This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: Efir44HcgTASW5SPxse9FOcQr4254mMkzM3E75VeqNA= Subject key identifier: 4C:D4:99:AA:65:59:01:D5:25:E5:66:CB:12:D0:BE:FD:43:63:DD:30 Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 5BDFD40A30EA93F25C10B9C6347DC7C50137CE90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 0730 Signing time: Tue 23 Dec 2025 13:00:05 +0000 Manifest this update: Tue 23 Dec 2025 12:55:05 +0000 Manifest next update: Fri 26 Dec 2025 21:11:05 +0000 Files and hashes: 1: AS17885.roa (hash: RX8oo/DiJqJzJBqmubTqeGmmpOVT1csa63gvxFqyKec=) 2: AS24203.roa (hash: C68gmTP9H6AGgXibFFHApE8cuP0Li5Pg7Pn1ljOTa6g=) 3: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: zF/UZrvPNefwraXnlewbAhfHWtZS6rX/kKN6g4qajOo=) 4: AS139994.roa (hash: mQEJNXJ3XVh/s4Uqn72Xq0FcwJo74FkotAw0eOv4kCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:df:d4:0a:30:ea:93:f2:5c:10:b9:c6:34:7d:c7:c5:01:37:ce:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Dec 23 12:55:05 2025 GMT Not After : Dec 26 21:11:05 2025 GMT Subject: CN=4CD499AA655901D525E566CB12D0BEFD4363DD30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:ce:9d:dd:7f:3f:45:81:36:7a:13:ef:40: 27:21:fd:b8:39:77:0f:0b:4d:65:ef:59:31:ba:8d: 0c:35:f3:44:f1:2e:8c:e7:60:e5:ac:b7:e7:59:84: 9b:2a:f6:f0:8d:47:30:62:0f:82:6f:4f:ab:05:03: d8:bb:b6:2c:7a:3d:ba:2a:f6:f6:d4:4b:c2:13:e3: dd:e0:2d:7d:8f:02:48:02:38:27:ac:30:4d:fa:d3: 5f:40:82:7d:66:76:ef:39:91:08:f4:6b:70:95:3b: 8b:93:4c:ee:f0:bb:3d:ac:13:3c:ac:cc:30:58:7d: 8a:6c:0b:af:84:c0:9d:26:54:b4:1e:42:a4:58:85: 4f:ec:92:ed:61:3e:a8:1b:6f:1c:6f:ad:78:3e:30: 89:e4:f2:89:77:9d:45:4a:75:47:ba:7d:9d:f5:df: fe:ab:0e:64:4e:73:ac:3a:a2:64:b5:84:5c:d1:b9: f5:7d:02:48:c5:04:8e:f2:84:5b:6b:e5:a6:0d:b6: e8:b5:57:ad:c0:a3:f7:7d:84:de:63:4c:bf:06:c7: 37:f4:84:04:f6:d9:5e:d1:43:0d:67:26:24:86:f2: e7:4f:a1:c2:c4:4f:38:04:e4:4f:9f:c1:e3:87:b6: 77:07:6b:89:0f:7e:c8:26:fe:5a:c8:dc:b4:79:97: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D4:99:AA:65:59:01:D5:25:E5:66:CB:12:D0:BE:FD:43:63:DD:30 X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:dd:75:c0:ce:da:15:1b:3f:80:06:0d:cd:9c:3b:9e:26:7b: 45:60:86:08:d2:90:87:2d:ee:a8:2d:ff:6d:47:5b:3b:34:70: 73:e3:b0:02:eb:a4:dd:37:c8:58:f8:46:4e:b4:f3:a2:1b:00: 0c:bb:f0:cf:4c:bb:83:40:be:ea:b7:7d:ec:02:d7:a7:36:60: 6c:3d:90:c3:50:36:1b:92:a2:55:b9:5a:14:9e:46:57:ca:c1: 69:3d:cc:40:ec:e7:39:b7:56:17:ba:09:89:27:66:36:b9:76: 1d:2f:f1:bf:22:b7:6a:0d:5f:f2:7f:92:b3:9e:55:0f:cc:83: f1:7e:86:23:d7:1b:98:03:61:7d:28:18:fe:45:85:62:54:ad: 50:41:bc:27:7a:88:23:95:be:05:03:f6:f7:ac:8a:b8:ae:71: 12:5e:0b:db:97:d6:99:f2:6a:6e:ab:a5:9c:54:e3:4a:a8:ea: 61:35:07:d8:c8:79:a6:d2:0a:37:56:95:bf:81:2a:0c:ba:02: 3e:34:49:f0:19:eb:a6:c7:93:5c:59:91:f2:63:17:e5:9e:4d: 7f:f8:51:f6:48:1b:32:aa:d2:b7:22:56:15:fa:26:4a:e7:c7: d4:73:ec:9d:fd:70:30:51:d7:5b:1a:75:48:c9:51:c0:9f:8f: d8:45:23:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW9/UCjDqk/JcELnGNH3HxQE3zpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTEyMjMxMjU1MDVaFw0yNTEyMjYyMTExMDVaMDMxMTAvBgNV BAMTKDRDRDQ5OUFBNjU1OTAxRDUyNUU1NjZDQjEyRDBCRUZENDM2M0REMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSc6d3X8/RYE2ehPvQCch/bg5 dw8LTWXvWTG6jQw180TxLoznYOWst+dZhJsq9vCNRzBiD4JvT6sFA9i7tix6Pboq 9vbUS8IT493gLX2PAkgCOCesME36019Agn1mdu85kQj0a3CVO4uTTO7wuz2sEzys zDBYfYpsC6+EwJ0mVLQeQqRYhU/sku1hPqgbbxxvrXg+MInk8ol3nUVKdUe6fZ31 3/6rDmROc6w6omS1hFzRufV9AkjFBI7yhFtr5aYNtui1V63Ao/d9hN5jTL8Gxzf0 hAT22V7RQw1nJiSG8udPocLETzgE5E+fweOHtncHa4kPfsgm/lrI3LR5lzSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTNSZqmVZAdUl5WbLEtC+/UNj3TAwHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvddcDO2hUbP4AGDc2cO54me0VghgjSkIct 7qgt/21HWzs0cHPjsALrpN03yFj4Rk6086IbAAy78M9Mu4NAvuq3fewC16c2YGw9 kMNQNhuSolW5WhSeRlfKwWk9zEDs5zm3Vhe6CYknZja5dh0v8b8it2oNX/J/krOe VQ/Mg/F+hiPXG5gDYX0oGP5FhWJUrVBBvCd6iCOVvgUD9vesiriucRJeC9uX1pny am6rpZxU40qo6mE1B9jIeabSCjdWlb+BKgy6Aj40SfAZ66bHk1xZkfJjF+WeTX/4 UfZIGzKq0rciVhX6Jkrnx9Rz7J39cDBR11sadUjJUcCfj9hFIyw= -----END CERTIFICATE-----Generated at Wed Dec 24 22:04:50 2025 by rpki-client