This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json) Hash identifier: sy4ftEtcALGxlI//4Fzrq2zrz9EnY2nTh6G70X6g94M= Subject key identifier: E9:9C:7E:49:DB:8A:7E:48:D6:1A:D1:D9:92:AE:B9:86:49:51:54:16 Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 0969B2CDCE6FB2B9AA471C91CE8C481438481A3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft Manifest number: 0152 Signing time: Thu 18 Dec 2025 09:52:26 +0000 Manifest this update: Thu 18 Dec 2025 09:47:26 +0000 Manifest next update: Sun 21 Dec 2025 20:45:26 +0000 Files and hashes: 1: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: UkSU3ofAJMwQMSBV8CLkdD+7q/O7V/69EnZpNB0eiWY=) 2: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: osFwS3xf1DonSoJwht99d9Tc2cqBOTGD/HEV1v4fujI=) 3: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: Gg4PjaHJJ2ELmK/kINP16QwFpCzFc3eTiKaJ4v4sLgo=) 4: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: nwEHa3/WlV/z4/EUCjtnhlcu3D5Y4h6NQPei0E4YMNc=) 5: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: gS0yxds7esUw4u6cr5SnRRB1WFjofe9PYLHZVCvDkaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:69:b2:cd:ce:6f:b2:b9:aa:47:1c:91:ce:8c:48:14:38:48:1a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: Dec 18 09:47:26 2025 GMT Not After : Dec 21 20:45:26 2025 GMT Subject: CN=E99C7E49DB8A7E48D61AD1D992AEB98649515416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:73:79:ce:81:8c:7b:01:49:18:14:9a:09:ea: a7:36:96:71:50:1c:d1:09:96:88:3e:16:a3:aa:15: 43:ae:0f:78:00:18:13:83:e5:b9:47:50:7a:fc:8f: 48:31:90:93:b9:f3:58:6f:c0:ab:24:39:4c:ca:f3: f6:86:cf:22:35:08:02:7c:41:0e:e8:f0:b1:25:7d: 49:2a:16:f4:af:ac:57:4e:31:fd:f0:ce:eb:21:8c: bb:52:26:fb:db:46:ad:c1:28:16:ee:19:1e:d2:49: 3d:02:5e:1c:e5:e1:13:d2:1d:81:3e:66:a5:e8:67: 99:51:e4:0e:bf:99:23:ee:5d:74:42:6b:23:65:46: 21:32:a1:3f:49:ce:e0:a4:da:b6:cd:12:5a:e1:1f: 7f:75:39:c8:02:ff:ee:6e:ee:24:57:ed:02:22:19: 0c:ed:ea:73:0b:0f:39:7e:90:dd:c2:e4:13:96:19: 73:2e:45:b6:6a:bd:6f:44:fa:8f:72:27:89:10:14: ac:db:53:c5:a6:72:d1:4e:63:d7:66:c3:fd:ec:d8: e0:09:41:19:b2:c5:70:32:c6:00:2d:6f:1b:98:fe: 37:fc:b9:d5:4c:74:73:cd:16:4f:1b:fa:b0:c8:99: 48:7b:a5:a6:0a:f6:15:1a:82:5f:22:b8:35:3e:96: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9C:7E:49:DB:8A:7E:48:D6:1A:D1:D9:92:AE:B9:86:49:51:54:16 X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:db:a8:b5:b3:02:84:e6:86:fe:b9:25:0f:68:01:f1:f3:4e: da:27:7f:c3:d1:cc:80:3d:3d:dc:d2:1b:29:83:49:5a:24:4c: e7:1a:a1:34:c5:a6:f1:f0:6f:58:16:b2:ce:bf:b0:7c:29:92: f3:c4:28:37:bd:44:2f:6f:1b:e4:d7:7f:ce:f4:48:9a:0c:de: ed:91:79:e7:76:12:78:70:dc:d7:c7:e0:6e:79:91:ea:e6:91: 4a:df:2b:71:1f:8b:8e:c0:a8:cf:98:e8:7b:96:02:12:b1:d2: 7e:df:3d:19:6f:be:c0:07:de:ed:82:17:c6:2f:cb:2f:f1:8c: 81:8d:69:ab:be:ff:a0:6a:9c:85:ce:ab:de:33:da:c5:0e:3b: 59:89:64:c3:0f:05:ef:9b:d5:2a:0e:bb:ca:09:a8:b4:22:31: f3:b6:99:d3:13:cb:08:b6:bf:76:3f:04:14:22:7b:a6:9e:c4: 24:bf:62:92:82:98:a3:6d:4b:d7:ae:06:5c:4d:ee:dc:61:a3: 22:a5:61:53:41:71:3b:37:e1:9d:05:74:4a:00:b0:18:a2:11: ea:84:00:29:32:b9:8a:1e:c6:55:65:dd:46:e2:d5:3a:90:13: 96:05:2f:9c:17:ea:f0:3d:c7:c8:cf:7f:2b:12:86:67:67:cb: 9a:a5:53:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWmyzc5vsrmqRxyRzoxIFDhIGj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNTEyMTgwOTQ3MjZaFw0yNTEyMjEyMDQ1MjZaMDMxMTAvBgNV BAMTKEU5OUM3RTQ5REI4QTdFNDhENjFBRDFEOTkyQUVCOTg2NDk1MTU0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDec3nOgYx7AUkYFJoJ6qc2lnFQ HNEJlog+FqOqFUOuD3gAGBOD5blHUHr8j0gxkJO581hvwKskOUzK8/aGzyI1CAJ8 QQ7o8LElfUkqFvSvrFdOMf3wzushjLtSJvvbRq3BKBbuGR7SST0CXhzl4RPSHYE+ ZqXoZ5lR5A6/mSPuXXRCayNlRiEyoT9JzuCk2rbNElrhH391OcgC/+5u7iRX7QIi GQzt6nMLDzl+kN3C5BOWGXMuRbZqvW9E+o9yJ4kQFKzbU8WmctFOY9dmw/3s2OAJ QRmyxXAyxgAtbxuY/jf8udVMdHPNFk8b+rDImUh7paYK9hUagl8iuDU+lo+RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Zx+SduKfkjWGtHZkq65hklRVBYwHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPbqLWzAoTmhv65JQ9oAfHzTtonf8PRzIA9 PdzSGymDSVokTOcaoTTFpvHwb1gWss6/sHwpkvPEKDe9RC9vG+TXf870SJoM3u2R eed2Enhw3NfH4G55kermkUrfK3Efi47AqM+Y6HuWAhKx0n7fPRlvvsAH3u2CF8Yv yy/xjIGNaau+/6BqnIXOq94z2sUOO1mJZMMPBe+b1SoOu8oJqLQiMfO2mdMTywi2 v3Y/BBQie6aexCS/YpKCmKNtS9euBlxN7txhoyKlYVNBcTs34Z0FdEoAsBiiEeqE ACkyuYoexlVl3Ubi1TqQE5YFL5wX6vA9x8jPfysShmdny5qlU74= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:32 2025 by rpki-client