This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: q0tUSAfQ5ij0kBE9c+AFdAMP0pW1EiL+1HpZJSKUY3A= Subject key identifier: CF:EE:E3:D2:60:01:AF:6F:3F:C0:0A:30:11:B4:E3:4C:32:B9:80:63 Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 52A3D7E8D196CA7F3755473A8C837F5746BF6D76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 0531 Signing time: Sun 21 Dec 2025 04:33:09 +0000 Manifest this update: Sun 21 Dec 2025 04:28:09 +0000 Manifest next update: Wed 24 Dec 2025 10:04:09 +0000 Files and hashes: 1: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) 2: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) 3: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: eA7BRgXJA4qoQIZWzR69wl8ek4LGIudB6B4cwVSovGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a3:d7:e8:d1:96:ca:7f:37:55:47:3a:8c:83:7f:57:46:bf:6d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Dec 21 04:28:09 2025 GMT Not After : Dec 24 10:04:09 2025 GMT Subject: CN=CFEEE3D26001AF6F3FC00A3011B4E34C32B98063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:ae:69:94:07:c8:87:22:da:24:99:b9:1a: 92:93:65:4e:f8:ec:86:14:89:ce:94:e9:62:ce:e0: 01:e0:00:71:c2:de:a2:e2:73:d0:c2:a0:13:6f:10: c6:24:72:8b:8a:0d:f6:7e:6e:b2:bd:fd:99:26:a9: a8:80:e4:fb:c6:e2:8d:8c:e2:c4:9d:0a:86:75:81: b0:11:c8:f3:b1:ab:7b:b6:63:47:d6:cd:5c:41:38: 17:f2:33:1b:69:b7:54:c4:6c:51:5b:5e:bc:bc:67: 36:03:10:2a:82:91:34:d0:6b:fa:16:5c:1d:f9:a3: 72:49:db:6d:dc:35:e0:18:1b:74:ec:7e:a4:eb:51: dd:76:dc:0d:3c:59:7a:cf:b0:0a:1d:05:36:24:96: 54:a8:f7:62:cd:85:f4:11:ac:29:f9:0e:9d:41:de: 6d:c9:d2:8d:54:34:8c:ad:d3:44:9e:64:34:00:7e: c3:88:35:04:b1:22:a6:e0:db:bd:e5:cc:df:1d:53: c3:20:99:40:e6:c1:79:dc:26:e2:56:be:4b:20:74: c2:b4:e5:6c:cd:cc:21:99:9f:21:77:9c:e5:d0:3b: 7b:ef:7d:72:3f:7a:2b:b6:ef:6b:5f:b6:d5:05:7f: 54:74:97:c1:db:98:6e:99:c7:bc:cb:9e:25:c2:d6: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EE:E3:D2:60:01:AF:6F:3F:C0:0A:30:11:B4:E3:4C:32:B9:80:63 X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a1:b3:44:bc:e6:52:be:93:d8:87:f4:14:5d:40:1b:ec:ce: f5:c7:ea:7c:5a:d5:77:0a:8b:2c:6f:3e:04:a9:9b:d3:6f:a5: 9a:6e:df:75:53:a6:25:45:ee:9b:38:1a:32:35:6b:cf:a2:7e: f4:a2:c2:96:54:13:09:49:11:b6:a7:9a:64:a0:7b:7a:c5:ec: ff:d9:1c:48:93:a5:83:a2:77:82:2c:96:1f:28:9c:62:d8:2a: f8:18:24:91:ad:68:bb:3f:73:17:8a:f3:40:e5:6d:39:f3:1a: 5d:54:98:a0:d2:b7:b8:71:c6:cb:32:7d:06:e7:f4:3e:62:87: 6f:d8:f3:ae:6c:d6:6c:bd:6a:bf:19:ed:7c:a2:aa:95:26:13: e1:a1:27:52:c8:76:1d:71:23:e6:c5:c0:3e:e7:01:bc:9b:08: 66:52:37:e6:cb:a8:d9:97:3d:8d:f2:7e:03:e0:3a:7c:f7:2c: 8e:59:64:c5:bb:ea:20:9d:d7:64:69:9d:be:e8:18:e7:f6:5d: 7e:db:e3:54:83:f3:b4:c4:59:d5:c2:46:71:e0:e7:ae:73:43: b9:4a:2b:15:72:67:f5:5b:4f:9e:dd:82:18:ee:b7:a9:e0:d3: 55:35:5d:28:91:fa:5d:af:ae:2a:7c:a5:8f:9c:2f:b7:ac:5e: ec:47:48:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqPX6NGWyn83VUc6jIN/V0a/bXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTEyMjEwNDI4MDlaFw0yNTEyMjQxMDA0MDlaMDMxMTAvBgNV BAMTKENGRUVFM0QyNjAwMUFGNkYzRkMwMEEzMDExQjRFMzRDMzJCOTgwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Qq5plAfIhyLaJJm5GpKTZU74 7IYUic6U6WLO4AHgAHHC3qLic9DCoBNvEMYkcouKDfZ+brK9/ZkmqaiA5PvG4o2M 4sSdCoZ1gbARyPOxq3u2Y0fWzVxBOBfyMxtpt1TEbFFbXry8ZzYDECqCkTTQa/oW XB35o3JJ223cNeAYG3TsfqTrUd123A08WXrPsAodBTYkllSo92LNhfQRrCn5Dp1B 3m3J0o1UNIyt00SeZDQAfsOINQSxIqbg273lzN8dU8MgmUDmwXncJuJWvksgdMK0 5WzNzCGZnyF3nOXQO3vvfXI/eiu272tfttUFf1R0l8HbmG6Zx7zLniXC1tvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz+7j0mABr28/wAowEbTjTDK5gGMwHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKhs0S85lK+k9iH9BRdQBvszvXH6nxa1XcK iyxvPgSpm9NvpZpu33VTpiVF7ps4GjI1a8+ifvSiwpZUEwlJEbanmmSge3rF7P/Z HEiTpYOid4Islh8onGLYKvgYJJGtaLs/cxeK80DlbTnzGl1UmKDSt7hxxssyfQbn 9D5ih2/Y865s1my9ar8Z7XyiqpUmE+GhJ1LIdh1xI+bFwD7nAbybCGZSN+bLqNmX PY3yfgPgOnz3LI5ZZMW76iCd12Rpnb7oGOf2XX7b41SD87TEWdXCRnHg565zQ7lK KxVyZ/VbT57dghjut6ng01U1XSiR+l2vrip8pY+cL7esXuxHSB0= -----END CERTIFICATE-----Generated at Sun Dec 21 15:21:46 2025 by rpki-client