This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft File: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json) Hash identifier: eiJsZ5VWfPqsu2CQpLheoueHZrFc/kWr3H1USAhpsIQ= Subject key identifier: 3E:D1:CA:F3:93:99:C5:57:5A:94:D7:47:01:58:41:AD:4C:9F:56:19 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 0F7C4C21436AA76FA468D414E7ABF1D001360184 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft Manifest number: 0108 Signing time: Mon 22 Dec 2025 19:42:05 +0000 Manifest this update: Mon 22 Dec 2025 19:37:05 +0000 Manifest next update: Fri 26 Dec 2025 03:55:05 +0000 Files and hashes: 1: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=) 2: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: jwvNujssv5IpW6wUm1bDQwCkCbwLEP4pJ6+PadQVpUw=) 3: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=) 4: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: 4uXivfruDrV6vIQDaw3CdwZggXYUI8C5CzvO1Aezvw8=) 5: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: ajp2RV8pB0t7xjb6AMg24tD94YiYauZ1iojKxpZ1J3o=) 6: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 5B2JZlTjn+LkK2wM5nDYDuRQs9xZXGxH5pBH421APJg=) 7: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: hFSaz/g1QnbG2lr8TgOJJdh8bcxNOKHTZPQyaXMiTuo=) 8: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: QP61IhleORRzGf5/ZoBkFFGoF5n6EhGqldep0K1H6sA=) 9: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE=) 10: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: faTcPr5R7d5SON6aopxvVZHUN4/VFaOooXiyhEzUbUA=) 11: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=) 12: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg=) 13: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=) 14: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE=) 15: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=) 16: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=) 17: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: xiP480ZV+GHJ2/4depZViI+46Z/6Gy8Oy9ISHx8BOoQ=) 18: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lNdW3pOZi8eT+J9dyaHX5GGSIEb0ecFMMO3Pho99eNg=) 19: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=) 20: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs=) 21: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo=) 22: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=) 23: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: N6mGANoBckRU2bg5hxStsxuo2HX2wdIPxHilFclib3s=) 24: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: ASP8j+vBPIfNxGlKZjOVhw8wDXvVplT0wShhkxku/nY=) 25: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: 8BghnefMyUfpQWuZ7yB+zaBc31qeLaaDPm1YLasmkKU=) 26: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc=) 27: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0=) 28: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: EApvDBvKIpb3TW1OvFKqCBw8otauBBFdv2Yvyf2DIxU=) 29: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: /2j20KxiHUqPzb25Ob8Vnswz982vobPobznvUU3v3l0=) 30: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo=) 31: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo=) 32: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: BHNzv/HYHWHRi2i96FDiCLd2fRagJajw8VZM34SXp2M=) 33: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: 3REo8lPESzPESEgFYfKabImyxXr3e1MH5zR+5WqeqWA=) 34: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=) 35: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: jqvg3e8AqoLRJ/K75B/MsSSeNm5CmK8WuhFVMvH1GPY=) 36: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=) 37: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=) 38: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: BVieKtpjSLtSo/dKiDHRcHA8rEhJMn29aKZFmH29jqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:7c:4c:21:43:6a:a7:6f:a4:68:d4:14:e7:ab:f1:d0:01:36:01:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Dec 22 19:37:05 2025 GMT Not After : Dec 26 03:55:05 2025 GMT Subject: CN=3ED1CAF39399C5575A94D747015841AD4C9F5619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:66:a0:dc:ae:d2:72:90:90:d0:01:9f:59: 0e:c9:f4:f4:db:b4:2d:08:f2:22:46:10:6f:23:05: 63:ab:a7:05:48:d3:89:84:93:04:e6:46:c0:15:a7: d3:f6:95:41:e3:f4:13:84:bb:fe:af:ee:38:17:3e: 49:ef:bd:20:c7:b1:d4:5f:3d:af:5b:d1:b2:d0:f2: 05:da:49:24:29:bc:76:01:86:4e:30:55:48:78:0f: cd:48:30:2f:cc:17:71:ed:3f:d6:50:99:3e:67:96: ad:23:f2:e5:63:f0:16:1c:36:9d:58:e0:a4:dc:bb: d5:bd:71:0d:75:9d:10:aa:51:07:c5:be:d3:55:4a: dc:b2:f0:52:cb:eb:e0:2c:f8:47:fa:4d:1b:2a:cc: 25:75:38:8e:b4:68:2e:ac:46:6d:6a:08:35:98:4c: 1e:31:6c:1d:54:6b:0f:60:c8:01:49:8d:ce:f5:2e: 46:66:97:2d:c8:d9:b4:f8:db:21:70:c9:48:fe:a6: 5d:9e:07:d8:47:14:dd:5f:a8:3d:99:4c:0c:2f:74: 2e:58:48:40:1e:fe:d5:3b:80:5b:90:0d:8f:7b:6b: f6:81:92:eb:6a:86:55:c4:a9:65:30:5c:77:f7:76: bc:72:b4:78:f0:19:a0:4d:7b:fb:c0:cd:3f:7d:f9: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D1:CA:F3:93:99:C5:57:5A:94:D7:47:01:58:41:AD:4C:9F:56:19 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ca:18:f4:6f:a8:50:55:57:0b:29:1c:9f:45:66:fe:4b:fa: cc:31:d1:a1:75:74:67:24:3d:3d:cb:20:f3:da:c2:00:43:d8: ff:56:ee:be:51:b5:78:b6:ec:b4:de:32:b8:84:bd:ce:f3:6f: 1e:68:97:24:ad:10:0a:d8:75:b5:e5:73:33:4b:e6:f8:10:63: e1:8a:2f:50:24:c3:34:57:3d:0b:97:6b:fb:e3:a2:af:ca:39: 44:8d:40:5e:74:e7:78:14:e3:57:99:62:4d:76:8f:b3:eb:f5: 5f:14:68:65:72:ed:9e:75:5b:8f:ff:c9:bf:2b:28:98:6a:b7: b6:3d:53:71:36:e6:4f:b3:35:e1:b7:3d:23:ff:88:a4:c2:10: 20:51:f7:ef:db:1a:3e:df:8a:cf:5e:bf:e2:d8:1f:d2:9d:a5: 6c:59:ff:d1:10:e2:5e:d5:f9:cf:1f:2b:ea:70:f7:82:32:1b: f2:40:0c:ac:ef:d5:e2:05:94:3e:29:45:5f:53:ed:2b:5b:1c: f3:a6:ee:c8:32:9e:06:b4:4a:75:c3:e9:f0:cb:62:4a:34:59: 7d:c2:e2:a2:62:99:28:89:cd:c9:ea:fa:57:7f:5c:09:28:2f: d1:26:f6:b6:0c:cd:20:f7:b3:41:44:47:7c:83:d6:12:8c:f5: a9:3b:3c:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3xMIUNqp2+kaNQU56vx0AE2AYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTEyMjIxOTM3MDVaFw0yNTEyMjYwMzU1MDVaMDMxMTAvBgNV BAMTKDNFRDFDQUYzOTM5OUM1NTc1QTk0RDc0NzAxNTg0MUFENEM5RjU2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7L2ag3K7ScpCQ0AGfWQ7J9PTb tC0I8iJGEG8jBWOrpwVI04mEkwTmRsAVp9P2lUHj9BOEu/6v7jgXPknvvSDHsdRf Pa9b0bLQ8gXaSSQpvHYBhk4wVUh4D81IMC/MF3HtP9ZQmT5nlq0j8uVj8BYcNp1Y 4KTcu9W9cQ11nRCqUQfFvtNVStyy8FLL6+As+Ef6TRsqzCV1OI60aC6sRm1qCDWY TB4xbB1Uaw9gyAFJjc71LkZmly3I2bT42yFwyUj+pl2eB9hHFN1fqD2ZTAwvdC5Y SEAe/tU7gFuQDY97a/aBkutqhlXEqWUwXHf3drxytHjwGaBNe/vAzT99+e5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPtHK85OZxVdalNdHAVhBrUyfVhkwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzEvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NC MDQ4QzFENTE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLKGPRvqFBVVwspHJ9FZv5L+swx0aF1dGck PT3LIPPawgBD2P9W7r5RtXi27LTeMriEvc7zbx5olyStEArYdbXlczNL5vgQY+GK L1AkwzRXPQuXa/vjoq/KOUSNQF5053gU41eZYk12j7Pr9V8UaGVy7Z51W4//yb8r KJhqt7Y9U3E25k+zNeG3PSP/iKTCECBR9+/bGj7fis9ev+LYH9KdpWxZ/9EQ4l7V +c8fK+pw94IyG/JADKzv1eIFlD4pRV9T7StbHPOm7sgynga0SnXD6fDLYko0WX3C 4qJimSiJzcnq+ld/XAkoL9Em9rYMzSD3s0FER3yD1hKM9ak7PJc= -----END CERTIFICATE-----Generated at Wed Dec 24 10:48:23 2025 by rpki-client