This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft (raw, json) Hash identifier: IS94WAqEZ9H/d4TQ2ZCrAdNxSeWY5JUCjv3xn1+UM/g= Subject key identifier: 62:4A:F0:EB:A5:AA:4F:13:CF:7C:7A:BB:A1:72:65:47:11:45:67:AC Authority key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 Certificate issuer: /CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Certificate serial: 12DE950579658BD63DE1A250EAEF01FC4CFADF5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft Manifest number: 0272 Signing time: Sat 06 Dec 2025 15:11:51 +0000 Manifest this update: Sat 06 Dec 2025 15:06:51 +0000 Manifest next update: Tue 09 Dec 2025 22:31:51 +0000 Files and hashes: 1: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl (hash: DqY1I/ffHe8jIZtsA6cw6iL+sh1ksb+CJ5xbpCE6TMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:de:95:05:79:65:8b:d6:3d:e1:a2:50:ea:ef:01:fc:4c:fa:df:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Validity Not Before: Dec 6 15:06:51 2025 GMT Not After : Dec 9 22:31:51 2025 GMT Subject: CN=624AF0EBA5AA4F13CF7C7ABBA1726547114567AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:3d:3f:45:ff:1e:d6:21:bf:32:77:99:d6: e4:a3:e8:bd:a8:30:0e:3b:4c:0e:3a:10:7d:38:f7: 3f:ec:6e:fc:82:c0:f8:55:7f:15:2b:60:c8:e0:39: d0:a5:91:3a:5e:d8:cc:e7:d3:3c:e7:fd:db:26:f6: 0c:69:fe:d6:b9:12:c1:47:b7:a2:51:7e:3b:a8:a9: 25:46:a7:ea:c5:6c:42:d2:b4:b8:b9:6b:9a:5f:f4: 7c:24:46:64:ef:16:ef:12:2a:c3:38:7d:77:40:ff: 23:54:c8:09:da:2a:e8:e0:a1:55:41:11:5d:7c:e0: 3c:33:64:9d:43:79:3c:6a:dc:f1:03:8b:e3:f9:d5: ca:61:7d:84:a0:fa:e7:df:cd:35:44:2e:b1:a8:26: 16:66:2e:f1:75:d8:92:f7:3e:bd:0d:25:28:7f:14: cb:0d:86:97:76:80:ad:ad:14:52:db:75:a0:6f:3e: 67:fd:c2:61:43:2f:5b:54:9c:ad:4e:fe:14:0f:29: 3d:95:1e:15:fb:34:13:99:67:0d:af:ed:ac:4f:8b: 25:60:22:90:74:86:c6:16:46:78:69:39:78:43:61: 39:c6:03:6e:1e:91:76:ce:fd:ac:db:73:0f:1f:ce: 1a:e7:5f:ac:c4:4f:45:08:2b:1d:16:52:5f:ad:31: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4A:F0:EB:A5:AA:4F:13:CF:7C:7A:BB:A1:72:65:47:11:45:67:AC X509v3 Authority Key Identifier: keyid:48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:93:c8:18:e5:6a:ad:fd:69:81:f6:54:74:ab:ca:c9:3b:ed: 5a:53:bd:3d:0e:11:2e:51:be:89:22:b2:0b:9d:21:43:ad:b7: c0:e6:20:79:46:9c:4c:a5:ae:eb:ce:11:4f:bb:b8:da:31:1b: 77:ba:95:fa:73:53:19:8c:fc:e3:a9:7c:07:4b:65:33:ae:db: 89:10:b7:07:5c:df:dc:78:5e:a5:87:23:18:7b:14:f0:63:4a: ad:06:9c:13:2e:75:88:67:a8:db:4e:d3:ce:a5:7b:81:04:40: 9e:34:4f:4c:47:fe:39:fd:ac:f6:e5:47:8f:44:c6:54:3f:95: c2:98:ed:db:ea:db:b2:7e:fd:61:82:33:05:a8:49:0c:ee:08: c6:e9:b6:5e:cf:d0:b6:a6:c3:e9:fb:60:86:ce:39:31:63:a6: 68:53:d8:be:27:20:0b:84:e8:a6:f0:c9:bd:09:25:ae:c1:9b: 5c:87:1e:8a:a9:ef:0b:90:c2:44:fe:c8:4f:80:93:d8:7b:70: c3:4e:15:a7:c2:32:44:de:07:a5:cc:62:d9:94:bf:0e:f9:55: be:68:cb:76:5b:94:d7:2e:c2:25:96:8c:0b:dd:2a:a5:2a:d6: 18:11:be:6f:51:43:a3:76:b0:6e:0a:2d:d8:c7:54:61:40:18: ec:7e:e3:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEt6VBXlli9Y94aJQ6u8B/Ez631wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkw Q0FGRjY3NzAeFw0yNTEyMDYxNTA2NTFaFw0yNTEyMDkyMjMxNTFaMDMxMTAvBgNV BAMTKDYyNEFGMEVCQTVBQTRGMTNDRjdDN0FCQkExNzI2NTQ3MTE0NTY3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyT0/Rf8e1iG/MneZ1uSj6L2o MA47TA46EH049z/sbvyCwPhVfxUrYMjgOdClkTpe2Mzn0zzn/dsm9gxp/ta5EsFH t6JRfjuoqSVGp+rFbELStLi5a5pf9HwkRmTvFu8SKsM4fXdA/yNUyAnaKujgoVVB EV184DwzZJ1DeTxq3PEDi+P51cphfYSg+uffzTVELrGoJhZmLvF12JL3Pr0NJSh/ FMsNhpd2gK2tFFLbdaBvPmf9wmFDL1tUnK1O/hQPKT2VHhX7NBOZZw2v7axPiyVg IpB0hsYWRnhpOXhDYTnGA24ekXbO/azbcw8fzhrnX6zET0UIKx0WUl+tMWT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYkrw66WqTxPPfHq7oXJlRxFFZ6wwHwYDVR0j BBgwFoAUSMEm+Y66fS/E6oV4pUab6Qyv9ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC80OEMxMjZGOThF QkE3RDJGQzRFQTg1NzhBNTQ2OUJFOTBDQUZGNjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkwQ0FG RjY3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj ZmEtYTE5ZWI5ZTBmNjM3LzAvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlC RTkwQ0FGRjY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeTyBjlaq39aYH2VHSrysk77VpTvT0OES5R vokisgudIUOtt8DmIHlGnEylruvOEU+7uNoxG3e6lfpzUxmM/OOpfAdLZTOu24kQ twdc39x4XqWHIxh7FPBjSq0GnBMudYhnqNtO086le4EEQJ40T0xH/jn9rPblR49E xlQ/lcKY7dvq27J+/WGCMwWoSQzuCMbptl7P0Lamw+n7YIbOOTFjpmhT2L4nIAuE 6Kbwyb0JJa7Bm1yHHoqp7wuQwkT+yE+Ak9h7cMNOFafCMkTeB6XMYtmUvw75Vb5o y3ZblNcuwiWWjAvdKqUq1hgRvm9RQ6N2sG4KLdjHVGFAGOx+47o= -----END CERTIFICATE-----Generated at Sun Dec 7 06:56:42 2025 by rpki-client