This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: LRv1n4NEIQhUiy8CBXqbEL22+/Ws7vXlmyX0bkVWxHM= Subject key identifier: CD:50:5B:43:0D:B3:05:B7:56:C3:7C:29:34:7E:B7:D3:03:C5:32:CD Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 4A77FE8E6857301A7AFA734157E7236C5D837641 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 01D1 Signing time: Tue 23 Dec 2025 11:52:09 +0000 Manifest this update: Tue 23 Dec 2025 11:47:09 +0000 Manifest next update: Fri 26 Dec 2025 23:45:09 +0000 Files and hashes: 1: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: Qxhmm+FrOJl9N2gO3uMNdKcckPxH2c3YLUPCuEz7Xsg=) 2: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: fLdkkbNkI9PkqhdMgEfip8LN36R46w+kuOLRSSw3fbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 23:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:77:fe:8e:68:57:30:1a:7a:fa:73:41:57:e7:23:6c:5d:83:76:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Dec 23 11:47:09 2025 GMT Not After : Dec 26 23:45:09 2025 GMT Subject: CN=CD505B430DB305B756C37C29347EB7D303C532CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:44:01:91:65:48:46:1c:2d:e9:b6:d0:fb: 97:6a:e0:c9:28:fa:6b:0a:cc:6a:c2:27:a9:71:c3: 28:b9:c8:fd:ab:c9:ac:93:d0:a3:90:9b:63:db:0a: 48:20:b5:dd:2a:c1:66:39:bb:6a:6e:71:79:7e:ee: a9:86:57:82:c5:56:85:d1:99:6d:7e:89:2d:b7:2e: f4:ad:b9:fc:77:e0:3b:02:62:96:30:48:f6:26:d0: 2f:59:d6:8e:22:0e:d1:44:16:b4:ce:f1:80:2f:36: 67:c1:8d:67:8e:32:72:65:10:ba:5a:ef:c1:2d:3e: 79:9c:dd:ab:8f:7e:ce:f0:85:43:85:73:7a:c0:34: 56:9a:83:07:f2:ab:10:d4:e9:33:60:b8:b2:ba:5f: de:cf:00:00:27:1f:49:88:fc:b8:65:94:99:b0:37: b7:d8:4e:39:0f:77:d4:2e:8d:0a:c0:ae:da:b3:31: 86:d1:f0:34:5c:97:05:28:a8:ce:96:70:d1:51:56: 92:b9:26:26:53:2b:14:23:5f:46:ec:03:06:8c:81: e2:fd:f2:73:0a:b0:dc:41:39:e2:49:9a:f4:29:c5: bc:96:3a:34:6a:6d:74:c2:c6:e3:7f:6e:f4:8e:58: 10:96:81:20:d9:60:9f:18:7d:f0:af:c3:b7:ed:6e: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:50:5B:43:0D:B3:05:B7:56:C3:7C:29:34:7E:B7:D3:03:C5:32:CD X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ba:ff:f4:7f:4e:22:91:89:5d:45:6e:b0:99:e8:2e:f7:79: 4e:c4:b2:9d:ae:50:aa:ff:01:fc:a4:68:0b:57:e7:55:0c:7a: 9e:a7:0e:2d:e1:29:26:93:c2:e0:91:2a:dc:b3:00:fb:5d:0a: 60:c8:2b:fe:f2:ab:06:f1:dd:4c:6a:18:6a:6d:e7:40:90:1c: 67:8e:39:25:0e:f2:ee:1a:62:89:9e:55:61:36:45:57:ab:fe: fb:27:4d:b3:cf:ff:b1:d5:94:fb:ac:25:73:75:f8:95:1e:fc: eb:13:09:f7:d6:09:ca:e7:96:ff:50:84:44:7c:d2:46:fc:de: 4b:c8:9a:26:7f:71:ee:63:1e:62:2b:21:ec:26:20:73:ae:bd: 15:d6:36:6e:9c:fc:e1:96:22:93:38:5f:be:7e:ec:c8:a1:72: cb:a7:5c:13:54:f0:0c:94:e1:65:33:c4:05:31:d8:dc:fb:d0: da:b5:10:17:b9:9a:1e:66:9d:0c:d3:94:b1:3e:24:90:cb:22: 1b:e6:78:0e:4f:3f:2a:48:7d:1f:80:b8:cb:49:0a:bc:af:c0: 10:3b:2d:30:99:2e:e1:e9:21:c4:c1:fb:6a:29:9f:8a:59:ba: 00:01:19:5a:9d:9b:cd:e4:ec:75:55:63:ee:0d:f5:6f:3c:2b: 48:0a:b3:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnf+jmhXMBp6+nNBV+cjbF2DdkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNTEyMjMxMTQ3MDlaFw0yNTEyMjYyMzQ1MDlaMDMxMTAvBgNV BAMTKENENTA1QjQzMERCMzA1Qjc1NkMzN0MyOTM0N0VCN0QzMDNDNTMyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqP0QBkWVIRhwt6bbQ+5dq4Mko +msKzGrCJ6lxwyi5yP2ryayT0KOQm2PbCkggtd0qwWY5u2pucXl+7qmGV4LFVoXR mW1+iS23LvStufx34DsCYpYwSPYm0C9Z1o4iDtFEFrTO8YAvNmfBjWeOMnJlELpa 78EtPnmc3auPfs7whUOFc3rANFaagwfyqxDU6TNguLK6X97PAAAnH0mI/LhllJmw N7fYTjkPd9QujQrArtqzMYbR8DRclwUoqM6WcNFRVpK5JiZTKxQjX0bsAwaMgeL9 8nMKsNxBOeJJmvQpxbyWOjRqbXTCxuN/bvSOWBCWgSDZYJ8YffCvw7ftbtM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVBbQw2zBbdWw3wpNH630wPFMs0wHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS6//R/TiKRiV1FbrCZ6C73eU7Esp2uUKr/ AfykaAtX51UMep6nDi3hKSaTwuCRKtyzAPtdCmDIK/7yqwbx3UxqGGpt50CQHGeO OSUO8u4aYomeVWE2RVer/vsnTbPP/7HVlPusJXN1+JUe/OsTCffWCcrnlv9QhER8 0kb83kvImiZ/ce5jHmIrIewmIHOuvRXWNm6c/OGWIpM4X75+7MihcsunXBNU8AyU 4WUzxAUx2Nz70Nq1EBe5mh5mnQzTlLE+JJDLIhvmeA5PPypIfR+AuMtJCryvwBA7 LTCZLuHpIcTB+2opn4pZugABGVqdm83k7HVVY+4N9W88K0gKsw8= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:05 2025 by rpki-client