This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json) Hash identifier: eLTKmdTHZ/DwAro3CrOhpjBQkjCjsLB++ybgQqDJuIU= Subject key identifier: 29:9F:88:FD:52:A3:91:E2:6F:1A:A9:ED:3B:C8:5F:D0:8D:96:D9:AD Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 Certificate issuer: /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Certificate serial: 0F52114BA5468138A338F9FA2A4691B719DE82E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft Manifest number: D1 Signing time: Mon 22 Dec 2025 21:02:48 +0000 Manifest this update: Mon 22 Dec 2025 20:57:48 +0000 Manifest next update: Fri 26 Dec 2025 02:42:48 +0000 Files and hashes: 1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: BoTluS9h9fXmYVG5ixZmkF8QGw01I8U2x/hhTczYeKA=) 2: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: NXdb7N1fdpDFbRVUvVUmjFVpB7NDeGMyZQ2Fkfi9OwA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:52:11:4b:a5:46:81:38:a3:38:f9:fa:2a:46:91:b7:19:de:82:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Validity Not Before: Dec 22 20:57:48 2025 GMT Not After : Dec 26 02:42:48 2025 GMT Subject: CN=299F88FD52A391E26F1AA9ED3BC85FD08D96D9AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:50:47:48:d5:ea:9b:9e:06:bc:42:d6:a0:db: ad:3d:1b:a7:2b:d1:2c:79:b8:ed:9b:ee:1a:f5:b0: 83:78:f3:1a:25:1f:94:54:6f:ce:01:28:4c:7e:69: d3:c5:fe:68:9a:d6:b5:c8:05:21:89:53:6c:68:0a: 7a:a3:22:82:72:72:8d:3a:ce:f8:dd:44:b4:8f:4c: e1:f0:5a:19:21:64:5c:ff:1a:2f:b7:0d:2f:47:7a: 96:97:90:29:c0:c4:8a:b7:f5:34:0c:df:90:af:36: a2:f2:67:77:43:32:be:5f:df:95:e7:fb:d9:ec:fe: 4b:a0:be:24:27:91:3d:f9:1d:e9:c5:61:6b:8b:f7: 23:f8:33:f1:ba:63:59:d0:3a:79:17:9a:d2:d3:54: d9:b4:e3:ac:9e:1d:91:bb:a1:b3:e4:60:b8:a4:3e: c7:b3:0f:57:36:d5:1b:99:41:43:01:35:4f:7d:14: 07:f7:18:a1:58:01:b1:ff:db:d4:d3:b4:70:59:e9: eb:88:06:ac:6d:7c:c0:27:74:aa:80:bc:2e:b7:b3: 29:3c:b7:e5:82:bb:37:1c:6b:e1:36:2c:94:17:21: bc:b1:97:b7:4e:63:96:bc:d3:7d:a3:9d:a5:de:00: 61:ce:ac:e2:58:8d:4d:4a:a0:40:02:4d:40:fc:f4: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9F:88:FD:52:A3:91:E2:6F:1A:A9:ED:3B:C8:5F:D0:8D:96:D9:AD X509v3 Authority Key Identifier: keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ae:b1:4e:48:1d:01:71:75:42:91:72:2b:52:6a:6f:58:25: 9c:25:cc:10:f7:20:8b:80:a4:89:47:cb:ef:f0:05:92:5b:79: 88:7b:b9:b1:13:9d:69:4d:6a:9e:4c:2c:aa:87:50:0b:88:cc: 94:9f:57:81:f5:ca:bd:fa:b2:4c:56:7c:b4:1d:4a:d1:fa:82: 9e:a5:2d:99:87:7b:80:54:e1:1a:e4:e8:9e:cc:5d:ad:a7:c4: b4:11:28:ca:80:81:31:17:d9:d0:dd:d8:9f:41:83:af:ed:ed: ff:fe:c5:08:ff:00:14:e1:7f:3d:89:b2:a4:31:79:71:45:30: a5:a4:52:8c:28:8d:c9:e2:e2:11:3d:dd:2f:5a:20:39:2c:fd: fa:3e:4f:31:c3:3f:44:fd:0c:c4:1c:70:62:4d:ec:04:6f:80: 39:4e:79:c2:2b:34:df:65:de:f4:a6:92:8f:e6:51:be:0c:45: 5c:4a:2b:e5:dd:18:25:88:0d:b0:f3:44:a0:f9:be:41:3d:c9: 3f:1e:65:a6:fb:2d:80:32:36:65:4d:3d:cd:d8:2e:50:23:1c: ed:e7:39:19:34:c7:c8:2f:88:7b:87:da:37:99:90:ba:e4:89: 29:06:cd:02:21:8b:ab:fd:81:58:52:f4:cb:72:02:ae:2b:31: 51:2d:60:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1IRS6VGgTijOPn6KkaRtxneguIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FB RTA2Mzc0NTAeFw0yNTEyMjIyMDU3NDhaFw0yNTEyMjYwMjQyNDhaMDMxMTAvBgNV BAMTKDI5OUY4OEZENTJBMzkxRTI2RjFBQTlFRDNCQzg1RkQwOEQ5NkQ5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZUEdI1eqbnga8Qtag2609G6cr 0Sx5uO2b7hr1sIN48xolH5RUb84BKEx+adPF/mia1rXIBSGJU2xoCnqjIoJyco06 zvjdRLSPTOHwWhkhZFz/Gi+3DS9HepaXkCnAxIq39TQM35CvNqLyZ3dDMr5f35Xn +9ns/kugviQnkT35HenFYWuL9yP4M/G6Y1nQOnkXmtLTVNm046yeHZG7obPkYLik PsezD1c21RuZQUMBNU99FAf3GKFYAbH/29TTtHBZ6euIBqxtfMAndKqAvC63syk8 t+WCuzcca+E2LJQXIbyxl7dOY5a8032jnaXeAGHOrOJYjU1KoEACTUD89C2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKZ+I/VKjkeJvGqntO8hf0I2W2a0wHwYDVR0j BBgwFoAUSWCoQn/qWBTvnoDvN4bgyq4GN0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDQ1N2QyMC0wMjNhLTQ1MDktYmI0YS02MmM4NjkyOWRkOTcvMC80OTYwQTg0MjdG RUE1ODE0RUY5RTgwRUYzNzg2RTBDQUFFMDYzNzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FBRTA2 Mzc0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUw Q0FBRTA2Mzc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWusU5IHQFxdUKRcitSam9YJZwlzBD3IIuA pIlHy+/wBZJbeYh7ubETnWlNap5MLKqHUAuIzJSfV4H1yr36skxWfLQdStH6gp6l LZmHe4BU4Rrk6J7MXa2nxLQRKMqAgTEX2dDd2J9Bg6/t7f/+xQj/ABThfz2JsqQx eXFFMKWkUowojcni4hE93S9aIDks/fo+TzHDP0T9DMQccGJN7ARvgDlOecIrNN9l 3vSmko/mUb4MRVxKK+XdGCWIDbDzRKD5vkE9yT8eZab7LYAyNmVNPc3YLlAjHO3n ORk0x8gviHuH2jeZkLrkiSkGzQIhi6v9gVhS9MtyAq4rMVEtYIE= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:14 2025 by rpki-client