This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: tZIo5qA6hraGOW8vkVcgJdQz7dXIp5c6WJY2eV/w9AA= Subject key identifier: A3:46:FD:50:AA:93:CF:22:6F:C9:DE:76:F0:FE:F5:70:A6:3D:EE:F3 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 0AA806D476C09845C76F6E04954EB16AA294E904 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 0158 Signing time: Fri 05 Dec 2025 08:42:32 +0000 Manifest this update: Fri 05 Dec 2025 08:37:32 +0000 Manifest next update: Mon 08 Dec 2025 16:25:32 +0000 Files and hashes: 1: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: EjIlnJwLN6tob8lWzuv6YJeMCHTcSGWnYIQOvyIdVqQ=) 2: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: BXIKEbp3orzobWDQOxRP4yZHbZeEm5j1Qo8aYx25BZE=) 3: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: Mjl/7wUwUxCur36ld36OQc0WnTRkQG580vdP5fIafpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a8:06:d4:76:c0:98:45:c7:6f:6e:04:95:4e:b1:6a:a2:94:e9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Dec 5 08:37:32 2025 GMT Not After : Dec 8 16:25:32 2025 GMT Subject: CN=A346FD50AA93CF226FC9DE76F0FEF570A63DEEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:10:04:af:45:9f:f6:9a:07:6d:93:10:83: c1:18:45:56:4d:dd:03:aa:2e:b2:64:8e:f8:d2:91: dd:46:af:ef:2a:bf:ce:a7:bf:73:c2:77:e1:de:44: 07:24:34:a4:8b:fc:bf:08:8c:7e:13:3a:b9:3f:07: f8:23:4b:e1:27:53:c3:2b:bf:a9:10:65:9e:bc:66: 7b:8f:fb:a0:e2:09:d1:61:ff:d1:85:67:ca:d7:1e: 4d:7b:ec:9d:ba:c3:aa:4b:ba:fb:85:eb:27:8e:f9: f8:b6:87:8f:0e:a1:51:a0:55:68:b6:14:34:4f:db: 09:dd:b9:a2:30:1b:9d:39:d8:1f:fc:1d:6c:c9:d5: d9:3b:9a:b0:bc:96:8b:7e:04:b6:da:b2:59:1d:f5: d8:3e:12:eb:9b:55:f7:8e:78:3f:8f:4c:54:0a:28: 53:39:8d:3d:2d:9f:d4:cf:c8:98:97:f9:d7:bd:2f: 7e:47:d8:6d:db:16:f3:63:0c:49:94:f0:db:a7:2b: b5:0c:53:68:6c:4a:3d:bc:e7:21:fc:4f:55:9e:69: 87:75:68:68:45:ac:fa:a1:81:ce:fb:9e:23:d3:0a: e4:c1:07:2d:f8:74:f0:e1:7b:76:b7:9c:77:63:6e: 7d:2f:4e:84:b1:df:a7:d1:34:90:77:79:e6:07:37: 63:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:FD:50:AA:93:CF:22:6F:C9:DE:76:F0:FE:F5:70:A6:3D:EE:F3 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:6c:ad:60:2a:9d:78:f6:7a:56:4c:3c:65:dc:be:b6:91:f2: 46:bc:0b:0e:61:3f:92:ce:b9:f8:6d:5b:d1:0c:77:4c:19:5d: 4e:1e:39:32:9b:a1:b8:6a:42:6c:cb:de:36:33:27:3c:9f:1b: 0c:53:62:08:eb:06:a4:0b:b2:46:b8:3a:69:05:b5:8d:f1:52: 8c:ab:b1:9c:4f:c9:6b:06:c6:ed:a9:d2:5b:a5:53:fd:81:c5: da:de:50:3a:a4:7d:5b:29:6b:d4:34:b0:0e:32:18:c1:44:ed: a7:1f:ef:4f:4a:da:b6:67:fc:a5:86:ea:84:3c:79:c4:bb:c2: 2f:61:d9:34:dc:58:19:4d:d0:47:cb:32:fa:04:4b:8d:1b:81: b4:92:5a:9f:ab:a3:4d:5a:36:bb:0d:5e:8f:e6:e5:d7:1f:31: 89:65:ac:7b:4e:e6:0b:7f:8f:8b:d2:c8:dd:e6:73:b7:81:75: bc:35:04:bb:b3:c9:fd:71:16:81:56:b4:85:41:1d:0e:15:ca: f8:c6:0a:06:3e:f9:de:c0:c5:c1:f0:ca:65:4e:b8:f0:21:26: e6:2e:e0:31:1a:1b:a5:e2:bb:41:db:49:dc:6c:1d:d5:9a:b5: ba:f2:e9:16:61:7f:a3:f8:d1:c5:1f:14:3b:00:aa:21:12:00: 4f:ff:26:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqgG1HbAmEXHb24ElU6xaqKU6QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTEyMDUwODM3MzJaFw0yNTEyMDgxNjI1MzJaMDMxMTAvBgNV BAMTKEEzNDZGRDUwQUE5M0NGMjI2RkM5REU3NkYwRkVGNTcwQTYzREVFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/BAEr0Wf9poHbZMQg8EYRVZN 3QOqLrJkjvjSkd1Gr+8qv86nv3PCd+HeRAckNKSL/L8IjH4TOrk/B/gjS+EnU8Mr v6kQZZ68ZnuP+6DiCdFh/9GFZ8rXHk177J26w6pLuvuF6yeO+fi2h48OoVGgVWi2 FDRP2wnduaIwG5052B/8HWzJ1dk7mrC8lot+BLbaslkd9dg+EuubVfeOeD+PTFQK KFM5jT0tn9TPyJiX+de9L35H2G3bFvNjDEmU8NunK7UMU2hsSj285yH8T1WeaYd1 aGhFrPqhgc77niPTCuTBBy34dPDhe3a3nHdjbn0vToSx36fRNJB3eeYHN2OFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo0b9UKqTzyJvyd528P71cKY97vMwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNsrWAqnXj2elZMPGXcvraR8ka8Cw5hP5LO ufhtW9EMd0wZXU4eOTKbobhqQmzL3jYzJzyfGwxTYgjrBqQLska4OmkFtY3xUoyr sZxPyWsGxu2p0lulU/2BxdreUDqkfVspa9Q0sA4yGMFE7acf709K2rZn/KWG6oQ8 ecS7wi9h2TTcWBlN0EfLMvoES40bgbSSWp+ro01aNrsNXo/m5dcfMYllrHtO5gt/ j4vSyN3mc7eBdbw1BLuzyf1xFoFWtIVBHQ4VyvjGCgY++d7AxcHwymVOuPAhJuYu 4DEaG6Xiu0HbSdxsHdWatbry6RZhf6P40cUfFDsAqiESAE//JsU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:16 2025 by rpki-client