This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: OomReAxJP7G3u6P7jRY1eqec4C4qEoRyVIkueRMI180= Subject key identifier: 1C:BA:39:E4:3A:AC:E8:94:6D:F5:39:E8:0A:BA:B5:3D:1A:5E:0B:B9 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 12A742F5ABAB99387F1BB5AC1B48B76459C796E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 011C Signing time: Fri 05 Dec 2025 19:21:14 +0000 Manifest this update: Fri 05 Dec 2025 19:16:14 +0000 Manifest next update: Tue 09 Dec 2025 06:00:14 +0000 Files and hashes: 1: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM=) 2: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g=) 3: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: x6ZV1Wl+WBaRGXPvArCfDSB+gNTaB80RBBLsR8syzeM=) 4: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: 6Z9gp7qtaOcyjOrnzK51jp2kq2mtUMo1jBXMn2OZOeg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a7:42:f5:ab:ab:99:38:7f:1b:b5:ac:1b:48:b7:64:59:c7:96:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Dec 5 19:16:14 2025 GMT Not After : Dec 9 06:00:14 2025 GMT Subject: CN=1CBA39E43AACE8946DF539E80ABAB53D1A5E0BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b1:50:28:bb:a4:18:56:dc:38:a5:f1:35:64: b5:43:64:d0:b1:f4:c5:ba:5c:8d:3d:ce:18:43:bd: 43:42:2f:f0:e4:e1:96:08:3b:30:52:1f:4a:84:34: eb:4e:ac:9e:44:4f:4a:d2:20:17:a7:14:4b:5e:53: f2:21:ea:c5:95:a0:c2:bf:62:47:59:6d:c2:64:d1: 7a:12:2c:1b:a9:16:d4:1d:53:95:e4:45:38:e3:6b: c6:2e:2a:04:c2:65:44:7b:29:9e:6a:6e:73:44:25: c0:49:70:e4:16:73:95:0f:14:f8:32:f0:35:ec:51: 16:13:ff:40:30:da:ff:69:a5:ce:93:c5:c5:80:87: 35:b8:2b:4c:99:b0:e3:c4:cc:f7:51:9a:3c:bf:eb: c1:19:9c:17:ec:c0:df:3b:f5:68:9d:56:97:67:14: b3:48:37:89:ec:43:55:42:42:e8:33:a5:1c:00:ce: bd:66:c8:60:4a:2a:dd:d5:55:be:1a:e2:26:aa:76: 15:ef:02:a4:dc:68:0f:83:bd:87:18:68:c6:b2:2f: b0:62:a2:8e:e3:47:52:d8:78:d4:99:92:db:da:d1: 8d:1c:48:b1:70:89:7a:04:d4:5c:23:3a:8f:e6:47: 64:cb:d6:3f:3c:ec:da:bf:b3:9d:26:e6:3a:c1:13: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BA:39:E4:3A:AC:E8:94:6D:F5:39:E8:0A:BA:B5:3D:1A:5E:0B:B9 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:98:cb:da:20:37:bd:b7:56:71:62:e6:db:d1:41:be:82:75: 1a:75:08:93:46:cb:e2:71:3b:ef:da:3c:b3:7d:b8:ef:cc:c7: af:f5:72:48:25:d8:cd:4c:21:c5:bf:3a:a6:28:4b:67:ee:73: 14:2b:57:fe:9c:11:77:9f:4d:d2:f6:dd:c2:e6:7e:62:97:a4: 7c:18:c0:19:e1:02:a6:07:77:30:2e:62:0b:50:d2:c4:85:1d: b7:2e:b1:67:89:8d:93:cd:ef:fc:3e:84:bd:65:b5:09:fd:3a: 6f:f0:63:29:c8:eb:43:7b:20:28:1c:db:63:10:f5:e2:f8:67: 8d:d0:64:6d:94:5a:68:e5:28:4a:c5:de:83:08:79:16:c1:3a: d7:90:0d:b2:1c:ff:9f:40:7d:b7:38:1c:b7:fa:63:87:1e:fa: 4a:a8:61:c1:ff:74:fe:c5:f1:6e:be:99:d9:76:c2:28:c1:ed: 9b:cb:1f:ff:e3:33:14:4a:95:2b:34:66:78:64:5e:e8:63:c4: ad:f9:27:e0:21:fd:7d:24:6e:91:8b:bf:91:1d:9b:93:82:2f: f5:44:76:10:74:60:c5:81:fc:3e:e3:4b:ae:1a:bc:22:af:2c: 40:d2:40:8c:1e:3a:1b:08:2a:9b:37:1c:90:a3:73:0b:75:e5: a8:b7:20:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqdC9aurmTh/G7WsG0i3ZFnHlukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTEyMDUxOTE2MTRaFw0yNTEyMDkwNjAwMTRaMDMxMTAvBgNV BAMTKDFDQkEzOUU0M0FBQ0U4OTQ2REY1MzlFODBBQkFCNTNEMUE1RTBCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlsVAou6QYVtw4pfE1ZLVDZNCx 9MW6XI09zhhDvUNCL/Dk4ZYIOzBSH0qENOtOrJ5ET0rSIBenFEteU/Ih6sWVoMK/ YkdZbcJk0XoSLBupFtQdU5XkRTjja8YuKgTCZUR7KZ5qbnNEJcBJcOQWc5UPFPgy 8DXsURYT/0Aw2v9ppc6TxcWAhzW4K0yZsOPEzPdRmjy/68EZnBfswN879WidVpdn FLNIN4nsQ1VCQugzpRwAzr1myGBKKt3VVb4a4iaqdhXvAqTcaA+DvYcYaMayL7Bi oo7jR1LYeNSZktva0Y0cSLFwiXoE1FwjOo/mR2TL1j887Nq/s50m5jrBExubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHLo55Dqs6JRt9TnoCrq1PRpeC7kwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeYy9ogN723VnFi5tvRQb6CdRp1CJNGy+Jx O+/aPLN9uO/Mx6/1ckgl2M1MIcW/OqYoS2fucxQrV/6cEXefTdL23cLmfmKXpHwY wBnhAqYHdzAuYgtQ0sSFHbcusWeJjZPN7/w+hL1ltQn9Om/wYynI60N7ICgc22MQ 9eL4Z43QZG2UWmjlKErF3oMIeRbBOteQDbIc/59Afbc4HLf6Y4ce+kqoYcH/dP7F 8W6+mdl2wijB7ZvLH//jMxRKlSs0ZnhkXuhjxK35J+Ah/X0kbpGLv5Edm5OCL/VE dhB0YMWB/D7jS64avCKvLEDSQIweOhsIKps3HJCjcwt15ai3IDw= -----END CERTIFICATE-----Generated at Sun Dec 7 06:07:31 2025 by rpki-client