This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: wTH87p58udo/yb3rOdIM/kM+zhUzc/hJhWN5Wa/3P2U= Subject key identifier: E9:D1:41:75:9C:95:FD:21:7D:E8:2E:C9:E1:15:22:6A:3F:4F:94:0A Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 4047AA1029BD4766244B6B3772CCC4FE851AE277 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 03A4 Signing time: Fri 19 Dec 2025 06:02:53 +0000 Manifest this update: Fri 19 Dec 2025 05:57:53 +0000 Manifest next update: Mon 22 Dec 2025 07:13:53 +0000 Files and hashes: 1: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: zc3IPNPCX+nbybYVIUAX8Gt0ibVGwsozWdQ0NyL2vOs=) 2: 3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (hash: Kb0M/Ho3VT/nqDiJsvCx89Y+HDOUAdoV9jho+WllLB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:47:aa:10:29:bd:47:66:24:4b:6b:37:72:cc:c4:fe:85:1a:e2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Dec 19 05:57:53 2025 GMT Not After : Dec 22 07:13:53 2025 GMT Subject: CN=E9D141759C95FD217DE82EC9E115226A3F4F940A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:02:3a:7f:e6:ed:f1:a1:04:cc:81:f9:0a: f4:aa:55:99:ca:13:5e:3b:81:de:fd:74:a9:4f:89: 30:1b:fc:3c:83:4d:fe:7d:02:37:36:58:04:58:3a: c2:d4:20:a4:4f:f5:b0:0c:a0:41:83:a7:b2:2f:cf: 7f:7e:65:04:91:96:c7:13:21:0c:be:77:61:3b:36: 56:84:48:4f:90:91:fa:d9:f1:80:37:35:29:0d:f6: d4:3c:b9:de:9e:0f:8e:90:da:55:c2:1a:42:5b:17: 76:9d:29:a1:da:93:45:e6:c5:72:1a:0b:d9:15:b0: b8:30:0a:14:db:20:9b:41:82:28:e4:7f:d8:50:d4: 42:af:57:ef:1e:5a:5a:87:42:ee:c7:83:80:ac:7f: 3f:d4:8d:d3:87:00:63:19:0f:a1:c0:2a:b9:cd:79: d0:f2:d1:e3:03:18:e7:82:c6:5f:5c:17:ae:8c:70: f6:60:fc:e2:22:55:14:6e:65:b8:e9:20:5e:8c:ca: 33:76:3c:b5:df:7e:bb:a2:e2:a6:ab:64:b4:a5:21: 00:30:18:6d:c9:5f:92:b1:8f:97:c4:23:22:c9:2a: b8:fa:54:3d:2f:51:21:4f:0d:49:00:2b:ac:e8:68: 09:fa:dc:e9:f2:a8:75:cf:2e:02:d6:d0:2b:aa:b5: b4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D1:41:75:9C:95:FD:21:7D:E8:2E:C9:E1:15:22:6A:3F:4F:94:0A X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f3:06:9d:32:92:62:f1:6e:16:56:cc:6f:99:9f:f1:11:e1: dc:2c:6e:da:96:76:f9:2f:d1:95:42:85:6f:1f:6c:c9:a8:f3: 14:de:d2:86:6a:22:a6:72:8b:33:2a:1a:2f:53:14:5c:80:c8: 50:44:ac:34:ae:98:af:26:21:47:99:d7:b4:20:ee:84:fd:28: c9:c1:bc:40:b2:d3:a6:ce:af:88:8c:5a:46:c3:24:4b:ad:44: fe:6b:2e:0c:7b:30:d1:90:5a:80:e3:26:c3:e5:4d:cd:48:a0: 13:c2:20:ee:b3:bb:32:bf:9e:04:39:b8:b0:0f:93:96:52:b2: 1f:dc:0d:53:4e:ea:56:64:e1:fe:c7:5f:eb:14:42:a1:f4:13: 3e:bd:19:fb:4f:22:b5:3d:7d:3f:f8:49:07:9c:52:b1:f8:f0: 34:64:8d:52:d6:e1:b9:91:95:21:37:5f:18:20:82:c7:24:df: 06:e9:ac:3b:c1:1c:1a:af:b7:e1:af:87:8b:1b:4a:38:55:54: a9:6e:31:a0:91:cd:57:3f:66:a7:7f:c8:f0:6a:06:4f:75:b2: 88:f0:9f:a5:35:bc:2c:61:ee:c8:b7:a2:06:26:70:33:a5:d1: 24:b7:56:ae:39:ad:ba:7d:82:7c:fd:e3:70:90:6d:4f:7a:84: f0:80:f6:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEeqECm9R2YkS2s3cszE/oUa4ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTEyMTkwNTU3NTNaFw0yNTEyMjIwNzEzNTNaMDMxMTAvBgNV BAMTKEU5RDE0MTc1OUM5NUZEMjE3REU4MkVDOUUxMTUyMjZBM0Y0Rjk0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAAI6f+bt8aEEzIH5CvSqVZnK E147gd79dKlPiTAb/DyDTf59Ajc2WARYOsLUIKRP9bAMoEGDp7Ivz39+ZQSRlscT IQy+d2E7NlaESE+QkfrZ8YA3NSkN9tQ8ud6eD46Q2lXCGkJbF3adKaHak0XmxXIa C9kVsLgwChTbIJtBgijkf9hQ1EKvV+8eWlqHQu7Hg4Csfz/UjdOHAGMZD6HAKrnN edDy0eMDGOeCxl9cF66McPZg/OIiVRRuZbjpIF6MyjN2PLXffrui4qarZLSlIQAw GG3JX5Kxj5fEIyLJKrj6VD0vUSFPDUkAK6zoaAn63OnyqHXPLgLW0CuqtbQxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6dFBdZyV/SF96C7J4RUiaj9PlAowHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjzBp0ykmLxbhZWzG+Zn/ER4dwsbtqWdvkv 0ZVChW8fbMmo8xTe0oZqIqZyizMqGi9TFFyAyFBErDSumK8mIUeZ17Qg7oT9KMnB vECy06bOr4iMWkbDJEutRP5rLgx7MNGQWoDjJsPlTc1IoBPCIO6zuzK/ngQ5uLAP k5ZSsh/cDVNO6lZk4f7HX+sUQqH0Ez69GftPIrU9fT/4SQecUrH48DRkjVLW4bmR lSE3Xxgggsck3wbprDvBHBqvt+Gvh4sbSjhVVKluMaCRzVc/Zqd/yPBqBk91sojw n6U1vCxh7si3ogYmcDOl0SS3Vq45rbp9gnz943CQbU96hPCA9s4= -----END CERTIFICATE-----Generated at Sat Dec 20 14:06:35 2025 by rpki-client