This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json) Hash identifier: ydvUkHDvAHDrSyYXvNRykvJQeQ9kTSmRPTo+rrRQlnc= Subject key identifier: 57:04:C1:67:B7:D0:F2:70:D2:E0:69:FD:0B:DC:BD:90:C1:48:5A:7B Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 40DBE626556AF64842824FF5DE2CA814DB6DACAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft Manifest number: 0536 Signing time: Sat 20 Dec 2025 13:22:58 +0000 Manifest this update: Sat 20 Dec 2025 13:17:58 +0000 Manifest next update: Tue 23 Dec 2025 21:16:58 +0000 Files and hashes: 1: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: AgqSIkRIGOrQPc+1mZW5lGFc3zRhyUQtTv3vz8FdAPU=) 2: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: AI/USbQ/a0LFBdjZWtV22hxC6HEFmmDia8w1dNa/lbM=) 3: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: bVu2SaAa9IWvlQ6o6+veKHD0ZA7xlveBNCWEZ2Ja1Z4=) 4: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: 5XJDl4bqg1sEd47+FegtKOgXuH6dVUJWFUafgVKWqP8=) 5: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: kZ6+BhGljQylz/AhW+5O41yNHq5oDRG+mIs3e+fq18E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 21:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:db:e6:26:55:6a:f6:48:42:82:4f:f5:de:2c:a8:14:db:6d:ac:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Dec 20 13:17:58 2025 GMT Not After : Dec 23 21:16:58 2025 GMT Subject: CN=5704C167B7D0F270D2E069FD0BDCBD90C1485A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:54:c0:dd:2e:8a:ad:6c:65:b1:7e:69:ba: 0e:86:a8:c8:8d:ca:3f:70:1e:d3:7d:a7:d4:fb:3f: f0:2a:9b:9a:b2:83:2d:c4:f1:23:68:b4:00:09:5f: 5a:1b:d0:ba:84:a0:84:33:0a:10:dd:8c:15:39:4c: cf:20:61:f8:4a:fb:6f:92:e2:a0:4b:e7:b6:51:23: 98:5f:54:4d:79:af:8d:41:d4:2d:11:ce:ea:e3:a2: 39:52:82:56:48:bf:de:c0:15:26:e3:16:34:ad:2e: 7e:57:67:d1:ae:1f:97:50:c5:18:53:6e:45:70:ca: 8e:5a:a0:65:fa:3a:62:c8:4a:bb:57:b3:e3:ba:4d: 54:42:5d:27:a6:e5:a4:b5:73:6a:31:d3:48:df:5a: e9:a0:7b:b7:31:07:f7:b7:13:91:88:b0:b4:df:a1: 31:f4:3c:58:58:88:9e:a2:c9:25:4d:c1:b6:6a:f3: 3f:1e:b0:0e:fa:40:35:e9:6b:a2:6a:81:49:3d:0d: 4a:f9:34:ec:4a:a5:f4:19:11:fc:34:5a:e1:c8:66: 8f:e8:d5:51:02:f9:1f:83:49:4d:47:da:01:1f:fc: c4:e7:80:64:b8:3d:9f:b4:6a:77:4b:e4:70:75:f8: 0a:ee:f9:e1:fd:66:b3:cf:cc:5c:41:13:b4:66:5f: fe:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:04:C1:67:B7:D0:F2:70:D2:E0:69:FD:0B:DC:BD:90:C1:48:5A:7B X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1d:f0:16:a0:1f:16:c6:6f:db:a4:97:c8:19:0f:4f:b0:67: 14:bd:b8:1c:d9:41:c7:bd:65:ae:52:b7:86:a6:4a:e1:e7:73: 10:8f:48:73:a5:ff:1b:b5:1b:33:fb:38:08:02:92:31:fc:dd: 27:41:39:53:6d:a6:b3:44:d4:ad:e4:16:63:18:5e:ba:5d:6e: a5:3e:d5:c8:a0:a3:27:61:1b:8f:43:93:03:92:05:41:dd:79: 1b:07:89:dd:a8:ec:21:d3:f1:ff:50:3d:59:c8:19:f2:bd:6c: e2:8d:06:31:2b:06:13:61:f5:54:b8:21:b5:86:88:5c:d7:28: 0e:91:05:f2:cc:b7:3b:ad:06:50:64:ed:6d:60:1d:13:06:26: b7:37:98:36:d8:f8:c7:9f:1d:27:1d:be:25:75:2f:4a:d1:84: 54:12:41:78:7e:ed:c4:a8:5a:d6:d3:fc:04:51:5b:bf:4d:62: 0d:65:69:93:c1:d4:13:40:ff:aa:1b:d3:bd:e4:9d:24:bf:ef: a3:ea:f0:20:06:c9:72:48:40:9b:b8:47:f1:63:f9:fd:e8:ff: 30:1d:0f:32:c3:d1:2b:09:e2:a6:ab:c6:59:60:bc:4e:d0:4e: e1:4b:48:6e:c4:ad:1b:de:39:fa:fd:ab:92:7e:da:92:8d:51: 3a:25:e3:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNvmJlVq9khCgk/13iyoFNttrK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNTEyMjAxMzE3NThaFw0yNTEyMjMyMTE2NThaMDMxMTAvBgNV BAMTKDU3MDRDMTY3QjdEMEYyNzBEMkUwNjlGRDBCRENCRDkwQzE0ODVBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzVTA3S6KrWxlsX5pug6GqMiN yj9wHtN9p9T7P/Aqm5qygy3E8SNotAAJX1ob0LqEoIQzChDdjBU5TM8gYfhK+2+S 4qBL57ZRI5hfVE15r41B1C0RzurjojlSglZIv97AFSbjFjStLn5XZ9GuH5dQxRhT bkVwyo5aoGX6OmLISrtXs+O6TVRCXSem5aS1c2ox00jfWumge7cxB/e3E5GIsLTf oTH0PFhYiJ6iySVNwbZq8z8esA76QDXpa6JqgUk9DUr5NOxKpfQZEfw0WuHIZo/o 1VEC+R+DSU1H2gEf/MTngGS4PZ+0andL5HB1+Aru+eH9ZrPPzFxBE7RmX/4lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVwTBZ7fQ8nDS4Gn9C9y9kMFIWnswHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhD MEQxQ0UzQjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYd8BagHxbGb9ukl8gZD0+wZxS9uBzZQce9 Za5St4amSuHncxCPSHOl/xu1GzP7OAgCkjH83SdBOVNtprNE1K3kFmMYXrpdbqU+ 1cigoydhG49DkwOSBUHdeRsHid2o7CHT8f9QPVnIGfK9bOKNBjErBhNh9VS4IbWG iFzXKA6RBfLMtzutBlBk7W1gHRMGJrc3mDbY+MefHScdviV1L0rRhFQSQXh+7cSo WtbT/ARRW79NYg1laZPB1BNA/6ob073knSS/76Pq8CAGyXJIQJu4R/Fj+f3o/zAd DzLD0SsJ4qarxllgvE7QTuFLSG7ErRveOfr9q5J+2pKNUTol4/U= -----END CERTIFICATE-----Generated at Sun Dec 21 13:39:00 2025 by rpki-client