This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft File: 4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json) Hash identifier: vdyXQrQ+i/EcA0M8S6yIk66we/OiY0Y5y1p7UwrgLUs= Subject key identifier: E5:DE:0A:57:06:76:C7:45:A2:DB:8F:B9:84:BD:08:49:9B:FD:5C:B8 Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1 Certificate serial: 3B5A004E2D6B0484A8F3B715ACF8A50BBB34BFEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft Manifest number: 0227 Signing time: Sat 06 Dec 2025 15:01:11 +0000 Manifest this update: Sat 06 Dec 2025 14:56:11 +0000 Manifest next update: Tue 09 Dec 2025 19:12:11 +0000 Files and hashes: 1: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: x7P9w3mUZ2cW8x35LXBTnS2GNzjQVmf0VUbxs+R+7lk=) 2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: ibNTSX4YXpvUj4AJgfecXLMI8i0TnCNMvaVKKjw+4v8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5a:00:4e:2d:6b:04:84:a8:f3:b7:15:ac:f8:a5:0b:bb:34:bf:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1 Validity Not Before: Dec 6 14:56:11 2025 GMT Not After : Dec 9 19:12:11 2025 GMT Subject: CN=E5DE0A570676C745A2DB8FB984BD08499BFD5CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:00:c5:16:c6:3c:b9:a3:b8:44:d0:08:8e:8c: d2:ff:d5:53:fd:6e:1a:7b:75:b4:b8:23:eb:8a:a7: a7:cc:87:33:f0:8e:72:82:18:0e:c6:ab:7d:62:96: 2e:da:b2:83:d5:93:cd:4f:02:5c:28:d1:9e:59:e5: 3f:fc:2e:b6:3d:9e:03:4e:4d:c0:c7:52:45:82:bd: 97:f7:4d:bf:04:67:df:90:55:72:08:44:72:35:0d: 86:0f:69:53:8e:81:c7:e4:19:aa:14:8f:00:74:f8: 1a:51:e5:2c:09:12:24:10:6a:1d:7b:90:59:20:18: e0:f8:73:2e:94:b1:79:d3:4d:ec:e3:56:0a:97:34: 56:ad:16:f5:88:be:e1:b2:1e:72:75:fa:9b:24:f7: b3:a3:02:7d:11:e0:5b:fd:75:98:e5:20:ae:9a:85: 25:02:e3:a2:18:ff:5b:81:db:6e:d3:e9:17:79:d3: 7f:f0:f3:10:12:01:b5:62:1d:a7:f7:e6:90:f0:0f: b4:c6:e7:66:1c:56:02:e1:d1:f1:4f:78:91:77:87: 2b:ea:68:21:a0:ef:52:d1:9e:4a:4e:53:e3:02:ea: f0:75:f9:7a:11:33:3f:ae:55:d3:17:0c:32:bc:2d: 0c:e6:1f:99:a8:06:29:3b:8f:5f:7b:ab:ca:9c:59: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DE:0A:57:06:76:C7:45:A2:DB:8F:B9:84:BD:08:49:9B:FD:5C:B8 X509v3 Authority Key Identifier: keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:75:6a:c3:33:61:b8:d7:e7:e3:52:f7:20:e1:a0:e8:cb:f6: 81:08:26:14:4d:c2:b1:25:e0:d5:76:65:c1:d5:7d:ae:a5:c2: ad:a7:c8:94:6c:3f:87:08:83:ff:5b:0f:78:cd:74:af:24:ec: 3d:23:f7:8c:91:25:5a:f3:fd:a2:b8:1a:31:ca:8a:4b:0c:da: 52:fc:46:e5:9e:63:48:32:44:08:61:72:50:63:ea:44:ed:51: 1d:68:2f:73:70:6f:01:3f:00:16:48:83:81:c8:be:34:b9:3a: e6:e1:a1:dc:2e:6b:a3:93:88:8c:98:09:b3:e3:30:e5:b5:af: 62:90:6b:81:3f:4a:0e:45:69:75:cc:3a:40:71:d8:fa:6b:b2: 82:35:07:71:97:67:96:c8:cc:4b:f4:46:ac:02:a5:ea:b0:c1: 01:8a:e0:bf:da:b8:0b:0d:42:1f:88:5c:c3:d9:a0:94:71:d7: eb:93:91:f5:40:08:3d:ff:3a:26:11:e2:4d:93:04:f9:d1:c5: 4c:c0:0a:71:b3:59:c3:6a:fe:27:29:c0:32:b0:d4:0d:09:8d: 69:d0:f2:46:c7:7e:be:e4:a2:6b:b5:6b:29:0e:a2:13:1a:ba: a6:67:0d:85:e1:f6:1e:39:f9:a5:9b:48:aa:bd:86:48:ca:e2: fa:af:f8:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1oATi1rBISo87cVrPilC7s0v+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4 MkY4ODFFMTAeFw0yNTEyMDYxNDU2MTFaFw0yNTEyMDkxOTEyMTFaMDMxMTAvBgNV BAMTKEU1REUwQTU3MDY3NkM3NDVBMkRCOEZCOTg0QkQwODQ5OUJGRDVDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcAMUWxjy5o7hE0AiOjNL/1VP9 bhp7dbS4I+uKp6fMhzPwjnKCGA7Gq31ili7asoPVk81PAlwo0Z5Z5T/8LrY9ngNO TcDHUkWCvZf3Tb8EZ9+QVXIIRHI1DYYPaVOOgcfkGaoUjwB0+BpR5SwJEiQQah17 kFkgGOD4cy6UsXnTTezjVgqXNFatFvWIvuGyHnJ1+psk97OjAn0R4Fv9dZjlIK6a hSUC46IY/1uB227T6Rd503/w8xASAbViHaf35pDwD7TG52YcVgLh0fFPeJF3hyvq aCGg71LRnkpOU+MC6vB1+XoRMz+uVdMXDDK8LQzmH5moBik7j197q8qcWe5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5d4KVwZ2x0Wi24+5hL0ISZv9XLgwHwYDVR0j BBgwFoAUT2eaIH0liLcJyCzasABzYYL4geEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5M2E5My01ODg5LTRlMDItOWU5NS03NjljYjg5ZTAwMzUvMC80RjY3OUEyMDdE MjU4OEI3MDlDODJDREFCMDAwNzM2MTgyRjg4MUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4MkY4 ODFFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDcz NjE4MkY4ODFFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAB1asMzYbjX5+NS9yDhoOjL9oEIJhRNwrEl 4NV2ZcHVfa6lwq2nyJRsP4cIg/9bD3jNdK8k7D0j94yRJVrz/aK4GjHKiksM2lL8 RuWeY0gyRAhhclBj6kTtUR1oL3NwbwE/ABZIg4HIvjS5Oubhodwua6OTiIyYCbPj MOW1r2KQa4E/Sg5FaXXMOkBx2PprsoI1B3GXZ5bIzEv0RqwCpeqwwQGK4L/auAsN Qh+IXMPZoJRx1+uTkfVACD3/OiYR4k2TBPnRxUzACnGzWcNq/icpwDKw1A0JjWnQ 8kbHfr7komu1aykOohMauqZnDYXh9h45+aWbSKq9hkjK4vqv+ME= -----END CERTIFICATE-----Generated at Sun Dec 7 04:30:22 2025 by rpki-client