This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: Dsa4pkSOPJmtRO2130nz6s0VhEF/vqaNwXv6cOPCb9Y= Subject key identifier: DA:BB:FB:10:88:A1:CA:46:40:F7:44:18:86:50:5F:EC:94:79:ED:3D Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 0AAA84DEE09E1CE2E9E3B002A31F935338E01A2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: E6 Signing time: Tue 23 Dec 2025 06:40:56 +0000 Manifest this update: Tue 23 Dec 2025 06:35:56 +0000 Manifest next update: Fri 26 Dec 2025 16:49:56 +0000 Files and hashes: 1: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: hFEJcZgFcoA0OsCR/KSwRiYCycDz3fj8AW7G8OvlQww=) 2: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: 395Pq0WpLDfImXjzv9v/9U6TzGnPrkH4Qm72+4Y2e7U=) 3: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: 8hYT6Y/pfowP/KBmfZIn8BXYiG2OvY6NAk7Ce/h0YCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 16:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:aa:84:de:e0:9e:1c:e2:e9:e3:b0:02:a3:1f:93:53:38:e0:1a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Dec 23 06:35:56 2025 GMT Not After : Dec 26 16:49:56 2025 GMT Subject: CN=DABBFB1088A1CA4640F7441886505FEC9479ED3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:4b:35:fb:05:5e:bd:51:46:cd:0a:12:1f: 82:20:ab:0a:bf:23:77:be:3f:6a:8e:6f:65:26:9e: 41:3a:b0:73:4f:72:49:9b:fb:6e:35:e6:33:e4:4c: 5b:60:3f:61:c5:98:2b:a1:53:b4:68:25:a8:ff:4e: f0:e5:c1:4d:58:e3:f9:d8:0e:77:34:cb:0f:c3:22: a7:fa:cc:15:80:6c:3b:96:a7:b2:76:14:96:54:c0: b7:e2:e6:fe:5c:54:40:cd:6f:fa:b5:56:ee:80:c1: 54:5f:d5:67:70:30:b6:f9:14:63:28:f3:23:c9:c4: 44:ab:53:20:54:80:df:eb:88:6b:0c:ed:03:4b:70: 41:af:29:59:10:c2:35:4f:0c:bc:a1:b6:b3:73:99: 21:a7:d3:8f:c9:fc:45:03:e2:3e:e5:f5:64:ab:86: 5d:db:98:39:ba:ea:fe:a2:f3:3c:ac:14:00:d8:34: 3a:23:fd:95:23:2b:60:90:5f:b3:82:1c:ee:07:d9: 4b:80:4d:87:44:b6:69:2b:23:62:96:ef:2c:8a:a6: 95:71:b1:bc:90:bf:a0:f9:f7:e0:86:08:59:06:2f: 17:d0:59:01:c9:44:3d:cb:41:7c:03:dd:66:d8:d9: 1d:07:5d:68:f7:b0:96:c4:7a:69:30:60:3d:e9:51: e1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BB:FB:10:88:A1:CA:46:40:F7:44:18:86:50:5F:EC:94:79:ED:3D X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8b:54:00:d3:1b:a2:ae:43:9b:ad:25:ed:e2:fd:ff:af:18: be:09:c7:8c:f4:92:2e:22:a2:54:ec:54:1e:54:1a:76:38:fc: d9:03:56:16:27:15:09:99:61:8f:e4:6b:37:b5:fd:7a:69:bc: d5:7f:0a:85:12:7f:d8:1a:e6:1f:76:89:cf:70:33:b5:48:65: 39:25:be:61:c5:df:ef:11:07:b5:69:0a:c9:90:df:73:1f:fd: 20:b1:87:37:ca:4a:fc:b9:f2:85:8e:fd:39:71:ed:9d:46:8d: 98:8a:2e:24:4f:7f:d2:7f:e9:fc:81:e0:b8:f8:c8:97:c4:c1: b2:0f:86:ae:49:dc:df:7e:b0:55:69:e2:92:16:15:a1:57:26: a0:c5:d3:ec:e4:b3:4e:a6:da:10:92:b4:d2:50:21:14:ec:b5: 02:c6:d6:da:27:f0:b2:23:66:79:de:3c:03:dd:6c:f3:6b:f2: 8d:94:db:3e:b3:24:02:a0:06:ed:6b:a0:b3:53:18:67:42:7c: 1a:cc:67:ca:77:0e:e5:db:16:d5:21:65:61:89:b6:17:b2:1a: 2e:88:07:15:78:da:72:c9:62:91:7b:6c:60:ac:52:39:f4:de: ad:59:f1:e4:66:0d:7d:5d:8a:41:de:2b:c1:0c:46:41:dd:bd: 4f:b8:83:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqqE3uCeHOLp47ACox+TUzjgGiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTEyMjMwNjM1NTZaFw0yNTEyMjYxNjQ5NTZaMDMxMTAvBgNV BAMTKERBQkJGQjEwODhBMUNBNDY0MEY3NDQxODg2NTA1RkVDOTQ3OUVEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9k0s1+wVevVFGzQoSH4Igqwq/ I3e+P2qOb2UmnkE6sHNPckmb+2415jPkTFtgP2HFmCuhU7RoJaj/TvDlwU1Y4/nY Dnc0yw/DIqf6zBWAbDuWp7J2FJZUwLfi5v5cVEDNb/q1Vu6AwVRf1WdwMLb5FGMo 8yPJxESrUyBUgN/riGsM7QNLcEGvKVkQwjVPDLyhtrNzmSGn04/J/EUD4j7l9WSr hl3bmDm66v6i8zysFADYNDoj/ZUjK2CQX7OCHO4H2UuATYdEtmkrI2KW7yyKppVx sbyQv6D59+CGCFkGLxfQWQHJRD3LQXwD3WbY2R0HXWj3sJbEemkwYD3pUeGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2rv7EIihykZA90QYhlBf7JR57T0wHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2LVADTG6KuQ5utJe3i/f+vGL4Jx4z0ki4i olTsVB5UGnY4/NkDVhYnFQmZYY/kaze1/XppvNV/CoUSf9ga5h92ic9wM7VIZTkl vmHF3+8RB7VpCsmQ33Mf/SCxhzfKSvy58oWO/Tlx7Z1GjZiKLiRPf9J/6fyB4Lj4 yJfEwbIPhq5J3N9+sFVp4pIWFaFXJqDF0+zks06m2hCStNJQIRTstQLG1ton8LIj ZnnePAPdbPNr8o2U2z6zJAKgBu1roLNTGGdCfBrMZ8p3DuXbFtUhZWGJtheyGi6I BxV42nLJYpF7bGCsUjn03q1Z8eRmDX1dikHeK8EMRkHdvU+4g+Q= -----END CERTIFICATE-----Generated at Wed Dec 24 21:50:06 2025 by rpki-client