This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft File: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft (raw, json) Hash identifier: PowB2UvcEJHFDCpnYut9699NIe6XYfqNhb8s0RSZhuc= Subject key identifier: 0F:68:A0:8F:F4:60:51:36:6A:3E:CE:61:0C:A8:5B:DE:F2:ED:B2:AA Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A Certificate issuer: /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Certificate serial: 0EE43B3EE1CBCEF698A1D4268B3B9DF437C0F309 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft Manifest number: C2 Signing time: Thu 18 Dec 2025 06:01:51 +0000 Manifest this update: Thu 18 Dec 2025 05:56:51 +0000 Manifest next update: Sun 21 Dec 2025 16:03:51 +0000 Files and hashes: 1: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl (hash: b1A/iZi5Q5nfiXWGY/JI9R+obJM5P7QcR5ImHe2p+nU=) 2: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: qv3evecT8eZzX3bUVJHE05QFEmJ8YwvyFd0dQ0gXUtc=) 3: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: Lj0hcqeyTQssBrCkzs3hGKwcyyQ8e4rZksVRkWRzAgo=) 4: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: d7SZXhA3MtIvsZoPKAEFGlIFwwbXCkHUGIXlm7+3ws0=) 5: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: jCMcTRKT9AZJevifSXh6jid95wyd/fIpOWD7LnrfE5Y=) 6: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: RRjpYe+sCryGtP2L5KYhg6i9BBg+veNKIMjpWUEXvlQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 16:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e4:3b:3e:e1:cb:ce:f6:98:a1:d4:26:8b:3b:9d:f4:37:c0:f3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Validity Not Before: Dec 18 05:56:51 2025 GMT Not After : Dec 21 16:03:51 2025 GMT Subject: CN=0F68A08FF46051366A3ECE610CA85BDEF2EDB2AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fe:3f:6d:7c:bd:09:09:91:2b:89:2b:be:94: 3c:be:fb:ff:1e:04:e3:72:c6:a3:71:9b:8b:ed:a6: 8e:8a:c3:54:fe:e0:0e:b5:aa:c2:5f:e2:cc:67:aa: 1e:a5:a0:ca:9b:89:9c:e8:e0:7c:b4:11:3e:ec:0f: 89:6e:29:99:a9:98:d7:b6:16:f6:03:6b:24:b1:b2: 92:58:fa:4d:60:13:32:4f:64:3b:93:e0:fb:d7:d8: 7b:2c:b2:63:41:19:c7:da:f9:c0:96:d5:7a:41:2a: f1:83:3e:49:b7:01:9b:b7:38:22:ae:98:46:e6:de: 7d:49:75:d6:4c:72:19:1f:ff:27:a6:7d:85:e9:93: 97:7f:6a:21:a4:e2:28:0d:8b:78:25:7d:3e:40:a3: 45:7c:11:7f:38:ca:11:7c:90:5b:2a:66:80:3d:bc: 68:b7:58:86:af:fe:49:1e:b5:78:1a:c9:44:1f:85: 7f:42:7c:2d:70:41:12:80:e7:a9:f6:3e:4b:10:4e: 1f:3f:45:f8:95:72:17:3a:f7:14:e1:a8:a7:01:8e: fa:f5:77:a3:77:72:58:9e:3e:2f:87:5a:6a:04:af: 48:5b:47:e4:6e:cb:33:03:7b:66:18:58:73:23:5f: db:3b:f8:92:27:05:31:98:3f:4c:eb:88:86:93:fd: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:68:A0:8F:F4:60:51:36:6A:3E:CE:61:0C:A8:5B:DE:F2:ED:B2:AA X509v3 Authority Key Identifier: keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e6:88:52:58:86:cf:44:a0:8a:75:b6:58:e3:82:66:a0:5c: 81:d2:9b:cc:c7:7c:52:9a:03:fe:cd:e2:80:7e:38:aa:c5:a6: 46:ac:a7:1e:b5:8e:fb:b8:d3:34:92:37:6a:78:df:7a:30:8f: b0:5a:1e:38:31:58:07:4d:11:bb:a6:4d:7a:70:c9:39:25:7c: 92:72:73:3c:44:cf:9d:5a:13:79:16:56:7b:29:9c:c9:51:65: e7:c2:5a:ad:5f:ac:f1:ec:f9:b8:a2:2a:c6:5a:98:f1:6f:42: 5d:2c:5f:91:c7:6c:11:9c:a8:bb:1a:fc:36:7f:cb:b2:84:1d: 41:11:59:61:07:38:a8:12:9d:d7:0d:af:f9:6d:53:42:70:13: e7:bb:82:8d:e3:43:86:1f:1f:81:a9:49:98:bf:72:96:83:23: 9f:28:3d:96:43:11:bc:e9:6f:ef:e8:76:b1:23:c9:17:1e:25: 52:a1:8a:3e:79:03:83:fb:aa:44:3e:df:31:90:c9:9b:e4:4c: 18:ce:05:25:18:6c:0c:e7:59:5e:11:78:11:ed:48:75:c6:3d: 11:20:97:35:40:c4:53:84:35:b1:85:3f:e6:3b:61:60:9d:69: 10:0d:13:8c:6f:e7:8e:e1:0c:10:9b:36:ad:d5:87:53:5e:90: 5d:a4:2b:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuQ7PuHLzvaYodQmizud9DfA8wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0RE QzM0RUE2QTAeFw0yNTEyMTgwNTU2NTFaFw0yNTEyMjExNjAzNTFaMDMxMTAvBgNV BAMTKDBGNjhBMDhGRjQ2MDUxMzY2QTNFQ0U2MTBDQTg1QkRFRjJFREIyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/j9tfL0JCZEriSu+lDy++/8e BONyxqNxm4vtpo6Kw1T+4A61qsJf4sxnqh6loMqbiZzo4Hy0ET7sD4luKZmpmNe2 FvYDaySxspJY+k1gEzJPZDuT4PvX2HsssmNBGcfa+cCW1XpBKvGDPkm3AZu3OCKu mEbm3n1JddZMchkf/yemfYXpk5d/aiGk4igNi3glfT5Ao0V8EX84yhF8kFsqZoA9 vGi3WIav/kketXgayUQfhX9CfC1wQRKA56n2PksQTh8/RfiVchc69xThqKcBjvr1 d6N3cliePi+HWmoEr0hbR+RuyzMDe2YYWHMjX9s7+JInBTGYP0zriIaT/WmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD2igj/RgUTZqPs5hDKhb3vLtsqowHwYDVR0j BBgwFoAUSFALAMYdobDsRITgeR27zdw06mowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzI3ODc0Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC80ODUwMEIwMEM2 MURBMUIwRUM0NDg0RTA3OTFEQkJDRERDMzRFQTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0REQzM0 RUE2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMyNzg3NDctNmFjNy00Zjg3LTli MmItMjEzNTkyOTRmMDM0LzAvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJC Q0REQzM0RUE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/miFJYhs9EoIp1tljjgmagXIHSm8zHfFKa A/7N4oB+OKrFpkaspx61jvu40zSSN2p433owj7BaHjgxWAdNEbumTXpwyTklfJJy czxEz51aE3kWVnspnMlRZefCWq1frPHs+biiKsZamPFvQl0sX5HHbBGcqLsa/DZ/ y7KEHUERWWEHOKgSndcNr/ltU0JwE+e7go3jQ4YfH4GpSZi/cpaDI58oPZZDEbzp b+/odrEjyRceJVKhij55A4P7qkQ+3zGQyZvkTBjOBSUYbAznWV4ReBHtSHXGPREg lzVAxFOENbGFP+Y7YWCdaRANE4xv547hDBCbNq3Vh1NekF2kK6A= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:48 2025 by rpki-client