This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: /nF0VFFOmKPHEJIp3BgePNl1IfgWkjbnKeloKrb7/oo= Subject key identifier: C6:72:C1:66:E0:83:C4:BC:A2:B2:EE:6F:F5:86:15:DD:33:94:A5:E5 Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 245C73CE19313BF59608D02D8DE72B43A7AFBAB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 021F Signing time: Thu 18 Dec 2025 00:51:35 +0000 Manifest this update: Thu 18 Dec 2025 00:46:35 +0000 Manifest next update: Sun 21 Dec 2025 04:30:35 +0000 Files and hashes: 1: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) 2: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: 00hgNAHCQ4qnFT8r9iLZ+iBjeWaVTx24VV/+a/CyiMU=) 3: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) 4: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 04:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5c:73:ce:19:31:3b:f5:96:08:d0:2d:8d:e7:2b:43:a7:af:ba:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Dec 18 00:46:35 2025 GMT Not After : Dec 21 04:30:35 2025 GMT Subject: CN=C672C166E083C4BCA2B2EE6FF58615DD3394A5E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:d3:af:06:49:51:9c:7e:c6:93:95:b2:d2: 63:c8:60:0b:6d:2b:a8:dc:03:fd:6e:9e:0c:79:65: 99:80:44:2e:5a:5f:19:fd:85:e4:3c:b6:d9:1d:7d: de:38:d8:d2:83:35:a8:9d:a9:df:5f:e4:a9:4a:29: b1:69:f2:83:0b:94:3b:fc:e0:99:d5:92:ac:f1:2d: a1:5b:10:71:43:83:e1:02:f6:04:5d:30:31:59:3b: 44:fd:1f:f5:38:19:95:f3:21:fd:10:4f:8b:1e:a5: 28:3a:2f:f0:91:a6:d1:e2:0e:af:43:3b:67:c5:24: ce:51:4d:20:a1:9a:03:29:12:2c:ae:5b:6d:8d:18: bf:f8:0b:2f:17:ab:b9:44:eb:08:3e:2f:9b:2a:37: 8c:e9:4b:e9:63:cc:99:d7:67:28:7a:e0:3e:43:cf: f4:e4:55:f6:3c:a8:4e:f7:ef:6a:b0:c4:2d:65:f8: c2:ca:8f:0d:ca:df:54:7b:3d:43:63:99:15:26:3e: ba:3a:b4:b8:cc:fd:8a:6a:a0:cb:9f:52:88:1e:e5: 5e:af:88:37:22:ba:0a:d3:dd:48:b7:23:75:7b:7d: a9:c9:c0:1e:d2:58:10:41:fc:9f:be:f0:73:89:6c: 14:2c:bf:27:5c:15:13:7f:d2:35:b5:0b:57:73:1e: ca:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:72:C1:66:E0:83:C4:BC:A2:B2:EE:6F:F5:86:15:DD:33:94:A5:E5 X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:2e:53:f0:86:2a:ed:20:82:c8:5f:ef:40:a0:8c:a0:c5:dd: 2b:66:2e:2e:d0:e9:2b:1d:a1:3a:dc:b9:33:87:9c:22:da:51: 4b:e8:eb:5e:11:47:1b:b7:1e:c8:87:df:a2:60:36:71:bd:86: 52:5e:90:0a:e9:f1:bb:61:19:b0:39:73:9c:de:c3:c3:71:16: 75:84:d1:0f:86:9a:7b:f2:64:78:09:4a:b9:8a:87:73:17:6d: 9c:04:14:f7:22:f8:11:76:0f:8c:c0:74:2b:ef:39:c2:5d:a4: 6f:d3:67:96:ad:c6:81:0e:03:68:ef:5b:a9:b7:d7:ab:c2:41: 31:eb:7a:6d:76:98:23:ae:79:c5:04:22:a2:9e:b1:63:e1:13: ea:d8:cf:b5:f9:df:22:94:4d:c8:f2:69:bc:1f:6c:e4:f3:47: 44:da:cf:fa:c8:6b:8a:69:b5:6b:9e:1c:41:bc:23:c7:45:5f: 16:1b:0a:bf:7e:39:43:e8:d8:38:49:bc:95:c8:19:1a:ea:6e: 85:7b:59:50:a4:92:b0:74:ad:ca:f5:a7:9c:08:1d:f2:3d:4a: 62:5d:c3:35:a0:2d:40:27:4d:bd:a7:bd:b4:50:d7:1d:47:78: d2:c3:65:8b:f2:90:aa:72:ae:65:62:28:a3:75:36:61:83:2d: 09:45:6f:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJFxzzhkxO/WWCNAtjecrQ6evurkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNTEyMTgwMDQ2MzVaFw0yNTEyMjEwNDMwMzVaMDMxMTAvBgNV BAMTKEM2NzJDMTY2RTA4M0M0QkNBMkIyRUU2RkY1ODYxNUREMzM5NEE1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ztOvBklRnH7Gk5Wy0mPIYAtt K6jcA/1ungx5ZZmARC5aXxn9heQ8ttkdfd442NKDNaidqd9f5KlKKbFp8oMLlDv8 4JnVkqzxLaFbEHFDg+EC9gRdMDFZO0T9H/U4GZXzIf0QT4sepSg6L/CRptHiDq9D O2fFJM5RTSChmgMpEiyuW22NGL/4Cy8Xq7lE6wg+L5sqN4zpS+ljzJnXZyh64D5D z/TkVfY8qE7372qwxC1l+MLKjw3K31R7PUNjmRUmPro6tLjM/YpqoMufUoge5V6v iDciugrT3Ui3I3V7fanJwB7SWBBB/J++8HOJbBQsvydcFRN/0jW1C1dzHsqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxnLBZuCDxLyisu5v9YYV3TOUpeUwHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAuU/CGKu0ggshf70CgjKDF3StmLi7Q6Ssd oTrcuTOHnCLaUUvo614RRxu3HsiH36JgNnG9hlJekArp8bthGbA5c5zew8NxFnWE 0Q+GmnvyZHgJSrmKh3MXbZwEFPci+BF2D4zAdCvvOcJdpG/TZ5atxoEOA2jvW6m3 16vCQTHrem12mCOuecUEIqKesWPhE+rYz7X53yKUTcjyabwfbOTzR0Taz/rIa4pp tWueHEG8I8dFXxYbCr9+OUPo2DhJvJXIGRrqboV7WVCkkrB0rcr1p5wIHfI9SmJd wzWgLUAnTb2nvbRQ1x1HeNLDZYvykKpyrmViKKN1NmGDLQlFb/M= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:18 2025 by rpki-client