This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: JDjWGHC8VaRs5/0/Ne6KTCSz5qu80P1y/3uy6K4o/xM= Subject key identifier: A0:3A:EF:CE:0A:DA:D2:60:21:A9:23:B9:57:AF:2E:AF:84:AE:4B:1F Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 520DFA364564A7D012A5F2494C31AAB1FD73355A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 0213 Signing time: Sun 21 Dec 2025 22:01:09 +0000 Manifest this update: Sun 21 Dec 2025 21:56:09 +0000 Manifest next update: Thu 25 Dec 2025 01:29:09 +0000 Files and hashes: 1: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) 2: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 3: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) 4: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 5: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) 6: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) 7: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) 8: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) 9: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: HHTh1YG1zmIxW2TEEsUl6u3iTlpD+DlRTlaqTR/0DU4=) 10: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0d:fa:36:45:64:a7:d0:12:a5:f2:49:4c:31:aa:b1:fd:73:35:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Dec 21 21:56:09 2025 GMT Not After : Dec 25 01:29:09 2025 GMT Subject: CN=A03AEFCE0ADAD26021A923B957AF2EAF84AE4B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:32:8a:27:ea:9e:17:4e:0f:75:cd:1c:7b:1c: 21:74:66:5e:8b:f4:72:41:6e:7a:0b:b5:0b:d8:94: 48:56:01:66:af:55:bc:f0:0e:4f:00:17:37:52:da: 9d:68:4f:26:4c:c1:1c:a2:08:ee:d4:9d:af:93:fb: bf:f2:b8:d6:28:cf:5e:e3:f7:9e:a7:c6:44:d6:be: aa:be:23:2f:62:28:a1:e8:4e:73:d6:c5:60:d7:5c: d3:66:a5:5c:bc:40:5e:bd:d4:da:f6:4b:35:da:d2: 7f:6f:92:c5:26:e7:c2:73:8f:86:61:cb:c4:80:32: f5:b8:9f:32:20:d0:ee:b3:2f:54:71:e2:b9:1b:9b: a9:8e:d2:2c:98:4e:95:45:ef:5b:aa:b3:98:09:05: 1c:50:c9:cb:cb:ff:b6:e5:c7:ab:0f:ce:4f:77:46: 2f:bd:5a:89:73:1e:a9:2d:ad:8b:d4:78:63:c7:9a: ba:c4:0e:eb:f2:26:0a:83:b2:af:0f:d0:eb:3a:75: 4c:0d:8d:97:16:b6:c4:d5:9a:c4:5d:55:e9:9d:f1: df:c6:a7:dc:12:cb:a0:cd:39:0f:ae:bc:a0:96:15: 33:bf:8d:e7:16:61:fa:1c:ff:48:43:ac:87:24:7e: 8f:e8:13:97:6d:36:c5:94:36:da:f1:36:6e:52:7c: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3A:EF:CE:0A:DA:D2:60:21:A9:23:B9:57:AF:2E:AF:84:AE:4B:1F X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a2:9c:c1:08:df:79:f5:3b:83:aa:e2:ff:36:91:09:f6:9e: e8:1b:25:70:1c:40:69:6b:a8:f7:2c:1b:b3:10:67:02:c3:90: 0e:03:72:9e:83:2d:0c:3d:c5:b3:ea:fd:d7:3a:80:76:42:d7: 31:a4:7c:e7:df:92:c2:4e:d3:c9:f9:a8:15:96:65:4a:a8:85: b0:e0:4e:4b:3c:07:6e:35:c1:ea:86:03:e7:8e:eb:2a:8f:8e: 17:23:ee:d3:0d:5e:3a:10:90:20:17:3a:32:78:33:0d:63:15: 5e:a4:ab:3f:a0:28:e6:d0:b3:8b:55:a9:fb:bd:82:52:76:1d: 18:ba:61:52:a8:db:5e:27:ac:56:d9:15:31:d8:d8:33:f2:f4: 45:60:ca:1f:77:5d:aa:27:9f:9e:ac:1d:e0:71:88:d3:44:f7: 47:ff:c5:71:9a:c8:8f:a5:e9:bf:45:eb:58:45:2d:e9:65:33: 11:24:41:a6:8d:97:1a:26:c7:c8:4c:42:a5:e5:02:c3:c0:0f: 71:cd:0d:6e:99:49:20:b3:e6:a9:98:05:44:c9:f4:fd:e6:9e: 7e:36:ea:14:43:99:05:51:eb:2a:36:b4:b3:48:43:9f:28:2d: d0:bf:55:7a:0b:dd:04:b8:ef:2a:1e:5d:c2:5b:04:5b:03:2b: 72:34:27:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUg36NkVkp9ASpfJJTDGqsf1zNVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTEyMjEyMTU2MDlaFw0yNTEyMjUwMTI5MDlaMDMxMTAvBgNV BAMTKEEwM0FFRkNFMEFEQUQyNjAyMUE5MjNCOTU3QUYyRUFGODRBRTRCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMoon6p4XTg91zRx7HCF0Zl6L 9HJBbnoLtQvYlEhWAWavVbzwDk8AFzdS2p1oTyZMwRyiCO7Una+T+7/yuNYoz17j 956nxkTWvqq+Iy9iKKHoTnPWxWDXXNNmpVy8QF691Nr2SzXa0n9vksUm58Jzj4Zh y8SAMvW4nzIg0O6zL1Rx4rkbm6mO0iyYTpVF71uqs5gJBRxQycvL/7blx6sPzk93 Ri+9WolzHqktrYvUeGPHmrrEDuvyJgqDsq8P0Os6dUwNjZcWtsTVmsRdVemd8d/G p9wSy6DNOQ+uvKCWFTO/jecWYfoc/0hDrIckfo/oE5dtNsWUNtrxNm5SfJ9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoDrvzgra0mAhqSO5V68ur4SuSx8wHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKminMEI33n1O4Oq4v82kQn2nugbJXAcQGlr qPcsG7MQZwLDkA4Dcp6DLQw9xbPq/dc6gHZC1zGkfOffksJO08n5qBWWZUqohbDg Tks8B241weqGA+eO6yqPjhcj7tMNXjoQkCAXOjJ4Mw1jFV6kqz+gKObQs4tVqfu9 glJ2HRi6YVKo214nrFbZFTHY2DPy9EVgyh93Xaonn56sHeBxiNNE90f/xXGayI+l 6b9F61hFLellMxEkQaaNlxomx8hMQqXlAsPAD3HNDW6ZSSCz5qmYBUTJ9P3mnn42 6hRDmQVR6yo2tLNIQ58oLdC/VXoL3QS47yoeXcJbBFsDK3I0J94= -----END CERTIFICATE-----Generated at Mon Dec 22 05:31:35 2025 by rpki-client