This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: V83fqeSUtQHNYf14RgIByIB/yGYBVDRSvBfcPFrJZ6c= Subject key identifier: A1:D0:ED:9F:75:E8:EF:78:4E:2E:B1:9D:B2:C4:C1:95:DC:BE:DB:09 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 201EBD64E3BC4BB84BA743639B6B31432C1BEABA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 01C5 Signing time: Fri 05 Dec 2025 04:01:04 +0000 Manifest this update: Fri 05 Dec 2025 03:56:04 +0000 Manifest next update: Mon 08 Dec 2025 13:07:04 +0000 Files and hashes: 1: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) 2: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: zFi1/I//aLY0pEos5FQSlXy9+yYDMx4KrkMQRmQWJzE=) 3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1e:bd:64:e3:bc:4b:b8:4b:a7:43:63:9b:6b:31:43:2c:1b:ea:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Dec 5 03:56:04 2025 GMT Not After : Dec 8 13:07:04 2025 GMT Subject: CN=A1D0ED9F75E8EF784E2EB19DB2C4C195DCBEDB09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:3b:62:be:eb:26:61:6b:a4:db:2b:34:26: 15:34:3d:66:5f:06:10:0c:e7:40:71:08:b3:d7:ea: 9b:46:9b:70:90:85:60:02:fb:ea:0f:95:f8:4c:fa: 86:cb:a8:4e:1c:5a:b8:c2:b2:3b:49:8b:55:57:da: 84:ac:16:ac:13:b1:55:5e:44:e6:77:54:c8:3c:e9: 5c:c9:fd:a9:99:92:a2:73:81:21:57:af:09:9d:e8: 0c:a9:f3:8f:10:e6:51:11:95:57:d5:05:37:55:70: 83:5e:eb:7e:44:27:22:b1:7f:dc:af:e0:62:45:36: 03:97:46:34:42:cb:c9:af:f0:9c:54:8f:97:c0:5a: 50:6a:ae:ad:c1:6a:b2:64:9f:c8:31:df:13:de:ae: 2d:bd:9e:55:61:fe:fe:83:1d:77:7b:f6:02:a2:9a: 76:79:fe:9f:ea:19:1d:1c:9b:e7:4d:91:72:b7:6f: 4a:58:c6:7d:54:14:70:94:b7:4a:92:34:4a:68:af: d7:fc:61:bc:be:a6:5f:53:d9:12:50:67:0e:aa:08: 7d:25:5f:f8:2a:9f:e4:fc:7b:4c:a0:bf:d0:c9:a9: 23:58:f4:4f:ff:2b:33:af:43:a2:8c:39:db:e3:74: 21:8d:9e:a2:05:f3:b7:3e:7b:a7:8e:b0:84:58:65: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D0:ED:9F:75:E8:EF:78:4E:2E:B1:9D:B2:C4:C1:95:DC:BE:DB:09 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4a:63:09:ee:34:d8:95:7a:1d:57:04:d9:9c:b4:ab:f5:0a: a8:cd:36:9e:75:e6:27:64:d4:2b:23:af:dd:a0:cc:ac:bf:ef: 43:15:c3:66:4a:92:4c:95:c4:38:a1:eb:3f:fa:60:29:3b:39: ea:5c:56:70:ce:1d:b1:d4:21:57:37:8e:ce:51:0e:0e:f9:fa: dd:5b:37:7e:4f:aa:d5:72:c4:ca:f7:cd:1e:e8:00:43:70:18: 91:f4:0c:a3:89:44:7c:bc:83:cb:2c:5e:c3:73:27:d0:9c:36: f4:8c:ce:2b:fd:dc:d0:2a:aa:e0:03:b7:d5:b7:00:e4:a4:31: af:da:81:2f:c3:fc:58:e5:63:e5:27:6f:84:cb:30:5c:b9:6f: d8:51:65:00:4f:81:46:61:15:e2:36:e5:ce:3c:80:03:80:6c: 7e:a5:61:c6:6e:51:6c:f8:f3:53:93:51:03:1f:85:c8:d9:74: b3:0c:30:bb:0b:0e:a4:28:9c:d3:e9:73:de:1d:df:15:38:e5: 69:6a:ec:71:fa:55:1d:3f:6f:af:74:fa:7d:9b:f2:c0:70:91: e9:c2:18:09:6f:4a:9d:b0:00:87:24:fb:0c:f5:b6:64:db:f8: 69:42:5e:44:8f:71:aa:07:7e:2f:14:23:19:79:4f:f0:d0:36: 79:3f:70:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIB69ZOO8S7hLp0Njm2sxQywb6rowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTEyMDUwMzU2MDRaFw0yNTEyMDgxMzA3MDRaMDMxMTAvBgNV BAMTKEExRDBFRDlGNzVFOEVGNzg0RTJFQjE5REIyQzRDMTk1RENCRURCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsjtivusmYWuk2ys0JhU0PWZf BhAM50BxCLPX6ptGm3CQhWAC++oPlfhM+obLqE4cWrjCsjtJi1VX2oSsFqwTsVVe ROZ3VMg86VzJ/amZkqJzgSFXrwmd6Ayp848Q5lERlVfVBTdVcINe635EJyKxf9yv 4GJFNgOXRjRCy8mv8JxUj5fAWlBqrq3BarJkn8gx3xPeri29nlVh/v6DHXd79gKi mnZ5/p/qGR0cm+dNkXK3b0pYxn1UFHCUt0qSNEpor9f8Yby+pl9T2RJQZw6qCH0l X/gqn+T8e0ygv9DJqSNY9E//KzOvQ6KMOdvjdCGNnqIF87c+e6eOsIRYZa9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUodDtn3Xo73hOLrGdssTBldy+2wkwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFKYwnuNNiVeh1XBNmctKv1CqjNNp515idk 1Csjr92gzKy/70MVw2ZKkkyVxDih6z/6YCk7OepcVnDOHbHUIVc3js5RDg75+t1b N35PqtVyxMr3zR7oAENwGJH0DKOJRHy8g8ssXsNzJ9CcNvSMziv93NAqquADt9W3 AOSkMa/agS/D/FjlY+Unb4TLMFy5b9hRZQBPgUZhFeI25c48gAOAbH6lYcZuUWz4 81OTUQMfhcjZdLMMMLsLDqQonNPpc94d3xU45Wlq7HH6VR0/b690+n2b8sBwkenC GAlvSp2wAIck+wz1tmTb+GlCXkSPcaoHfi8UIxl5T/DQNnk/cPY= -----END CERTIFICATE-----Generated at Sun Dec 7 05:16:00 2025 by rpki-client