44:dc:08:55:ef:17:f0:a4:37:85:c8: c0:e9:9c:2b:a8:e7:8e:2b:0b:55:81:f8:4c:2c:3b: c9:92:60:ba:70:77:84:8c:07:7a:a2:71:80:bd:4d: d5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3F:EB:33:5F:20:A8:11:E2:A6:40:DF:4F:DD:86:7A:AA:B6:11:B1 X509v3 Authority Key Identifier: keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cd:31:67:c4:64:d0:9b:dc:aa:a3:a0:4c:30:09:d9:cc:79: 30:82:ce:c4:a0:3e:08:ca:8f:7e:df:09:68:59:ce:95:e2:1f: 93:e3:3a:9d:d2:40:5c:95:eb:ef:de:ac:54:53:fa:6f:09:3e: eb:21:e5:3a:0e:5e:d6:92:90:ec:4f:c6:90:9a:1b:d4:a5:ed: 7e:54:a5:70:97:eb:3a:08:50:5f:5e:9d:e0:18:1a:77:62:95: 7a:7f:5c:ef:64:30:50:97:bb:cf:b6:d8:4f:3d:78:37:47:b5: 5f:87:06:80:1e:37:d3:8b:4e:aa:64:e4:92:4b:90:9c:a5:65: 2b:3b:3d:dc:1f:b2:c4:88:56:5f:07:21:b4:c4:6c:0f:34:5c: 14:99:da:fa:98:e7:5b:63:cd:c1:e2:a8:b0:85:a5:51:8e:94: bd:f9:20:17:2e:9f:19:36:23:80:06:5c:17:8b:42:80:09:a8: 15:8e:31:f8:d7:80:a7:d2:8d:ee:39:a0:34:14:5e:8b:57:ba: 63:5a:71:25:52:78:ba:37:52:36:f3:59:e2:d7:ca:5e:8e:ae: 2b:fa:2f:6f:4c:91:29:85:b1:1c:43:69:ed:92:27:5f:ed:80: e9:9b:40:21:33:1f:2f:96:37:30:b4:a3:4c:6b:b2:4b:f7:20: 8a:52:1e:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNaoFVPbYq4o063roYkCMod5zOyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4 MTk2MTUyRDAeFw0yNTEyMDUxNzM1NThaFw0yNTEyMDkwMDAxNThaMDMxMTAvBgNV BAMTKEQxM0ZFQjMzNUYyMEE4MTFFMkE2NDBERjRGREQ4NjdBQUFCNjExQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiyK2gvn5U/w6f/lhldtUAiDUd aHrYOX4ZsNxtFDMkJBy0i0l+/SFGJRLW9X5gIBdnhw7a6sWVg0qPfTCm9uaUfVsk zx1zptHxMCZrKMVvDWuYbOdStIkNAKQcTtrlFBs59nUhqUiSLQ/90ceWyE5F3xBc NjXwtq521CE10Uk1t83cUdmi6avyZfeA+WwVqXHRKOujWc8br1IMqsTsWHalTvAP SSUwljLUzEeM00FOggfcczlfdQ2znpWR4vDXUhTRPFeWGc/v4F+SOddkUxe6rRzD 26lE3AhV7xfwpDeFyMDpnCuo544rC1WB+EwsO8mSYLpwd4SMB3qicYC9TdVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0T/rM18gqBHipkDfT92Geqq2EbEwHwYDVR0j BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4 Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2 MTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2 M0M4MTk2MTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7NMWfEZNCb3KqjoEwwCdnMeTCCzsSgPgjK j37fCWhZzpXiH5PjOp3SQFyV6+/erFRT+m8JPush5ToOXtaSkOxPxpCaG9Sl7X5U pXCX6zoIUF9eneAYGndilXp/XO9kMFCXu8+22E89eDdHtV+HBoAeN9OLTqpk5JJL kJylZSs7PdwfssSIVl8HIbTEbA80XBSZ2vqY51tjzcHiqLCFpVGOlL35IBcunxk2 I4AGXBeLQoAJqBWOMfjXgKfSje45oDQUXotXumNacSVSeLo3UjbzWeLXyl6Oriv6 L29MkSmFsRxDae2SJ1/tgOmbQCEzHy+WNzC0o0xrskv3IIpSHiw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:10 2025 by rpki-client