This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: kLziwrboIq+Baz4MaEvaxt6hWZHX4lxlOp41au87bAA= Subject key identifier: 8B:D2:19:41:BD:11:F5:9F:32:04:D7:3F:9E:40:41:82:B3:33:7B:CE Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 08981C5F1A0B8877D56EE36CCBBF4A75B33410AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 052F Signing time: Sat 06 Dec 2025 04:51:13 +0000 Manifest this update: Sat 06 Dec 2025 04:46:13 +0000 Manifest next update: Tue 09 Dec 2025 06:10:13 +0000 Files and hashes: 1: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: Y9NxdO2uUmExgp5HT4f9RxRPtt01n/EQdy4OmAOBACk=) 2: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ljnKYF4WQqtb0yfOcUdymtJM6+GnXJyNyFLsK7GZ494=) 3: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: hYaCj8u+gknb6lKU5lA2VTs74KmK/rRXGWG/O7MiqLA=) 4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:98:1c:5f:1a:0b:88:77:d5:6e:e3:6c:cb:bf:4a:75:b3:34:10:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Dec 6 04:46:13 2025 GMT Not After : Dec 9 06:10:13 2025 GMT Subject: CN=8BD21941BD11F59F3204D73F9E404182B3337BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:58:5c:c1:0c:aa:aa:fc:c1:09:89:a8:c5: e1:e0:c6:c6:87:21:bb:6c:f0:a8:d2:d1:17:e3:8c: 17:af:26:ef:77:fa:fd:a2:a2:85:28:a2:23:0f:02: ab:68:85:84:ee:d7:77:56:e7:2d:a2:74:97:fc:90: 6a:3f:0f:a2:dc:1b:f8:9d:1f:07:24:6e:cd:ab:93: 89:55:c3:e3:b3:d0:38:21:2e:22:95:a6:e9:ed:cd: 54:b1:23:f3:ad:e1:5d:4f:73:01:a6:6f:96:38:23: b8:56:a5:f8:2d:6e:9c:a7:ab:8a:13:69:2b:09:15: d2:38:61:db:cf:63:5d:6a:1b:96:24:80:61:40:ce: ac:d1:d7:3f:9d:8e:e5:a5:95:6b:98:88:80:9d:35: 07:b8:0c:72:d8:da:4f:ea:15:63:82:5c:40:74:f3: 04:5c:66:69:e3:65:89:92:02:b6:81:d1:a5:0a:bd: 46:30:6e:8e:db:8c:6d:ad:9d:27:c0:13:18:dc:3f: 2e:70:b0:f3:d9:37:10:33:ff:64:0b:86:df:99:f5: dc:7c:0b:a1:8a:05:5b:39:8e:94:1e:fd:73:fe:cd: 3e:aa:f7:90:4e:00:1b:b8:25:f7:af:e3:ad:e7:39: 76:95:05:7d:e0:ee:2c:8e:71:8c:33:76:94:97:9e: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D2:19:41:BD:11:F5:9F:32:04:D7:3F:9E:40:41:82:B3:33:7B:CE X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:df:22:2d:16:6a:60:b3:b1:f6:13:ff:f4:18:f6:00:76:9d: 1f:4a:f0:65:72:2c:2b:78:6b:18:d6:3e:0a:77:bb:62:b8:7c: 7b:2c:bb:4d:8c:f9:d1:40:7b:41:0b:25:70:6c:07:a5:fa:61: c8:b4:9f:4c:0c:2b:68:1f:3f:10:c0:00:e8:ca:93:9b:4d:da: 5c:71:d2:3f:8b:2c:60:9a:f0:09:6a:fa:80:ae:9d:3e:48:02: a4:9d:33:a0:7a:6d:97:6a:14:df:bd:8e:24:18:dd:19:d3:50: 9e:a9:82:1e:24:bc:1b:d5:4c:ee:b0:c4:23:bf:53:d6:d3:b4: df:ff:9e:3a:de:2a:ce:d7:d4:2a:0b:4c:f1:5d:7f:d7:07:e8: e7:9d:ad:48:17:47:fc:c9:77:17:04:7d:cc:86:39:ec:37:ec: 8e:9d:8a:85:62:65:9c:10:ce:9b:8e:1e:44:87:cf:37:21:a6: ce:0c:84:21:da:42:cd:60:69:0d:26:a6:a2:d9:cb:53:2c:49: d7:bb:c3:b7:77:d4:89:9e:26:c4:b9:eb:33:50:2f:31:dc:9f: 57:16:19:0c:8c:f1:79:aa:c4:88:59:b9:dc:35:11:f3:eb:7b: 0e:cc:26:f9:fa:66:fa:3c:e4:c4:39:5f:9f:37:a3:ba:ac:ce: 02:01:e9:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJgcXxoLiHfVbuNsy79KdbM0EKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTEyMDYwNDQ2MTNaFw0yNTEyMDkwNjEwMTNaMDMxMTAvBgNV BAMTKDhCRDIxOTQxQkQxMUY1OUYzMjA0RDczRjlFNDA0MTgyQjMzMzdCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPlhcwQyqqvzBCYmoxeHgxsaH Ibts8KjS0RfjjBevJu93+v2iooUooiMPAqtohYTu13dW5y2idJf8kGo/D6LcG/id Hwckbs2rk4lVw+Oz0DghLiKVpuntzVSxI/Ot4V1PcwGmb5Y4I7hWpfgtbpynq4oT aSsJFdI4YdvPY11qG5YkgGFAzqzR1z+djuWllWuYiICdNQe4DHLY2k/qFWOCXEB0 8wRcZmnjZYmSAraB0aUKvUYwbo7bjG2tnSfAExjcPy5wsPPZNxAz/2QLht+Z9dx8 C6GKBVs5jpQe/XP+zT6q95BOABu4Jfev463nOXaVBX3g7iyOcYwzdpSXnjgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9IZQb0R9Z8yBNc/nkBBgrMze84wHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjfIi0WamCzsfYT//QY9gB2nR9K8GVyLCt4 axjWPgp3u2K4fHssu02M+dFAe0ELJXBsB6X6Yci0n0wMK2gfPxDAAOjKk5tN2lxx 0j+LLGCa8Alq+oCunT5IAqSdM6B6bZdqFN+9jiQY3RnTUJ6pgh4kvBvVTO6wxCO/ U9bTtN//njreKs7X1CoLTPFdf9cH6OedrUgXR/zJdxcEfcyGOew37I6dioViZZwQ zpuOHkSHzzchps4MhCHaQs1gaQ0mpqLZy1MsSde7w7d31ImeJsS56zNQLzHcn1cW GQyM8XmqxIhZudw1EfPrew7MJvn6Zvo85MQ5X583o7qszgIB6f8= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:10 2025 by rpki-client