This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: J36JtgVVXRAvc1JsPoN9tsO7dR/woFhkOCgcWEqqcLQ= Subject key identifier: 4B:A1:9D:7C:E6:31:9F:0D:44:68:AB:3F:96:EF:9D:03:23:34:BF:2F Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 3720EF4F7283823A9508C72CEF0C36F874B10975 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 023A Signing time: Fri 05 Dec 2025 23:51:26 +0000 Manifest this update: Fri 05 Dec 2025 23:46:26 +0000 Manifest next update: Tue 09 Dec 2025 00:58:26 +0000 Files and hashes: 1: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) 2: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: wUmy8mA4PNCfx6D95xb+ViMopPBohsgDZv1FlMDXwN0=) 3: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) 4: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:20:ef:4f:72:83:82:3a:95:08:c7:2c:ef:0c:36:f8:74:b1:09:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Dec 5 23:46:26 2025 GMT Not After : Dec 9 00:58:26 2025 GMT Subject: CN=4BA19D7CE6319F0D4468AB3F96EF9D032334BF2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:8e:c1:bd:fe:9b:32:34:06:0d:13:b9:39: 1d:83:bf:c7:91:7b:29:5c:ef:d3:aa:fc:f0:45:03: d6:cf:40:bd:78:1d:d2:20:b0:e6:3c:dd:31:c9:d2: cd:14:63:2c:1d:3c:9b:23:9d:e8:82:d5:44:30:0a: 81:66:38:e0:ba:e7:9c:5b:08:e7:d7:c6:27:7e:bd: a6:8b:ac:9b:98:33:c8:8c:68:26:a4:a4:05:63:6b: f0:23:ff:4b:90:49:35:1b:16:f7:60:bf:34:88:bf: 18:41:61:c3:ef:5f:e5:5e:2b:4e:8f:22:8a:10:d5: 40:b6:81:18:cb:7d:c1:31:02:d1:78:b8:83:e8:1e: 7e:35:95:53:82:6d:26:b8:f4:84:2d:2f:40:ae:23: eb:00:e8:b3:57:e8:ed:07:7b:cb:7c:c8:85:f6:b2: f8:37:6c:fc:af:b8:55:ca:80:ce:83:45:f7:85:66: c8:f5:9e:f7:4a:af:c4:32:55:c0:19:24:42:90:b9: ad:56:7b:78:9c:a7:18:bf:2b:95:24:71:95:44:4a: 9c:39:c0:9f:85:12:e8:86:09:40:1c:1d:11:57:1d: 83:d2:9e:3d:de:dd:89:54:63:da:3b:f9:58:0e:47: cf:21:02:73:a1:1e:8f:6b:bb:95:e5:0e:ba:1a:78: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A1:9D:7C:E6:31:9F:0D:44:68:AB:3F:96:EF:9D:03:23:34:BF:2F X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:69:d4:d3:e5:d2:82:f1:44:99:dd:c9:5d:a4:9e:0e:86:50: e7:b8:e7:0b:57:39:82:15:62:76:a2:75:37:84:49:ff:bb:0f: 73:c6:97:b1:45:95:53:63:0e:0c:59:7b:02:4d:06:fd:4e:c3: 18:51:39:0d:62:07:50:21:32:98:69:65:63:12:af:39:f5:19: 5f:51:ec:77:df:a9:e2:b2:d5:fe:2a:ad:df:92:c1:ca:7e:04: 10:86:c2:0b:71:fe:47:a3:af:cc:fd:8f:cc:b8:af:48:84:c4: 6d:9c:fa:08:6a:78:31:66:27:c7:3e:e4:45:43:74:71:a0:08: c4:b5:cb:75:79:15:c7:0f:29:ad:25:43:2e:c2:7c:77:3e:f1: 49:6e:2b:e4:60:63:72:f5:89:88:8b:14:c7:a0:b6:c0:72:e1: ad:0d:49:b7:64:f2:94:94:76:e8:c6:73:b6:64:6c:a7:e9:b9: a3:13:f5:ef:a0:5d:e7:23:aa:c1:20:47:ea:8c:ef:ec:79:b4: b3:cb:5f:92:f7:ed:dd:40:21:63:d8:61:1d:7d:ee:51:0a:1e: 7d:c4:f3:28:53:8f:ac:ee:47:45:41:58:45:51:cf:7a:c2:a4: 13:c8:71:e0:1b:7c:0c:a0:a4:48:8a:00:82:7c:f5:47:2e:58: de:b1:55:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNyDvT3KDgjqVCMcs7ww2+HSxCXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNTEyMDUyMzQ2MjZaFw0yNTEyMDkwMDU4MjZaMDMxMTAvBgNV BAMTKDRCQTE5RDdDRTYzMTlGMEQ0NDY4QUIzRjk2RUY5RDAzMjMzNEJGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCazY7Bvf6bMjQGDRO5OR2Dv8eR eylc79Oq/PBFA9bPQL14HdIgsOY83THJ0s0UYywdPJsjneiC1UQwCoFmOOC655xb COfXxid+vaaLrJuYM8iMaCakpAVja/Aj/0uQSTUbFvdgvzSIvxhBYcPvX+VeK06P IooQ1UC2gRjLfcExAtF4uIPoHn41lVOCbSa49IQtL0CuI+sA6LNX6O0He8t8yIX2 svg3bPyvuFXKgM6DRfeFZsj1nvdKr8QyVcAZJEKQua1We3icpxi/K5UkcZVESpw5 wJ+FEuiGCUAcHRFXHYPSnj3e3YlUY9o7+VgOR88hAnOhHo9ru5XlDroaeLH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS6GdfOYxnw1EaKs/lu+dAyM0vy8wHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINp1NPl0oLxRJndyV2kng6GUOe45wtXOYIV YnaidTeESf+7D3PGl7FFlVNjDgxZewJNBv1OwxhROQ1iB1AhMphpZWMSrzn1GV9R 7HffqeKy1f4qrd+Swcp+BBCGwgtx/kejr8z9j8y4r0iExG2c+ghqeDFmJ8c+5EVD dHGgCMS1y3V5FccPKa0lQy7CfHc+8UluK+RgY3L1iYiLFMegtsBy4a0NSbdk8pSU dujGc7ZkbKfpuaMT9e+gXecjqsEgR+qM7+x5tLPLX5L37d1AIWPYYR197lEKHn3E 8yhTj6zuR0VBWEVRz3rCpBPIceAbfAygpEiKAIJ89UcuWN6xVXE= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:11 2025 by rpki-client