This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json) Hash identifier: xKydkmQEwSeay6K7ZRkQZ3EoPvODMYl5S63SdcTofzc= Subject key identifier: A0:1D:F0:6E:1D:58:8A:6E:98:FC:0F:58:ED:A0:0E:DC:31:0D:15:C2 Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Certificate serial: 05E7C8A9AAF8D7244D1418AA58382B987C545C03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft Manifest number: D7 Signing time: Fri 05 Dec 2025 17:50:43 +0000 Manifest this update: Fri 05 Dec 2025 17:45:43 +0000 Manifest next update: Tue 09 Dec 2025 03:23:43 +0000 Files and hashes: 1: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=) 2: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: FrmMvfThcf2F6CHkTG6JVkkQ0lIhB9bS0FXQKtX14A0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e7:c8:a9:aa:f8:d7:24:4d:14:18:aa:58:38:2b:98:7c:54:5c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Validity Not Before: Dec 5 17:45:43 2025 GMT Not After : Dec 9 03:23:43 2025 GMT Subject: CN=A01DF06E1D588A6E98FC0F58EDA00EDC310D15C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:72:19:c4:49:0d:bf:36:11:75:0b:d1:eb: a5:42:fd:99:c0:6b:87:6b:1e:ab:3e:77:57:3a:1e: 1e:49:08:ee:df:f1:89:f1:bf:fb:b6:73:95:47:ee: c0:24:ec:a7:14:66:f0:f5:9f:3e:97:9c:0c:81:36: 7b:10:d6:a5:83:59:54:ea:36:cd:b1:9c:39:25:9d: b0:de:21:e1:f7:03:cd:de:65:c3:15:d6:db:b9:f0: a4:ab:1e:a4:8d:24:4d:72:00:fa:b1:9a:3b:38:e9: 75:4f:7c:c3:67:ea:22:16:98:f0:43:75:53:5b:a7: 7c:11:fb:24:0c:09:ae:b4:1e:9b:89:ee:c0:6e:bb: 1c:1c:d5:f6:86:f3:66:a8:02:09:12:ee:0c:95:0e: 2e:55:24:a2:df:f6:6d:c3:55:a4:5f:19:b4:77:1b: 2f:a7:74:c9:05:6f:7c:22:46:c2:bc:8a:c3:ab:06: 88:79:aa:6a:47:e5:3d:74:91:b5:25:81:09:50:85: 90:b0:2d:d4:30:f2:02:67:9a:c4:5c:8e:39:a3:94: 1f:58:50:41:c7:81:04:f0:93:6f:ad:3e:92:fd:e5: 4b:77:f9:5b:af:0e:09:5a:b9:97:4f:e2:2b:69:1c: 43:5f:6c:6c:d8:1c:37:2f:0e:99:a5:f0:48:f1:f5: c3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1D:F0:6E:1D:58:8A:6E:98:FC:0F:58:ED:A0:0E:DC:31:0D:15:C2 X509v3 Authority Key Identifier: keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bf:f7:ee:aa:6d:57:c0:93:e7:c5:ef:51:d9:6d:87:9b:96: db:c7:d1:b5:55:69:e8:04:6e:60:00:83:32:38:2c:8c:91:0e: d0:47:b9:d9:8e:80:59:89:d7:0b:f9:9d:80:47:4f:2b:40:59: 06:fe:80:79:79:63:c8:80:77:c0:a8:13:28:9b:78:ab:0a:07: ea:f9:3b:85:5b:d6:58:3d:a8:54:b7:83:84:e9:c9:d5:80:52: a7:c2:01:7d:ff:61:cb:e9:a0:f0:5b:a4:7a:0a:c2:7b:e7:4c: ef:81:16:c6:fa:36:13:2e:d0:a7:97:0a:27:85:ec:2f:13:78: f5:9d:c5:3f:7c:f4:d9:aa:af:41:80:9c:ec:68:75:02:b3:8a: 46:09:3f:2f:48:bf:ed:72:7e:58:6b:33:5b:7a:c4:29:c0:51: 08:86:e5:69:56:87:83:ac:49:d9:f3:f4:9d:11:66:6b:a9:53: bd:1d:3f:4a:6f:95:ce:e6:d4:8b:48:57:71:11:ea:41:59:56: 97:d2:85:c1:da:0d:75:a7:61:b1:e8:86:a7:5c:c8:a5:29:91: c8:7c:ec:11:27:ab:8f:e5:48:1a:30:5c:53:35:26:02:d7:e5: 0b:59:0b:32:8d:a3:55:0c:0b:76:53:dd:f9:81:51:52:5a:7c: dc:77:15:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBefIqar41yRNFBiqWDgrmHxUXAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy REMxRTg3NjAeFw0yNTEyMDUxNzQ1NDNaFw0yNTEyMDkwMzIzNDNaMDMxMTAvBgNV BAMTKEEwMURGMDZFMUQ1ODhBNkU5OEZDMEY1OEVEQTAwRURDMzEwRDE1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9nIZxEkNvzYRdQvR66VC/ZnA a4drHqs+d1c6Hh5JCO7f8Ynxv/u2c5VH7sAk7KcUZvD1nz6XnAyBNnsQ1qWDWVTq Ns2xnDklnbDeIeH3A83eZcMV1tu58KSrHqSNJE1yAPqxmjs46XVPfMNn6iIWmPBD dVNbp3wR+yQMCa60HpuJ7sBuuxwc1faG82aoAgkS7gyVDi5VJKLf9m3DVaRfGbR3 Gy+ndMkFb3wiRsK8isOrBoh5qmpH5T10kbUlgQlQhZCwLdQw8gJnmsRcjjmjlB9Y UEHHgQTwk2+tPpL95Ut3+VuvDglauZdP4itpHENfbGzYHDcvDpml8Ejx9cPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoB3wbh1Yim6Y/A9Y7aAO3DENFcIwHwYDVR0j BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5 MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2/9+6qbVfAk+fF71HZbYebltvH0bVVaegE bmAAgzI4LIyRDtBHudmOgFmJ1wv5nYBHTytAWQb+gHl5Y8iAd8CoEyibeKsKB+r5 O4Vb1lg9qFS3g4TpydWAUqfCAX3/YcvpoPBbpHoKwnvnTO+BFsb6NhMu0KeXCieF 7C8TePWdxT989Nmqr0GAnOxodQKzikYJPy9Iv+1yflhrM1t6xCnAUQiG5WlWh4Os Sdnz9J0RZmupU70dP0pvlc7m1ItIV3ER6kFZVpfShcHaDXWnYbHohqdcyKUpkch8 7BEnq4/lSBowXFM1JgLX5QtZCzKNo1UMC3ZT3fmBUVJafNx3FU0= -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:36 2025 by rpki-client