This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: qqSQXALQuuTvPXiI5MXIvLuUR0diKUSHm125q2soGRg= Subject key identifier: 8A:4D:D7:C6:B4:AE:F9:90:3A:B2:06:D7:A9:68:6D:FA:DA:F8:30:B7 Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 271F61E5C2DE5FC7F78086C8AF5EA85580D67DC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 030C Signing time: Sat 06 Dec 2025 10:21:46 +0000 Manifest this update: Sat 06 Dec 2025 10:16:46 +0000 Manifest next update: Tue 09 Dec 2025 14:37:46 +0000 Files and hashes: 1: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: Q4IBH4awz0KS7F4kcr9nnchShCc97mLINaCgaMuWS+w=) 2: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: eQ2W59Sl25b9+tbhRBYK+eiWkdxaKDr4YfWFXlk9jXI=) 3: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: eGEsrGBto/hQncn3YcGePX27GH/UT48OX+sETIcZ17o=) 4: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: aQ3bZ8U/53lOgq6IbJ4jaeEks7cypqeVb0bEi+y+Pus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1f:61:e5:c2:de:5f:c7:f7:80:86:c8:af:5e:a8:55:80:d6:7d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Dec 6 10:16:46 2025 GMT Not After : Dec 9 14:37:46 2025 GMT Subject: CN=8A4DD7C6B4AEF9903AB206D7A9686DFADAF830B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:f5:ce:38:41:ef:0c:d0:9c:da:15:20:74: da:73:b1:3f:30:58:5e:51:4c:b6:37:cf:24:af:7f: e4:d8:d4:c5:0b:84:9b:f2:09:2b:df:3b:e8:a5:ab: ab:89:42:a1:89:99:cc:14:b7:65:4d:c1:10:b7:11: ee:1e:d1:38:e2:a2:5e:56:15:ad:d0:15:40:25:56: 18:cd:73:14:01:24:49:ca:42:21:6e:c3:11:bb:ef: 12:54:fb:23:e6:1d:0a:06:86:af:af:b9:9e:2b:b6: ac:95:dd:5b:27:d1:ac:7c:6a:b5:5d:92:db:fb:be: 1c:ca:0f:69:33:db:bc:52:be:21:4c:2d:a2:07:a2: ef:ae:a2:fa:4d:6c:ba:66:a2:00:da:73:4b:60:f2: c0:6f:7a:ac:eb:30:77:d2:bc:44:e1:80:8d:21:6b: 91:d9:dc:66:70:bc:72:70:2b:d2:82:1a:bc:8e:f4: b5:d2:18:1c:67:21:6b:34:40:36:8f:91:c2:13:6d: 00:3c:fb:1c:4c:c9:1f:49:dc:b8:9e:ba:58:94:47: b6:96:dd:39:2e:3c:38:9d:1f:49:13:a9:09:fc:86: 7a:bb:9c:e3:8d:ff:1e:8d:66:16:55:20:2d:b8:ce: 5b:7e:29:12:33:ff:c0:ed:64:66:60:c1:37:f4:33: 43:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4D:D7:C6:B4:AE:F9:90:3A:B2:06:D7:A9:68:6D:FA:DA:F8:30:B7 X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:cf:75:3a:0c:4b:01:34:59:05:b6:37:a1:65:cf:31:05:fe: cc:78:95:9f:5f:49:08:f6:fd:11:a2:cc:29:fc:e0:9c:93:2d: ac:d8:2b:50:4c:d0:04:21:ba:ef:05:af:81:4c:db:e5:8c:c1: 70:ce:7f:c7:52:46:17:46:5d:fc:3b:8d:9a:48:1d:2b:77:22: d5:a1:da:de:56:4b:ec:5a:2d:c1:6e:88:88:5b:ab:fe:34:79: 2d:99:c8:f7:36:9c:c8:bc:a2:f8:7c:f9:90:03:ef:3b:bf:15: 86:eb:57:53:25:63:f7:6f:6b:53:79:a4:d3:28:ce:26:4d:68: 08:48:f6:64:2e:ad:33:f7:47:eb:27:c4:7c:1e:1e:1d:42:bc: 02:92:b8:7d:38:43:3f:da:9c:38:f5:25:55:24:14:bb:60:e6: de:84:b1:7c:60:12:0c:78:81:55:0d:5b:e1:a0:f3:91:93:38: 07:4d:65:31:e3:ff:af:c3:e0:52:4d:5d:af:35:7c:16:cd:46: 34:46:14:79:f6:fa:1b:99:2a:e5:d5:f1:89:f4:e8:eb:61:b3: eb:a4:05:7b:14:8c:e3:f1:4a:52:e5:53:18:53:4a:18:92:d0: bd:e2:47:e1:b3:a6:f3:c1:72:cf:6b:dc:02:80:ef:7b:9c:9d: 87:88:d5:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJx9h5cLeX8f3gIbIr16oVYDWfcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNTEyMDYxMDE2NDZaFw0yNTEyMDkxNDM3NDZaMDMxMTAvBgNV BAMTKDhBNEREN0M2QjRBRUY5OTAzQUIyMDZEN0E5Njg2REZBREFGODMwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UfXOOEHvDNCc2hUgdNpzsT8w WF5RTLY3zySvf+TY1MULhJvyCSvfO+ilq6uJQqGJmcwUt2VNwRC3Ee4e0Tjiol5W Fa3QFUAlVhjNcxQBJEnKQiFuwxG77xJU+yPmHQoGhq+vuZ4rtqyV3Vsn0ax8arVd ktv7vhzKD2kz27xSviFMLaIHou+uovpNbLpmogDac0tg8sBveqzrMHfSvEThgI0h a5HZ3GZwvHJwK9KCGryO9LXSGBxnIWs0QDaPkcITbQA8+xxMyR9J3LieuliUR7aW 3TkuPDidH0kTqQn8hnq7nOON/x6NZhZVIC24zlt+KRIz/8DtZGZgwTf0M0P3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUik3XxrSu+ZA6sgbXqWht+tr4MLcwHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXPdToMSwE0WQW2N6FlzzEF/sx4lZ9fSQj2 /RGizCn84JyTLazYK1BM0AQhuu8Fr4FM2+WMwXDOf8dSRhdGXfw7jZpIHSt3ItWh 2t5WS+xaLcFuiIhbq/40eS2ZyPc2nMi8ovh8+ZAD7zu/FYbrV1MlY/dva1N5pNMo ziZNaAhI9mQurTP3R+snxHweHh1CvAKSuH04Qz/anDj1JVUkFLtg5t6EsXxgEgx4 gVUNW+Gg85GTOAdNZTHj/6/D4FJNXa81fBbNRjRGFHn2+huZKuXV8Yn06Oths+uk BXsUjOPxSlLlUxhTShiS0L3iR+GzpvPBcs9r3AKA73ucnYeI1SY= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:00 2025 by rpki-client