This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: B+ksU1BzGJ6Z9Em+boUuVPESOkfx97BnufZe+DrHVm4= Subject key identifier: 4C:52:16:D0:63:47:6E:F8:17:A2:31:45:F7:47:17:3F:3E:CA:F1:82 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 4D768882D3BE21A975840F7C63E10314DF77B06A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: F9 Signing time: Sat 06 Dec 2025 14:00:40 +0000 Manifest this update: Sat 06 Dec 2025 13:55:40 +0000 Manifest next update: Tue 09 Dec 2025 17:37:40 +0000 Files and hashes: 1: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: Hx0wkYhhPXcrWEDdDgtDQsu8yp+pihgVHSQ17X2l9Tk=) 2: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: jrKOilPCIf2Ja6+AaaEcXg/8k0wsYFPn+K9KWKLrdzE=) 3: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: ztwT0b/RRL8JmA2A1xEIyDAku/obP4kwaW2vaWiLopQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:76:88:82:d3:be:21:a9:75:84:0f:7c:63:e1:03:14:df:77:b0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Dec 6 13:55:40 2025 GMT Not After : Dec 9 17:37:40 2025 GMT Subject: CN=4C5216D063476EF817A23145F747173F3ECAF182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8d:e6:bd:2b:ee:86:a8:47:66:89:cd:52:60: 3b:a8:7d:5c:21:29:6f:6e:07:35:1d:7f:bb:ad:19: b6:5a:58:4a:32:30:e0:31:51:05:0e:36:dd:8f:56: d3:c1:b6:37:3f:42:ff:33:be:08:e7:a4:c6:fa:ed: e5:23:90:b2:35:50:1b:76:ef:1e:d1:25:21:e3:e1: 52:a0:bd:54:80:eb:a9:fe:15:28:3a:76:1b:e9:a6: 9b:ce:75:e2:bf:21:76:15:94:54:b6:d4:b0:06:1b: 5c:95:2a:67:52:41:93:f5:7d:25:97:0d:25:cc:1e: ad:7b:d2:26:8b:5f:b9:92:2a:4c:c7:aa:df:8a:9b: 65:23:75:67:59:87:f6:46:2b:b2:73:30:69:c3:b4: 3a:c7:51:e4:2c:ae:25:86:64:61:f6:c3:42:1d:cc: ae:7d:70:64:4e:f4:c3:e8:82:e1:4b:69:02:a1:3e: b5:64:1b:c2:e0:a8:ee:35:11:2e:d5:3b:58:de:7d: 61:2f:5a:80:0f:60:46:c2:79:03:ab:55:d6:8e:4d: cc:ea:e4:20:7e:9c:5b:bf:2d:52:4b:0a:c4:f3:3b: e9:8f:81:36:b0:08:5b:9a:c0:c4:35:83:67:90:eb: 49:42:a0:a2:8f:13:b1:09:a6:c2:28:29:41:c0:48: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:52:16:D0:63:47:6E:F8:17:A2:31:45:F7:47:17:3F:3E:CA:F1:82 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:4b:9a:65:9b:d2:e9:db:56:c8:81:33:39:a6:5c:a3:a0:9c: cd:bf:6f:5a:fe:23:fa:f3:49:35:d2:2a:d7:3b:37:ea:db:82: b9:a1:6e:04:f9:92:65:d9:b6:6f:0d:31:8d:c3:79:10:ea:ef: 9c:2a:9d:69:21:90:b1:d9:1d:ea:4a:bb:f2:2a:3d:0b:d6:b0: a4:89:da:4c:5a:58:6f:c8:ed:1a:69:bf:52:87:fb:d4:97:68: 48:2c:46:79:9a:b0:17:f6:cb:9c:c6:71:d3:be:9d:3e:1f:7a: c0:16:04:90:b3:96:9f:ed:14:2f:50:8c:97:1f:02:ea:37:c9: f1:46:80:4e:7d:f7:05:de:43:42:08:14:a8:e7:ef:73:73:44: 9d:f1:c1:df:40:5d:c7:ee:b6:28:ea:a2:45:51:07:45:f0:0b: 3a:ee:b7:51:23:56:78:6b:c8:70:82:a9:14:be:91:53:a6:41: 5f:d0:c4:6a:24:97:14:5f:ed:67:8f:2b:a1:51:35:d9:12:ca: 15:4c:a5:16:09:a7:f9:d1:01:3e:f9:6e:bf:11:8e:90:5c:98: 36:02:ac:e8:76:68:92:2b:b9:a5:67:7d:46:79:99:87:f3:4c: 92:12:69:b0:24:c1:20:75:b2:4f:d2:ea:1b:17:d2:dd:db:85: 34:48:4b:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXaIgtO+Ial1hA98Y+EDFN93sGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTEyMDYxMzU1NDBaFw0yNTEyMDkxNzM3NDBaMDMxMTAvBgNV BAMTKDRDNTIxNkQwNjM0NzZFRjgxN0EyMzE0NUY3NDcxNzNGM0VDQUYxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqjea9K+6GqEdmic1SYDuofVwh KW9uBzUdf7utGbZaWEoyMOAxUQUONt2PVtPBtjc/Qv8zvgjnpMb67eUjkLI1UBt2 7x7RJSHj4VKgvVSA66n+FSg6dhvpppvOdeK/IXYVlFS21LAGG1yVKmdSQZP1fSWX DSXMHq170iaLX7mSKkzHqt+Km2UjdWdZh/ZGK7JzMGnDtDrHUeQsriWGZGH2w0Id zK59cGRO9MPoguFLaQKhPrVkG8LgqO41ES7VO1jefWEvWoAPYEbCeQOrVdaOTczq 5CB+nFu/LVJLCsTzO+mPgTawCFuawMQ1g2eQ60lCoKKPE7EJpsIoKUHASLmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTFIW0GNHbvgXojFF90cXPz7K8YIwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJLmmWb0unbVsiBMzmmXKOgnM2/b1r+I/rz STXSKtc7N+rbgrmhbgT5kmXZtm8NMY3DeRDq75wqnWkhkLHZHepKu/IqPQvWsKSJ 2kxaWG/I7Rppv1KH+9SXaEgsRnmasBf2y5zGcdO+nT4fesAWBJCzlp/tFC9QjJcf Auo3yfFGgE599wXeQ0IIFKjn73NzRJ3xwd9AXcfutijqokVRB0XwCzrut1EjVnhr yHCCqRS+kVOmQV/QxGoklxRf7WePK6FRNdkSyhVMpRYJp/nRAT75br8RjpBcmDYC rOh2aJIruaVnfUZ5mYfzTJISabAkwSB1sk/S6hsX0t3bhTRISz0= -----END CERTIFICATE-----Generated at Sun Dec 7 07:22:43 2025 by rpki-client