This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: z7jbFGJGUrU6kthP1T+hBv3HjeN+AuLD0uHCctHrysI= Subject key identifier: A4:BD:CD:B1:57:A2:E9:2D:C6:D3:04:B8:BE:8F:41:40:FF:A7:A4:7E Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 695BE6300BFF29539916891D0519E7893F941DB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 01BC Signing time: Thu 18 Dec 2025 12:30:50 +0000 Manifest this update: Thu 18 Dec 2025 12:25:50 +0000 Manifest next update: Sun 21 Dec 2025 14:54:50 +0000 Files and hashes: 1: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) 2: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) 3: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: PoThiN2D/xmitHxZ9zJQm/IT5acXStnIos/UUclAwMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 14:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5b:e6:30:0b:ff:29:53:99:16:89:1d:05:19:e7:89:3f:94:1d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Dec 18 12:25:50 2025 GMT Not After : Dec 21 14:54:50 2025 GMT Subject: CN=A4BDCDB157A2E92DC6D304B8BE8F4140FFA7A47E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:97:04:c0:76:6c:ff:41:21:b0:bc:dd:95: 21:82:0c:c1:f5:c0:be:85:f6:4e:cd:a2:68:40:41: d2:17:48:a7:27:ac:36:df:6f:25:28:ad:45:11:a5: 6e:22:fa:b0:d8:4b:8e:8b:f4:d1:76:ba:1e:28:c0: fb:20:0a:74:26:7d:33:7f:ca:02:40:57:b4:82:ab: dd:6a:dd:2b:d5:6c:89:77:bf:ab:55:d2:7c:c8:71: c5:e3:b4:f4:7b:23:79:6e:f8:06:97:a3:00:6a:4e: 74:e3:a0:21:f6:79:79:15:ff:d5:4f:91:62:39:f5: b1:0b:10:7b:ba:37:7f:66:e0:10:bc:07:0b:67:92: f3:82:ab:3b:22:bc:4f:b9:1e:12:e0:1f:f1:0e:2f: 3f:f4:e5:24:ca:46:0e:b4:29:cb:2d:a0:8c:81:09: e9:23:53:30:22:68:28:23:16:e4:3b:0f:80:55:b0: 97:91:34:03:e7:7e:42:b3:2c:76:78:9c:93:89:da: dc:67:1d:ea:32:a1:16:e9:0e:03:d3:e4:0e:0f:07: f5:94:7f:6c:e4:52:23:ba:9c:e1:74:67:8c:56:eb: 37:12:6b:2d:b6:22:e7:5a:8b:3b:88:50:15:40:22: 88:b1:c4:8c:a0:22:a1:e6:22:f2:3d:cf:a6:8f:9d: 90:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BD:CD:B1:57:A2:E9:2D:C6:D3:04:B8:BE:8F:41:40:FF:A7:A4:7E X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b5:50:79:bd:a4:14:c7:da:0e:af:02:24:b5:c2:7c:9d:95: c3:7b:ca:85:32:8a:1f:14:85:a8:be:90:26:9f:b4:ab:5e:07: 3c:45:bd:bb:06:a2:bf:5f:db:19:27:62:16:d5:34:e2:83:84: 39:d2:88:f9:52:a1:f7:1c:a1:f3:ed:50:3c:b1:2e:34:e0:f5: f9:92:3b:a7:c8:c3:a0:9d:94:68:f8:22:b0:a4:39:a9:85:96: 56:85:f8:6d:8f:65:45:fc:db:06:6f:17:be:8f:d7:d0:c6:b5: de:7f:62:fe:b7:e9:1d:20:fb:cf:b5:7b:04:82:d5:55:1c:f8: 66:ec:89:8f:b5:ba:0c:89:92:0c:b9:4e:70:c8:2c:b6:5b:8e: e0:bd:77:9c:a1:83:c9:60:c8:8b:c6:b8:e2:54:05:5c:4d:e1: 8f:cf:bb:1f:fa:4a:fe:1f:23:45:88:e6:7b:26:57:a7:ff:30: 98:75:1e:98:f2:07:61:d6:ee:d3:38:16:94:d7:0a:20:8d:74: 8a:69:9c:28:aa:97:93:34:ba:5c:1b:05:14:11:03:b7:ca:53: 7c:90:87:fc:06:ac:7f:3b:9b:85:c3:c9:f8:38:db:81:a5:65: df:6c:d8:2d:2f:4e:ac:78:c5:04:49:be:40:35:67:65:db:cf: 70:71:66:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVvmMAv/KVOZFokdBRnniT+UHbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTEyMTgxMjI1NTBaFw0yNTEyMjExNDU0NTBaMDMxMTAvBgNV BAMTKEE0QkRDREIxNTdBMkU5MkRDNkQzMDRCOEJFOEY0MTQwRkZBN0E0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+ZcEwHZs/0EhsLzdlSGCDMH1 wL6F9k7NomhAQdIXSKcnrDbfbyUorUURpW4i+rDYS46L9NF2uh4owPsgCnQmfTN/ ygJAV7SCq91q3SvVbIl3v6tV0nzIccXjtPR7I3lu+AaXowBqTnTjoCH2eXkV/9VP kWI59bELEHu6N39m4BC8BwtnkvOCqzsivE+5HhLgH/EOLz/05STKRg60KcstoIyB CekjUzAiaCgjFuQ7D4BVsJeRNAPnfkKzLHZ4nJOJ2txnHeoyoRbpDgPT5A4PB/WU f2zkUiO6nOF0Z4xW6zcSay22IudaizuIUBVAIoixxIygIqHmIvI9z6aPnZAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpL3NsVei6S3G0wS4vo9BQP+npH4wHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa1UHm9pBTH2g6vAiS1wnydlcN7yoUyih8U hai+kCaftKteBzxFvbsGor9f2xknYhbVNOKDhDnSiPlSofccofPtUDyxLjTg9fmS O6fIw6CdlGj4IrCkOamFllaF+G2PZUX82wZvF76P19DGtd5/Yv636R0g+8+1ewSC 1VUc+GbsiY+1ugyJkgy5TnDILLZbjuC9d5yhg8lgyIvGuOJUBVxN4Y/Pux/6Sv4f I0WI5nsmV6f/MJh1HpjyB2HW7tM4FpTXCiCNdIppnCiql5M0ulwbBRQRA7fKU3yQ h/wGrH87m4XDyfg424GlZd9s2C0vTqx4xQRJvkA1Z2Xbz3BxZp4= -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:57 2025 by rpki-client