This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: IqNenr1DL6a1pyt/7QdE5+i/P8fbmcdNNvjRLv46EKc= Subject key identifier: 29:21:E3:15:0F:AD:41:94:96:85:B4:21:76:11:82:22:78:65:9C:7A Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 0D90A6DABD3E218975FA19E6672FB448EA25E5AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 0234 Signing time: Wed 17 Dec 2025 16:31:13 +0000 Manifest this update: Wed 17 Dec 2025 16:26:13 +0000 Manifest next update: Sun 21 Dec 2025 00:38:13 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: naCVo5x0LhBamKZXbwdLpOuvF7Vam0nPACpCpuR6tJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:90:a6:da:bd:3e:21:89:75:fa:19:e6:67:2f:b4:48:ea:25:e5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Dec 17 16:26:13 2025 GMT Not After : Dec 21 00:38:13 2025 GMT Subject: CN=2921E3150FAD41949685B4217611822278659C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:3f:08:29:bc:fa:ca:6e:b0:7f:cc:07:0f: 5c:a9:34:61:1a:ba:43:d4:c3:1c:4f:7a:9c:00:1a: 93:53:41:6c:99:3a:cf:06:9d:75:88:3e:8d:e9:6b: 29:aa:28:5f:e3:43:0a:6d:30:ff:20:4b:1d:da:76: af:19:20:30:0a:65:91:09:3d:d9:7a:a8:31:e9:7a: 8e:4b:78:1b:e7:57:96:19:94:be:d5:0d:71:d2:b4: b9:9c:19:76:ce:e4:3e:2b:82:d3:06:32:56:f0:4e: 08:31:32:ea:5c:27:f2:d8:ac:9c:2d:0a:c5:5f:6a: 9a:87:b2:91:8a:c9:59:ca:7d:2e:d0:08:5c:dd:e2: 32:99:3a:78:19:de:a6:f3:bf:ba:dd:be:e4:c3:51: 84:81:9c:3e:b3:cb:2b:d0:29:48:f7:6e:5d:4b:9e: e5:6d:28:b1:90:a9:ba:2f:68:a0:7d:4d:d1:85:01: 17:ca:be:fb:97:12:3a:70:d1:55:6a:ce:21:28:70: 6e:60:c0:7a:e0:c1:c3:10:59:7a:05:53:29:ec:0f: 6b:2c:b7:44:58:1e:47:87:dd:6d:0a:0b:37:85:64: 35:1e:0b:6a:4a:02:6f:a4:db:50:f3:47:e9:bb:95: db:e4:6e:13:b1:a7:5a:e1:1e:2d:cb:53:a7:f7:e3: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:E3:15:0F:AD:41:94:96:85:B4:21:76:11:82:22:78:65:9C:7A X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1b:aa:7e:e6:e2:6a:6b:42:6f:b0:07:7c:5c:42:7e:b5:b6: df:6d:54:4a:c7:3a:45:d8:f5:d2:57:7e:a1:f2:9c:c2:c8:9c: b5:b3:20:58:f2:48:4c:fe:85:6d:eb:05:06:b6:84:b8:2e:fc: 32:d4:57:5c:0e:4d:af:67:33:db:c7:6c:15:da:52:5d:dd:8f: 08:fb:b0:a5:09:6a:61:d3:1b:8b:10:c2:17:de:4a:b1:97:04: d8:b8:89:ee:f1:e2:c2:ee:eb:a2:0d:64:fa:33:46:d2:ef:5c: 83:22:c7:57:e1:bc:a1:f6:b8:ae:d9:93:02:3c:df:2c:ce:f2: b2:02:05:92:23:26:5a:41:7a:11:33:c5:b5:90:54:3e:01:4e: e0:8c:d7:56:6a:7f:41:b8:d2:16:81:04:fb:14:58:3d:cb:80: 1e:8f:49:04:28:22:37:34:f7:0d:8f:fb:70:0e:aa:0a:ac:13: 5c:bc:b4:c2:4e:38:87:65:80:f8:98:f3:c0:66:b9:5d:ed:8d: da:11:27:a4:b2:a8:51:6c:fe:57:c9:46:71:79:d6:e7:97:fe: 87:b8:a4:02:f6:5e:fe:88:38:24:56:5b:6c:f7:87:7e:fc:91: 6f:67:b2:2a:27:ee:53:3d:05:98:60:9c:ed:18:58:6e:92:01: c7:fb:8d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZCm2r0+IYl1+hnmZy+0SOol5a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNTEyMTcxNjI2MTNaFw0yNTEyMjEwMDM4MTNaMDMxMTAvBgNV BAMTKDI5MjFFMzE1MEZBRDQxOTQ5Njg1QjQyMTc2MTE4MjIyNzg2NTlDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLT8IKbz6ym6wf8wHD1ypNGEa ukPUwxxPepwAGpNTQWyZOs8GnXWIPo3paymqKF/jQwptMP8gSx3adq8ZIDAKZZEJ Pdl6qDHpeo5LeBvnV5YZlL7VDXHStLmcGXbO5D4rgtMGMlbwTggxMupcJ/LYrJwt CsVfapqHspGKyVnKfS7QCFzd4jKZOngZ3qbzv7rdvuTDUYSBnD6zyyvQKUj3bl1L nuVtKLGQqbovaKB9TdGFARfKvvuXEjpw0VVqziEocG5gwHrgwcMQWXoFUynsD2ss t0RYHkeH3W0KCzeFZDUeC2pKAm+k21DzR+m7ldvkbhOxp1rhHi3LU6f34yW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKSHjFQ+tQZSWhbQhdhGCInhlnHowHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0bqn7m4mprQm+wB3xcQn61tt9tVErHOkXY 9dJXfqHynMLInLWzIFjySEz+hW3rBQa2hLgu/DLUV1wOTa9nM9vHbBXaUl3djwj7 sKUJamHTG4sQwhfeSrGXBNi4ie7x4sLu66INZPozRtLvXIMix1fhvKH2uK7ZkwI8 3yzO8rICBZIjJlpBehEzxbWQVD4BTuCM11Zqf0G40haBBPsUWD3LgB6PSQQoIjc0 9w2P+3AOqgqsE1y8tMJOOIdlgPiY88BmuV3tjdoRJ6SyqFFs/lfJRnF51ueX/oe4 pAL2Xv6IOCRWW2z3h378kW9nsion7lM9BZhgnO0YWG6SAcf7jQk= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:01 2025 by rpki-client