This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: Itxs5+ejn3oL8/fl0ZXjMd24HWdHV94872PjALnkRzA= Subject key identifier: 74:0E:82:B4:0A:E0:FE:37:BE:F0:2B:A8:9C:F8:8E:13:60:82:F0:4F Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 1747E1F07D63D67FA22BA85E7C3ECD5BE0FFFD8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: FE Signing time: Wed 17 Dec 2025 12:00:40 +0000 Manifest this update: Wed 17 Dec 2025 11:55:40 +0000 Manifest next update: Sat 20 Dec 2025 16:56:40 +0000 Files and hashes: 1: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: jrKOilPCIf2Ja6+AaaEcXg/8k0wsYFPn+K9KWKLrdzE=) 2: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: h5jaGaE646enrJ4BJYwjdLAtnzll2QY+vViySPPtth0=) 3: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: ztwT0b/RRL8JmA2A1xEIyDAku/obP4kwaW2vaWiLopQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:47:e1:f0:7d:63:d6:7f:a2:2b:a8:5e:7c:3e:cd:5b:e0:ff:fd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Dec 17 11:55:40 2025 GMT Not After : Dec 20 16:56:40 2025 GMT Subject: CN=740E82B40AE0FE37BEF02BA89CF88E136082F04F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:fa:23:bd:7a:51:82:e1:55:dc:59:af:e4: 26:0e:58:09:ae:39:f3:c7:a4:c5:fd:c5:c1:32:63: b7:c3:fa:8b:08:e1:ed:01:0d:68:70:e1:a5:18:26: 3d:2e:8e:dd:65:80:8e:3f:cd:16:10:d7:a0:df:59: 9d:e5:5f:61:45:93:d1:fe:f9:b3:24:97:d3:82:08: 19:8e:91:01:e5:b6:3c:ac:39:04:6b:64:ef:f0:28: 1d:88:d3:ee:18:94:b1:3b:6f:35:2e:d3:1f:62:7b: 9c:d8:9f:cf:72:15:5c:1a:19:6a:0a:42:58:6e:b0: 1e:f4:48:35:bd:68:8f:bf:79:1e:8c:0b:51:d9:f4: e7:c4:2e:85:ec:25:25:d1:65:be:43:b7:a9:63:98: ec:70:83:03:82:c6:81:a0:4f:89:79:4c:67:ab:7c: 22:cd:05:05:ad:68:ab:74:24:be:bc:9e:a2:8a:03: bd:26:0d:45:5e:5c:be:b3:eb:f7:67:0a:bb:61:c8: 67:5b:4b:e4:4e:31:9e:5a:8e:0f:12:ef:79:55:e5: de:16:e4:b2:78:7b:69:49:cb:ba:0b:b7:5d:32:0f: 20:2d:d2:ff:56:4a:1c:c1:f3:79:cc:04:c5:8e:4c: f5:89:ee:dc:28:a3:53:fa:d7:37:04:d4:a9:f5:60: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0E:82:B4:0A:E0:FE:37:BE:F0:2B:A8:9C:F8:8E:13:60:82:F0:4F X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c5:cd:87:d7:f6:0e:b1:ce:b1:5a:09:97:ca:12:11:71:ec: e1:dc:8d:0b:e6:ff:55:0a:8d:2f:7e:11:e8:2a:cc:df:2a:74: 69:3b:88:64:9a:b7:79:2a:12:c4:ba:9a:70:a4:ee:9f:e9:48: d7:f7:55:c6:0a:90:e6:76:00:6a:37:08:ec:a3:9b:1a:9e:d8: 07:4d:f5:01:5a:f6:ea:7e:a8:e4:7e:3b:f7:53:6b:bb:46:e2: 15:81:25:66:bf:88:e8:63:c9:38:47:65:03:5b:24:d5:a4:ac: 38:b0:ea:e4:c3:2f:ed:69:87:50:bb:00:46:29:bc:58:4c:df: fa:0a:9c:b8:11:6b:19:8b:c8:95:67:a5:02:16:29:df:c3:20: 07:91:56:24:3a:b4:25:22:8d:17:a8:3a:50:00:97:b2:1c:14: f9:3a:9a:4e:7e:dd:36:f5:a3:9d:80:76:24:c4:ac:1e:99:2a: b1:29:61:40:87:8e:c6:e8:1c:70:c9:a6:37:14:c1:b9:e7:bd: 02:cd:0f:b3:08:af:c7:1e:00:d3:07:54:0b:41:86:27:ff:26: a2:91:03:cb:85:1c:93:78:52:48:73:22:51:96:6c:1d:e5:6f: 52:61:b5:e7:e2:bb:32:99:6b:02:81:2e:ff:19:23:74:9e:ec: 6d:bb:e9:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0fh8H1j1n+iK6hefD7NW+D//Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTEyMTcxMTU1NDBaFw0yNTEyMjAxNjU2NDBaMDMxMTAvBgNV BAMTKDc0MEU4MkI0MEFFMEZFMzdCRUYwMkJBODlDRjg4RTEzNjA4MkYwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ifojvXpRguFV3Fmv5CYOWAmu OfPHpMX9xcEyY7fD+osI4e0BDWhw4aUYJj0ujt1lgI4/zRYQ16DfWZ3lX2FFk9H+ +bMkl9OCCBmOkQHltjysOQRrZO/wKB2I0+4YlLE7bzUu0x9ie5zYn89yFVwaGWoK QlhusB70SDW9aI+/eR6MC1HZ9OfELoXsJSXRZb5Dt6ljmOxwgwOCxoGgT4l5TGer fCLNBQWtaKt0JL68nqKKA70mDUVeXL6z6/dnCrthyGdbS+ROMZ5ajg8S73lV5d4W 5LJ4e2lJy7oLt10yDyAt0v9WShzB83nMBMWOTPWJ7twoo1P61zcE1Kn1YEzRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdA6CtArg/je+8CuonPiOE2CC8E8wHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzFzYfX9g6xzrFaCZfKEhFx7OHcjQvm/1UK jS9+EegqzN8qdGk7iGSat3kqEsS6mnCk7p/pSNf3VcYKkOZ2AGo3COyjmxqe2AdN 9QFa9up+qOR+O/dTa7tG4hWBJWa/iOhjyThHZQNbJNWkrDiw6uTDL+1ph1C7AEYp vFhM3/oKnLgRaxmLyJVnpQIWKd/DIAeRViQ6tCUijReoOlAAl7IcFPk6mk5+3Tb1 o52AdiTErB6ZKrEpYUCHjsboHHDJpjcUwbnnvQLND7MIr8ceANMHVAtBhif/JqKR A8uFHJN4UkhzIlGWbB3lb1JhtefiuzKZawKBLv8ZI3Se7G276f4= -----END CERTIFICATE-----Generated at Wed Dec 17 18:28:46 2025 by rpki-client