This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: zB4urc3VD9zK/Ek/gEyd546hItA9/ZqPzkudWo7JzqY= Subject key identifier: F3:62:B2:80:41:C3:9D:B7:68:F3:6B:A0:24:55:57:9B:1D:7E:E3:1C Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 0302E802232C7DC9E9CACFDC263EFF76741F5C58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 04AD Signing time: Thu 18 Dec 2025 12:52:25 +0000 Manifest this update: Thu 18 Dec 2025 12:47:25 +0000 Manifest next update: Sun 21 Dec 2025 15:28:25 +0000 Files and hashes: 1: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: Hg2kTtHnEBB1S+5+KQXcY6hcx5ZaJDHzLttL+ffdo60=) 2: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: V3QHQK/gWQFy09rLOPxob5SyVyg/wx9t2yimUS9bwPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:02:e8:02:23:2c:7d:c9:e9:ca:cf:dc:26:3e:ff:76:74:1f:5c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Dec 18 12:47:25 2025 GMT Not After : Dec 21 15:28:25 2025 GMT Subject: CN=F362B28041C39DB768F36BA02455579B1D7EE31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:f7:3a:ac:53:7b:c7:91:55:4d:a1:3e:2d: 3f:3b:c0:f0:34:38:27:b1:1e:3e:e7:01:a3:9c:97: 75:35:53:48:7f:50:9d:18:fa:39:79:29:de:b5:53: 33:ca:d3:f2:15:8e:ab:63:a1:80:f5:40:28:0b:fb: e5:15:21:31:a3:9a:0b:80:fd:1c:69:60:5b:15:b7: 46:70:de:85:dd:c4:1c:13:e3:8b:6e:df:55:e6:f3: 28:71:7d:8d:9e:46:77:db:32:65:02:54:c7:36:16: ae:df:ec:5a:0f:af:3d:be:74:fe:24:f8:4b:ea:3d: a5:e1:4c:7f:fc:13:49:e3:e2:52:b5:e7:33:fc:34: b3:c6:77:02:51:d7:6d:4d:45:7e:80:46:ef:95:fe: 97:f6:a7:d8:2a:0c:5a:ef:b5:99:bc:8e:88:d8:1c: 8c:a9:4c:9f:33:70:ea:ae:e8:db:7b:4a:17:46:00: 29:8f:f8:35:0a:f4:33:28:e5:76:b5:d5:16:f6:12: cf:f4:f5:c5:02:22:f1:e4:56:1e:17:87:98:e4:97: 98:bd:b3:d3:03:84:8b:ee:4e:0d:43:68:4e:62:fa: d9:a8:95:0d:08:56:fe:34:30:fa:67:ec:c0:d8:8a: 6d:26:74:9f:63:50:86:ef:a4:08:a7:5e:9a:f9:4a: d9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:62:B2:80:41:C3:9D:B7:68:F3:6B:A0:24:55:57:9B:1D:7E:E3:1C X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2a:8a:8e:d6:c3:e0:b6:ea:c8:f2:d7:36:81:3a:e4:fa:62: 65:43:a9:d2:08:25:a7:58:2f:ee:0f:4f:d6:d9:90:31:c1:6b: 88:cc:37:ec:96:73:7a:03:37:26:b2:6b:aa:05:0b:da:f0:57: 08:40:76:69:d3:6d:08:66:23:ca:14:54:a8:eb:64:82:1a:d9: 9b:ce:5c:d0:8d:40:3e:0f:11:da:ef:cb:02:bf:5d:a6:55:52: 0a:6a:d0:e1:8a:fa:2b:35:bc:eb:22:31:55:f8:14:fb:00:28: 25:db:ce:2d:f5:26:b7:0f:f3:b5:2d:a7:48:ce:7c:8f:a1:bf: 1d:31:64:f7:39:91:f4:69:f5:e8:5e:c7:7d:ad:0c:6f:6b:ac: b0:9c:27:84:8c:98:91:58:b9:c7:d0:58:e2:c5:81:da:f4:0c: 2c:6a:35:b1:13:ec:e7:43:39:ea:29:1f:4d:00:f4:18:1a:e7: ab:c2:10:f9:36:97:90:c6:78:cc:d6:01:16:51:4d:88:1e:15: 6f:3a:56:1f:95:ba:93:8c:e7:fe:c4:7d:ef:19:35:61:b1:49: 93:f9:71:8e:5a:56:63:79:c9:5b:c1:40:16:c2:79:d5:3b:54: 94:b9:3e:6e:74:3c:50:95:a7:28:53:1a:7b:f1:37:2d:82:2a: c4:d4:4d:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwLoAiMsfcnpys/cJj7/dnQfXFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTEyMTgxMjQ3MjVaFw0yNTEyMjExNTI4MjVaMDMxMTAvBgNV BAMTKEYzNjJCMjgwNDFDMzlEQjc2OEYzNkJBMDI0NTU1NzlCMUQ3RUUzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9F/c6rFN7x5FVTaE+LT87wPA0 OCexHj7nAaOcl3U1U0h/UJ0Y+jl5Kd61UzPK0/IVjqtjoYD1QCgL++UVITGjmguA /RxpYFsVt0Zw3oXdxBwT44tu31Xm8yhxfY2eRnfbMmUCVMc2Fq7f7FoPrz2+dP4k +EvqPaXhTH/8E0nj4lK15zP8NLPGdwJR121NRX6ARu+V/pf2p9gqDFrvtZm8jojY HIypTJ8zcOqu6Nt7ShdGACmP+DUK9DMo5Xa11Rb2Es/09cUCIvHkVh4Xh5jkl5i9 s9MDhIvuTg1DaE5i+tmolQ0IVv40MPpn7MDYim0mdJ9jUIbvpAinXpr5StkXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU82KygEHDnbdo82ugJFVXmx1+4xwwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkqio7Ww+C26sjy1zaBOuT6YmVDqdIIJadY L+4PT9bZkDHBa4jMN+yWc3oDNyaya6oFC9rwVwhAdmnTbQhmI8oUVKjrZIIa2ZvO XNCNQD4PEdrvywK/XaZVUgpq0OGK+is1vOsiMVX4FPsAKCXbzi31JrcP87Utp0jO fI+hvx0xZPc5kfRp9ehex32tDG9rrLCcJ4SMmJFYucfQWOLFgdr0DCxqNbET7OdD OeopH00A9Bga56vCEPk2l5DGeMzWARZRTYgeFW86Vh+VupOM5/7Efe8ZNWGxSZP5 cY5aVmN5yVvBQBbCedU7VJS5Pm50PFCVpyhTGnvxNy2CKsTUTZQ= -----END CERTIFICATE-----Generated at Fri Dec 19 18:21:11 2025 by rpki-client