This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: HzUYPbW8LPvZhtkqag8UhirFfrqNPZr2LrzQD0RJ24o= Subject key identifier: D9:6F:10:5F:A5:30:3E:96:B3:7C:3B:C3:2F:C6:A3:1E:AE:7B:F1:1B Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 3B8ABB7AAF3FA06EB5D58ECA9431A567772D5D12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 052C Signing time: Sat 06 Dec 2025 11:01:49 +0000 Manifest this update: Sat 06 Dec 2025 10:56:49 +0000 Manifest next update: Tue 09 Dec 2025 17:03:49 +0000 Files and hashes: 1: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: XvTaec2iIxnfMiy4Jr3wBoV0DcdVM0sBZEby6m6sKUE=) 2: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:8a:bb:7a:af:3f:a0:6e:b5:d5:8e:ca:94:31:a5:67:77:2d:5d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Dec 6 10:56:49 2025 GMT Not After : Dec 9 17:03:49 2025 GMT Subject: CN=D96F105FA5303E96B37C3BC32FC6A31EAE7BF11B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:40:17:2c:2c:cf:5e:55:02:2f:2c:3c:9f: 02:ce:96:5b:10:26:46:9c:6c:62:51:bd:45:94:11: 14:f3:d2:5c:f1:e2:d8:f4:ee:9c:0e:c2:ec:dd:45: 51:ce:99:d1:60:4a:eb:1e:38:32:ef:a8:31:61:93: 38:97:d5:12:4a:5f:4f:5d:9c:3b:d9:d7:8f:3b:d2: 47:12:b2:77:02:7b:28:36:04:49:81:79:03:c5:67: a5:5b:50:61:02:76:56:69:ef:fb:35:45:f8:70:ae: b3:96:57:c9:4d:76:67:6f:e0:34:dd:b9:69:79:cb: 21:87:be:91:46:93:9a:65:95:bf:8f:e5:ee:c0:52: 9b:a8:b7:f8:db:2b:ba:50:8b:f1:c0:94:17:78:57: ef:8c:a6:c6:ba:bc:40:80:95:3a:83:c2:ad:0a:10: ba:62:f3:04:0b:e7:90:7e:7b:5a:64:6c:82:90:66: b0:4d:98:2f:64:6d:a1:0d:c6:ef:71:01:7c:b3:f8: 32:7f:43:4d:0b:61:ee:bf:28:5c:75:fe:08:54:a1: a9:c9:68:47:19:00:6b:25:96:51:89:e2:da:7c:fa: f4:df:f6:cf:ec:5b:91:bc:c1:00:95:1f:de:a3:f0: 4a:88:39:07:e0:cd:19:d3:0c:6d:a1:8a:4c:3a:4f: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:10:5F:A5:30:3E:96:B3:7C:3B:C3:2F:C6:A3:1E:AE:7B:F1:1B X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a3:6f:7e:fb:b1:18:7c:f4:f5:6a:c1:25:c6:d5:2f:e4:54: 7a:a4:f8:d5:de:eb:e3:d2:2c:5a:c3:a6:aa:c4:0b:d2:64:68: df:a9:c1:fe:47:17:a4:2e:f6:e3:fa:71:66:79:e8:39:4a:6f: 14:d5:ac:6f:9f:80:36:aa:9a:d6:d1:e0:f5:c6:a2:31:08:7a: e0:42:e6:4e:62:de:5a:71:4f:87:fb:1f:91:22:40:67:21:bb: 78:76:82:06:34:fd:6d:f0:8f:4f:ce:64:6f:97:d6:7b:e9:bb: 2e:a8:76:48:cd:23:13:24:01:8e:d6:1d:ac:5d:c0:f0:8a:ea: e7:c8:3c:a2:93:87:91:59:0f:0f:a7:22:58:57:a8:c2:cf:db: 00:c8:0b:20:56:c5:6c:73:82:68:95:65:0b:ea:1b:50:6f:23: 0f:8d:79:3c:20:90:35:2b:77:5e:b4:81:fd:99:3f:eb:a9:8e: 82:20:e1:bc:bf:81:92:58:19:0a:7e:f3:11:5d:6c:25:a9:2c: 19:73:62:67:e2:94:45:80:d5:01:11:dc:51:c6:f5:7b:14:b4: 02:c5:cf:ff:26:e5:42:41:9f:ba:3f:3e:ac:f6:9d:1b:3c:3f: 88:dc:da:5b:85:b7:55:ca:5e:a6:a9:3a:83:f3:a8:98:4a:67: a1:66:2b:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4q7eq8/oG611Y7KlDGlZ3ctXRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNTEyMDYxMDU2NDlaFw0yNTEyMDkxNzAzNDlaMDMxMTAvBgNV BAMTKEQ5NkYxMDVGQTUzMDNFOTZCMzdDM0JDMzJGQzZBMzFFQUU3QkYxMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1TEAXLCzPXlUCLyw8nwLOllsQ JkacbGJRvUWUERTz0lzx4tj07pwOwuzdRVHOmdFgSuseODLvqDFhkziX1RJKX09d nDvZ14870kcSsncCeyg2BEmBeQPFZ6VbUGECdlZp7/s1RfhwrrOWV8lNdmdv4DTd uWl5yyGHvpFGk5pllb+P5e7AUpuot/jbK7pQi/HAlBd4V++Mpsa6vECAlTqDwq0K ELpi8wQL55B+e1pkbIKQZrBNmC9kbaENxu9xAXyz+DJ/Q00LYe6/KFx1/ghUoanJ aEcZAGslllGJ4tp8+vTf9s/sW5G8wQCVH96j8EqIOQfgzRnTDG2hikw6T9T1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2W8QX6UwPpazfDvDL8ajHq578RswHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmjb377sRh89PVqwSXG1S/kVHqk+NXe6+PS LFrDpqrEC9JkaN+pwf5HF6Qu9uP6cWZ56DlKbxTVrG+fgDaqmtbR4PXGojEIeuBC 5k5i3lpxT4f7H5EiQGchu3h2ggY0/W3wj0/OZG+X1nvpuy6odkjNIxMkAY7WHaxd wPCK6ufIPKKTh5FZDw+nIlhXqMLP2wDICyBWxWxzgmiVZQvqG1BvIw+NeTwgkDUr d160gf2ZP+upjoIg4by/gZJYGQp+8xFdbCWpLBlzYmfilEWA1QER3FHG9XsUtALF z/8m5UJBn7o/Pqz2nRs8P4jc2luFt1XKXqapOoPzqJhKZ6FmK78= -----END CERTIFICATE-----Generated at Sun Dec 7 05:15:31 2025 by rpki-client