This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: T12Xm3D23ABLb/lZbxnh+g/MRzZaLgOjTmNPNiG3aWY= Subject key identifier: B0:39:78:3B:4F:3C:27:33:A5:F0:2E:E9:6E:61:16:65:F7:A1:EC:D7 Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 6599A853DAAC60F8BE2D2C30A77E7ACFBB903D69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 04A7 Signing time: Thu 04 Dec 2025 14:42:29 +0000 Manifest this update: Thu 04 Dec 2025 14:37:29 +0000 Manifest next update: Mon 08 Dec 2025 00:45:29 +0000 Files and hashes: 1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: V3QHQK/gWQFy09rLOPxob5SyVyg/wx9t2yimUS9bwPY=) 2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: bsRPyiPRxr5ywmiArQqTL9LrjTJ1vcpC4CAQqAgy3jw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:99:a8:53:da:ac:60:f8:be:2d:2c:30:a7:7e:7a:cf:bb:90:3d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Dec 4 14:37:29 2025 GMT Not After : Dec 8 00:45:29 2025 GMT Subject: CN=B039783B4F3C2733A5F02EE96E611665F7A1ECD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:4d:ff:6f:cd:84:83:6c:14:0e:3c:4a:84: 3b:b3:d7:3c:22:ee:30:d0:f1:99:e2:a0:aa:1c:0b: 1b:21:6b:7c:98:1c:dc:43:80:3f:81:30:15:a0:71: 53:2f:71:f8:21:aa:39:6c:e7:d0:96:fe:f6:39:a3: 71:d7:7f:95:1b:43:b5:2c:8b:e7:e8:27:34:49:23: 3a:9b:34:6f:72:41:ac:33:14:2d:49:fd:e5:b1:18: 90:68:6e:24:a9:ff:2c:3f:a7:4f:41:cf:d8:a5:d6: 33:b1:1e:43:ff:13:76:38:60:af:43:75:7b:d5:fd: d1:45:ec:0f:b3:94:4b:de:1c:de:75:9c:8b:fb:20: 20:f4:95:8b:2f:a9:88:59:34:f6:e4:23:11:62:40: 75:20:24:51:e4:bf:f1:e8:9d:c5:e1:25:d3:3e:29: 54:c7:02:39:56:19:e2:05:66:bc:b9:a5:36:af:3a: 54:c6:60:8c:9f:5b:4f:71:ce:a7:8a:76:fa:da:83: 56:1e:3f:95:fd:31:76:eb:ed:0d:48:e2:2b:1b:74: 61:a1:65:57:0f:51:08:d2:fc:c4:b8:73:eb:d5:b4: be:a4:30:65:fd:b9:67:ec:a3:dd:28:c4:16:80:cd: 91:1a:77:17:b4:1b:07:86:e1:ba:7d:63:31:de:36: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:39:78:3B:4F:3C:27:33:A5:F0:2E:E9:6E:61:16:65:F7:A1:EC:D7 X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:45:c1:ac:81:a7:cf:83:37:72:8d:7d:75:61:83:6b:9e:fb: 5c:c0:46:23:91:bd:57:e4:77:59:7e:9b:da:50:f9:e7:38:1a: 36:1a:13:9d:72:6b:27:21:91:45:78:24:39:9a:8e:b7:95:7a: 91:cb:59:22:9b:a7:31:7a:78:89:2b:75:e2:e2:d1:45:cf:68: 14:5c:5b:04:f2:f7:57:09:7b:1c:a9:3d:1c:85:61:07:50:55: 58:35:70:c8:91:f7:06:69:ae:a3:53:1a:ad:b8:be:f9:31:fa: 94:b1:e8:4f:0a:b6:b4:8a:f1:e4:32:0d:a8:61:cd:4a:d3:5a: f4:d0:b1:6e:60:d7:db:87:30:0c:6d:45:f8:1b:7b:3a:3c:db: b4:7b:02:50:aa:91:63:9e:df:e7:7b:64:62:5a:e0:b0:cf:17: 0f:25:1a:1e:bf:95:cf:33:ed:28:0d:02:f2:2a:4a:6a:5a:2e: a4:ff:f3:59:0b:2b:2c:a8:86:6a:74:6b:5e:e4:ec:14:fd:f4: d4:ef:e2:46:59:f8:14:5a:43:89:63:31:6e:38:03:7c:fc:35: 87:2d:89:51:bb:ba:3e:cd:1b:9d:94:18:09:3f:8e:9d:60:f4: 13:5f:9d:a5:df:6c:da:dc:be:da:51:15:4a:aa:5e:50:75:4a: 0e:59:52:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZmoU9qsYPi+LSwwp356z7uQPWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTEyMDQxNDM3MjlaFw0yNTEyMDgwMDQ1MjlaMDMxMTAvBgNV BAMTKEIwMzk3ODNCNEYzQzI3MzNBNUYwMkVFOTZFNjExNjY1RjdBMUVDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4k3/b82Eg2wUDjxKhDuz1zwi 7jDQ8ZnioKocCxsha3yYHNxDgD+BMBWgcVMvcfghqjls59CW/vY5o3HXf5UbQ7Us i+foJzRJIzqbNG9yQawzFC1J/eWxGJBobiSp/yw/p09Bz9il1jOxHkP/E3Y4YK9D dXvV/dFF7A+zlEveHN51nIv7ICD0lYsvqYhZNPbkIxFiQHUgJFHkv/HoncXhJdM+ KVTHAjlWGeIFZry5pTavOlTGYIyfW09xzqeKdvrag1YeP5X9MXbr7Q1I4isbdGGh ZVcPUQjS/MS4c+vVtL6kMGX9uWfso90oxBaAzZEadxe0GweG4bp9YzHeNmJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsDl4O088JzOl8C7pbmEWZfeh7NcwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNFwayBp8+DN3KNfXVhg2ue+1zARiORvVfk d1l+m9pQ+ec4GjYaE51yaychkUV4JDmajreVepHLWSKbpzF6eIkrdeLi0UXPaBRc WwTy91cJexypPRyFYQdQVVg1cMiR9wZprqNTGq24vvkx+pSx6E8KtrSK8eQyDahh zUrTWvTQsW5g19uHMAxtRfgbezo827R7AlCqkWOe3+d7ZGJa4LDPFw8lGh6/lc8z 7SgNAvIqSmpaLqT/81kLKyyohmp0a17k7BT99NTv4kZZ+BRaQ4ljMW44A3z8NYct iVG7uj7NG52UGAk/jp1g9BNfnaXfbNrcvtpRFUqqXlB1Sg5ZUhE= -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:16 2025 by rpki-client