This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft File: 4F50242149BE32942675690F53BF8FE81E99F74D.mft (raw, json) Hash identifier: UCSO4skG6OWjtb6It2zUhmOU4hmI2tMmQJn9ZyXbRH8= Subject key identifier: 6D:6D:A9:50:32:B6:8B:F5:27:7A:F7:C3:CD:8B:69:12:DD:65:69:BC Authority key identifier: 4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D Certificate issuer: /CN=4F50242149BE32942675690F53BF8FE81E99F74D Certificate serial: 2C6DC03C0663F915DDB2290421A58BBD8DBDFB82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft Manifest number: 03A1 Signing time: Sat 06 Dec 2025 17:01:03 +0000 Manifest this update: Sat 06 Dec 2025 16:56:03 +0000 Manifest next update: Wed 10 Dec 2025 00:19:03 +0000 Files and hashes: 1: 4F50242149BE32942675690F53BF8FE81E99F74D.crl (hash: Pl5SsDCEob0Z+fAXa/8tEs+Tnl0KiF2cRISqCGA3jc0=) 2: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: t11QqdTM2g6bD0yLgDwQ54lubiayCOppdK4lspJl/fw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6d:c0:3c:06:63:f9:15:dd:b2:29:04:21:a5:8b:bd:8d:bd:fb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F50242149BE32942675690F53BF8FE81E99F74D Validity Not Before: Dec 6 16:56:03 2025 GMT Not After : Dec 10 00:19:03 2025 GMT Subject: CN=6D6DA95032B68BF5277AF7C3CD8B6912DD6569BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:54:46:16:7f:46:1f:1b:35:86:98:db:a2: 93:82:08:d1:9f:e3:90:f5:d6:91:81:18:a4:26:ca: 20:f0:77:f1:df:f9:57:dd:b2:39:44:71:02:7d:9a: 3a:5b:b8:2c:fa:8f:ac:c5:d4:0a:09:fb:7d:c8:9e: 34:63:62:4e:1c:0e:8a:33:a6:3e:2c:66:c9:2f:91: a3:9a:91:74:93:88:d2:10:1b:e0:2e:f7:a2:44:f6: 07:a2:d7:d7:ab:b1:59:e6:3b:09:74:f7:0f:26:1a: 19:88:af:bd:d8:e0:f5:10:a1:37:e1:da:90:a6:ee: 65:ef:ab:45:a0:09:17:e3:db:88:b0:4e:ee:e1:32: 64:df:34:21:69:d1:6f:40:80:f0:4e:1e:51:32:8a: b0:41:82:56:96:c0:91:9e:3f:3e:b7:45:f8:ce:da: e0:69:4d:3f:bf:c0:0f:6d:ce:71:c8:7d:86:85:2c: 71:38:e0:94:e7:a5:d1:d7:63:54:ac:e7:30:b8:de: c8:93:bc:1f:5a:e7:c9:e9:de:e9:c8:09:ca:d7:ea: 28:aa:17:a6:21:69:46:e9:52:d8:50:ae:dd:76:bf: 1c:f4:72:93:cb:35:8a:f3:ee:af:2c:3e:97:2c:ab: 1b:64:2f:22:a8:f5:34:05:fd:67:96:06:8f:54:e8: 48:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6D:A9:50:32:B6:8B:F5:27:7A:F7:C3:CD:8B:69:12:DD:65:69:BC X509v3 Authority Key Identifier: keyid:4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:54:8b:d2:d0:51:3a:4a:45:39:a0:be:c6:a0:4a:2b:99:24: b5:80:e2:0c:be:e1:b5:cf:fc:84:8f:32:76:de:3a:8f:5f:f3: fe:62:b7:14:03:11:3e:dc:b5:76:59:fa:7c:52:01:4b:1e:e6: 88:b3:67:2e:72:a9:51:fc:29:f4:bc:ed:16:d3:11:56:a3:96: 61:6e:c4:0a:f9:ec:b4:96:24:40:08:57:46:1c:a1:46:7e:f8: 6b:4d:c3:3a:c4:6d:9f:34:f7:5e:f7:b4:a2:02:3c:77:a7:76: 69:72:c9:c9:e1:67:40:7d:12:4e:cf:c4:ed:55:cb:29:0e:35: 18:fc:44:85:52:af:82:97:b4:75:29:9e:bc:20:08:50:32:b2: 76:11:2b:2b:c8:d7:26:1d:31:ea:14:30:74:54:83:75:b8:9d: 40:7b:05:c8:84:bf:34:cf:ee:2c:b1:b6:b3:dc:e1:2d:bd:f0: 27:50:34:d1:c4:fa:f9:8c:b0:d8:7d:62:37:23:a1:64:3a:7c: 05:c3:40:8a:f6:c1:91:0a:22:b5:94:46:b7:f3:a0:a7:12:20: db:8d:a0:0a:94:1d:6b:bb:62:4f:e7:dc:ed:5c:eb:ee:5e:ce: 2c:f1:0c:20:f1:20:2a:64:93:2b:85:f5:67:82:33:bd:43:94: aa:43:7d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULG3APAZj+RXdsikEIaWLvY29+4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgx RTk5Rjc0RDAeFw0yNTEyMDYxNjU2MDNaFw0yNTEyMTAwMDE5MDNaMDMxMTAvBgNV BAMTKDZENkRBOTUwMzJCNjhCRjUyNzdBRjdDM0NEOEI2OTEyREQ2NTY5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLVRGFn9GHxs1hpjbopOCCNGf 45D11pGBGKQmyiDwd/Hf+VfdsjlEcQJ9mjpbuCz6j6zF1AoJ+33InjRjYk4cDooz pj4sZskvkaOakXSTiNIQG+Au96JE9gei19ersVnmOwl09w8mGhmIr73Y4PUQoTfh 2pCm7mXvq0WgCRfj24iwTu7hMmTfNCFp0W9AgPBOHlEyirBBglaWwJGePz63RfjO 2uBpTT+/wA9tznHIfYaFLHE44JTnpdHXY1Ss5zC43siTvB9a58np3unICcrX6iiq F6YhaUbpUthQrt12vxz0cpPLNYrz7q8sPpcsqxtkLyKo9TQF/WeWBo9U6EjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbW2pUDK2i/UnevfDzYtpEt1labwwHwYDVR0j BBgwFoAUT1AkIUm+MpQmdWkPU7+P6B6Z900wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA5M2FkNi1iMTE1LTRmMTAtODhkNy02ZTU3ZGNmZDMyMjMvMC80RjUwMjQyMTQ5 QkUzMjk0MjY3NTY5MEY1M0JGOEZFODFFOTlGNzRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgxRTk5 Rjc0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwOTNhZDYtYjExNS00ZjEwLTg4 ZDctNmU1N2RjZmQzMjIzLzAvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhG RTgxRTk5Rjc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1Ui9LQUTpKRTmgvsagSiuZJLWA4gy+4bXP /ISPMnbeOo9f8/5itxQDET7ctXZZ+nxSAUse5oizZy5yqVH8KfS87RbTEVajlmFu xAr57LSWJEAIV0YcoUZ++GtNwzrEbZ809173tKICPHendmlyycnhZ0B9Ek7PxO1V yykONRj8RIVSr4KXtHUpnrwgCFAysnYRKyvI1yYdMeoUMHRUg3W4nUB7BciEvzTP 7iyxtrPc4S298CdQNNHE+vmMsNh9YjcjoWQ6fAXDQIr2wZEKIrWURrfzoKcSINuN oAqUHWu7Yk/n3O1c6+5ezizxDCDxICpkkyuF9WeCM71DlKpDfQk= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:19 2025 by rpki-client