This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: QbrJlEcGygxxfrrYIRipzhl053oggy3Or1VQZNahMV4= Subject key identifier: B7:F4:6F:16:34:15:F6:88:07:DF:2A:1F:60:8C:51:99:F8:28:F8:C8 Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 393F915883AB86DCE43E33917D801005F51FA377 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 01D9 Signing time: Sat 20 Dec 2025 21:23:25 +0000 Manifest this update: Sat 20 Dec 2025 21:18:25 +0000 Manifest next update: Tue 23 Dec 2025 22:36:25 +0000 Files and hashes: 1: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: qt3vEkdidL2ZmsxB3kV8XDFt0peiqb0nN4gdSJi9z6U=) 2: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) 3: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) 4: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: KJBcxzna1Sdf4Z3z5OZgBn5Ib7elkK6g0XAXxdhyUSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 22:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3f:91:58:83:ab:86:dc:e4:3e:33:91:7d:80:10:05:f5:1f:a3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Dec 20 21:18:25 2025 GMT Not After : Dec 23 22:36:25 2025 GMT Subject: CN=B7F46F163415F68807DF2A1F608C5199F828F8C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:4c:94:b5:db:43:ad:17:f2:9b:fb:6b:e0: 2e:71:26:8c:d5:3f:83:0d:a9:04:6f:98:1e:6c:db: 33:31:67:fd:53:c4:8f:50:d1:74:c9:ad:e3:8f:5e: fe:c1:bc:be:7e:a0:17:60:b3:17:be:21:38:94:68: 8a:4b:cb:14:a1:46:72:5e:9c:b9:1e:02:d7:ad:c2: ad:29:29:1c:b9:84:85:5f:c8:7d:6e:41:45:f3:19: de:93:30:3e:85:73:f3:39:84:ee:9f:cf:61:c9:6b: 3a:4a:54:40:20:8a:dc:cb:1b:dd:41:57:26:13:0e: 46:c3:29:9a:45:b7:35:97:b2:b8:98:d5:74:6a:b2: 1f:fd:c9:1a:92:4b:f5:31:53:28:e6:3a:6f:ca:38: 47:ce:d8:1d:3b:00:b7:b8:4a:d8:b8:91:30:3c:ec: 96:9d:18:22:54:b1:59:fa:4d:bd:37:86:ca:13:6d: 54:8c:38:61:aa:8c:97:75:7f:22:fa:56:d9:80:94: e1:49:36:7f:f0:f3:69:29:0b:b5:54:64:d7:62:4f: 2d:7b:69:eb:2b:75:3f:cc:c6:09:35:87:c5:22:89: e0:3b:72:d8:29:bc:ce:15:9a:13:54:ad:97:d9:30: 15:b6:a4:3d:e5:18:ec:24:84:57:25:8a:e5:a6:ae: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F4:6F:16:34:15:F6:88:07:DF:2A:1F:60:8C:51:99:F8:28:F8:C8 X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b9:f2:95:10:0a:f2:68:53:6a:9f:7c:9a:6c:1d:01:a4:88: cd:81:63:da:75:14:1d:9e:12:f3:f6:86:c1:12:67:bf:e1:eb: 0a:fc:44:33:fb:f4:9d:74:05:8b:1d:f2:52:61:f9:14:7b:51: 84:bb:6e:14:54:39:1d:d4:a6:99:85:57:ef:31:40:af:da:63: e3:2a:a5:e5:7f:e4:a2:22:d5:4e:4d:78:a7:1b:e7:5b:62:67: be:f2:d7:2d:fc:78:c9:07:15:95:fb:cd:a1:57:6a:cb:71:38: c1:56:e9:57:7e:79:22:c4:02:8e:7c:71:be:92:aa:9e:4a:2b: 8b:45:0c:f2:cc:d4:d6:fe:e6:a2:05:d3:8e:c1:d7:0a:3f:84: b5:4b:35:03:70:d5:c0:84:6a:9b:ad:90:88:fb:b7:12:55:6b: e6:7c:04:62:25:7d:53:9c:29:b0:19:f7:06:d4:23:9f:dc:97: 79:61:fb:8b:b9:81:42:68:2e:a2:57:68:b7:67:73:2e:89:fe: 01:8f:1c:21:97:e4:fa:7f:c9:5f:ea:e4:09:d1:32:15:e7:e6: b6:ba:e8:f5:89:53:df:18:b4:c6:37:6c:0d:99:65:89:63:21: 67:8e:6e:80:66:28:b0:3c:c8:8f:96:bc:d2:67:f4:16:61:fd: 32:6f:0a:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOT+RWIOrhtzkPjORfYAQBfUfo3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNTEyMjAyMTE4MjVaFw0yNTEyMjMyMjM2MjVaMDMxMTAvBgNV BAMTKEI3RjQ2RjE2MzQxNUY2ODgwN0RGMkExRjYwOEM1MTk5RjgyOEY4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7UyUtdtDrRfym/tr4C5xJozV P4MNqQRvmB5s2zMxZ/1TxI9Q0XTJreOPXv7BvL5+oBdgsxe+ITiUaIpLyxShRnJe nLkeAtetwq0pKRy5hIVfyH1uQUXzGd6TMD6Fc/M5hO6fz2HJazpKVEAgitzLG91B VyYTDkbDKZpFtzWXsriY1XRqsh/9yRqSS/UxUyjmOm/KOEfO2B07ALe4Sti4kTA8 7JadGCJUsVn6Tb03hsoTbVSMOGGqjJd1fyL6VtmAlOFJNn/w82kpC7VUZNdiTy17 aesrdT/Mxgk1h8UiieA7ctgpvM4VmhNUrZfZMBW2pD3lGOwkhFcliuWmruDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/RvFjQV9ogH3yofYIxRmfgo+MgwHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu58pUQCvJoU2qffJpsHQGkiM2BY9p1FB2e EvP2hsESZ7/h6wr8RDP79J10BYsd8lJh+RR7UYS7bhRUOR3UppmFV+8xQK/aY+Mq peV/5KIi1U5NeKcb51tiZ77y1y38eMkHFZX7zaFXastxOMFW6Vd+eSLEAo58cb6S qp5KK4tFDPLM1Nb+5qIF047B1wo/hLVLNQNw1cCEaputkIj7txJVa+Z8BGIlfVOc KbAZ9wbUI5/cl3lh+4u5gUJoLqJXaLdncy6J/gGPHCGX5Pp/yV/q5AnRMhXn5ra6 6PWJU98YtMY3bA2ZZYljIWeOboBmKLA8yI+WvNJn9BZh/TJvCho= -----END CERTIFICATE-----Generated at Sun Dec 21 15:45:37 2025 by rpki-client