This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: 1jot4BieCQVDueNFLPX+UCCyYUrBFF5JQPHqNfaC84s= Subject key identifier: AF:B8:75:C3:0C:EA:DE:22:69:D7:55:AF:66:51:2A:27:BE:4A:2A:1F Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 38BCBE149F90D5A8B689B59FC90F59C0F6CE2941 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 023F Signing time: Tue 23 Dec 2025 15:11:15 +0000 Manifest this update: Tue 23 Dec 2025 15:06:15 +0000 Manifest next update: Fri 26 Dec 2025 17:11:15 +0000 Files and hashes: 1: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: 3PeI4c1+04C9ghzq6F40f5013YnnignJ8PNDhSKl9BY=) 2: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: lO/pB4+MO3GyCdsLQiZER9d1J+obxPjmqboURdHqpQQ=) 3: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 1IuZ+1sb5CuVWfx/fjE2EJ1GmWjRaqNz5VL2CGRsg+c=) 4: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: UrGzpQyb4OcG13ECSRKSWIFvQeDrPkoBtijveesvtFQ=) 5: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bc:be:14:9f:90:d5:a8:b6:89:b5:9f:c9:0f:59:c0:f6:ce:29:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Dec 23 15:06:15 2025 GMT Not After : Dec 26 17:11:15 2025 GMT Subject: CN=AFB875C30CEADE2269D755AF66512A27BE4A2A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:03:b5:2b:cd:4c:cf:9b:f2:16:f6:61:22: da:27:14:49:65:12:0f:c6:6c:6d:21:ad:30:25:41: 1b:b5:06:25:d6:b3:06:53:3b:f1:5f:5d:d1:3b:60: 7a:33:a0:04:9a:3e:c3:c4:a2:9c:fb:65:8d:07:14: 5d:e1:c3:45:63:df:40:e3:ec:c2:48:f3:1e:9a:b3: 20:88:bf:44:bf:8a:0e:59:f3:8d:bf:78:f7:0b:f3: d5:4a:cf:fe:07:ce:ed:e5:42:3e:42:71:86:e8:24: 91:41:f6:01:be:d1:02:af:ac:3c:74:60:aa:a4:07: 2c:78:8a:03:0e:f4:d2:b6:e4:16:ea:66:e4:da:a9: 65:2c:ce:33:bc:81:c1:76:19:59:a5:c2:4a:5a:6e: 6b:d3:39:d2:68:60:81:e8:a2:9d:9b:d7:30:2d:7a: 9e:b7:2f:99:8a:65:cf:3d:de:45:42:74:89:59:28: 5e:6a:58:8b:8c:6b:40:f8:77:d8:34:36:de:b8:e9: 20:a5:7b:e5:fa:26:e3:29:da:c8:95:6f:34:4b:95: e8:dc:8f:ee:9c:e1:39:56:a6:1f:8f:83:a6:c0:b4: 7e:86:c0:92:d0:ea:45:13:72:3a:e3:4a:d8:39:86: 2b:43:72:73:02:bf:53:b7:d8:e4:07:b5:bf:26:03: 41:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B8:75:C3:0C:EA:DE:22:69:D7:55:AF:66:51:2A:27:BE:4A:2A:1F X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:02:7d:1e:90:0a:13:2e:77:e8:1a:0d:63:e9:da:0d:2f:5a: 95:05:3b:e6:b2:bb:30:18:15:d3:e5:76:31:c0:16:94:ee:47: 93:ba:2b:a6:39:73:87:c0:1c:81:3c:5d:53:14:a9:0d:50:99: 3e:70:cb:d5:12:f2:05:3e:ba:ad:8a:cb:dc:0d:4a:44:e5:16: 61:f5:d4:c0:dd:4c:cc:76:fa:00:fa:c1:45:e9:9c:e1:d6:30: e1:a5:a1:a3:9e:bb:ef:41:87:13:8f:1a:26:d3:9f:5a:48:5c: f6:d3:29:b8:f9:18:7d:87:83:7e:04:50:2b:b4:0d:5b:fa:ee: 6d:83:be:f1:53:17:fa:02:d6:60:d6:d4:d2:df:ca:de:8b:6b: 5d:e5:b8:88:d5:7f:bf:08:d1:d3:b4:8b:f6:25:50:6e:53:22: e0:15:68:17:64:89:0a:48:f1:ee:7b:47:5f:ea:d5:38:9e:cf: d0:2e:b2:b3:51:42:a5:84:2e:ea:73:c9:7f:96:f8:9a:0e:5e: c0:c5:bc:26:55:39:0a:c2:45:5f:05:b8:66:07:86:02:4e:6d: 28:06:cb:3f:b5:17:01:74:54:d6:f1:e7:8f:f5:72:3a:21:47: 20:a9:fa:89:ad:82:60:0b:29:7d:7b:44:ab:10:07:11:36:33: af:8a:3d:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLy+FJ+Q1ai2ibWfyQ9ZwPbOKUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNTEyMjMxNTA2MTVaFw0yNTEyMjYxNzExMTVaMDMxMTAvBgNV BAMTKEFGQjg3NUMzMENFQURFMjI2OUQ3NTVBRjY2NTEyQTI3QkU0QTJBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgwO1K81Mz5vyFvZhItonFEll Eg/GbG0hrTAlQRu1BiXWswZTO/FfXdE7YHozoASaPsPEopz7ZY0HFF3hw0Vj30Dj 7MJI8x6asyCIv0S/ig5Z842/ePcL89VKz/4Hzu3lQj5CcYboJJFB9gG+0QKvrDx0 YKqkByx4igMO9NK25BbqZuTaqWUszjO8gcF2GVmlwkpabmvTOdJoYIHoop2b1zAt ep63L5mKZc893kVCdIlZKF5qWIuMa0D4d9g0Nt646SCle+X6JuMp2siVbzRLlejc j+6c4TlWph+Pg6bAtH6GwJLQ6kUTcjrjStg5hitDcnMCv1O32OQHtb8mA0GzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr7h1wwzq3iJp11WvZlEqJ75KKh8wHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkCfR6QChMud+gaDWPp2g0vWpUFO+ayuzAY FdPldjHAFpTuR5O6K6Y5c4fAHIE8XVMUqQ1QmT5wy9US8gU+uq2Ky9wNSkTlFmH1 1MDdTMx2+gD6wUXpnOHWMOGloaOeu+9BhxOPGibTn1pIXPbTKbj5GH2Hg34EUCu0 DVv67m2DvvFTF/oC1mDW1NLfyt6La13luIjVf78I0dO0i/YlUG5TIuAVaBdkiQpI 8e57R1/q1Tiez9AusrNRQqWELupzyX+W+JoOXsDFvCZVOQrCRV8FuGYHhgJObSgG yz+1FwF0VNbx54/1cjohRyCp+omtgmALKX17RKsQBxE2M6+KPSw= -----END CERTIFICATE-----Generated at Thu Dec 25 14:17:41 2025 by rpki-client