This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft File: A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft (raw, json) Hash identifier: Qzwjo6MZlyqGOHv3CN0RAvBGoTsjyMfMRlt328YxYmQ= Subject key identifier: 3C:29:51:55:E8:9D:DD:DC:66:68:E0:F3:52:FD:54:73:2E:70:E6:17 Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Certificate serial: 4E12DAF9B33451A22F8E201E5E3426FD8D8BBC34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft Manifest number: 0229 Signing time: Sat 06 Dec 2025 08:31:27 +0000 Manifest this update: Sat 06 Dec 2025 08:26:27 +0000 Manifest next update: Tue 09 Dec 2025 18:03:27 +0000 Files and hashes: 1: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: /432ui2qmqLAqTG2YzJyGFJbPM4fOVIctbLjFQr3ZFs=) 2: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: 5BGjTlG6kn0xa+zG7WIOf2FPOI4RcyC7jSjDUVIBLp8=) 3: A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl (hash: CkRuVhB2U+Bu5IIFfKnZmU+oidjFj3keL9J0SjS51Rs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:12:da:f9:b3:34:51:a2:2f:8e:20:1e:5e:34:26:fd:8d:8b:bc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Validity Not Before: Dec 6 08:26:27 2025 GMT Not After : Dec 9 18:03:27 2025 GMT Subject: CN=3C295155E89DDDDC6668E0F352FD54732E70E617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:10:20:2e:24:53:49:1f:f4:d4:6b:d0:6a: 66:6a:f0:c8:45:c3:aa:08:12:6f:56:14:45:35:04: a0:0f:46:2c:70:15:39:66:a0:53:70:08:d0:d6:6f: c3:23:ca:2a:29:27:e9:b7:43:6c:19:80:15:6f:c8: e2:c9:38:26:81:ce:aa:6f:0b:7d:2b:ef:74:e9:91: 79:b0:ca:29:a1:bc:bd:df:ca:b2:3f:4d:5d:c1:87: fb:3c:02:e1:08:44:70:cb:29:45:16:d8:13:b2:9b: 85:83:46:5d:ef:e2:4e:81:99:80:48:d3:b8:cc:be: 2a:f2:df:24:09:96:e5:2b:1b:28:e0:7c:c0:d7:7f: e8:78:e3:01:50:8e:89:c9:91:ff:b6:c4:88:2e:03: fe:e8:31:8e:16:3d:e2:9b:99:85:03:b4:68:41:a8: 14:cb:65:39:3f:42:04:44:ad:88:0b:81:cb:6b:56: e0:7f:81:5d:3c:41:cc:7c:b6:8d:a1:ee:78:62:e7: 1e:8d:cd:5f:02:61:4c:08:3c:9b:15:d8:b9:33:04: 22:78:04:c5:ff:a6:23:ac:7a:25:a6:64:1a:81:18: 73:be:61:c7:90:77:0b:35:08:fe:19:29:e5:25:e5: 39:f5:b6:ab:41:67:f6:a2:e2:a5:1e:38:ab:a1:6e: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:29:51:55:E8:9D:DD:DC:66:68:E0:F3:52:FD:54:73:2E:70:E6:17 X509v3 Authority Key Identifier: keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a9:7f:5d:c1:71:c5:1c:a2:d5:1c:26:6d:6e:a2:f8:bd:dd: 17:9d:6f:09:23:7e:f4:1d:9e:3c:3f:b5:98:c6:55:26:72:57: d7:82:8d:cc:e6:9c:10:96:51:31:7b:e1:8d:3a:eb:f0:fb:ab: df:8c:5a:75:8d:74:13:9d:92:60:fa:18:00:5d:6c:ca:7d:86: 4a:13:9d:04:a9:f2:02:be:e5:af:2d:f7:07:2a:1d:73:8d:28: 8c:7c:c1:fc:a0:02:5f:a0:d2:31:80:40:1a:54:fe:c8:ec:49: 4d:0a:67:5a:f5:81:5a:e8:b6:9c:cb:3d:90:8b:e8:6d:cf:bb: e6:f4:4d:42:78:53:72:55:0b:dd:92:d5:12:00:c9:64:75:af: 5c:48:1e:fe:8a:3d:27:71:87:49:e6:2b:cc:7e:3b:d4:7b:ab: 07:55:4e:62:c6:a1:83:c8:25:34:f8:26:dc:90:77:43:d2:12: 1d:3e:2c:5e:cb:9e:b3:18:41:c6:45:a6:e3:11:e5:94:5b:51: ae:cb:8a:07:61:a2:b7:51:25:64:de:0b:2e:18:39:3f:73:8f: 87:92:f9:b5:f8:76:ff:c8:a1:88:bb:b2:0a:f1:74:ac:b4:da: 4b:7c:98:37:a1:28:7d:63:93:f1:38:c6:bc:de:75:dc:e8:98: c1:0e:ef:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThLa+bM0UaIvjiAeXjQm/Y2LvDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMz RUU5QzYwRTAeFw0yNTEyMDYwODI2MjdaFw0yNTEyMDkxODAzMjdaMDMxMTAvBgNV BAMTKDNDMjk1MTU1RTg5REREREM2NjY4RTBGMzUyRkQ1NDczMkU3MEU2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXhAgLiRTSR/01GvQamZq8MhF w6oIEm9WFEU1BKAPRixwFTlmoFNwCNDWb8MjyiopJ+m3Q2wZgBVvyOLJOCaBzqpv C30r73TpkXmwyimhvL3fyrI/TV3Bh/s8AuEIRHDLKUUW2BOym4WDRl3v4k6BmYBI 07jMviry3yQJluUrGyjgfMDXf+h44wFQjonJkf+2xIguA/7oMY4WPeKbmYUDtGhB qBTLZTk/QgRErYgLgctrVuB/gV08Qcx8to2h7nhi5x6NzV8CYUwIPJsV2LkzBCJ4 BMX/piOseiWmZBqBGHO+YceQdws1CP4ZKeUl5Tn1tqtBZ/ai4qUeOKuhbr0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPClRVeid3dxmaODzUv1Ucy5w5hcwHwYDVR0j BBgwFoAUp0lmJAtkJ0uQ6+Bs4O4iLD7pxg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGRjMTI4My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC9BNzQ5NjYyNDBC NjQyNzRCOTBFQkUwNkNFMEVFMjIyQzNFRTlDNjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMzRUU5 QzYwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIy MkMzRUU5QzYwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECpf13BccUcotUcJm1uovi93RedbwkjfvQd njw/tZjGVSZyV9eCjczmnBCWUTF74Y066/D7q9+MWnWNdBOdkmD6GABdbMp9hkoT nQSp8gK+5a8t9wcqHXONKIx8wfygAl+g0jGAQBpU/sjsSU0KZ1r1gVrotpzLPZCL 6G3Pu+b0TUJ4U3JVC92S1RIAyWR1r1xIHv6KPSdxh0nmK8x+O9R7qwdVTmLGoYPI JTT4JtyQd0PSEh0+LF7LnrMYQcZFpuMR5ZRbUa7LigdhordRJWTeCy4YOT9zj4eS +bX4dv/IoYi7sgrxdKy02kt8mDehKH1jk/E4xrzeddzomMEO7zs= -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:18 2025 by rpki-client