This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft File: 157748842D6BEE36DEE3B1999F10079808FF41C0.mft (raw, json) Hash identifier: pgtq6EzRca9x3cxJ1eu5iA6Qo8p7qm/tThiuBJ8YHXw= Subject key identifier: ED:E5:81:96:75:5F:AF:F3:5A:69:B8:5E:35:DA:C8:E3:C7:37:7E:F8 Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 32BFBEBC1689148F969080A33A8F6CF57F78669F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft Manifest number: 049D Signing time: Mon 15 Dec 2025 00:40:47 +0000 Manifest this update: Mon 15 Dec 2025 00:35:47 +0000 Manifest next update: Thu 18 Dec 2025 09:01:47 +0000 Files and hashes: 1: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw=) 2: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: CxideEppeSjpo62C99uXU/oA6ba7hNbNjMc3zZT0ZTs=) 3: 157748842D6BEE36DEE3B1999F10079808FF41C0.crl (hash: HscDEsd/tP1/Vi3amVJZ7XBNeyMxMnPYIzbgBMUOqoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 09:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:bf:be:bc:16:89:14:8f:96:90:80:a3:3a:8f:6c:f5:7f:78:66:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Dec 15 00:35:47 2025 GMT Not After : Dec 18 09:01:47 2025 GMT Subject: CN=EDE58196755FAFF35A69B85E35DAC8E3C7377EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:c6:b2:2c:ea:63:fb:7d:52:53:20:a6:4d: 1e:73:58:9c:c0:3f:56:18:7b:f4:b1:2b:2c:dc:97: af:15:43:8b:45:e0:d6:20:2e:40:d7:a6:20:69:0e: 08:9c:0c:8d:18:a8:bd:7c:e7:b0:89:63:d8:ee:f9: 33:ea:b5:00:70:03:a8:ca:a9:83:c3:28:59:5c:ca: fb:31:02:41:03:e0:4e:8e:9b:e8:f6:e7:67:e1:17: ef:20:e1:ad:6e:2d:90:5c:c4:2e:b6:a8:3a:ec:b0: bd:ae:8d:b3:e3:f5:67:63:2a:a9:46:8f:d0:53:46: d2:e5:10:bc:ec:9b:c1:34:75:f3:66:a0:48:4c:b8: 47:98:17:ca:6f:6c:be:76:8c:0e:28:54:bd:5a:4e: 01:e0:7b:31:11:3e:75:f5:ec:c2:a3:a0:63:0d:14: ad:fc:bd:e3:03:77:29:cb:39:d2:32:2d:ff:75:8c: 73:fd:cc:42:27:3c:71:80:ee:ba:47:32:9f:3c:57: bc:55:5e:e6:c4:99:52:50:8b:03:7b:70:88:fd:cd: 78:d5:47:c1:d7:85:d0:a1:95:53:29:c4:e6:c2:4b: ce:ce:ae:34:ba:01:00:69:1e:fe:90:7f:83:1f:bd: 43:12:32:50:35:14:65:fd:e7:75:04:a9:c0:ca:a4: 2d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E5:81:96:75:5F:AF:F3:5A:69:B8:5E:35:DA:C8:E3:C7:37:7E:F8 X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d7:2d:04:f1:a0:4f:0e:9e:30:9c:4d:76:2e:24:e8:8f:09: 64:a8:c1:62:72:05:90:e7:da:33:b3:74:c5:1f:9d:1d:79:ac: 03:cd:fd:de:5d:a6:c6:b9:07:a9:a0:0e:97:bb:7b:28:8c:f1: 8b:e6:06:3f:cc:48:7d:45:35:09:77:40:94:30:35:cf:1a:b2: 6a:1f:20:13:0c:bf:84:62:be:e9:e0:20:e8:76:90:38:63:cb: c4:56:3e:cf:57:f3:e2:b1:fd:47:13:c2:f1:9c:43:44:cc:0f: d5:9b:30:7e:4e:5e:23:81:32:f7:6a:53:eb:76:49:d3:8a:9d: 45:a0:d3:78:40:19:71:85:f5:39:af:29:e2:66:87:32:38:83: a7:16:82:a6:19:66:7f:6a:cd:ef:27:31:15:d6:1a:57:ee:af: 74:2d:ee:47:ee:e3:2b:df:41:6c:44:75:ae:8c:dc:ea:02:94: b9:07:64:ad:85:3c:59:0d:96:95:01:4e:2d:67:14:c4:bb:a2: df:48:0c:ec:c4:e1:03:1c:4d:d7:84:96:ae:5c:cd:b4:44:69: 7a:ea:95:0f:72:a5:53:5b:84:28:40:24:ca:60:b1:85:0e:1d: 63:5b:de:7c:f8:06:66:f4:dd:74:9e:dc:d3:6e:bb:30:e1:d7: 09:49:22:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMr++vBaJFI+WkICjOo9s9X94Zp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNTEyMTUwMDM1NDdaFw0yNTEyMTgwOTAxNDdaMDMxMTAvBgNV BAMTKEVERTU4MTk2NzU1RkFGRjM1QTY5Qjg1RTM1REFDOEUzQzczNzdFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpocayLOpj+31SUyCmTR5zWJzA P1YYe/SxKyzcl68VQ4tF4NYgLkDXpiBpDgicDI0YqL1857CJY9ju+TPqtQBwA6jK qYPDKFlcyvsxAkED4E6Om+j252fhF+8g4a1uLZBcxC62qDrssL2ujbPj9WdjKqlG j9BTRtLlELzsm8E0dfNmoEhMuEeYF8pvbL52jA4oVL1aTgHgezERPnX17MKjoGMN FK38veMDdynLOdIyLf91jHP9zEInPHGA7rpHMp88V7xVXubEmVJQiwN7cIj9zXjV R8HXhdChlVMpxObCS87OrjS6AQBpHv6Qf4MfvUMSMlA1FGX953UEqcDKpC2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7eWBlnVfr/NaabheNdrI48c3fvgwHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3 OTgwOEZGNDFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXXLQTxoE8OnjCcTXYuJOiPCWSowWJyBZDn 2jOzdMUfnR15rAPN/d5dpsa5B6mgDpe7eyiM8YvmBj/MSH1FNQl3QJQwNc8asmof IBMMv4RivungIOh2kDhjy8RWPs9X8+Kx/UcTwvGcQ0TMD9WbMH5OXiOBMvdqU+t2 SdOKnUWg03hAGXGF9TmvKeJmhzI4g6cWgqYZZn9qze8nMRXWGlfur3Qt7kfu4yvf QWxEda6M3OoClLkHZK2FPFkNlpUBTi1nFMS7ot9IDOzE4QMcTdeElq5czbREaXrq lQ9ypVNbhChAJMpgsYUOHWNb3nz4Bmb03XSe3NNuuzDh1wlJIig= -----END CERTIFICATE-----Generated at Mon Dec 15 17:04:26 2025 by rpki-client