This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: a60N6JAdTcizNJJlN+CB76E/00fnAtOmay5/Zn1qoKE= Subject key identifier: CD:8B:0F:20:21:04:5B:AF:D3:8B:ED:7E:31:D2:2E:DF:97:65:F8:6E Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 2BC5C3B8463C570EE0BE506E9774A6A653664B60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 01C4 Signing time: Sat 06 Dec 2025 11:41:36 +0000 Manifest this update: Sat 06 Dec 2025 11:36:36 +0000 Manifest next update: Tue 09 Dec 2025 13:55:36 +0000 Files and hashes: 1: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: 6oB2NEdb1J8wzFdKjlXlM7HaXvyVJb+FJhi1JoqHPbo=) 2: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: 8lN7i6npU1PZONgbGvLLKqaV/LvdweREZlGU3k7CaBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c5:c3:b8:46:3c:57:0e:e0:be:50:6e:97:74:a6:a6:53:66:4b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Dec 6 11:36:36 2025 GMT Not After : Dec 9 13:55:36 2025 GMT Subject: CN=CD8B0F2021045BAFD38BED7E31D22EDF9765F86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:b4:94:cc:0d:33:87:13:2d:ae:65:f9:50: 95:a5:1a:b4:bc:e7:38:09:d2:ce:17:e8:e9:fd:bd: c9:43:b9:b4:a1:4f:22:07:f8:37:31:81:0b:ee:8f: df:c9:87:2c:93:32:b6:05:12:85:82:73:36:55:36: 51:75:22:63:ab:fd:d0:cf:83:bb:34:a4:1d:81:18: 20:92:78:fb:12:64:d2:7f:a7:d4:ca:02:ea:a4:35: eb:e8:29:6f:0f:e2:6a:a2:f5:53:95:2f:50:b2:b3: 9e:e0:18:76:ee:e6:8e:d8:c3:47:a1:f0:d6:62:37: 9f:90:6e:68:cc:05:25:97:4f:66:b3:30:d0:a8:9e: 84:9a:d4:40:db:b4:21:7c:42:17:f6:7b:36:7f:17: 92:75:3f:8f:3f:1e:e0:41:78:57:6b:d7:4a:a2:19: 40:29:99:bb:94:d5:39:a6:08:a2:da:bf:58:02:ae: 6c:05:b4:f0:5b:34:1e:48:54:c5:20:06:82:63:5a: 29:88:e6:83:b2:b9:64:1e:a9:13:30:e3:ac:82:de: a2:15:5d:91:a6:17:74:31:69:45:bb:33:db:d5:c0: 92:10:ba:20:31:b0:95:b8:ae:3a:6f:c0:f5:fe:f0: 60:21:02:52:18:c6:2c:26:c8:7c:b7:a4:12:63:a5: 80:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8B:0F:20:21:04:5B:AF:D3:8B:ED:7E:31:D2:2E:DF:97:65:F8:6E X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:0a:10:4e:28:5b:09:74:e6:3a:f8:02:7e:9a:98:f0:dc:80: 63:27:1b:59:a6:dc:85:2c:95:e2:9c:cd:09:7f:80:35:18:e5: 89:7e:2d:7e:68:21:ac:b5:51:de:b2:5a:08:00:7a:76:3b:39: d2:63:9b:a3:d0:1a:99:00:99:53:3c:cc:a2:6a:65:e8:8b:a4: f5:a0:14:16:62:c1:32:aa:c3:1a:47:4d:57:72:8c:4e:6c:26: 18:02:53:a0:37:6f:88:1f:5e:53:43:d8:87:f8:7f:50:7e:92: e8:f6:32:a3:17:08:c6:36:22:4f:e4:5c:0b:30:88:1a:94:7f: d0:de:d3:da:3c:c9:44:16:b8:6f:8d:88:eb:e7:be:9d:3b:5e: 04:5d:e6:48:2a:0e:d3:a9:fb:33:ae:30:3f:33:7d:93:2a:14: 3d:10:4a:3a:80:83:0f:01:8d:4c:6e:9b:2e:b9:90:7f:fa:14: 3f:4c:0e:4c:83:4e:ff:4f:8f:fc:d5:23:31:a5:e1:84:b5:a5: d5:ca:20:a8:33:0d:0f:a5:47:f5:36:e1:89:26:06:72:7a:a5: 24:bc:78:9d:83:ea:7c:5d:90:2e:17:ee:0a:b3:a6:53:a5:32: de:9a:97:65:f3:3d:aa:a4:b1:70:31:7b:48:9a:fb:d1:0e:81: f6:9d:cc:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8XDuEY8Vw7gvlBul3SmplNmS2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNTEyMDYxMTM2MzZaFw0yNTEyMDkxMzU1MzZaMDMxMTAvBgNV BAMTKENEOEIwRjIwMjEwNDVCQUZEMzhCRUQ3RTMxRDIyRURGOTc2NUY4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzrSUzA0zhxMtrmX5UJWlGrS8 5zgJ0s4X6On9vclDubShTyIH+DcxgQvuj9/JhyyTMrYFEoWCczZVNlF1ImOr/dDP g7s0pB2BGCCSePsSZNJ/p9TKAuqkNevoKW8P4mqi9VOVL1Cys57gGHbu5o7Yw0eh 8NZiN5+QbmjMBSWXT2azMNConoSa1EDbtCF8Qhf2ezZ/F5J1P48/HuBBeFdr10qi GUApmbuU1TmmCKLav1gCrmwFtPBbNB5IVMUgBoJjWimI5oOyuWQeqRMw46yC3qIV XZGmF3QxaUW7M9vVwJIQuiAxsJW4rjpvwPX+8GAhAlIYxiwmyHy3pBJjpYBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYsPICEEW6/Ti+1+MdIu35dl+G4wHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIKEE4oWwl05jr4An6amPDcgGMnG1mm3IUs leKczQl/gDUY5Yl+LX5oIay1Ud6yWggAenY7OdJjm6PQGpkAmVM8zKJqZeiLpPWg FBZiwTKqwxpHTVdyjE5sJhgCU6A3b4gfXlND2If4f1B+kuj2MqMXCMY2Ik/kXAsw iBqUf9De09o8yUQWuG+NiOvnvp07XgRd5kgqDtOp+zOuMD8zfZMqFD0QSjqAgw8B jUxumy65kH/6FD9MDkyDTv9Pj/zVIzGl4YS1pdXKIKgzDQ+lR/U24YkmBnJ6pSS8 eJ2D6nxdkC4X7gqzplOlMt6al2XzPaqksXAxe0ia+9EOgfadzPM= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:38 2025 by rpki-client