This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: hf0XoI8fT5Mc28dR8GqazEp+d15LeOeT4vfNNuaH9iU= Subject key identifier: A5:22:0F:BB:E8:DD:C3:C3:6A:F5:35:4D:E7:26:82:19:F8:D9:98:32 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 1258301C4C77A2213A250DC3D531C9723E1A1BC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0534 Signing time: Sat 20 Dec 2025 18:51:14 +0000 Manifest this update: Sat 20 Dec 2025 18:46:14 +0000 Manifest next update: Wed 24 Dec 2025 05:00:14 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: p7O0lixOh+lp9XoSlp8fd8cNa/YofV9X5ILxQRZE890=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 05:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:58:30:1c:4c:77:a2:21:3a:25:0d:c3:d5:31:c9:72:3e:1a:1b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Dec 20 18:46:14 2025 GMT Not After : Dec 24 05:00:14 2025 GMT Subject: CN=A5220FBBE8DDC3C36AF5354DE7268219F8D99832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:57:b4:81:86:ad:91:82:71:c1:61:52:91: 54:9a:8a:6f:a1:44:0c:5b:1b:ef:d7:62:37:08:97: a2:6d:17:b4:41:80:5c:86:cd:32:db:0a:5c:a9:83: 0d:5e:67:13:ca:23:e4:25:48:09:e0:5e:64:4f:14: 31:b3:88:94:f0:a0:7b:29:c6:d3:3e:e5:8e:a8:6e: fe:28:0e:9b:26:4c:16:83:d3:92:7a:d9:da:38:d4: 63:08:e9:52:11:92:08:78:7b:26:32:88:e0:a5:fa: 50:09:d7:0e:1d:8b:89:16:9a:55:24:06:2f:b5:3b: fa:c6:b6:4d:79:82:0e:de:f2:74:d3:c1:10:f5:3a: 98:d1:2c:ae:a6:4f:8e:5e:14:1c:2e:16:8d:31:6b: 63:14:17:01:90:33:91:86:ce:f8:2d:8f:4a:f6:be: 66:23:18:c1:3f:c2:82:43:21:03:4f:98:a6:f3:63: a6:99:3f:73:c9:35:c3:78:a0:73:49:10:03:df:ec: bf:fe:85:36:4e:9d:41:c4:a1:dd:07:7d:6a:56:33: 44:31:92:70:7d:2e:3d:4b:f7:6e:f4:df:e4:fc:44: 80:85:f5:b6:d5:4b:b9:28:2b:9d:73:c0:14:16:21: 5d:e4:7c:60:78:ac:ee:ac:81:42:36:88:e5:6f:9e: b5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:22:0F:BB:E8:DD:C3:C3:6A:F5:35:4D:E7:26:82:19:F8:D9:98:32 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fe:8e:85:e5:92:4f:9b:af:41:df:59:ff:20:af:db:28:1b: 67:6a:6c:53:ee:25:7a:c6:6a:11:ec:ac:84:fd:0a:f4:82:e3: 9d:4f:4f:2b:b9:97:37:f4:5e:db:9b:c3:92:38:6d:33:60:76: 11:65:fe:11:33:38:63:86:41:6c:53:23:13:89:61:67:08:c8: de:5a:e7:b7:89:a8:55:79:a5:59:44:86:78:6d:83:d5:a5:80: 93:70:3e:75:40:d3:81:f4:ff:71:d0:6c:fa:46:95:f1:3d:e4: 9d:c2:b9:20:f6:2c:3c:90:95:66:91:c8:07:c3:ab:ca:cd:6f: d3:5b:95:78:92:47:0d:da:cb:80:5f:db:ab:96:96:c6:4e:e0: 64:ee:ee:0b:0c:26:32:7f:64:89:85:08:f1:00:73:7b:01:5e: 87:3d:c4:86:fe:27:b1:c0:24:b4:00:3c:04:7d:47:17:d0:54: e4:3f:90:51:dc:94:57:2f:45:a7:18:83:9d:e1:65:f5:2c:f8: 86:46:c4:31:96:13:c2:14:60:aa:dc:ff:14:f5:6f:95:73:55: 3e:19:ec:e7:20:fa:20:d7:0e:69:db:08:54:3e:00:b5:cf:e8: 5b:e9:b1:64:3b:f9:1a:6a:bd:0d:f4:35:99:5f:ff:ef:4e:35: 77:78:32:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElgwHEx3oiE6JQ3D1THJcj4aG8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTEyMjAxODQ2MTRaFw0yNTEyMjQwNTAwMTRaMDMxMTAvBgNV BAMTKEE1MjIwRkJCRThEREMzQzM2QUY1MzU0REU3MjY4MjE5RjhEOTk4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXVe0gYatkYJxwWFSkVSaim+h RAxbG+/XYjcIl6JtF7RBgFyGzTLbClypgw1eZxPKI+QlSAngXmRPFDGziJTwoHsp xtM+5Y6obv4oDpsmTBaD05J62do41GMI6VIRkgh4eyYyiOCl+lAJ1w4di4kWmlUk Bi+1O/rGtk15gg7e8nTTwRD1OpjRLK6mT45eFBwuFo0xa2MUFwGQM5GGzvgtj0r2 vmYjGME/woJDIQNPmKbzY6aZP3PJNcN4oHNJEAPf7L/+hTZOnUHEod0HfWpWM0Qx knB9Lj1L92703+T8RICF9bbVS7koK51zwBQWIV3kfGB4rO6sgUI2iOVvnrXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpSIPu+jdw8Nq9TVN5yaCGfjZmDIwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7+joXlkk+br0HfWf8gr9soG2dqbFPuJXrG ahHsrIT9CvSC451PTyu5lzf0Xtubw5I4bTNgdhFl/hEzOGOGQWxTIxOJYWcIyN5a 57eJqFV5pVlEhnhtg9WlgJNwPnVA04H0/3HQbPpGlfE95J3CuSD2LDyQlWaRyAfD q8rNb9NblXiSRw3ay4Bf26uWlsZO4GTu7gsMJjJ/ZImFCPEAc3sBXoc9xIb+J7HA JLQAPAR9RxfQVOQ/kFHclFcvRacYg53hZfUs+IZGxDGWE8IUYKrc/xT1b5VzVT4Z 7Ocg+iDXDmnbCFQ+ALXP6FvpsWQ7+RpqvQ30NZlf/+9ONXd4MmE= -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:13 2025 by rpki-client