This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft File: 4AA75AF77EC48924696455B9F02192353D9C4014.mft (raw, json) Hash identifier: //QMimVEKqEGsyqVtBxx1NX+Z3pflAdu9QGdHF1znPo= Subject key identifier: F6:40:DC:DD:00:A1:9D:E9:51:95:B9:FC:3A:74:43:76:C4:AA:EB:EB Authority key identifier: 4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 Certificate issuer: /CN=4AA75AF77EC48924696455B9F02192353D9C4014 Certificate serial: 53DCCBE619D4991D4C572CC57D1A23FA1EDB101D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft Manifest number: E3 Signing time: Sat 06 Dec 2025 04:31:20 +0000 Manifest this update: Sat 06 Dec 2025 04:26:20 +0000 Manifest next update: Tue 09 Dec 2025 12:22:20 +0000 Files and hashes: 1: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: AbwriW0SgoijAVFc1a2C3A7Illyl/gL1e8q6s9TC+bw=) 2: 4AA75AF77EC48924696455B9F02192353D9C4014.crl (hash: +7GN3ppliuMDnJwiqaFAzjG/Eyle96/0abbvVQMyRlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:dc:cb:e6:19:d4:99:1d:4c:57:2c:c5:7d:1a:23:fa:1e:db:10:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA75AF77EC48924696455B9F02192353D9C4014 Validity Not Before: Dec 6 04:26:20 2025 GMT Not After : Dec 9 12:22:20 2025 GMT Subject: CN=F640DCDD00A19DE95195B9FC3A744376C4AAEBEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:9f:46:08:01:c5:4a:dc:9c:10:80:af:1d: 4e:b4:04:0a:57:82:a6:43:c0:53:da:a7:06:79:3b: 7e:8d:fc:47:0a:e6:4a:c8:33:e0:4e:4e:c8:4f:35: c4:dc:d1:94:db:1b:2c:27:1f:32:d9:9e:b6:23:f9: be:92:2e:70:36:80:18:b0:fe:ba:10:65:ca:3e:b0: 98:51:0d:8e:ba:7e:9d:1b:49:e3:74:a5:c7:a4:ed: d9:82:49:99:20:f8:8e:8a:08:68:85:b3:bf:2b:2a: 18:07:db:c0:fd:4b:80:01:6e:91:22:86:81:74:94: 36:ac:b0:f3:e1:ff:4b:d9:73:c8:9e:e0:7b:c3:d0: d5:26:8b:a1:7b:d1:75:66:ad:05:65:f8:dd:4c:ba: 6b:f2:e7:87:e6:07:fe:26:88:e0:53:bf:02:71:ca: d9:a7:9e:fd:c8:b8:11:88:dc:d6:4d:d7:46:68:9e: 94:ce:eb:0f:ae:3b:63:ef:84:75:1f:db:b8:a7:be: 0d:94:57:a8:88:66:70:26:5b:b8:ae:1f:fc:06:da: a7:9d:a2:ec:cc:e0:89:56:5b:25:86:87:e4:e0:09: cf:da:98:1f:3b:d0:5a:00:cd:15:62:f4:9c:2d:e0: 03:9e:ba:cf:6b:91:00:7b:30:ee:35:cb:25:d0:c6: 88:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:40:DC:DD:00:A1:9D:E9:51:95:B9:FC:3A:74:43:76:C4:AA:EB:EB X509v3 Authority Key Identifier: keyid:4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c6:90:3c:5d:ba:86:2a:77:57:fb:46:31:d3:ff:37:55:f8: a1:ad:d1:02:57:e4:0d:28:c5:5f:b7:25:51:60:68:b9:fa:d5: d8:15:52:00:f1:85:5a:fa:83:9a:6e:7d:0c:f8:bc:65:67:3d: 5f:82:87:6b:98:b7:39:fa:17:77:50:b9:11:66:17:e3:34:bb: b8:6e:7c:78:1b:1a:d5:02:5b:9a:2d:77:a5:b5:c6:9d:c2:2c: c5:45:0e:d4:30:0e:91:cf:6d:fa:b2:0c:e7:88:bf:6a:9a:5f: 51:12:80:b4:0c:09:bd:a5:8e:bb:bf:27:6b:6b:de:eb:02:7d: fa:73:5b:62:52:74:91:7a:c7:85:79:40:60:b2:b9:f2:f8:fb: 55:86:13:b7:7f:48:96:52:16:89:f5:27:ba:3a:b3:3c:8c:0b: 04:d4:17:1e:00:cb:b3:65:e2:7b:75:92:b4:c6:62:cd:0a:6f: 73:5d:ee:e0:f1:fa:57:73:2c:dd:a4:9b:0d:78:1e:90:68:5b: b9:93:fe:9a:ae:3e:03:57:02:a1:3b:d7:b0:e5:c6:ad:95:6f: 38:41:1b:ed:19:77:b8:f4:79:6f:cd:12:f9:9f:f7:74:b2:22: 47:d0:27:93:8b:40:85:f1:eb:09:16:3d:70:9c:34:1e:fc:8b: f0:19:be:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9zL5hnUmR1MVyzFfRoj+h7bEB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUz RDlDNDAxNDAeFw0yNTEyMDYwNDI2MjBaFw0yNTEyMDkxMjIyMjBaMDMxMTAvBgNV BAMTKEY2NDBEQ0REMDBBMTlERTk1MTk1QjlGQzNBNzQ0Mzc2QzRBQUVCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4k59GCAHFStycEICvHU60BApX gqZDwFPapwZ5O36N/EcK5krIM+BOTshPNcTc0ZTbGywnHzLZnrYj+b6SLnA2gBiw /roQZco+sJhRDY66fp0bSeN0pcek7dmCSZkg+I6KCGiFs78rKhgH28D9S4ABbpEi hoF0lDassPPh/0vZc8ie4HvD0NUmi6F70XVmrQVl+N1Mumvy54fmB/4miOBTvwJx ytmnnv3IuBGI3NZN10ZonpTO6w+uO2PvhHUf27invg2UV6iIZnAmW7iuH/wG2qed ouzM4IlWWyWGh+TgCc/amB870FoAzRVi9Jwt4AOeus9rkQB7MO41yyXQxojtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9kDc3QChnelRlbn8OnRDdsSq6+swHwYDVR0j BBgwFoAUSqda937EiSRpZFW58CGSNT2cQBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWYyOWFiYS02ZDdjLTQ0MzUtOTUzYy02MDQ5ODg3MzE1OTYvMC80QUE3NUFGNzdF QzQ4OTI0Njk2NDU1QjlGMDIxOTIzNTNEOUM0MDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUzRDlD NDAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTky MzUzRDlDNDAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTGkDxduoYqd1f7RjHT/zdV+KGt0QJX5A0o xV+3JVFgaLn61dgVUgDxhVr6g5pufQz4vGVnPV+Ch2uYtzn6F3dQuRFmF+M0u7hu fHgbGtUCW5otd6W1xp3CLMVFDtQwDpHPbfqyDOeIv2qaX1ESgLQMCb2ljru/J2tr 3usCffpzW2JSdJF6x4V5QGCyufL4+1WGE7d/SJZSFon1J7o6szyMCwTUFx4Ay7Nl 4nt1krTGYs0Kb3Nd7uDx+ldzLN2kmw14HpBoW7mT/pquPgNXAqE717Dlxq2VbzhB G+0Zd7j0eW/NEvmf93SyIkfQJ5OLQIXx6wkWPXCcNB78i/AZvrc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:12 2025 by rpki-client