This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json) Hash identifier: B70vPintHexPe6atNQz2A8dAQQktwHZahQa+NOTfdPc= Subject key identifier: 63:BB:56:00:B1:1E:24:52:ED:F4:78:D0:16:DC:A9:DF:D2:64:20:9E Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Certificate serial: 215A4432A3703AAE9F864828C3FC0E0AF32507A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft Manifest number: 0212 Signing time: Wed 24 Dec 2025 18:41:23 +0000 Manifest this update: Wed 24 Dec 2025 18:36:23 +0000 Manifest next update: Sat 27 Dec 2025 20:48:23 +0000 Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: sTfIhZJUCCfdcf33wHlKdhF+PgS7ApfbG2j8m1rnlEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5a:44:32:a3:70:3a:ae:9f:86:48:28:c3:fc:0e:0a:f3:25:07:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Validity Not Before: Dec 24 18:36:23 2025 GMT Not After : Dec 27 20:48:23 2025 GMT Subject: CN=63BB5600B11E2452EDF478D016DCA9DFD264209E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e7:12:25:2b:61:a9:b9:19:42:ca:58:60:0c: 9c:27:aa:06:77:fe:b7:16:cf:8f:53:57:5d:94:a3: 1e:a1:36:93:de:96:79:9c:59:f9:f1:20:18:80:e3: 0e:c1:4d:b0:6b:e9:52:75:69:a2:25:be:9b:09:f3: f9:d4:46:48:98:10:71:37:b6:6a:9c:3f:62:7a:1a: 1f:5f:65:3e:80:4c:c5:6c:0a:91:aa:f9:b8:dc:6c: 8b:19:4b:5f:b7:04:40:86:40:fd:41:9b:32:9c:55: d4:f4:58:96:48:49:91:df:36:39:ca:24:f8:ae:97: cd:e3:8b:29:ae:57:0d:1a:0c:ff:c9:99:f9:d9:71: 29:bf:c0:4d:a6:77:8a:f0:25:71:2e:ed:44:fd:af: 20:d7:c2:1c:f3:3c:e1:ee:1f:c1:9b:28:b1:a8:2f: 70:52:c6:6e:3c:05:22:f1:5b:da:6a:41:07:28:60: 40:f0:f6:87:1b:cc:ca:34:74:07:77:38:54:00:d9: 43:56:d5:78:19:9c:e0:53:f2:42:c0:bf:80:06:e1: 3a:dd:7f:e2:96:19:ac:b5:55:34:22:77:00:12:cd: dd:8a:ea:88:ab:a3:35:26:1a:02:66:d1:f2:b3:6e: 00:22:99:d7:de:3a:c7:22:3c:ba:c5:b9:6a:df:3d: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BB:56:00:B1:1E:24:52:ED:F4:78:D0:16:DC:A9:DF:D2:64:20:9E X509v3 Authority Key Identifier: keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:59:42:e8:c3:ac:00:89:9b:56:2d:07:64:d6:88:a2:3e:c3: d8:70:b9:3f:e2:6a:a7:93:4b:72:7a:b7:95:14:0c:a3:08:d9: 1b:00:2f:57:8c:96:14:55:60:c8:d9:10:b4:f6:62:c2:be:1b: 3d:69:6b:4b:ab:78:19:9f:89:65:83:a1:9f:be:23:13:16:81: 04:77:93:78:c4:00:ff:3b:c8:61:9b:45:50:6b:5b:50:34:ab: 90:77:4d:78:e1:3b:57:6c:9a:68:10:51:44:90:74:4a:59:12: f1:0b:0b:8f:7d:bd:19:bb:93:a1:70:2d:ae:b8:9b:95:85:45: 70:67:03:9f:20:d8:9d:e1:4b:5a:53:5a:7f:04:d3:3d:b5:fe: ed:61:57:15:11:2d:2c:07:63:f4:11:7a:99:58:2e:3f:25:59: 58:e2:c5:0e:e2:e5:28:85:f7:2b:b3:7b:8b:a8:35:d3:63:29: b6:c1:27:c5:09:4e:b5:2e:7c:e4:70:bd:cc:b0:a2:3f:a9:60: ca:eb:80:43:e0:46:f9:82:bc:2a:0d:d3:d3:55:ac:05:c9:a6: 64:17:74:c2:b3:6e:ba:7a:54:6c:9d:7a:29:70:15:1a:78:43: af:70:1b:98:ab:92:f7:e0:75:0f:32:a3:6c:5e:61:e7:7c:9a: 7f:4a:ba:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVpEMqNwOq6fhkgow/wOCvMlB6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3 OTdDNDE2NTAeFw0yNTEyMjQxODM2MjNaFw0yNTEyMjcyMDQ4MjNaMDMxMTAvBgNV BAMTKDYzQkI1NjAwQjExRTI0NTJFREY0NzhEMDE2RENBOURGRDI2NDIwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr5xIlK2GpuRlCylhgDJwnqgZ3 /rcWz49TV12Uox6hNpPelnmcWfnxIBiA4w7BTbBr6VJ1aaIlvpsJ8/nURkiYEHE3 tmqcP2J6Gh9fZT6ATMVsCpGq+bjcbIsZS1+3BECGQP1BmzKcVdT0WJZISZHfNjnK JPiul83jiymuVw0aDP/JmfnZcSm/wE2md4rwJXEu7UT9ryDXwhzzPOHuH8GbKLGo L3BSxm48BSLxW9pqQQcoYEDw9ocbzMo0dAd3OFQA2UNW1XgZnOBT8kLAv4AG4Trd f+KWGay1VTQidwASzd2K6oirozUmGgJm0fKzbgAimdfeOsciPLrFuWrfPfLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY7tWALEeJFLt9HjQFtyp39JkIJ4wHwYDVR0j BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4 OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVZQujDrACJm1YtB2TWiKI+w9hwuT/iaqeT S3J6t5UUDKMI2RsAL1eMlhRVYMjZELT2YsK+Gz1pa0ureBmfiWWDoZ++IxMWgQR3 k3jEAP87yGGbRVBrW1A0q5B3TXjhO1dsmmgQUUSQdEpZEvELC499vRm7k6FwLa64 m5WFRXBnA58g2J3hS1pTWn8E0z21/u1hVxURLSwHY/QReplYLj8lWVjixQ7i5SiF 9yuze4uoNdNjKbbBJ8UJTrUufORwvcywoj+pYMrrgEPgRvmCvCoN09NVrAXJpmQX dMKzbrp6VGydeilwFRp4Q69wG5irkvfgdQ8yo2xeYed8mn9KutA= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:20 2025 by rpki-client