This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: VSksHSl6nQ92ooOarrnbz2NyDtBcdmx5YNpgu7IPhFE= Subject key identifier: FE:C7:35:11:82:4A:21:1B:0F:BE:4D:8A:44:4A:0D:AB:AA:1B:84:64 Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 6ED383F31510F7D7CD428C2A03945941272972EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 01E8 Signing time: Sat 06 Dec 2025 20:12:31 +0000 Manifest this update: Sat 06 Dec 2025 20:07:31 +0000 Manifest next update: Tue 09 Dec 2025 21:56:31 +0000 Files and hashes: 1: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: +W9mTSA2hotuiMtCo/kRje8fYcRCXCDQ0KHnqiHMZxI=) 2: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: k3TWS9EMIy8Aq2EwD+5FTkmYFXY12HmYmh8vOGdwopQ=) 3: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: +DUYJRF9jOOzr505d8fEOet+gT8K/JULeZjzetsH0Vc=) 4: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: lErVtCJlJ99qdLyNM63Qc8dGtmVES+Gq6hMVSb2l3Bw=) 5: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: Nlbwhvq6RNX8tKRWUBvBeTEEQD1O0jz0pdRla10hmjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d3:83:f3:15:10:f7:d7:cd:42:8c:2a:03:94:59:41:27:29:72:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Dec 6 20:07:31 2025 GMT Not After : Dec 9 21:56:31 2025 GMT Subject: CN=FEC73511824A211B0FBE4D8A444A0DABAA1B8464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:6d:f3:e7:b6:12:ea:18:8c:81:d5:89:36: 9c:79:bc:be:83:3c:bf:ea:2a:81:6a:ef:9a:4c:74: 5b:09:ac:1e:43:ce:76:72:c9:c8:59:f1:f9:ef:d2: 68:20:18:a1:dd:0a:b0:d3:74:3a:23:67:bc:1b:d8: 05:e7:d8:20:d3:bc:e9:df:ac:6e:6a:aa:fb:1f:6e: d4:60:87:f2:85:63:31:97:23:97:8f:19:27:cf:e4: 6a:1a:0c:1a:d9:26:18:b0:aa:a2:1c:94:75:a1:43: 11:70:e2:11:fd:28:53:44:dd:5c:ec:a8:19:0a:74: d3:5b:a9:2a:53:21:f8:30:5b:01:14:d1:17:e7:c4: c0:f9:1c:da:bd:38:c6:23:32:7e:0e:8b:f6:0a:5d: f5:82:b9:49:78:55:e3:34:d7:b5:4d:9e:f8:6e:25: 4f:fe:49:aa:73:c1:42:25:0d:f1:4b:cc:84:17:5e: fc:cd:ef:2e:6a:4a:ed:43:d4:e9:0f:4d:7f:89:8c: df:96:c4:dc:13:27:a5:18:78:4d:7c:79:8f:0b:ab: 53:fe:40:a2:95:dc:62:03:7b:11:46:7f:11:e1:ef: c5:c1:b8:b8:9f:e9:a5:ea:78:3d:2f:22:36:6f:a6: 19:d3:5a:b5:f0:2b:0a:48:40:10:11:f0:44:05:12: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C7:35:11:82:4A:21:1B:0F:BE:4D:8A:44:4A:0D:AB:AA:1B:84:64 X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b3:14:bb:1e:d7:4d:d7:9b:35:e8:c5:cc:de:b7:5b:01:f8: 95:af:44:26:98:7e:b7:36:88:66:35:25:3f:2d:4a:30:9a:29: f7:01:4d:76:d9:ae:f8:c3:7e:b1:ae:b9:b5:5e:dd:e5:14:49: 17:38:a1:e1:0f:1d:d4:c9:20:a0:16:76:b5:94:1c:1a:0e:fe: d3:de:50:bc:26:f6:18:2d:a8:ea:ca:b1:b1:d6:cb:f9:02:09: 38:87:4f:ee:73:0b:3b:3b:b7:01:27:ab:82:b4:99:67:9f:0b: bb:7b:10:9a:bc:01:e5:f0:f2:12:13:63:e4:7a:e3:dc:7d:75: 6b:5f:6a:ce:2c:76:92:8e:a7:b4:de:c6:cd:46:cf:0a:17:cb: 72:31:4a:34:e2:5e:13:f4:c5:8b:4f:66:64:8f:ba:a4:77:b9: 6f:71:a7:33:35:cf:69:cc:fe:8b:35:a9:93:7c:fa:53:77:02: 50:52:01:31:cf:6e:cf:17:95:f2:8d:58:fb:48:3b:de:09:a6: 27:ca:8c:90:67:ca:55:fd:d0:dc:d7:72:35:74:37:b4:0e:d0: 5c:5b:2a:a5:81:f9:bd:98:ad:21:1c:a2:9e:06:06:48:5e:b6: c1:78:2d:f5:7d:85:9e:14:99:7e:5b:cb:de:66:06:65:a7:0b: 5a:77:ab:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtOD8xUQ99fNQowqA5RZQScpcuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTEyMDYyMDA3MzFaFw0yNTEyMDkyMTU2MzFaMDMxMTAvBgNV BAMTKEZFQzczNTExODI0QTIxMUIwRkJFNEQ4QTQ0NEEwREFCQUExQjg0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBG3z57YS6hiMgdWJNpx5vL6D PL/qKoFq75pMdFsJrB5DznZyychZ8fnv0mggGKHdCrDTdDojZ7wb2AXn2CDTvOnf rG5qqvsfbtRgh/KFYzGXI5ePGSfP5GoaDBrZJhiwqqIclHWhQxFw4hH9KFNE3Vzs qBkKdNNbqSpTIfgwWwEU0RfnxMD5HNq9OMYjMn4Oi/YKXfWCuUl4VeM017VNnvhu JU/+SapzwUIlDfFLzIQXXvzN7y5qSu1D1OkPTX+JjN+WxNwTJ6UYeE18eY8Lq1P+ QKKV3GIDexFGfxHh78XBuLif6aXqeD0vIjZvphnTWrXwKwpIQBAR8EQFEuNTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/sc1EYJKIRsPvk2KREoNq6obhGQwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6zFLse103XmzXoxczet1sB+JWvRCaYfrc2 iGY1JT8tSjCaKfcBTXbZrvjDfrGuubVe3eUUSRc4oeEPHdTJIKAWdrWUHBoO/tPe ULwm9hgtqOrKsbHWy/kCCTiHT+5zCzs7twEnq4K0mWefC7t7EJq8AeXw8hITY+R6 49x9dWtfas4sdpKOp7Texs1GzwoXy3IxSjTiXhP0xYtPZmSPuqR3uW9xpzM1z2nM /os1qZN8+lN3AlBSATHPbs8XlfKNWPtIO94JpifKjJBnylX90NzXcjV0N7QO0Fxb KqWB+b2YrSEcop4GBkhetsF4LfV9hZ4UmX5by95mBmWnC1p3q+s= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:32 2025 by rpki-client