This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft File: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json) Hash identifier: hdcIkoVKb23BUmnGeRhKPWHHxCip+oXmNCvDrLiLamQ= Subject key identifier: 6C:DA:46:DF:45:C6:0A:87:EA:24:11:F0:33:FE:90:E2:03:A4:3B:33 Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Certificate serial: 3502D00C352E119C90BAC02B03D26C62C3D71BD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft Manifest number: 02E4 Signing time: Sat 20 Dec 2025 04:32:46 +0000 Manifest this update: Sat 20 Dec 2025 04:27:46 +0000 Manifest next update: Tue 23 Dec 2025 15:15:46 +0000 Files and hashes: 1: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: XkLmfviGVp2EGPILR+re9nqIYX0YPT0FpVRTvK0kmBs=) 2: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: +464XuXT+frPUU9bymHLs+/h1w1ueCIVcloEXnnyo/E=) 3: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: GdSTW/OHYTEI/PWuMmTToeVUXPmcixtoxCsRQug+8zk=) 4: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=) 5: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: NTu0pfg5O9FNTQVT/y9O87yuBsSqMNv0sxLjGwJCf2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:02:d0:0c:35:2e:11:9c:90:ba:c0:2b:03:d2:6c:62:c3:d7:1b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Validity Not Before: Dec 20 04:27:46 2025 GMT Not After : Dec 23 15:15:46 2025 GMT Subject: CN=6CDA46DF45C60A87EA2411F033FE90E203A43B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:e9:4d:fb:b7:0c:53:0e:67:69:9b:cf:9d: 02:7f:be:91:fc:dc:8b:ce:4d:7f:11:8a:f6:c2:d7: 9a:57:46:08:4b:f2:dd:33:c4:13:52:f8:3a:88:60: 0f:8a:9e:e0:37:51:e0:35:a2:c5:6b:47:08:b8:ce: 84:fb:be:7c:9e:a3:19:ef:0f:d4:a0:9b:a4:61:f2: ec:7b:a8:8e:b8:72:67:cf:95:fd:c0:1d:3f:78:41: 0d:1c:0b:9c:b6:35:3c:e6:e1:05:4e:ae:21:2b:cc: e7:d5:0d:b4:85:77:f1:3d:8b:be:df:b2:47:4a:92: 38:5a:f2:4b:9a:91:af:ff:78:84:e9:d6:49:af:76: dc:57:fd:fc:14:45:66:4a:36:f0:86:a1:d8:ac:27: b7:9c:b5:ea:90:06:fd:ee:73:ab:ee:88:76:5f:1a: 49:a0:ba:3c:8a:19:02:0d:48:3c:f0:78:6d:1b:73: 56:80:1f:e9:87:87:4c:9a:01:5c:65:3b:83:8f:ee: b2:c6:e9:86:f3:f4:b2:8a:a1:11:66:5e:e1:df:1e: b7:00:67:52:25:aa:3d:54:2d:e2:55:14:ab:81:2f: 4d:17:ca:9b:d1:a7:ab:2b:7a:3e:69:29:46:f2:66: 63:14:81:ac:c7:ae:d7:da:70:39:49:68:a8:76:00: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DA:46:DF:45:C6:0A:87:EA:24:11:F0:33:FE:90:E2:03:A4:3B:33 X509v3 Authority Key Identifier: keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:de:83:f3:d9:40:42:b2:7e:b5:ea:d3:cb:8e:7d:84:97:7a: 89:b7:99:6b:57:62:a7:81:1d:63:f2:1c:e8:69:a2:9c:c9:d3: 83:84:3f:a3:1e:14:63:1f:92:51:a5:1e:ab:48:9d:27:2c:4a: c3:db:85:24:63:cd:2f:db:ae:44:92:03:36:ea:33:ab:ca:f6: 6b:63:58:c4:4d:f0:92:8e:31:2c:87:42:87:c1:d9:65:8d:83: 01:c8:76:96:bd:1c:90:93:ca:5e:05:18:d3:9d:c6:d6:99:3c: ce:43:1b:64:56:59:a5:93:f3:fc:1c:a0:e9:71:83:76:23:0c: 86:d6:78:96:36:f4:dd:d2:ad:05:a8:6c:36:fd:4e:fc:db:ff: c4:07:14:c0:1d:32:1c:fd:70:27:d9:0e:33:6e:58:af:c8:7b: 35:20:10:4a:9b:20:77:60:fc:b7:10:d8:4f:5a:04:5d:7b:67: 85:fa:41:f0:cf:f8:b4:19:1f:16:eb:e0:19:f5:50:f6:a1:44: 7b:f8:97:5a:2e:c5:6b:71:4c:a3:59:57:70:79:cd:96:30:ba: 35:ff:c4:eb:ab:f9:60:97:d5:0f:88:fd:8f:1e:96:7d:b7:d5: bc:63:ad:5f:a8:1c:26:e2:9e:57:84:d0:e2:ee:eb:e7:b1:d2: be:64:31:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQLQDDUuEZyQusArA9JsYsPXG9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2 MTczQUVBQjAeFw0yNTEyMjAwNDI3NDZaFw0yNTEyMjMxNTE1NDZaMDMxMTAvBgNV BAMTKDZDREE0NkRGNDVDNjBBODdFQTI0MTFGMDMzRkU5MEUyMDNBNDNCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCelN+7cMUw5naZvPnQJ/vpH8 3IvOTX8RivbC15pXRghL8t0zxBNS+DqIYA+KnuA3UeA1osVrRwi4zoT7vnyeoxnv D9Sgm6Rh8ux7qI64cmfPlf3AHT94QQ0cC5y2NTzm4QVOriErzOfVDbSFd/E9i77f skdKkjha8kuaka//eITp1kmvdtxX/fwURWZKNvCGodisJ7ecteqQBv3uc6vuiHZf GkmgujyKGQINSDzweG0bc1aAH+mHh0yaAVxlO4OP7rLG6Ybz9LKKoRFmXuHfHrcA Z1Ilqj1ULeJVFKuBL00XypvRp6srej5pKUbyZmMUgazHrtfacDlJaKh2AJ47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNpG30XGCofqJBHwM/6Q4gOkOzMwHwYDVR0j BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1 QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz QUVBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYx MEE2MTczQUVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3eg/PZQEKyfrXq08uOfYSXeom3mWtXYqeB HWPyHOhpopzJ04OEP6MeFGMfklGlHqtInScsSsPbhSRjzS/brkSSAzbqM6vK9mtj WMRN8JKOMSyHQofB2WWNgwHIdpa9HJCTyl4FGNOdxtaZPM5DG2RWWaWT8/wcoOlx g3YjDIbWeJY29N3SrQWobDb9Tvzb/8QHFMAdMhz9cCfZDjNuWK/IezUgEEqbIHdg /LcQ2E9aBF17Z4X6QfDP+LQZHxbr4Bn1UPahRHv4l1ouxWtxTKNZV3B5zZYwujX/ xOur+WCX1Q+I/Y8eln231bxjrV+oHCbinleE0OLu6+ex0r5kMRk= -----END CERTIFICATE-----Generated at Mon Dec 22 02:31:07 2025 by rpki-client