This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft File: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft (raw, json) Hash identifier: zOhA+IYSACqExiNkaIz4ozKJjdl2qtiKDGQvSBMa/tI= Subject key identifier: 45:9E:16:FB:40:28:64:45:D6:F2:16:5F:CF:03:74:58:47:61:A8:9F Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A Certificate issuer: /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Certificate serial: 0CE2E49C95252B3FA68F28F9B07169BDFDB66CF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft Manifest number: BC Signing time: Fri 05 Dec 2025 05:21:51 +0000 Manifest this update: Fri 05 Dec 2025 05:16:51 +0000 Manifest next update: Mon 08 Dec 2025 09:11:51 +0000 Files and hashes: 1: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: RRjpYe+sCryGtP2L5KYhg6i9BBg+veNKIMjpWUEXvlQ=) 2: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: jCMcTRKT9AZJevifSXh6jid95wyd/fIpOWD7LnrfE5Y=) 3: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl (hash: fu5XuuyKr+Tq4NxsRngXFLkpLG2Mg4hGbk5BEuu5zPc=) 4: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: Lj0hcqeyTQssBrCkzs3hGKwcyyQ8e4rZksVRkWRzAgo=) 5: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: d7SZXhA3MtIvsZoPKAEFGlIFwwbXCkHUGIXlm7+3ws0=) 6: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: qv3evecT8eZzX3bUVJHE05QFEmJ8YwvyFd0dQ0gXUtc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e2:e4:9c:95:25:2b:3f:a6:8f:28:f9:b0:71:69:bd:fd:b6:6c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Validity Not Before: Dec 5 05:16:51 2025 GMT Not After : Dec 8 09:11:51 2025 GMT Subject: CN=459E16FB40286445D6F2165FCF0374584761A89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c9:67:32:f3:70:80:37:ed:e0:4c:a2:01:39: 02:4a:90:d9:ba:8b:da:35:c8:80:4d:63:44:89:3b: 24:df:e9:d7:22:af:57:4a:d6:e4:b4:6f:95:93:b9: b6:58:c4:6d:1e:65:d8:90:14:ac:0a:88:4e:2f:de: db:b0:36:10:ff:93:91:8c:86:ee:c0:83:b2:4d:eb: 78:84:1c:8a:38:1f:56:95:4a:fd:9c:ff:42:90:50: 03:25:2d:b5:9c:23:31:ec:31:68:fc:a6:b9:9e:61: 20:b5:f3:ba:6c:98:e4:52:a4:98:ea:eb:93:e6:16: 98:5b:26:7e:f7:69:ee:b4:70:1e:7b:7b:9d:26:ab: b0:ae:9b:c1:36:6e:d1:98:1e:ce:9d:f5:93:c4:13: 55:77:c4:20:e3:8e:9e:f1:f5:de:1f:f3:68:5b:80: b8:a0:66:24:de:58:7d:bc:9f:2c:19:76:f5:d5:52: d5:c3:c8:97:fa:56:9c:b0:75:e3:e1:72:97:16:54: 30:61:42:81:4e:4c:4e:8e:32:4b:a6:85:21:72:d9: 7e:71:ae:a3:6f:fb:bf:6f:a8:c1:e0:56:83:66:72: fc:a1:80:07:ac:c6:74:d0:06:c1:23:1d:99:c1:a9: 5a:9b:78:53:28:45:20:93:e8:dd:74:86:9a:1e:5d: 41:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9E:16:FB:40:28:64:45:D6:F2:16:5F:CF:03:74:58:47:61:A8:9F X509v3 Authority Key Identifier: keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5b:f4:a9:5c:5e:90:70:69:d6:68:46:14:5a:00:43:7b:35: 73:43:62:d4:af:36:23:af:4e:69:c5:70:c9:62:02:20:ca:d7: 29:bd:89:85:35:fc:18:20:0d:3b:ee:35:b5:86:2d:ef:e9:23: a8:e0:96:84:e2:e7:a3:95:65:78:a8:0b:3d:12:a2:98:c3:87: ee:87:a5:bf:a0:50:83:46:d8:d3:84:08:5d:80:54:6a:6d:9c: 78:27:8e:ed:1c:2c:b7:55:04:1f:d3:97:f4:09:67:33:bf:a9: 3c:fe:87:59:35:cf:4d:6a:b4:44:e3:2c:3c:18:f2:e4:ea:c3: ad:60:50:08:57:6f:ff:52:88:c0:e5:b4:4c:d8:17:52:79:cd: 6f:45:83:06:86:af:37:60:7f:ea:8b:f3:0c:53:60:c3:4f:a4: aa:e2:0e:d0:1f:e0:bd:d1:2e:b2:bf:5c:c5:4b:c2:f5:26:44: 9e:2f:66:87:b2:b3:9c:39:74:f5:8a:b2:a8:ff:e1:26:42:55: 3c:ca:24:e3:a4:77:ca:70:40:32:aa:d1:87:63:41:f2:e4:e3: fa:dd:52:52:a5:e6:75:69:d0:eb:74:14:f0:01:b4:6c:e4:3b: 90:ae:af:0b:f1:75:b3:13:fd:2b:eb:4d:2d:1a:04:6f:9b:9c: 3a:21:5b:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOLknJUlKz+mjyj5sHFpvf22bPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0RE QzM0RUE2QTAeFw0yNTEyMDUwNTE2NTFaFw0yNTEyMDgwOTExNTFaMDMxMTAvBgNV BAMTKDQ1OUUxNkZCNDAyODY0NDVENkYyMTY1RkNGMDM3NDU4NDc2MUE4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLyWcy83CAN+3gTKIBOQJKkNm6 i9o1yIBNY0SJOyTf6dcir1dK1uS0b5WTubZYxG0eZdiQFKwKiE4v3tuwNhD/k5GM hu7Ag7JN63iEHIo4H1aVSv2c/0KQUAMlLbWcIzHsMWj8prmeYSC187psmORSpJjq 65PmFphbJn73ae60cB57e50mq7Cum8E2btGYHs6d9ZPEE1V3xCDjjp7x9d4f82hb gLigZiTeWH28nywZdvXVUtXDyJf6VpywdePhcpcWVDBhQoFOTE6OMkumhSFy2X5x rqNv+79vqMHgVoNmcvyhgAesxnTQBsEjHZnBqVqbeFMoRSCT6N10hpoeXUGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURZ4W+0AoZEXW8hZfzwN0WEdhqJ8wHwYDVR0j BBgwFoAUSFALAMYdobDsRITgeR27zdw06mowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzI3ODc0Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC80ODUwMEIwMEM2 MURBMUIwRUM0NDg0RTA3OTFEQkJDRERDMzRFQTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0REQzM0 RUE2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMyNzg3NDctNmFjNy00Zjg3LTli MmItMjEzNTkyOTRmMDM0LzAvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJC Q0REQzM0RUE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpb9KlcXpBwadZoRhRaAEN7NXNDYtSvNiOv TmnFcMliAiDK1ym9iYU1/BggDTvuNbWGLe/pI6jgloTi56OVZXioCz0SopjDh+6H pb+gUING2NOECF2AVGptnHgnju0cLLdVBB/Tl/QJZzO/qTz+h1k1z01qtETjLDwY 8uTqw61gUAhXb/9SiMDltEzYF1J5zW9FgwaGrzdgf+qL8wxTYMNPpKriDtAf4L3R LrK/XMVLwvUmRJ4vZoeys5w5dPWKsqj/4SZCVTzKJOOkd8pwQDKq0YdjQfLk4/rd UlKl5nVp0Ot0FPABtGzkO5CurwvxdbMT/SvrTS0aBG+bnDohW6E= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:27 2025 by rpki-client