This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: 4+UZn3o8LvD+CRKd9aDSMEsGa7CJYClWHQJQcJCmlCI= Subject key identifier: 01:DC:6E:F3:A1:AD:FB:5D:3B:E6:E2:68:09:E1:C2:42:A6:5F:2F:31 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 27A8A64BAC548225ED22C60C7E051A95F71EE92D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01CD Signing time: Fri 05 Dec 2025 12:41:35 +0000 Manifest this update: Fri 05 Dec 2025 12:36:35 +0000 Manifest next update: Mon 08 Dec 2025 22:56:35 +0000 Files and hashes: 1: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: yPw2rsKoiD1u5BJlfLzjZiNOGSo1AZctyqt4OAjFgFk=) 2: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: WvA2JFm1OCiObbV4owSHIvkJpV0e6REQe/TCSDG98G4=) 3: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: EWZ8aolNNLiVVbkuT7UicoQ0CTjjE+TbqDmkXpjzrr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a8:a6:4b:ac:54:82:25:ed:22:c6:0c:7e:05:1a:95:f7:1e:e9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Dec 5 12:36:35 2025 GMT Not After : Dec 8 22:56:35 2025 GMT Subject: CN=01DC6EF3A1ADFB5D3BE6E26809E1C242A65F2F31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:fd:14:a6:ad:7f:b2:16:99:1d:8f:77:61: 4d:1c:be:7d:9b:bd:94:0d:35:2d:dd:ed:15:75:85: 96:67:09:76:44:44:39:8d:8c:02:85:ed:1b:d8:2d: 95:5a:af:0c:60:0d:5e:d1:50:f6:08:0a:27:0b:bb: 40:74:43:de:f6:2b:aa:8a:21:c1:e8:2c:07:98:f8: 83:77:f4:1e:25:8a:95:63:9f:f2:8f:16:d2:e9:0d: 35:38:2b:bd:9f:76:f9:9f:fe:12:af:08:a0:cb:18: c8:5e:53:f7:f1:49:5a:76:df:6c:7b:dd:60:4a:66: 74:17:ae:e3:61:92:c4:5c:b2:88:82:97:14:1f:69: 30:4f:58:80:9f:21:b0:b9:56:60:6c:00:f8:ed:78: 5c:be:4f:a1:42:d0:6b:9c:da:59:51:1a:cd:52:e4: 3a:99:f7:3b:91:36:d3:69:f6:1d:63:23:ba:34:10: e2:c2:fd:e0:f8:dd:59:02:72:a5:22:d4:0b:d7:4a: da:91:67:f7:71:77:f0:5f:16:9d:ff:ea:cd:02:49: 0a:65:b2:49:1d:bb:a4:01:e7:ad:d8:e5:ac:c8:a5: e3:d8:78:98:be:3e:c2:80:d0:29:e4:e0:67:2c:6c: a7:36:56:d7:50:65:72:86:d3:d9:86:30:bb:b6:42: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DC:6E:F3:A1:AD:FB:5D:3B:E6:E2:68:09:E1:C2:42:A6:5F:2F:31 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:09:69:69:10:62:c9:0c:3d:18:c2:c0:72:32:77:5f:da:4f: 88:eb:04:35:4d:ad:93:fb:d3:8a:87:08:cc:bb:af:ec:93:a8: e4:44:84:fa:09:fa:31:3f:8d:01:ee:d9:ff:f9:45:4a:63:22: 1a:b4:1a:9d:72:4a:5b:7d:a5:23:ce:8e:15:80:95:9b:c9:14: 02:35:f0:57:b2:68:d4:42:3f:51:1b:aa:89:62:4f:50:87:7f: 5c:36:94:87:e9:e5:dc:19:8d:af:eb:b2:20:ad:ba:0f:60:9e: 6b:a2:94:5e:66:8e:82:8f:71:96:52:5b:14:93:4a:0c:70:9a: 4c:ba:80:f1:6f:9a:14:8f:f4:7f:44:9f:25:48:a6:77:89:29: c9:4c:1e:ab:8d:3e:29:4f:79:7c:5d:53:de:5f:90:0c:c3:72: 36:c8:aa:f5:1d:49:25:a6:a8:ae:a7:69:b4:06:df:26:9d:0d: 56:09:ba:aa:ad:ec:6f:52:fa:38:f6:a9:1d:6b:38:ad:46:10: e7:3d:a3:33:36:e7:e0:8e:a2:8f:64:6b:09:74:e8:d6:d7:93: d8:e3:af:a0:80:12:39:04:7c:30:4a:7e:e7:b7:c5:ac:41:56: fb:7b:cc:d2:91:35:d2:ab:d5:d6:c4:8c:22:c1:87:be:74:70: 83:c4:24:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6imS6xUgiXtIsYMfgUalfce6S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTEyMDUxMjM2MzVaFw0yNTEyMDgyMjU2MzVaMDMxMTAvBgNV BAMTKDAxREM2RUYzQTFBREZCNUQzQkU2RTI2ODA5RTFDMjQyQTY1RjJGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBW/0Upq1/shaZHY93YU0cvn2b vZQNNS3d7RV1hZZnCXZERDmNjAKF7RvYLZVarwxgDV7RUPYICicLu0B0Q972K6qK IcHoLAeY+IN39B4lipVjn/KPFtLpDTU4K72fdvmf/hKvCKDLGMheU/fxSVp232x7 3WBKZnQXruNhksRcsoiClxQfaTBPWICfIbC5VmBsAPjteFy+T6FC0Guc2llRGs1S 5DqZ9zuRNtNp9h1jI7o0EOLC/eD43VkCcqUi1AvXStqRZ/dxd/BfFp3/6s0CSQpl skkdu6QB563Y5azIpePYeJi+PsKA0Cnk4GcsbKc2VtdQZXKG09mGMLu2QmsZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAdxu86Gt+1075uJoCeHCQqZfLzEwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgJaWkQYskMPRjCwHIyd1/aT4jrBDVNrZP7 04qHCMy7r+yTqOREhPoJ+jE/jQHu2f/5RUpjIhq0Gp1ySlt9pSPOjhWAlZvJFAI1 8FeyaNRCP1EbqoliT1CHf1w2lIfp5dwZja/rsiCtug9gnmuilF5mjoKPcZZSWxST Sgxwmky6gPFvmhSP9H9EnyVIpneJKclMHquNPilPeXxdU95fkAzDcjbIqvUdSSWm qK6nabQG3yadDVYJuqqt7G9S+jj2qR1rOK1GEOc9ozM25+COoo9kawl06NbXk9jj r6CAEjkEfDBKfue3xaxBVvt7zNKRNdKr1dbEjCLBh750cIPEJOg= -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:11 2025 by rpki-client