This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: bJammqfRlS/4O4iEaUj35H058AZtxAXmkAU50LbI/Pk= Subject key identifier: 21:7C:25:91:A1:3A:6F:0C:37:2D:58:A7:06:01:7F:1C:77:74:D3:E5 Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 0FD5375A7DD4277EC077725FD6D75A7E6EE18E2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: E7 Signing time: Thu 25 Dec 2025 16:50:55 +0000 Manifest this update: Thu 25 Dec 2025 16:45:55 +0000 Manifest next update: Sun 28 Dec 2025 18:24:55 +0000 Files and hashes: 1: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: 9CXZouUK8KLwSZpA6/5A6tVF6UMCIsQytb4rGqx/3AQ=) 2: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: hFEJcZgFcoA0OsCR/KSwRiYCycDz3fj8AW7G8OvlQww=) 3: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: 8hYT6Y/pfowP/KBmfZIn8BXYiG2OvY6NAk7Ce/h0YCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 18:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d5:37:5a:7d:d4:27:7e:c0:77:72:5f:d6:d7:5a:7e:6e:e1:8e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Dec 25 16:45:55 2025 GMT Not After : Dec 28 18:24:55 2025 GMT Subject: CN=217C2591A13A6F0C372D58A706017F1C7774D3E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:8c:b2:17:6b:07:ac:b0:bd:83:a1:f1:46: 7d:f7:04:e1:68:b2:98:45:05:43:ea:fa:65:3c:54: 4a:aa:7a:e1:12:38:96:00:00:0f:4d:ba:7d:d7:88: d9:ea:c9:bc:30:50:ee:ce:16:97:4d:c3:4c:0f:58: 32:33:fa:53:69:7e:f8:4a:c4:b3:82:4b:f6:56:88: b8:33:09:6e:23:6a:01:f4:d2:15:30:9b:bf:6d:b9: 0c:23:5c:38:13:70:39:0b:cf:0c:fc:1a:ac:b4:07: 80:d6:e5:e5:f1:69:85:d9:a7:97:3c:ab:1d:4a:e4: ef:1a:69:0b:ec:34:55:99:ed:90:6f:cd:51:38:73: 60:83:b4:8b:47:e6:a0:63:30:3d:33:61:df:ff:46: c8:8c:da:bb:68:ec:b1:0a:6a:c6:4d:53:f2:ff:44: f9:5b:0b:f7:fb:c6:ca:80:85:d2:a5:59:39:53:e3: c1:75:86:9f:05:2a:34:67:72:da:9e:45:fe:36:39: 04:43:92:6a:26:09:43:a9:60:63:38:fd:30:40:d8: f3:8f:ab:ce:3c:5a:0e:fe:db:ad:5f:3c:c1:e0:ae: 39:1d:0f:ab:91:8c:31:cd:e1:45:e0:99:e6:47:4c: 6f:cb:40:c3:17:b7:f8:e2:bb:b9:4f:48:6c:ce:2e: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7C:25:91:A1:3A:6F:0C:37:2D:58:A7:06:01:7F:1C:77:74:D3:E5 X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:68:e9:ec:bd:78:13:09:c6:83:89:59:6e:a4:b1:39:d3:bf: 79:ac:10:5a:6c:9e:ee:8d:69:95:0e:08:81:96:c5:5a:42:a7: 39:5b:ab:4c:01:30:54:d1:90:a4:02:79:c6:b1:a8:0d:cb:b3: a7:ef:8d:41:97:61:51:e8:c5:8b:3c:87:3e:b3:93:64:b4:0e: e7:c9:60:fd:ee:6e:41:93:4b:41:b7:d0:16:2e:75:19:5e:9d: 13:5e:32:af:00:fa:be:70:b3:c4:64:55:7e:a2:8d:ef:39:e5: 46:ba:d8:ba:c7:47:36:3b:aa:5c:97:36:83:89:77:5d:57:5a: 66:c0:da:70:a7:1e:03:ff:e6:b5:18:7b:9b:cf:55:e0:7f:a9: 64:63:0c:27:64:81:fd:7c:fe:ae:b1:07:22:51:4e:3c:51:f3: 98:6b:1c:69:b8:5d:33:53:ba:f7:f0:db:5a:74:8a:d6:39:0b: 71:2c:ed:8e:0d:dd:d1:23:c3:2d:4b:93:23:95:0d:f7:ea:5c: f5:2e:dc:76:15:68:8f:24:aa:4c:68:0f:1d:6a:ab:f2:25:da: 45:9e:e2:c1:36:a6:cd:11:5f:64:42:b6:10:91:e4:ee:84:d4: 40:0e:75:3f:4c:51:1a:81:ae:ab:f6:42:ef:b0:dd:f5:f5:0c: 76:0e:36:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9U3Wn3UJ37Ad3Jf1tdafm7hji8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTEyMjUxNjQ1NTVaFw0yNTEyMjgxODI0NTVaMDMxMTAvBgNV BAMTKDIxN0MyNTkxQTEzQTZGMEMzNzJENThBNzA2MDE3RjFDNzc3NEQzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANIyyF2sHrLC9g6HxRn33BOFo sphFBUPq+mU8VEqqeuESOJYAAA9Nun3XiNnqybwwUO7OFpdNw0wPWDIz+lNpfvhK xLOCS/ZWiLgzCW4jagH00hUwm79tuQwjXDgTcDkLzwz8Gqy0B4DW5eXxaYXZp5c8 qx1K5O8aaQvsNFWZ7ZBvzVE4c2CDtItH5qBjMD0zYd//RsiM2rto7LEKasZNU/L/ RPlbC/f7xsqAhdKlWTlT48F1hp8FKjRnctqeRf42OQRDkmomCUOpYGM4/TBA2POP q848Wg7+261fPMHgrjkdD6uRjDHN4UXgmeZHTG/LQMMXt/jiu7lPSGzOLhmZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIXwlkaE6bww3LVinBgF/HHd00+UwHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxo6ey9eBMJxoOJWW6ksTnTv3msEFpsnu6N aZUOCIGWxVpCpzlbq0wBMFTRkKQCecaxqA3Ls6fvjUGXYVHoxYs8hz6zk2S0DufJ YP3ubkGTS0G30BYudRlenRNeMq8A+r5ws8RkVX6ije855Ua62LrHRzY7qlyXNoOJ d11XWmbA2nCnHgP/5rUYe5vPVeB/qWRjDCdkgf18/q6xByJRTjxR85hrHGm4XTNT uvfw21p0itY5C3Es7Y4N3dEjwy1LkyOVDffqXPUu3HYVaI8kqkxoDx1qq/Il2kWe 4sE2ps0RX2RCthCR5O6E1EAOdT9MURqBrqv2Qu+w3fX1DHYONss= -----END CERTIFICATE-----Generated at Sat Dec 27 05:40:11 2025 by rpki-client