This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft File: 4AA75AF77EC48924696455B9F02192353D9C4014.mft (raw, json) Hash identifier: zw0bf83Ort6oPGUDv8DNIQCaA8fNhkDhO9/VTBNY3Pw= Subject key identifier: 15:C3:AE:22:7A:37:97:AE:16:8F:37:03:63:EE:CE:9A:8B:71:E3:7D Authority key identifier: 4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 Certificate issuer: /CN=4AA75AF77EC48924696455B9F02192353D9C4014 Certificate serial: 513F41F8B24181F395AE09D217A8FC7F9151F9EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft Manifest number: E8 Signing time: Wed 17 Dec 2025 07:21:20 +0000 Manifest this update: Wed 17 Dec 2025 07:16:20 +0000 Manifest next update: Sat 20 Dec 2025 18:24:20 +0000 Files and hashes: 1: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: AbwriW0SgoijAVFc1a2C3A7Illyl/gL1e8q6s9TC+bw=) 2: 4AA75AF77EC48924696455B9F02192353D9C4014.crl (hash: sZRTwDFVEArf2cEwsmBfuzptt+xO56K7PsyXBOcF/jc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:3f:41:f8:b2:41:81:f3:95:ae:09:d2:17:a8:fc:7f:91:51:f9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA75AF77EC48924696455B9F02192353D9C4014 Validity Not Before: Dec 17 07:16:20 2025 GMT Not After : Dec 20 18:24:20 2025 GMT Subject: CN=15C3AE227A3797AE168F370363EECE9A8B71E37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:3b:39:83:ee:f0:1a:6d:07:0a:9b:fa:9d: a0:cc:b8:97:d9:f9:2a:09:9c:45:79:0c:66:2b:00: 0a:75:32:fb:ab:c3:5e:d7:15:5d:67:4e:41:96:4f: 18:a1:85:c4:70:4b:a4:2e:1a:ab:87:6b:d6:15:c2: 4c:cf:31:b2:56:85:c8:1a:63:5c:d2:93:ce:03:c9: 33:f7:cc:30:a0:f9:8d:27:16:8f:23:91:c7:e3:73: dd:ed:6f:9e:45:d1:9d:e8:8e:91:0e:63:44:e8:34: bc:58:b0:4d:50:b9:a5:ab:4a:f2:65:ef:36:b6:67: 1a:3c:55:88:55:88:7b:bd:50:82:71:41:9c:93:05: 4c:a5:93:66:7b:45:44:4e:fd:b1:98:20:2f:ad:a6: e1:0f:ec:8b:8e:d1:4c:09:43:b4:46:0b:86:1a:76: 64:3e:d0:5e:26:c2:f8:2e:3e:67:5b:d2:f1:7b:04: cc:2a:e2:66:49:f4:c1:c7:37:0f:02:35:c2:04:9d: 3a:08:d4:83:0b:c4:7a:2d:e5:00:e9:50:2b:1f:59: 7c:cd:0e:c6:44:f8:df:2c:a6:54:aa:85:21:2d:f5: 45:b5:6a:4b:9d:4f:b5:01:c0:fc:4a:58:f2:b4:3a: 5f:f2:72:c6:88:03:c4:07:a3:d1:69:bd:f6:44:f1: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C3:AE:22:7A:37:97:AE:16:8F:37:03:63:EE:CE:9A:8B:71:E3:7D X509v3 Authority Key Identifier: keyid:4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:55:4c:5f:d2:bb:92:99:ed:78:8f:8e:37:9c:16:4f:27:9a: c1:57:bd:ef:29:5a:49:d8:cd:38:b2:44:04:8e:db:d7:86:6c: 95:02:d6:10:e0:78:d7:76:b5:3b:66:e3:e7:de:68:50:43:67: 06:4f:8c:1a:c9:d5:a3:82:10:ca:17:b7:ed:79:b2:77:1c:ab: c9:71:dd:9d:a2:76:63:59:2c:00:f9:bf:e1:7d:76:d3:0a:73: 1e:e1:e3:ca:f7:0c:ea:06:32:21:c3:af:00:79:9f:54:7a:e4: 1a:98:70:8b:63:0a:2d:22:91:ac:a8:37:e8:f1:01:37:de:c2: c7:c9:bd:83:fa:ba:41:1e:7e:ae:f9:4f:6e:e9:68:cf:64:5d: c7:18:a9:f9:32:68:39:7d:43:84:2e:3a:25:32:c4:48:8e:51: 7b:24:09:cb:a7:fb:34:50:b8:e9:9a:20:a3:b4:2c:2e:18:39: 78:19:03:74:33:d0:26:f6:af:e5:c5:9c:c7:04:a4:01:49:49: 3a:80:9b:34:75:d6:5e:73:2c:9b:78:53:93:3a:b0:2a:5d:95: 7d:17:83:1a:8a:fa:1e:22:67:95:c1:aa:f4:23:e7:08:d6:f4: ec:dc:86:5b:63:81:9b:79:ca:1b:57:d3:95:5f:67:95:6c:f3: 87:dc:4d:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUT9B+LJBgfOVrgnSF6j8f5FR+eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUz RDlDNDAxNDAeFw0yNTEyMTcwNzE2MjBaFw0yNTEyMjAxODI0MjBaMDMxMTAvBgNV BAMTKDE1QzNBRTIyN0EzNzk3QUUxNjhGMzcwMzYzRUVDRTlBOEI3MUUzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bzs5g+7wGm0HCpv6naDMuJfZ +SoJnEV5DGYrAAp1Mvurw17XFV1nTkGWTxihhcRwS6QuGquHa9YVwkzPMbJWhcga Y1zSk84DyTP3zDCg+Y0nFo8jkcfjc93tb55F0Z3ojpEOY0ToNLxYsE1QuaWrSvJl 7za2Zxo8VYhViHu9UIJxQZyTBUylk2Z7RURO/bGYIC+tpuEP7IuO0UwJQ7RGC4Ya dmQ+0F4mwvguPmdb0vF7BMwq4mZJ9MHHNw8CNcIEnToI1IMLxHot5QDpUCsfWXzN DsZE+N8splSqhSEt9UW1akudT7UBwPxKWPK0Ol/ycsaIA8QHo9FpvfZE8YkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFcOuIno3l64WjzcDY+7Omotx430wHwYDVR0j BBgwFoAUSqda937EiSRpZFW58CGSNT2cQBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWYyOWFiYS02ZDdjLTQ0MzUtOTUzYy02MDQ5ODg3MzE1OTYvMC80QUE3NUFGNzdF QzQ4OTI0Njk2NDU1QjlGMDIxOTIzNTNEOUM0MDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUzRDlD NDAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTky MzUzRDlDNDAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9VTF/Su5KZ7XiPjjecFk8nmsFXve8pWknY zTiyRASO29eGbJUC1hDgeNd2tTtm4+feaFBDZwZPjBrJ1aOCEMoXt+15snccq8lx 3Z2idmNZLAD5v+F9dtMKcx7h48r3DOoGMiHDrwB5n1R65BqYcItjCi0ikayoN+jx ATfewsfJvYP6ukEefq75T27paM9kXccYqfkyaDl9Q4QuOiUyxEiOUXskCcun+zRQ uOmaIKO0LC4YOXgZA3Qz0Cb2r+XFnMcEpAFJSTqAmzR11l5zLJt4U5M6sCpdlX0X gxqK+h4iZ5XBqvQj5wjW9OzchltjgZt5yhtX05VfZ5Vs84fcTUo= -----END CERTIFICATE-----Generated at Wed Dec 17 17:45:14 2025 by rpki-client