This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: EWoMM45YgFIQxd5A4QLU+UyLPjlGGWatIDAD4NuLS8I= Subject key identifier: F8:44:3F:6E:42:53:3E:F4:CD:59:9B:E9:D8:AF:30:EC:68:8C:A2:5F Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 78B51DCC5896B61E3B43B41B2FB4BD264B1F40BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 021A Signing time: Sat 20 Dec 2025 12:12:23 +0000 Manifest this update: Sat 20 Dec 2025 12:07:23 +0000 Manifest next update: Tue 23 Dec 2025 16:46:23 +0000 Files and hashes: 1: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: fmzzcFoOa4R/zLwDzFYsTF0FQESa68jlzQj2bDsZgFw=) 2: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: MqS7xa1gZ4sxYF09hDVlXuThuOKNijdrU/YubMLE0nE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 16:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b5:1d:cc:58:96:b6:1e:3b:43:b4:1b:2f:b4:bd:26:4b:1f:40:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Dec 20 12:07:23 2025 GMT Not After : Dec 23 16:46:23 2025 GMT Subject: CN=F8443F6E42533EF4CD599BE9D8AF30EC688CA25F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:46:ae:72:e3:5a:ff:62:ba:dd:b9:2f:eb: ce:ee:8f:95:c5:bc:dc:91:01:03:48:98:70:f8:e6: ab:1a:b0:81:85:3e:8a:19:e8:6e:a3:b9:81:70:a0: ec:fd:77:12:13:54:10:43:b5:d5:d3:7c:64:76:fa: 1a:95:17:5c:62:80:f7:8f:47:a2:92:c0:fd:e5:4e: f6:79:86:2a:e0:88:25:ff:2f:bc:bb:51:ae:89:2d: dd:3f:59:83:bc:50:de:98:19:a5:7c:2b:30:ac:a8: b4:04:3e:99:7c:4c:0a:2d:d6:e6:45:6c:94:77:3b: ec:34:6c:c4:7b:3e:08:5b:6d:54:3b:ca:ea:04:86: 4e:00:9d:a0:95:c2:62:dd:bc:67:f8:71:a0:87:92: 35:9d:f5:18:4c:e4:51:b5:47:b7:5b:40:ac:d0:17: 05:e7:7c:4a:0d:97:70:94:1a:e1:b8:c7:4e:50:e5: 6b:33:97:9d:16:da:af:bd:28:fb:aa:29:35:74:1c: b7:43:6b:f3:05:b4:fd:ea:81:e2:b1:f9:e8:2b:43: 7a:18:70:b4:79:66:78:35:bf:e7:0c:80:f5:2c:e5: 67:fe:42:02:c2:68:e2:e5:3e:84:b5:7c:a9:18:85: 9f:94:6a:2c:e6:54:5e:2c:e6:b1:76:f5:40:79:6d: a8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:44:3F:6E:42:53:3E:F4:CD:59:9B:E9:D8:AF:30:EC:68:8C:A2:5F X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:65:ce:61:b9:d4:18:09:bc:4a:ca:cd:15:ac:e2:b7:8b:d5: f1:46:2f:2e:8e:66:1a:32:71:a8:18:9e:a1:9b:54:a8:4c:44: 2e:0a:bf:30:d8:aa:85:18:ad:49:58:19:af:30:c5:1b:7a:b9: bc:a7:c6:e0:1a:48:c2:02:7a:1d:02:56:47:4e:91:1d:fd:28: 62:74:82:2f:88:30:82:08:85:45:b5:cd:d8:9d:49:05:cb:4d: 9d:02:dd:8e:06:fa:83:6f:1b:3c:25:0a:d4:0b:84:b7:4a:32: 76:33:ac:a1:de:a1:9d:f0:29:2f:f1:dc:b4:63:83:0d:ff:e8: 45:4f:c0:68:38:1d:c1:a8:d7:97:53:0c:62:33:62:49:6a:85: 5c:93:f3:8c:d3:15:2e:a3:e2:73:a5:87:0f:71:35:34:de:12: 6e:9d:60:8e:dd:7f:32:89:76:28:67:68:d6:da:4a:b6:10:6e: 51:89:9a:4e:6e:7b:3c:2a:2f:e0:bc:6b:c0:f3:83:59:ff:32: 75:fb:af:26:64:82:2a:31:07:2d:b9:bc:3e:57:07:1f:55:6e: 3d:90:23:95:da:db:4e:61:06:c0:f8:b7:6d:49:0b:f5:ab:28: e2:ad:ed:f9:2b:da:57:21:5e:83:c7:fd:9a:7d:0b:dc:98:e4: e3:0e:0a:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLUdzFiWth47Q7QbL7S9JksfQL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNTEyMjAxMjA3MjNaFw0yNTEyMjMxNjQ2MjNaMDMxMTAvBgNV BAMTKEY4NDQzRjZFNDI1MzNFRjRDRDU5OUJFOUQ4QUYzMEVDNjg4Q0EyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9YUaucuNa/2K63bkv687uj5XF vNyRAQNImHD45qsasIGFPooZ6G6juYFwoOz9dxITVBBDtdXTfGR2+hqVF1xigPeP R6KSwP3lTvZ5hirgiCX/L7y7Ua6JLd0/WYO8UN6YGaV8KzCsqLQEPpl8TAot1uZF bJR3O+w0bMR7PghbbVQ7yuoEhk4AnaCVwmLdvGf4caCHkjWd9RhM5FG1R7dbQKzQ FwXnfEoNl3CUGuG4x05Q5Wszl50W2q+9KPuqKTV0HLdDa/MFtP3qgeKx+egrQ3oY cLR5Zng1v+cMgPUs5Wf+QgLCaOLlPoS1fKkYhZ+UaizmVF4s5rF29UB5bagLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+EQ/bkJTPvTNWZvp2K8w7GiMol8wHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABlzmG51BgJvErKzRWs4reL1fFGLy6OZhoy cagYnqGbVKhMRC4KvzDYqoUYrUlYGa8wxRt6ubynxuAaSMICeh0CVkdOkR39KGJ0 gi+IMIIIhUW1zdidSQXLTZ0C3Y4G+oNvGzwlCtQLhLdKMnYzrKHeoZ3wKS/x3LRj gw3/6EVPwGg4HcGo15dTDGIzYklqhVyT84zTFS6j4nOlhw9xNTTeEm6dYI7dfzKJ dihnaNbaSrYQblGJmk5uezwqL+C8a8Dzg1n/MnX7ryZkgioxBy25vD5XBx9Vbj2Q I5Xa205hBsD4t21JC/WrKOKt7fkr2lchXoPH/Zp9C9yY5OMOCjQ= -----END CERTIFICATE-----Generated at Sun Dec 21 15:46:17 2025 by rpki-client