This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: Q+I6gL/Y8h8pDqZVTGiCAXDjmoE1ppqjjQjzkyZhSQE= Subject key identifier: 61:90:14:60:77:63:51:67:04:33:82:96:D0:8C:14:AA:BC:78:43:ED Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 6569BCFA7FD0467FF2470E64F7EA4C4156A61F5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 021F Signing time: Fri 05 Dec 2025 01:30:52 +0000 Manifest this update: Fri 05 Dec 2025 01:25:52 +0000 Manifest next update: Mon 08 Dec 2025 08:31:52 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: FF+FXkSkNMp8iTv+fQS8bpcE8gKFWU/yg7CPTMhID8o=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:69:bc:fa:7f:d0:46:7f:f2:47:0e:64:f7:ea:4c:41:56:a6:1f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Dec 5 01:25:52 2025 GMT Not After : Dec 8 08:31:52 2025 GMT Subject: CN=619014607763516704338296D08C14AABC7843ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:cb:88:7c:c0:bd:e6:4f:a7:44:66:0e:44: 8a:95:57:48:47:9f:55:e5:d7:f9:cf:86:14:ef:81: 29:1d:35:47:1a:2b:56:f2:8c:1f:18:fb:5b:03:a3: 5d:d5:70:b9:7e:8d:e9:1c:73:b9:15:02:3a:5f:b9: cb:38:18:05:5a:b5:1e:a2:3f:85:4d:3c:f8:e4:eb: 83:5a:15:d6:db:c4:51:bf:b9:6d:40:d4:cc:f7:6a: 01:92:9a:62:e0:2b:a1:59:fc:f4:23:9d:0a:3f:6e: aa:d5:29:f5:98:26:d6:86:8b:50:3e:e1:b2:c4:cf: de:89:c7:51:24:5b:af:89:63:99:df:7c:7f:da:3e: 30:2d:35:8d:53:23:6c:f3:b3:96:0b:6e:c4:fe:bf: 49:1e:4e:ed:2d:70:66:21:b5:58:33:79:5d:9e:a5: 83:af:b7:95:da:11:15:9f:bb:98:50:d4:72:02:24: dc:4f:77:c5:bf:43:35:42:03:22:34:34:7b:4e:49: 53:6a:d1:1e:1a:28:21:05:99:5c:d5:5a:38:c2:5f: 3f:c6:c8:65:52:34:74:63:76:25:d5:34:c9:86:fd: 4b:60:c9:53:ad:c9:92:06:cb:25:2a:37:2a:be:96: 6b:65:95:da:d8:99:85:6f:2c:0c:77:a8:b7:5e:7e: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:90:14:60:77:63:51:67:04:33:82:96:D0:8C:14:AA:BC:78:43:ED X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:84:66:e2:df:f8:6d:65:9f:73:9e:13:41:52:cd:bb:10:98: 35:cb:ee:52:82:1d:85:7e:b9:c9:06:86:1a:53:0d:ce:9b:b3: e7:3e:0c:f7:c9:e4:16:75:1e:0a:0d:b9:24:47:3d:29:9e:80: 1d:1e:0d:24:bf:81:f2:ae:74:5e:6b:f7:cb:07:61:b6:c1:f2: b8:53:65:9c:be:4c:b3:bf:1b:ab:d9:d1:42:d9:03:93:0d:5a: 6e:d7:ef:23:60:04:cc:7a:ed:6b:49:c2:c8:31:81:64:6c:c2: 77:0f:90:fd:9b:7a:b6:ba:82:3b:f7:f8:0a:f2:bc:42:2e:ee: 2f:a0:8f:60:f7:55:7d:2a:aa:69:82:fd:70:f2:80:3f:05:0b: 10:e1:92:e3:83:20:bc:93:ab:a2:19:ab:8b:57:9c:7e:ce:38: fc:8e:b2:d0:79:67:51:38:83:3d:d6:7c:50:3c:dd:8a:99:34: fa:d5:ed:c8:ef:af:1b:3e:40:39:45:57:65:c5:bd:1e:b2:87: 5c:3d:85:fc:69:e6:3b:1b:3f:d8:f2:64:58:b3:ed:7e:4c:66: a9:9c:b7:5a:07:51:f2:6d:a8:31:bb:4f:f8:6b:07:09:e5:ef: bc:8a:11:f5:59:9e:98:53:72:44:fd:d4:a7:3d:e4:62:70:4a: 0a:b9:f7:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWm8+n/QRn/yRw5k9+pMQVamH1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTEyMDUwMTI1NTJaFw0yNTEyMDgwODMxNTJaMDMxMTAvBgNV BAMTKDYxOTAxNDYwNzc2MzUxNjcwNDMzODI5NkQwOEMxNEFBQkM3ODQzRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGosuIfMC95k+nRGYORIqVV0hH n1Xl1/nPhhTvgSkdNUcaK1byjB8Y+1sDo13VcLl+jekcc7kVAjpfucs4GAVatR6i P4VNPPjk64NaFdbbxFG/uW1A1Mz3agGSmmLgK6FZ/PQjnQo/bqrVKfWYJtaGi1A+ 4bLEz96Jx1EkW6+JY5nffH/aPjAtNY1TI2zzs5YLbsT+v0keTu0tcGYhtVgzeV2e pYOvt5XaERWfu5hQ1HICJNxPd8W/QzVCAyI0NHtOSVNq0R4aKCEFmVzVWjjCXz/G yGVSNHRjdiXVNMmG/UtgyVOtyZIGyyUqNyq+lmtlldrYmYVvLAx3qLdeftdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYZAUYHdjUWcEM4KW0IwUqrx4Q+0wHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESEZuLf+G1ln3OeE0FSzbsQmDXL7lKCHYV+ uckGhhpTDc6bs+c+DPfJ5BZ1HgoNuSRHPSmegB0eDSS/gfKudF5r98sHYbbB8rhT ZZy+TLO/G6vZ0ULZA5MNWm7X7yNgBMx67WtJwsgxgWRswncPkP2bera6gjv3+Ary vEIu7i+gj2D3VX0qqmmC/XDygD8FCxDhkuODILyTq6IZq4tXnH7OOPyOstB5Z1E4 gz3WfFA83YqZNPrV7cjvrxs+QDlFV2XFvR6yh1w9hfxp5jsbP9jyZFiz7X5MZqmc t1oHUfJtqDG7T/hrBwnl77yKEfVZnphTckT91Kc95GJwSgq592g= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:04 2025 by rpki-client