This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft File: 4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json) Hash identifier: sP1J5AiRbuOb213gCKVrvnq+bdnVryqlnkLhRfDbMz8= Subject key identifier: 50:44:2C:31:1E:D4:9C:6A:0A:70:90:6F:EF:55:07:54:6C:2D:D8:77 Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B Certificate issuer: /CN=4E9222CE79B9CFEF260C837523FE2684407D535B Certificate serial: 6354A0F89E6BCD26ACAC2D87C7F10F7397CD138C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft Manifest number: A1 Signing time: Fri 05 Dec 2025 14:00:57 +0000 Manifest this update: Fri 05 Dec 2025 13:55:57 +0000 Manifest next update: Mon 08 Dec 2025 20:23:57 +0000 Files and hashes: 1: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: KP98XmZAiVtMxs81Hya5Af/hn+iZE6UZBMnxfSFLS2M=) 2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: ZyJrdfvAEVZbeVLqPiqVTGVt7Z4QPKAa+3EvCLOTlmU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:54:a0:f8:9e:6b:cd:26:ac:ac:2d:87:c7:f1:0f:73:97:cd:13:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B Validity Not Before: Dec 5 13:55:57 2025 GMT Not After : Dec 8 20:23:57 2025 GMT Subject: CN=50442C311ED49C6A0A70906FEF5507546C2DD877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:05:c2:e3:64:bc:d3:ec:f5:ed:cd:81:77: 20:28:97:66:c4:aa:fc:be:08:73:37:c8:7f:be:af: 1c:03:71:c6:4e:d1:19:61:91:c8:8b:10:c5:48:21: 2c:f5:76:11:d1:44:2d:0d:6b:9f:9a:09:f2:b1:fd: a3:db:ca:d2:e3:c5:7b:24:61:75:9a:ad:5e:97:40: 97:73:88:2f:c9:40:ec:c4:b2:b4:54:68:9c:18:70: 98:c5:29:ec:11:26:bd:67:5b:9d:01:6e:7d:32:64: be:d9:56:9a:a3:7c:6b:46:49:d5:15:a3:0a:0c:54: 73:ab:6e:42:fb:41:92:fa:b9:00:2e:98:32:9e:ff: 54:50:fa:cb:67:a6:57:91:d0:50:7a:4a:b9:e6:94: fd:33:f9:77:cf:35:4f:87:f8:06:25:e9:46:05:9c: a4:e2:bc:c9:1e:4c:c9:88:a2:25:6d:c1:54:f2:ca: 5d:e8:5e:d1:4d:0f:8c:35:60:6b:79:e5:95:2c:59: aa:fc:99:57:38:af:f8:06:2b:4b:c6:0a:b8:d3:dd: 4d:0a:6d:73:7b:e1:ff:b2:d4:69:85:c5:3a:fb:29: af:74:29:7f:bf:ea:02:87:18:2b:77:73:e0:b7:10: 17:f9:3c:79:c5:cf:64:ca:07:a5:36:7f:9c:77:58: a9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:44:2C:31:1E:D4:9C:6A:0A:70:90:6F:EF:55:07:54:6C:2D:D8:77 X509v3 Authority Key Identifier: keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:82:ad:a7:bb:37:79:09:00:1e:12:0b:f6:58:ea:30:78:a1: 2c:6d:e2:d0:d5:f0:78:12:c8:82:f2:a5:b4:b8:c2:07:80:81: 42:e2:aa:af:d9:79:af:e4:f7:fd:a9:af:9c:54:cc:cf:af:66: c3:b9:f5:d7:ed:86:f0:93:de:c6:40:fc:6e:dc:1d:dc:a6:dd: 95:32:fc:d7:d5:d5:e9:57:c4:6b:28:7e:eb:41:9f:17:17:df: 8f:36:4f:98:0f:d0:1e:9c:5e:8c:f5:a4:c7:b3:34:79:dd:88: 98:20:ed:cd:89:02:37:62:d7:2e:4c:e8:a5:cb:62:33:09:88: 08:f4:46:9c:72:96:e7:63:b5:f7:b5:02:ad:26:70:d2:bc:b3: 14:b9:08:66:29:69:1d:22:67:65:d1:7b:ae:40:a6:d2:98:bb: 35:d4:d5:be:e5:39:fb:a4:d5:4b:30:35:08:71:66:a5:69:f1: 79:13:3d:4f:b9:e8:0c:54:e2:94:51:6f:47:13:43:17:86:12: 86:14:3c:a6:cc:cf:25:f2:01:9c:fb:53:4c:c1:26:8d:34:51: 82:8b:ba:f8:d2:a0:68:f7:b9:3b:17:86:07:46:0b:0c:cc:0b: 68:ba:b2:ed:97:54:c3:7a:90:bc:bc:05:b2:ae:1f:ab:39:68: 09:b5:c1:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1Sg+J5rzSasrC2Hx/EPc5fNE4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2ODQ0 MDdENTM1QjAeFw0yNTEyMDUxMzU1NTdaFw0yNTEyMDgyMDIzNTdaMDMxMTAvBgNV BAMTKDUwNDQyQzMxMUVENDlDNkEwQTcwOTA2RkVGNTUwNzU0NkMyREQ4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lwXC42S80+z17c2BdyAol2bE qvy+CHM3yH++rxwDccZO0RlhkciLEMVIISz1dhHRRC0Na5+aCfKx/aPbytLjxXsk YXWarV6XQJdziC/JQOzEsrRUaJwYcJjFKewRJr1nW50Bbn0yZL7ZVpqjfGtGSdUV owoMVHOrbkL7QZL6uQAumDKe/1RQ+stnpleR0FB6SrnmlP0z+XfPNU+H+AYl6UYF nKTivMkeTMmIoiVtwVTyyl3oXtFND4w1YGt55ZUsWar8mVc4r/gGK0vGCrjT3U0K bXN74f+y1GmFxTr7Ka90KX+/6gKHGCt3c+C3EBf5PHnFz2TKB6U2f5x3WKl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUEQsMR7UnGoKcJBv71UHVGwt2HcwHwYDVR0j BBgwFoAUTpIiznm5z+8mDIN1I/4mhEB9U1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjE2ZjFiZC05NThlLTQ3ZjUtOTQ4ZS04N2UxMWU5MmU2MDEvMC80RTkyMjJDRTc5 QjlDRkVGMjYwQzgzNzUyM0ZFMjY4NDQwN0Q1MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2ODQ0MDdE NTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2 ODQ0MDdENTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCCrae7N3kJAB4SC/ZY6jB4oSxt4tDV8HgS yILypbS4wgeAgULiqq/Zea/k9/2pr5xUzM+vZsO59dfthvCT3sZA/G7cHdym3ZUy /NfV1elXxGsofutBnxcX3482T5gP0B6cXoz1pMezNHndiJgg7c2JAjdi1y5M6KXL YjMJiAj0Rpxyludjtfe1Aq0mcNK8sxS5CGYpaR0iZ2XRe65AptKYuzXU1b7lOfuk 1UswNQhxZqVp8XkTPU+56AxU4pRRb0cTQxeGEoYUPKbMzyXyAZz7U0zBJo00UYKL uvjSoGj3uTsXhgdGCwzMC2i6su2XVMN6kLy8BbKuH6s5aAm1wW0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:08:59 2025 by rpki-client