This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft File: 49CDCA308C289D688C649C2303BECB3ED76B5054.mft (raw, json) Hash identifier: yAkVu75Vy3loTR3uabZnL4sYu5uGuWUR60kl5vO1Tzg= Subject key identifier: E4:7D:D9:7C:D6:C7:DB:62:13:23:4B:F1:A8:B5:AF:B4:08:E9:99:13 Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54 Certificate issuer: /CN=49CDCA308C289D688C649C2303BECB3ED76B5054 Certificate serial: 7647FE84E7B9B1D1BE8D8475B71B0748EAFA0671 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft Manifest number: 0538 Signing time: Fri 05 Dec 2025 07:31:15 +0000 Manifest this update: Fri 05 Dec 2025 07:26:15 +0000 Manifest next update: Mon 08 Dec 2025 10:38:15 +0000 Files and hashes: 1: 49CDCA308C289D688C649C2303BECB3ED76B5054.crl (hash: ntFaJkruaGXIXHjsIJx04HQ3M3G48jQGiq+zXOVv3OE=) 2: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: gEYK+18FP+7kBMfZJoRXCpV612TXysZxOtU9C0Gw8cc=) 3: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: 2ttGNYSIno2YUVrl5iMDUeYoXTM+0/k8iShvnFHSZUg=) 4: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: PNF09SxEelapDmbcZhAv/JlSjlnccRnMVMsb6Vjd5Cs=) 5: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: 6lzTZpzOtbXaisX77lh3zqfu4RoYr39Ke230rMF+BLA=) 6: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: VOPS8e3VH0l6ubQIOcds4q8+0PaehGxHMdByhPPUMRk=) 7: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: GUJzG7I21c6XIuzE+3MXjSNzND91626bZhTZv88Tj9U=) 8: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: Ha3WoHQ/zP70el2yWIeTgLkGHqYuIOHL7pH96V5JFfw=) 9: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: 6e4gMBIWBCHTWU94MEtj6eyxSIoX56aVHgjbVxpfxNg=) 10: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: 6VuJVE5V+cRzw0YC3j26AjnB200tu5ynyJ2PlMkHwdk=) 11: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: +XaFO38Q9dXCmJ85JQuHQCLrxReLtpZeqTNCnHE/ld8=) 12: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: lh1ua1Y9ZtE2dDW45ObJ8+6IvX0lmoDB+fa6NG7jmTA=) 13: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: 38apIlW13UqRkBJC0AvLF1JxLSXx4uzPA7tj9m0g40E=) 14: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: 04eyxXbv9jngQdgYmmSjLsuCye8qiexJidy0wMhDXkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:47:fe:84:e7:b9:b1:d1:be:8d:84:75:b7:1b:07:48:ea:fa:06:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054 Validity Not Before: Dec 5 07:26:15 2025 GMT Not After : Dec 8 10:38:15 2025 GMT Subject: CN=E47DD97CD6C7DB6213234BF1A8B5AFB408E99913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:3b:4c:ac:13:c5:4e:5f:d7:13:c2:ad:d9: d5:6e:36:fd:7a:9e:76:a5:dd:74:65:8d:90:99:99: 4c:4d:d1:63:65:76:ec:00:a8:2c:70:74:29:73:bb: 6f:ea:6d:43:72:46:da:68:79:e7:d2:c8:1f:d6:b9: 53:7d:08:9e:44:f2:b8:07:23:cf:87:4d:ea:42:6d: d5:09:21:67:ad:b1:eb:2f:6d:8b:bc:d2:dc:6a:22: 49:c6:fd:b0:0e:40:21:cc:94:20:e1:55:b8:f8:cc: 91:c0:45:ce:d3:cb:c1:1d:e5:50:b5:d2:a5:b2:d2: 37:4d:59:da:ea:a8:72:03:71:7f:a1:43:f9:3b:09: ed:0d:60:27:e0:78:bf:95:3f:ae:d3:25:7a:ab:54: 6c:5f:05:0d:19:95:7d:78:ba:c9:76:d3:55:e8:60: e8:8f:0f:f6:55:47:49:22:7f:d9:fb:36:62:dd:8e: 3d:b1:0e:c7:1a:f9:46:0f:1f:72:8c:aa:64:d6:ba: 66:64:3c:1b:29:3f:c8:ab:24:95:4e:97:8b:a5:99: 88:b8:34:11:68:24:90:5d:c3:0a:b5:e0:b8:10:7c: 57:9d:eb:67:5c:ac:24:ab:e1:50:64:78:c6:31:b3: 50:e1:64:05:d3:63:03:b7:09:e2:74:97:9a:56:25: 4b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7D:D9:7C:D6:C7:DB:62:13:23:4B:F1:A8:B5:AF:B4:08:E9:99:13 X509v3 Authority Key Identifier: keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d6:a5:42:cb:d8:cc:73:86:da:7f:4f:ca:16:56:6e:18:94: 1b:55:07:69:ec:7e:61:6e:46:45:3c:75:76:13:c2:71:68:74: bf:f1:75:8e:8e:d6:43:63:d8:29:db:bf:5e:5c:8a:d5:9b:d7: 13:43:83:e0:54:12:a4:8b:51:f7:42:e3:88:b2:58:0f:6e:50: b8:e1:ab:01:51:02:72:0d:02:d4:94:94:d3:aa:a5:aa:14:f0: ca:e7:43:5a:11:d2:48:c5:22:00:50:6a:aa:5f:3f:e9:b6:7d: 8c:c1:1e:e9:44:3c:52:3f:0b:3b:00:19:2a:57:15:b9:8a:c9: 86:74:a3:4e:c8:0d:55:d3:cf:37:6b:54:59:8f:53:b4:52:f6: 1f:d8:b5:a8:84:d9:70:b4:92:a9:19:f4:3f:57:1f:a7:24:10: e2:4e:b5:e9:ea:8f:b4:4c:8b:c8:62:75:65:34:91:b3:64:e9: 60:24:f3:da:52:71:dd:bf:e3:19:70:06:cf:eb:45:99:d8:8b: 36:da:8d:d9:df:b2:be:64:3c:9c:b3:de:33:57:1e:ed:96:c0: db:c1:90:e7:f2:ac:f6:b9:aa:90:27:5a:8b:f6:17:1a:69:fe: dc:8c:57:35:f3:33:03:5d:85:bb:14:c2:db:c6:40:df:61:80: a0:16:e6:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkf+hOe5sdG+jYR1txsHSOr6BnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VE NzZCNTA1NDAeFw0yNTEyMDUwNzI2MTVaFw0yNTEyMDgxMDM4MTVaMDMxMTAvBgNV BAMTKEU0N0REOTdDRDZDN0RCNjIxMzIzNEJGMUE4QjVBRkI0MDhFOTk5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16DtMrBPFTl/XE8Kt2dVuNv16 nnal3XRljZCZmUxN0WNlduwAqCxwdClzu2/qbUNyRtpoeefSyB/WuVN9CJ5E8rgH I8+HTepCbdUJIWetsesvbYu80txqIknG/bAOQCHMlCDhVbj4zJHARc7Ty8Ed5VC1 0qWy0jdNWdrqqHIDcX+hQ/k7Ce0NYCfgeL+VP67TJXqrVGxfBQ0ZlX14usl201Xo YOiPD/ZVR0kif9n7NmLdjj2xDsca+UYPH3KMqmTWumZkPBspP8irJJVOl4ulmYi4 NBFoJJBdwwq14LgQfFed62dcrCSr4VBkeMYxs1DhZAXTYwO3CeJ0l5pWJUvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5H3ZfNbH22ITI0vxqLWvtAjpmRMwHwYDVR0j BBgwFoAUSc3KMIwonWiMZJwjA77LPtdrUFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZWI5OGNlZC1hZjE4LTRiZmYtYWQ3MS03M2QyYjBjOWQ4YTkvMC80OUNEQ0EzMDhD Mjg5RDY4OEM2NDlDMjMwM0JFQ0IzRUQ3NkI1MDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VENzZC NTA1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWViOThjZWQtYWYxOC00YmZmLWFk NzEtNzNkMmIwYzlkOGE5LzAvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNC M0VENzZCNTA1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7WpULL2Mxzhtp/T8oWVm4YlBtVB2nsfmFu RkU8dXYTwnFodL/xdY6O1kNj2Cnbv15citWb1xNDg+BUEqSLUfdC44iyWA9uULjh qwFRAnINAtSUlNOqpaoU8MrnQ1oR0kjFIgBQaqpfP+m2fYzBHulEPFI/CzsAGSpX FbmKyYZ0o07IDVXTzzdrVFmPU7RS9h/YtaiE2XC0kqkZ9D9XH6ckEOJOtenqj7RM i8hidWU0kbNk6WAk89pScd2/4xlwBs/rRZnYizbajdnfsr5kPJyz3jNXHu2WwNvB kOfyrPa5qpAnWov2Fxpp/tyMVzXzMwNdhbsUwtvGQN9hgKAW5nk= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:16 2025 by rpki-client