This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: WEoDGwhuqX24XfscjD0w7ynSQfehKVtdgF6XgdvmV70= Subject key identifier: EC:2B:EE:8A:FC:2A:4B:95:F2:6B:9D:55:46:39:F3:8A:9A:56:4D:34 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 60D6AE466936141331D34DC34D0CDA486D88E2D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 0249 Signing time: Fri 19 Dec 2025 10:52:16 +0000 Manifest this update: Fri 19 Dec 2025 10:47:16 +0000 Manifest next update: Mon 22 Dec 2025 20:57:16 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: cLBHuakoAM076nK2jgQRlEzQO15yxX7Slkp+NoJrxmU=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d6:ae:46:69:36:14:13:31:d3:4d:c3:4d:0c:da:48:6d:88:e2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Dec 19 10:47:16 2025 GMT Not After : Dec 22 20:57:16 2025 GMT Subject: CN=EC2BEE8AFC2A4B95F26B9D554639F38A9A564D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:5d:c7:7d:4b:e7:06:34:32:17:94:bf:3a: ec:1c:39:48:63:fe:6c:95:29:39:2d:16:99:91:6f: 9e:af:85:32:6b:bd:05:a0:be:83:2b:06:89:53:e5: 3d:63:74:6b:2a:09:7b:d2:1a:79:b7:48:4f:a9:84: 92:ea:e3:79:4f:25:86:90:01:6e:53:5e:4d:a3:6b: fd:0b:91:26:c3:25:f1:ba:1d:8c:c1:df:5e:73:3e: 62:59:c6:e0:24:f2:73:df:d5:cb:37:36:d5:cf:25: 59:5c:f3:bc:19:a6:e6:76:f5:f3:75:ee:e6:0e:3d: 08:54:04:8a:4c:7b:52:3c:4c:65:64:de:10:02:52: e8:36:ef:78:db:02:a1:5e:23:26:62:db:bb:87:d0: 41:6c:b9:5d:ee:35:26:0a:e9:36:25:96:3a:10:f9: 8c:f1:aa:cd:d4:78:73:43:d2:5f:84:d0:5d:5a:eb: c7:83:58:5d:a7:ae:cd:3a:9e:17:e8:93:0f:58:49: 63:61:f9:7e:dc:24:fa:38:94:4b:42:27:f2:23:14: 3a:10:2c:2e:5e:b2:d0:91:92:07:08:0a:fc:9a:80: 17:ce:ab:b4:0a:06:57:3b:d7:7b:d1:d6:91:7f:c3: e3:c8:c3:ee:c8:d4:8a:3d:70:bf:f1:83:2a:34:ea: 8f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2B:EE:8A:FC:2A:4B:95:F2:6B:9D:55:46:39:F3:8A:9A:56:4D:34 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:78:79:7a:95:b1:78:4b:ef:c5:f5:e2:61:88:a1:e9:ae:a8: f8:ef:a7:7f:9d:6f:eb:a1:0f:c1:2e:6e:c5:19:e5:18:29:0c: 08:67:9c:3f:2b:71:d2:c5:cc:4c:c5:d5:79:79:13:83:c2:79: c6:a1:9d:88:87:c3:49:7b:0d:a2:36:b3:fe:61:12:e4:07:c2: 03:15:f6:2a:7d:9c:21:e6:a3:e4:3c:e7:27:48:14:8e:8d:34: 30:c8:f8:eb:26:3c:bc:a1:eb:1f:a4:05:ac:25:cf:41:bd:f6: 95:00:8a:78:76:ec:0f:fd:3f:a0:db:c2:0e:84:9c:71:ca:83: bb:b0:be:15:3d:bf:5a:3f:31:f3:7d:fc:eb:74:99:09:17:d5: f4:a5:97:b4:79:ed:28:d8:75:e9:4f:39:49:e6:4b:f7:cc:21: 31:ef:bc:6e:36:23:4d:76:e6:38:92:e9:0c:34:4a:53:c6:03: 55:30:b4:ba:74:71:d8:2a:22:e4:bf:72:d4:b3:71:fe:d3:71: 58:96:9b:9b:13:bf:5c:e2:b4:81:e5:ae:d4:e8:59:b1:4b:41: 2e:a4:22:c7:9c:7b:98:45:60:22:a3:5b:13:d8:e1:28:f7:10: df:84:00:ba:2d:4f:85:c7:9c:87:e1:2a:d2:5e:de:1d:b6:4c: 33:9c:5d:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNauRmk2FBMx003DTQzaSG2I4tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTEyMTkxMDQ3MTZaFw0yNTEyMjIyMDU3MTZaMDMxMTAvBgNV BAMTKEVDMkJFRThBRkMyQTRCOTVGMjZCOUQ1NTQ2MzlGMzhBOUE1NjREMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/l3HfUvnBjQyF5S/OuwcOUhj /myVKTktFpmRb56vhTJrvQWgvoMrBolT5T1jdGsqCXvSGnm3SE+phJLq43lPJYaQ AW5TXk2ja/0LkSbDJfG6HYzB315zPmJZxuAk8nPf1cs3NtXPJVlc87wZpuZ29fN1 7uYOPQhUBIpMe1I8TGVk3hACUug273jbAqFeIyZi27uH0EFsuV3uNSYK6TYlljoQ +Yzxqs3UeHND0l+E0F1a68eDWF2nrs06nhfokw9YSWNh+X7cJPo4lEtCJ/IjFDoQ LC5estCRkgcICvyagBfOq7QKBlc713vR1pF/w+PIw+7I1Io9cL/xgyo06o8lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7CvuivwqS5Xya51VRjnzippWTTQwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADR4eXqVsXhL78X14mGIoemuqPjvp3+db+uh D8EubsUZ5RgpDAhnnD8rcdLFzEzF1Xl5E4PCecahnYiHw0l7DaI2s/5hEuQHwgMV 9ip9nCHmo+Q85ydIFI6NNDDI+OsmPLyh6x+kBawlz0G99pUAinh27A/9P6Dbwg6E nHHKg7uwvhU9v1o/MfN9/Ot0mQkX1fSll7R57SjYdelPOUnmS/fMITHvvG42I012 5jiS6Qw0SlPGA1UwtLp0cdgqIuS/ctSzcf7TcViWm5sTv1zitIHlrtToWbFLQS6k Isece5hFYCKjWxPY4Sj3EN+EALotT4XHnIfhKtJe3h22TDOcXZU= -----END CERTIFICATE-----Generated at Sun Dec 21 19:11:58 2025 by rpki-client