This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: KvwEsV44EezoN20VFQxJSLutbqSJ2+znM+FWOiKeTdo= Subject key identifier: 47:31:E7:C2:89:46:23:85:76:9C:D7:C3:8A:E1:07:C1:9F:4D:50:99 Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 41BF5F4E2FDB78FE9FBDDE19C9B53E02C9DCB817 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 052A Signing time: Sat 06 Dec 2025 16:21:30 +0000 Manifest this update: Sat 06 Dec 2025 16:16:30 +0000 Manifest next update: Tue 09 Dec 2025 18:31:30 +0000 Files and hashes: 1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: xEl9WKNeil5vick+EZGgBmq+d9hvCJ6SFKXlmIh83hQ=) 2: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: pD/9ZN/LtEEVzbK2xymhrif8EXzbhQ+acqdIY2pf7Sw=) 3: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: O0GrHvPjfTuC/SxNVjjcvPKSMrK3fVlBCLP0PRLSJQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bf:5f:4e:2f:db:78:fe:9f:bd:de:19:c9:b5:3e:02:c9:dc:b8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Dec 6 16:16:30 2025 GMT Not After : Dec 9 18:31:30 2025 GMT Subject: CN=4731E7C289462385769CD7C38AE107C19F4D5099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:46:93:6a:d8:d9:60:e0:54:18:c2:1b:d3: 46:dd:c5:52:7b:8d:1f:e6:87:b7:16:79:99:97:4f: 07:a0:45:ef:f8:8a:a9:5f:86:58:a3:82:dd:c2:25: 09:61:eb:7c:43:7b:18:2d:c8:b9:66:61:cf:46:9f: d9:0a:5d:23:33:d4:fa:f3:d3:7d:15:68:7d:a3:68: f1:ab:ba:70:1d:05:c8:85:c0:17:80:75:c8:d8:0c: 84:f4:7a:a5:67:69:12:01:e2:c2:45:5a:36:85:c1: f2:38:44:bc:f5:b8:a7:fb:1e:5a:44:d3:a3:81:55: 88:9c:13:1a:5e:2b:ca:74:fa:bd:94:4f:94:d3:6e: ec:25:7f:7a:8e:bd:b8:e3:c0:b6:73:78:2e:a9:8e: 64:c1:72:8c:28:d6:65:af:db:4f:67:20:c7:24:1e: 77:67:38:1c:6e:70:c4:f5:3a:ee:3e:85:28:22:6c: c5:fd:ed:37:68:b4:77:4f:ec:47:1c:a9:96:73:7d: ea:8b:46:95:35:53:fc:d3:a0:11:c8:49:8d:a0:53: e9:12:8e:8b:8c:2f:45:0a:d1:61:18:d5:c1:2e:dd: 9a:18:4b:fc:06:1e:2b:54:84:fc:6c:ec:e9:87:a3: 6a:03:55:a4:8f:d9:e4:9e:c2:dd:1f:ed:fa:c6:16: 67:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:31:E7:C2:89:46:23:85:76:9C:D7:C3:8A:E1:07:C1:9F:4D:50:99 X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7a:f9:e8:cc:0d:24:f6:dc:9f:90:83:04:e4:a4:6a:9d:78: 7d:38:2d:c5:00:7f:f9:64:63:16:23:05:e1:4b:d3:9e:0c:d9: 6a:40:4a:db:89:11:60:a6:86:bb:5e:73:c9:94:b6:09:13:9e: 9f:05:7a:31:1e:af:fb:e6:2f:35:67:25:58:62:22:c2:23:f3: 97:41:1f:15:5c:7f:84:16:c5:fa:bf:78:39:a8:cc:1f:cf:df: 53:75:49:73:f7:5b:20:c0:17:fc:3a:37:ee:98:9b:ef:70:c5: 55:d9:4e:ae:16:ff:73:72:31:34:0c:d1:37:27:ea:27:89:73: af:d3:d4:cd:e3:1e:ba:33:f6:99:a2:05:60:13:7e:6d:76:c2: 50:2e:53:88:f9:a5:e3:a1:41:44:d6:80:8b:88:4f:6a:72:6d: 5b:be:b2:59:81:81:c6:7c:1d:62:c6:97:a9:79:b7:92:de:be: 6f:47:17:ea:d2:77:14:46:f6:cd:8a:65:23:24:f7:7f:8d:21: bb:a8:ae:a5:cb:44:05:c9:3a:9d:98:b2:8a:35:06:fa:9f:90: 49:df:e3:fd:9c:78:71:06:72:cb:af:d4:95:65:05:d0:f5:1a: a2:c5:be:64:2c:a2:83:36:33:03:1f:b6:fd:9f:d6:60:91:2e: 01:1c:75:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQb9fTi/beP6fvd4ZybU+AsncuBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNTEyMDYxNjE2MzBaFw0yNTEyMDkxODMxMzBaMDMxMTAvBgNV BAMTKDQ3MzFFN0MyODk0NjIzODU3NjlDRDdDMzhBRTEwN0MxOUY0RDUwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4kaTatjZYOBUGMIb00bdxVJ7 jR/mh7cWeZmXTwegRe/4iqlfhlijgt3CJQlh63xDexgtyLlmYc9Gn9kKXSMz1Prz 030VaH2jaPGrunAdBciFwBeAdcjYDIT0eqVnaRIB4sJFWjaFwfI4RLz1uKf7HlpE 06OBVYicExpeK8p0+r2UT5TTbuwlf3qOvbjjwLZzeC6pjmTBcowo1mWv209nIMck HndnOBxucMT1Ou4+hSgibMX97TdotHdP7EccqZZzfeqLRpU1U/zToBHISY2gU+kS jouML0UK0WEY1cEu3ZoYS/wGHitUhPxs7OmHo2oDVaSP2eSewt0f7frGFmfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURzHnwolGI4V2nNfDiuEHwZ9NUJkwHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp6+ejMDST23J+QgwTkpGqdeH04LcUAf/lk YxYjBeFL054M2WpAStuJEWCmhrtec8mUtgkTnp8FejEer/vmLzVnJVhiIsIj85dB HxVcf4QWxfq/eDmozB/P31N1SXP3WyDAF/w6N+6Ym+9wxVXZTq4W/3NyMTQM0Tcn 6ieJc6/T1M3jHroz9pmiBWATfm12wlAuU4j5peOhQUTWgIuIT2pybVu+slmBgcZ8 HWLGl6l5t5Levm9HF+rSdxRG9s2KZSMk93+NIbuorqXLRAXJOp2Ysoo1BvqfkEnf 4/2ceHEGcsuv1JVlBdD1GqLFvmQsooM2MwMftv2f1mCRLgEcdSU= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:12 2025 by rpki-client