This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: aFgpj3ogQ4jlSFZx/3nIvsshTQzZAe8GfhwZDbaoN8E= Subject key identifier: 8E:65:43:EE:FC:96:93:B8:F2:4C:53:18:DC:E4:CD:47:A5:80:5F:75 Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 77B91A318768F8D428BFD6990160D61B87614B5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 01D2 Signing time: Thu 04 Dec 2025 23:42:26 +0000 Manifest this update: Thu 04 Dec 2025 23:37:26 +0000 Manifest next update: Mon 08 Dec 2025 07:47:26 +0000 Files and hashes: 1: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: lOI9P/lubAZg29a4OoFY8YD8X/tVwnBQ3pr3nXY7nzU=) 2: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: KJBcxzna1Sdf4Z3z5OZgBn5Ib7elkK6g0XAXxdhyUSQ=) 3: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) 4: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b9:1a:31:87:68:f8:d4:28:bf:d6:99:01:60:d6:1b:87:61:4b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Dec 4 23:37:26 2025 GMT Not After : Dec 8 07:47:26 2025 GMT Subject: CN=8E6543EEFC9693B8F24C5318DCE4CD47A5805F75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:b2:3e:ef:40:39:5a:8c:7d:4b:d7:0b:6d: f3:3a:87:64:59:34:68:44:33:f5:c7:ca:fd:f2:a4: 58:1f:16:b3:29:7b:dc:f5:a7:74:3a:20:07:6d:59: bc:f4:be:f6:79:f0:9c:4f:43:4b:c7:c0:c0:5f:de: 2c:01:50:dc:6e:80:f1:d3:f0:2e:6f:7c:4a:b9:74: 85:64:1b:af:7c:f9:42:70:63:21:e0:76:56:9a:f2: ec:63:09:77:93:a7:e3:e7:89:46:ea:03:f0:8d:83: 0d:12:63:cd:6e:2f:71:76:6f:81:68:e8:35:5c:ce: b1:bb:8f:1b:3c:bb:22:37:b2:1c:9a:db:96:b1:47: a7:c0:f6:59:ca:c9:f0:6a:9a:96:4a:b2:52:35:96: e2:34:40:72:7a:8a:12:4e:d5:96:57:92:e9:bb:85: 15:e4:48:80:ad:78:13:b3:52:77:b4:fd:c6:b8:d2: 5f:99:d4:ed:54:77:81:18:da:66:b0:b3:a8:bc:d9: 65:98:94:8d:80:25:09:c9:55:a9:50:8b:bb:a8:63: f2:98:27:59:10:0f:3e:04:83:94:f5:27:23:94:90: eb:3d:9b:55:fb:bd:dd:fc:59:81:b8:e3:5e:22:c9: 4b:9b:4f:e1:98:09:a1:be:b2:ef:21:c3:43:f2:46: 14:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:65:43:EE:FC:96:93:B8:F2:4C:53:18:DC:E4:CD:47:A5:80:5F:75 X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b0:07:58:25:02:ba:5f:0f:3a:cf:34:91:14:ca:01:32:6c: df:84:9f:ae:26:f8:14:b3:15:11:f0:c1:37:bd:2b:9e:da:48: 3d:ce:ab:30:24:71:bf:da:87:17:30:15:7f:81:10:c5:4b:68: 62:f4:8b:d1:2c:ec:cb:42:11:04:13:f0:d0:f9:ad:a0:34:a7: f1:a0:73:c7:67:3f:ed:c0:29:1f:9e:4a:a4:08:1c:d2:69:f4: 98:8c:8c:07:ee:4f:09:72:f7:31:3d:06:7c:56:95:bd:c2:56: f1:19:7f:c8:e4:78:82:eb:67:fe:72:81:6a:07:a0:e8:92:0c: 6f:58:39:87:e0:05:01:03:3f:bf:69:45:78:6a:50:49:48:b5: f9:a6:6c:5f:fb:b4:7c:01:96:ff:b3:a9:34:78:aa:b8:ac:b4: 55:9e:0d:c8:13:74:42:53:9c:db:7d:d8:75:5b:1c:e9:c5:b3: 16:81:0a:3b:8c:05:98:7d:14:4c:f6:ab:31:7d:03:b5:0a:17: e0:01:1d:61:e4:2d:61:2d:37:13:f3:08:f6:1b:8c:07:84:79: 41:82:8e:a6:da:63:ba:7f:b1:11:4d:55:bb:b9:1b:75:53:dd: 0b:a3:06:b2:be:65:6f:3a:c2:b0:64:3a:f5:7d:27:8a:ab:8e: 0c:8b:85:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7kaMYdo+NQov9aZAWDWG4dhS18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNTEyMDQyMzM3MjZaFw0yNTEyMDgwNzQ3MjZaMDMxMTAvBgNV BAMTKDhFNjU0M0VFRkM5NjkzQjhGMjRDNTMxOERDRTRDRDQ3QTU4MDVGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/LI+70A5Wox9S9cLbfM6h2RZ NGhEM/XHyv3ypFgfFrMpe9z1p3Q6IAdtWbz0vvZ58JxPQ0vHwMBf3iwBUNxugPHT 8C5vfEq5dIVkG698+UJwYyHgdlaa8uxjCXeTp+PniUbqA/CNgw0SY81uL3F2b4Fo 6DVczrG7jxs8uyI3shya25axR6fA9lnKyfBqmpZKslI1luI0QHJ6ihJO1ZZXkum7 hRXkSICteBOzUne0/ca40l+Z1O1Ud4EY2maws6i82WWYlI2AJQnJValQi7uoY/KY J1kQDz4Eg5T1JyOUkOs9m1X7vd38WYG4414iyUubT+GYCaG+su8hw0PyRhTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjmVD7vyWk7jyTFMY3OTNR6WAX3UwHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6wB1glArpfDzrPNJEUygEybN+En64m+BSz FRHwwTe9K57aSD3OqzAkcb/ahxcwFX+BEMVLaGL0i9Es7MtCEQQT8ND5raA0p/Gg c8dnP+3AKR+eSqQIHNJp9JiMjAfuTwly9zE9BnxWlb3CVvEZf8jkeILrZ/5ygWoH oOiSDG9YOYfgBQEDP79pRXhqUElItfmmbF/7tHwBlv+zqTR4qristFWeDcgTdEJT nNt92HVbHOnFsxaBCjuMBZh9FEz2qzF9A7UKF+ABHWHkLWEtNxPzCPYbjAeEeUGC jqbaY7p/sRFNVbu5G3VT3QujBrK+ZW86wrBkOvV9J4qrjgyLhVY= -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:01 2025 by rpki-client