This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft File: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json) Hash identifier: IfMEBrQBu+/qki7WIosoMtX9OxcTMsSYPSNd4XfM3CM= Subject key identifier: 1E:0E:A9:E2:16:F8:8A:ED:F2:6C:C0:6E:38:67:99:90:E6:B3:30:8F Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 0C9937D4E52CB13B73D21E2624347022CC295588 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft Manifest number: 052D Signing time: Sat 06 Dec 2025 03:02:01 +0000 Manifest this update: Sat 06 Dec 2025 02:57:01 +0000 Manifest next update: Tue 09 Dec 2025 09:04:01 +0000 Files and hashes: 1: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: RarippCnWnMmEjTgkPvYhkG55G9O0lUfwe2+0FeUYpg=) 2: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: 5T2vXNrumlYE96wnUEV/fpe1FCQJI/SiEdQ4TMSeCko=) 3: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: KrFiIsKebuclmAnJCp7i0qAQI2dNZ1dLN7tW2prCRMk=) 4: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: kKOPYDd68IbPpSS7OOzul5ii2GOnq8I9waVsMp0r138=) 5: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=) 6: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gxzjhOqlSfyvVQV8GuZutKZCxMRY+U2lIgUsJNuDYjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:99:37:d4:e5:2c:b1:3b:73:d2:1e:26:24:34:70:22:cc:29:55:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Dec 6 02:57:01 2025 GMT Not After : Dec 9 09:04:01 2025 GMT Subject: CN=1E0EA9E216F88AEDF26CC06E38679990E6B3308F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:65:ef:55:fe:b7:fe:70:5f:bf:fc:e5:bc: 64:6c:af:02:62:80:e1:45:c7:19:1a:bf:cc:6e:01: 6c:de:13:c6:6d:80:c3:79:8d:e2:89:83:b7:df:59: 07:dd:8b:28:ab:33:16:0b:d8:1a:dd:9b:78:ce:3f: de:46:ae:86:09:47:8f:bf:6a:56:a2:19:b3:77:cc: 7b:94:f0:0f:d1:25:3f:43:fb:34:1c:60:7c:8f:ab: a1:8c:50:96:7d:1b:f3:bf:9f:be:94:70:31:a6:c8: f7:d4:79:4f:4d:1c:3c:cd:a7:fe:9a:d3:cc:11:b7: 88:c0:7a:b9:17:bc:a3:9f:7e:3e:c0:05:e4:df:9e: bc:2a:5b:cf:39:2a:22:0b:c4:db:aa:3c:90:50:5e: ca:82:a2:e1:83:bc:0b:19:2b:cd:8d:7a:e5:38:a7: 84:5f:f8:6e:e3:b6:4a:e9:67:5a:3a:1a:f2:7d:d9: ff:50:f0:78:50:f8:8e:b6:a5:87:c1:95:7b:a5:6e: a9:66:73:a6:0e:b1:8a:b7:01:08:73:11:95:ad:72: 94:dd:43:69:0d:9e:ce:66:fa:c4:e4:9e:71:57:74: 14:6e:af:c9:9a:a0:c9:72:a7:9d:6c:fd:6b:23:61: 18:fe:bb:32:2e:59:da:15:5b:16:6a:b1:73:3a:1c: c0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0E:A9:E2:16:F8:8A:ED:F2:6C:C0:6E:38:67:99:90:E6:B3:30:8F X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:da:b2:8f:d0:32:67:72:d8:fb:0d:fd:5b:0c:6f:1f:39:8b: 5a:48:cc:76:01:c6:72:dd:65:a3:d9:b2:c2:3e:8f:8d:f6:01: bc:3b:ff:05:50:5f:10:63:cc:14:10:0e:50:42:61:e2:c4:d7: ab:4d:c2:90:b4:42:8e:ac:c3:96:69:4e:5b:4b:de:cf:54:3f: e9:74:0f:19:53:fc:6e:1e:56:2a:9b:5a:bd:71:ce:9f:9b:81: be:ba:58:64:36:6f:27:88:5b:5e:ee:57:aa:b2:b1:b1:75:d6: cd:d3:39:00:bb:0f:47:ad:0a:ed:89:7d:98:ef:a0:e2:1b:32: ee:51:dd:f8:95:9b:2c:ab:d2:1a:d0:15:99:52:ea:c3:04:ac: 02:1b:14:57:51:8a:2c:39:c5:ca:0d:21:a7:a8:ac:e1:10:e7: 24:c6:9d:a4:21:18:6a:18:4a:06:5b:fd:d4:00:4f:4f:13:9d: 01:81:06:e1:b3:c7:6f:2f:db:39:50:30:9a:a7:d0:05:a7:ca: ae:64:e7:00:46:37:9a:e0:e5:c8:69:fe:52:91:34:c5:73:47: 69:42:1c:31:0a:28:5d:2a:c5:63:4c:80:68:ac:8b:36:7d:d9: 7a:7e:05:43:80:22:75:9d:4d:dc:b8:c6:75:e2:a1:ce:46:5b: d3:17:73:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJk31OUssTtz0h4mJDRwIswpVYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNTEyMDYwMjU3MDFaFw0yNTEyMDkwOTA0MDFaMDMxMTAvBgNV BAMTKDFFMEVBOUUyMTZGODhBRURGMjZDQzA2RTM4Njc5OTkwRTZCMzMwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGR2XvVf63/nBfv/zlvGRsrwJi gOFFxxkav8xuAWzeE8ZtgMN5jeKJg7ffWQfdiyirMxYL2Brdm3jOP95GroYJR4+/ alaiGbN3zHuU8A/RJT9D+zQcYHyPq6GMUJZ9G/O/n76UcDGmyPfUeU9NHDzNp/6a 08wRt4jAerkXvKOffj7ABeTfnrwqW885KiILxNuqPJBQXsqCouGDvAsZK82NeuU4 p4Rf+G7jtkrpZ1o6GvJ92f9Q8HhQ+I62pYfBlXulbqlmc6YOsYq3AQhzEZWtcpTd Q2kNns5m+sTknnFXdBRur8maoMlyp51s/WsjYRj+uzIuWdoVWxZqsXM6HMBzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHg6p4hb4iu3ybMBuOGeZkOazMI8wHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NF NDQxQTc4M0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnaso/QMmdy2PsN/VsMbx85i1pIzHYBxnLd ZaPZssI+j432Abw7/wVQXxBjzBQQDlBCYeLE16tNwpC0Qo6sw5ZpTltL3s9UP+l0 DxlT/G4eViqbWr1xzp+bgb66WGQ2byeIW17uV6qysbF11s3TOQC7D0etCu2JfZjv oOIbMu5R3fiVmyyr0hrQFZlS6sMErAIbFFdRiiw5xcoNIaeorOEQ5yTGnaQhGGoY SgZb/dQAT08TnQGBBuGzx28v2zlQMJqn0AWnyq5k5wBGN5rg5chp/lKRNMVzR2lC HDEKKF0qxWNMgGisizZ92Xp+BUOAInWdTdy4xnXioc5GW9MXc2c= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:44 2025 by rpki-client