This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft File: 157748842D6BEE36DEE3B1999F10079808FF41C0.mft (raw, json) Hash identifier: 7qMq8qEeKOGlNBxsn7tTE/+fc94gMd3Bjh6FxJ1l+sY= Subject key identifier: 02:4F:E5:7E:AB:0C:28:E9:99:C1:DD:F7:39:0C:E2:5E:4B:3D:2B:7F Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 5CC8D7D948E7322AA83B5AFBBFE2ECB2835ACD65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft Manifest number: 0499 Signing time: Sat 06 Dec 2025 09:40:45 +0000 Manifest this update: Sat 06 Dec 2025 09:35:45 +0000 Manifest next update: Tue 09 Dec 2025 11:51:45 +0000 Files and hashes: 1: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: CxideEppeSjpo62C99uXU/oA6ba7hNbNjMc3zZT0ZTs=) 2: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw=) 3: 157748842D6BEE36DEE3B1999F10079808FF41C0.crl (hash: ixiHgJN7jRfdiel1AeYLqP4WVBh9IInseMJVsarESKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 11:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c8:d7:d9:48:e7:32:2a:a8:3b:5a:fb:bf:e2:ec:b2:83:5a:cd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Dec 6 09:35:45 2025 GMT Not After : Dec 9 11:51:45 2025 GMT Subject: CN=024FE57EAB0C28E999C1DDF7390CE25E4B3D2B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:00:08:90:dd:83:23:fc:5b:e5:c6:74:16: b7:ab:38:1e:6b:5e:ca:bf:5b:5f:ee:c1:9f:8e:82: 78:25:6a:0b:a4:5c:0b:95:d0:ed:18:e9:50:b0:53: dc:7d:28:9b:de:e6:87:36:04:4b:9b:cf:73:2b:f8: 9d:c7:64:7b:e7:b3:25:f7:42:2a:78:bc:bb:67:b6: 76:7a:18:b6:e0:8b:a4:3a:52:1c:6d:98:5e:07:3c: 02:56:d9:ac:5b:2b:d2:f6:47:51:42:d8:5f:e9:7e: 16:f9:21:0d:76:fe:6f:7e:44:08:6f:b2:00:b7:1c: a8:3c:fb:10:fb:f1:67:c6:d9:e5:d8:af:fd:2c:ff: e7:5e:fd:f5:8a:bb:9c:ea:e2:69:f2:39:66:80:0f: e9:60:db:3a:ab:67:75:0d:2c:b1:dd:6e:54:f9:53: 90:52:04:50:a3:c5:54:cb:84:e3:04:6b:26:c4:5a: 43:55:5d:e8:58:00:cf:b6:44:d9:7a:e2:56:d3:35: 84:86:03:56:06:07:b0:c9:e9:56:29:9c:43:73:66: 95:e5:33:9f:d1:90:b2:b2:e7:d3:65:6c:52:9c:05: d4:7b:05:51:5a:7f:ff:0a:99:dd:09:f3:19:85:71: ae:52:9d:25:0f:80:8d:a6:13:08:e2:7b:12:68:62: 19:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4F:E5:7E:AB:0C:28:E9:99:C1:DD:F7:39:0C:E2:5E:4B:3D:2B:7F X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e4:58:30:d9:8d:14:51:df:df:9a:ae:96:2d:a1:25:81:a6: a3:ed:45:80:3e:15:69:65:c4:f3:08:07:67:2b:1f:be:c1:39: 93:73:d8:c9:72:7f:63:21:3d:a4:f7:0a:da:95:45:dd:2d:08: 63:82:a9:7b:c1:76:37:f9:66:4e:41:c3:92:1c:f8:24:17:32: 55:d9:95:93:00:f9:e3:44:0b:22:ab:d4:4b:cd:7f:b8:ca:9c: 9d:eb:52:fa:89:01:6c:dc:44:1d:8a:9d:89:7b:51:79:14:6f: 2f:00:78:b6:7c:89:ad:b7:e6:6b:43:7e:01:3f:36:df:50:82: 39:d2:a3:fb:12:e4:62:1e:05:76:ff:98:0e:da:18:be:0e:13: 3b:e6:77:c1:c5:0c:19:5c:7f:9a:b7:86:b7:8d:a5:90:0e:0e: 35:d1:65:f2:4f:d0:92:ec:0f:e5:25:82:37:64:05:d4:27:53: 38:8d:f2:02:f0:97:e8:d5:79:1e:af:72:42:27:d7:a5:eb:3a: 33:13:25:3b:75:1b:d8:e6:31:64:4b:ae:7c:0f:4d:16:88:3b: d0:48:01:d5:32:b4:ea:74:f6:b3:82:5e:b1:18:78:0d:03:94: ed:5e:47:80:11:b7:f1:ea:9e:29:2c:ce:6b:ec:a5:6c:2d:4e: 41:2f:c9:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMjX2UjnMiqoO1r7v+LssoNazWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNTEyMDYwOTM1NDVaFw0yNTEyMDkxMTUxNDVaMDMxMTAvBgNV BAMTKDAyNEZFNTdFQUIwQzI4RTk5OUMxRERGNzM5MENFMjVFNEIzRDJCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqLgAIkN2DI/xb5cZ0FrerOB5r Xsq/W1/uwZ+OgnglagukXAuV0O0Y6VCwU9x9KJve5oc2BEubz3Mr+J3HZHvnsyX3 Qip4vLtntnZ6GLbgi6Q6UhxtmF4HPAJW2axbK9L2R1FC2F/pfhb5IQ12/m9+RAhv sgC3HKg8+xD78WfG2eXYr/0s/+de/fWKu5zq4mnyOWaAD+lg2zqrZ3UNLLHdblT5 U5BSBFCjxVTLhOMEaybEWkNVXehYAM+2RNl64lbTNYSGA1YGB7DJ6VYpnENzZpXl M5/RkLKy59NlbFKcBdR7BVFaf/8Kmd0J8xmFca5SnSUPgI2mEwjiexJoYhnLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAk/lfqsMKOmZwd33OQziXks9K38wHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3 OTgwOEZGNDFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrkWDDZjRRR39+arpYtoSWBpqPtRYA+FWll xPMIB2crH77BOZNz2Mlyf2MhPaT3CtqVRd0tCGOCqXvBdjf5Zk5Bw5Ic+CQXMlXZ lZMA+eNECyKr1EvNf7jKnJ3rUvqJAWzcRB2KnYl7UXkUby8AeLZ8ia235mtDfgE/ Nt9QgjnSo/sS5GIeBXb/mA7aGL4OEzvmd8HFDBlcf5q3hreNpZAODjXRZfJP0JLs D+UlgjdkBdQnUziN8gLwl+jVeR6vckIn16XrOjMTJTt1G9jmMWRLrnwPTRaIO9BI AdUytOp09rOCXrEYeA0DlO1eR4ARt/HqnikszmvspWwtTkEvyUg= -----END CERTIFICATE-----Generated at Sat Dec 6 23:59:01 2025 by rpki-client