This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json) Hash identifier: nEHPMMELBYYYpcc2ABmr7c1eb7NfUlELMGL6x8wPJE0= Subject key identifier: 81:46:C3:93:6F:53:FD:FF:FC:F9:5B:67:B4:32:EF:06:EF:44:55:34 Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 272FD57929F5DA76FACE329D0850869443A1E6AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft Manifest number: E2 Signing time: Fri 05 Dec 2025 15:02:27 +0000 Manifest this update: Fri 05 Dec 2025 14:57:27 +0000 Manifest next update: Tue 09 Dec 2025 02:09:27 +0000 Files and hashes: 1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=) 2: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: jAQRVYmWDJHh71JL98iSF5dMo9d+OsR45xiQb8mxH9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2f:d5:79:29:f5:da:76:fa:ce:32:9d:08:50:86:94:43:a1:e6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Dec 5 14:57:27 2025 GMT Not After : Dec 9 02:09:27 2025 GMT Subject: CN=8146C3936F53FDFFFCF95B67B432EF06EF445534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:1a:c6:86:83:a4:23:08:98:b2:ca:b6:df:34: 85:02:71:72:c1:9f:68:bc:9b:89:4d:7d:f3:6f:56: 78:b3:f1:2f:5f:a9:73:84:58:03:6a:ff:fa:83:b4: dc:a3:b1:7e:a4:aa:bf:cd:be:a7:d5:1f:2a:f8:ae: 6f:6c:d8:52:dc:d2:da:dd:23:55:b5:48:40:d4:43: 49:4a:f1:78:63:c4:67:57:6e:dc:6f:b8:ba:87:8d: e9:d5:3a:49:08:5e:fb:05:28:90:bf:5d:f1:05:50: a5:e0:90:63:35:c9:47:51:34:63:d6:41:f0:c1:c1: 76:95:29:cd:1c:e1:b4:aa:7a:30:f4:9e:4a:88:22: f3:7b:5b:46:e1:fa:de:52:22:11:23:a9:e6:ac:88: d7:19:a0:cb:e1:67:e8:83:a6:62:9d:cc:c5:4b:2a: 4a:47:9d:94:ec:a7:ba:b5:2d:bd:90:21:30:10:b3: f3:33:29:a5:07:9d:8b:f0:a6:43:34:94:4f:67:17: 9c:b0:94:ae:46:9e:6c:94:a1:69:9c:93:a7:57:d0: 2b:70:74:b6:56:74:e2:fc:43:07:1c:12:88:0f:04: cd:3c:ee:9e:97:2c:6a:91:9d:60:40:a9:4c:37:6c: 8c:db:20:6f:9f:a4:76:5e:cd:6e:9f:1c:ad:8f:cc: 56:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:46:C3:93:6F:53:FD:FF:FC:F9:5B:67:B4:32:EF:06:EF:44:55:34 X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:14:a2:47:01:cb:58:a0:b5:4b:81:36:3b:2e:61:4b:3f:f0: 78:68:f7:09:14:3d:4d:8e:ce:3b:a1:4e:93:4e:3d:ba:dd:36: e1:1e:42:fe:6d:5c:ea:b4:19:81:24:4c:b6:9e:a8:c5:64:cb: bc:ba:29:87:38:7b:57:70:17:3b:5b:d9:e3:07:a3:d9:23:05: 8e:fa:7f:f6:68:1a:b4:1a:c9:06:69:71:0b:e8:17:75:a5:f6: 48:cc:a9:d4:04:1c:13:d1:94:cd:51:0f:9d:44:f6:dd:66:25: b1:ec:0a:21:84:6e:fd:02:06:0d:3a:b6:de:f0:60:ad:1e:27: 6c:1b:49:0a:18:90:f1:0e:8f:3b:a7:6c:4d:f3:17:89:52:c3: fd:d3:bd:5d:21:cf:23:fd:40:9b:c5:fc:cf:fd:a2:a2:d7:9f: 76:3f:e5:91:8d:89:2c:e6:d0:cb:4c:32:bd:7d:6c:66:82:5e: c6:47:79:d5:98:6b:9a:e2:55:c2:6c:93:a5:f4:62:0e:3b:0e: cf:b8:6f:d9:51:d0:73:3c:7b:17:ba:0b:fa:c0:9b:21:da:77: a1:a1:58:9e:43:51:95:7d:b5:04:df:0c:c3:ec:0f:11:4c:32: 1a:cd:4b:42:16:f1:a2:a6:6c:13:1b:46:7d:b0:f1:3a:51:56: c4:8c:0f:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJy/VeSn12nb6zjKdCFCGlEOh5q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNTEyMDUxNDU3MjdaFw0yNTEyMDkwMjA5MjdaMDMxMTAvBgNV BAMTKDgxNDZDMzkzNkY1M0ZERkZGQ0Y5NUI2N0I0MzJFRjA2RUY0NDU1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9GsaGg6QjCJiyyrbfNIUCcXLB n2i8m4lNffNvVniz8S9fqXOEWANq//qDtNyjsX6kqr/NvqfVHyr4rm9s2FLc0trd I1W1SEDUQ0lK8XhjxGdXbtxvuLqHjenVOkkIXvsFKJC/XfEFUKXgkGM1yUdRNGPW QfDBwXaVKc0c4bSqejD0nkqIIvN7W0bh+t5SIhEjqeasiNcZoMvhZ+iDpmKdzMVL KkpHnZTsp7q1Lb2QITAQs/MzKaUHnYvwpkM0lE9nF5ywlK5GnmyUoWmck6dX0Ctw dLZWdOL8QwccEogPBM087p6XLGqRnWBAqUw3bIzbIG+fpHZezW6fHK2PzFY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUbDk29T/f/8+VtntDLvBu9EVTQwHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEUokcBy1igtUuBNjsuYUs/8Hho9wkUPU2O zjuhTpNOPbrdNuEeQv5tXOq0GYEkTLaeqMVky7y6KYc4e1dwFztb2eMHo9kjBY76 f/ZoGrQayQZpcQvoF3Wl9kjMqdQEHBPRlM1RD51E9t1mJbHsCiGEbv0CBg06tt7w YK0eJ2wbSQoYkPEOjzunbE3zF4lSw/3TvV0hzyP9QJvF/M/9oqLXn3Y/5ZGNiSzm 0MtMMr19bGaCXsZHedWYa5riVcJsk6X0Yg47Ds+4b9lR0HM8exe6C/rAmyHad6Gh WJ5DUZV9tQTfDMPsDxFMMhrNS0IW8aKmbBMbRn2w8TpRVsSMD44= -----END CERTIFICATE-----Generated at Mon Dec 8 02:36:20 2025 by rpki-client