This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: D/RbAOxBVktxIefHnyE7KYDx3LEYBD+ipzrGhNLUE/k= Subject key identifier: 9A:22:F9:09:DB:43:51:1C:69:F4:38:E3:50:18:95:62:38:51:F7:7D Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 490B8608A5951831E93E8734649CCD2839B7C56F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: F1 Signing time: Mon 08 Dec 2025 00:31:13 +0000 Manifest this update: Mon 08 Dec 2025 00:26:13 +0000 Manifest next update: Thu 11 Dec 2025 02:38:13 +0000 Files and hashes: 1: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) 2: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: o3Qy5MD6qLQpjFWC4ACSHcGE2nNRC0mRzcGl5W5YpzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 02:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0b:86:08:a5:95:18:31:e9:3e:87:34:64:9c:cd:28:39:b7:c5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Dec 8 00:26:13 2025 GMT Not After : Dec 11 02:38:13 2025 GMT Subject: CN=9A22F909DB43511C69F438E3501895623851F77D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:6d:89:62:51:94:8a:40:b0:e5:7a:9d:6d: 33:60:2e:e0:72:2f:c9:f7:c0:6e:cd:1f:2e:de:b2: 34:45:51:df:0d:c5:88:00:90:7f:8f:25:f2:09:93: 26:4b:c6:4f:68:2c:fc:72:3a:e3:82:72:74:26:91: e0:85:62:c5:6f:78:93:b4:b1:86:63:f3:e8:db:2b: 11:c4:91:eb:c7:24:ce:e7:04:5b:5b:05:b1:51:1e: 49:da:4f:b3:57:3e:9d:3b:f6:32:f6:8d:bb:f9:77: ab:89:86:60:59:11:59:f2:b3:bc:43:e3:c2:a7:9c: 18:52:8e:d9:ca:ff:39:00:bc:85:67:3e:5a:c1:c8: 6f:08:a6:35:0c:b2:25:a8:54:c3:1f:65:40:6b:29: 9a:10:5d:3c:ae:c9:a4:66:97:31:28:ac:4d:5c:94: 32:9d:f9:43:aa:3e:0c:b7:bf:21:a7:88:57:c8:2f: 25:88:7e:d3:b8:a4:13:d7:ef:02:67:a6:e4:9c:ae: 16:12:33:c2:13:54:2d:c0:b4:fa:63:22:0b:b2:8b: 9f:41:f4:14:2a:e3:9a:ff:cf:85:d8:e8:9f:97:93: 41:6f:88:7c:21:c7:85:8b:4d:6c:fc:69:ec:5b:39: a4:0d:c3:14:35:4f:7c:97:17:db:10:6d:98:fb:6a: 70:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:22:F9:09:DB:43:51:1C:69:F4:38:E3:50:18:95:62:38:51:F7:7D X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d7:ef:21:93:23:a0:7a:ef:bf:39:6b:ce:8b:77:f0:7b:9b: 72:7c:f5:61:6f:d7:fc:c5:7f:ef:4e:55:20:a4:91:c5:12:b9: ed:5e:91:b2:27:7c:b8:e9:cf:9c:6d:f1:17:f4:ff:2b:fa:4d: ab:89:0f:39:aa:b5:72:32:d2:a0:f9:bf:6f:b0:12:96:db:f2: bc:d8:6a:c2:b2:b6:84:2e:ba:84:84:0a:18:15:4e:2b:7e:b2: 26:5f:41:52:e8:f0:19:68:6a:7b:19:15:e6:9c:7d:d4:20:38: 3e:c4:c6:90:7d:47:12:79:d6:22:53:d3:07:8d:91:6b:a5:fd: 2d:fb:da:6e:22:21:32:cf:17:b7:bb:05:dc:f9:83:f1:04:5b: 0c:42:76:02:18:80:56:c2:df:0c:06:bc:a7:af:1a:8c:20:24: 56:f6:5f:a3:1d:d9:c9:5b:30:c6:09:bf:b9:13:10:e4:ab:2d: e6:c8:5a:5c:da:96:7f:78:30:da:b1:76:b1:ea:e5:7d:85:43: a8:e0:2c:eb:22:df:e0:1d:c2:02:65:5c:9b:98:94:f9:06:0b: 0b:55:75:15:68:6a:ca:63:4f:eb:51:44:ac:e1:ee:a3:72:ba: d4:e5:91:3c:b6:c7:ad:d1:e5:5a:3a:70:0b:21:69:15:a5:fa: 66:40:81:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQuGCKWVGDHpPoc0ZJzNKDm3xW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTEyMDgwMDI2MTNaFw0yNTEyMTEwMjM4MTNaMDMxMTAvBgNV BAMTKDlBMjJGOTA5REI0MzUxMUM2OUY0MzhFMzUwMTg5NTYyMzg1MUY3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNH22JYlGUikCw5XqdbTNgLuBy L8n3wG7NHy7esjRFUd8NxYgAkH+PJfIJkyZLxk9oLPxyOuOCcnQmkeCFYsVveJO0 sYZj8+jbKxHEkevHJM7nBFtbBbFRHknaT7NXPp079jL2jbv5d6uJhmBZEVnys7xD 48KnnBhSjtnK/zkAvIVnPlrByG8IpjUMsiWoVMMfZUBrKZoQXTyuyaRmlzEorE1c lDKd+UOqPgy3vyGniFfILyWIftO4pBPX7wJnpuScrhYSM8ITVC3AtPpjIguyi59B 9BQq45r/z4XY6J+Xk0FviHwhx4WLTWz8aexbOaQNwxQ1T3yXF9sQbZj7anCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmiL5CdtDURxp9DjjUBiVYjhR930wHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3X7yGTI6B67785a86Ld/B7m3J89WFv1/zF f+9OVSCkkcUSue1ekbInfLjpz5xt8Rf0/yv6TauJDzmqtXIy0qD5v2+wEpbb8rzY asKytoQuuoSEChgVTit+siZfQVLo8BloansZFeacfdQgOD7ExpB9RxJ51iJT0weN kWul/S372m4iITLPF7e7Bdz5g/EEWwxCdgIYgFbC3wwGvKevGowgJFb2X6Md2clb MMYJv7kTEOSrLebIWlzaln94MNqxdrHq5X2FQ6jgLOsi3+AdwgJlXJuYlPkGCwtV dRVoaspjT+tRRKzh7qNyutTlkTy2x63R5Vo6cAshaRWl+mZAgTo= -----END CERTIFICATE-----Generated at Mon Dec 8 09:33:24 2025 by rpki-client