This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: 3iMnIlcg1RV6tFEzAebMxC1+qkoGCqPzv8FSyPR69T0= Subject key identifier: 31:86:27:F5:FB:A5:9C:2E:BA:FF:2C:4F:26:4A:67:9F:F1:EB:DB:2A Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 0AEA47B9AA1E0DCC46B315699D867999C06A6326 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 01D8 Signing time: Thu 18 Dec 2025 12:52:17 +0000 Manifest this update: Thu 18 Dec 2025 12:47:17 +0000 Manifest next update: Sun 21 Dec 2025 21:13:17 +0000 Files and hashes: 1: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) 2: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: KJBcxzna1Sdf4Z3z5OZgBn5Ib7elkK6g0XAXxdhyUSQ=) 3: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) 4: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: 9iQf5jzjsGjpaRVZVZWEAfHsPrDMUHsfL4t8OLKqVCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 21:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ea:47:b9:aa:1e:0d:cc:46:b3:15:69:9d:86:79:99:c0:6a:63:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Dec 18 12:47:17 2025 GMT Not After : Dec 21 21:13:17 2025 GMT Subject: CN=318627F5FBA59C2EBAFF2C4F264A679FF1EBDB2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:79:69:4c:69:75:03:fa:a7:38:cc:a9:f6: bd:2d:5b:56:26:78:d4:52:ea:46:6a:e1:40:5d:72: 33:c9:2e:3d:39:af:ea:80:e7:ce:fd:88:b7:f2:d8: 73:28:bc:ad:6d:69:3d:46:7b:ba:0f:90:7d:a6:1f: b1:fa:fc:61:8a:42:70:dc:f8:b7:57:90:06:32:14: 18:77:6d:73:61:80:8c:fa:a3:00:04:cd:9c:d0:8c: 68:27:24:b9:df:b7:4c:13:0b:64:37:3e:37:ba:98: d4:fc:97:1d:4f:be:fc:65:52:00:1f:63:e1:44:62: 03:a3:67:74:c3:e2:71:b6:32:43:d5:83:7e:6b:96: 7d:03:51:33:68:20:c9:b3:28:c7:28:f6:51:73:10: 73:5a:5f:37:ab:ce:c2:6e:12:7a:fb:56:d9:9d:ae: 4c:ce:40:47:02:c6:a6:a2:94:de:d8:ce:40:00:b2: d0:97:a3:f3:aa:28:04:bd:1d:f4:05:61:01:48:41: f1:00:24:4b:10:ee:f7:53:45:f1:8c:c6:1d:85:d9: 6b:33:6e:3c:bf:c0:13:37:d7:fd:68:39:c9:09:b7: a9:b4:bb:39:69:81:7c:8b:0a:9f:ba:1b:58:10:24: d7:82:55:79:0d:24:ab:86:c7:c9:14:df:18:75:dc: b7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:86:27:F5:FB:A5:9C:2E:BA:FF:2C:4F:26:4A:67:9F:F1:EB:DB:2A X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:47:e4:2d:0f:9e:0a:80:a6:25:a6:35:6b:2f:f0:ca:09:b1: d7:cd:89:33:d3:5e:9d:39:5c:47:70:83:56:7b:05:9f:76:54: 83:ad:1d:07:78:0a:1c:09:a4:9c:c7:23:15:ac:d6:47:2c:ec: 7e:fb:d4:f7:a6:f8:f6:b8:48:55:6f:8f:2e:f1:aa:9a:5b:62: 74:f4:83:01:73:3d:fa:f2:95:d4:5c:1b:f7:22:a7:7b:fa:f2: 1f:bb:52:20:6c:55:82:7c:67:31:f2:ff:b7:b3:1a:fd:e8:dc: aa:25:a8:65:fd:5e:f8:e5:3f:32:69:13:d0:49:56:2d:68:4c: 09:ef:17:7d:ac:54:72:50:d3:c0:74:24:a7:97:b8:db:20:1c: 9f:8c:19:1e:ef:ec:c4:27:a3:3c:32:02:1d:78:7a:e8:8c:2f: 4a:28:17:1a:bb:d5:d0:26:1b:54:92:c5:4c:b5:c3:6b:2b:17: 52:57:3c:6e:ad:b0:a6:f2:7b:0f:a9:10:1b:6b:d8:6c:e5:14: e4:53:67:79:6d:dd:b7:1c:e7:da:56:93:80:48:7d:5f:32:cc: c4:c5:b8:37:83:9c:b1:d8:b1:68:9c:6a:f2:99:3e:90:f7:1b: 65:91:73:11:6f:07:1b:2e:aa:88:9d:fa:a0:4a:e6:e7:aa:c4: c3:ba:b2:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCupHuaoeDcxGsxVpnYZ5mcBqYyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNTEyMTgxMjQ3MTdaFw0yNTEyMjEyMTEzMTdaMDMxMTAvBgNV BAMTKDMxODYyN0Y1RkJBNTlDMkVCQUZGMkM0RjI2NEE2NzlGRjFFQkRCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VXlpTGl1A/qnOMyp9r0tW1Ym eNRS6kZq4UBdcjPJLj05r+qA5879iLfy2HMovK1taT1Ge7oPkH2mH7H6/GGKQnDc +LdXkAYyFBh3bXNhgIz6owAEzZzQjGgnJLnft0wTC2Q3Pje6mNT8lx1PvvxlUgAf Y+FEYgOjZ3TD4nG2MkPVg35rln0DUTNoIMmzKMco9lFzEHNaXzerzsJuEnr7Vtmd rkzOQEcCxqailN7YzkAAstCXo/OqKAS9HfQFYQFIQfEAJEsQ7vdTRfGMxh2F2Wsz bjy/wBM31/1oOckJt6m0uzlpgXyLCp+6G1gQJNeCVXkNJKuGx8kU3xh13Ld5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMYYn9fulnC66/yxPJkpnn/Hr2yowHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9H5C0PngqApiWmNWsv8MoJsdfNiTPTXp05 XEdwg1Z7BZ92VIOtHQd4ChwJpJzHIxWs1kcs7H771Pem+Pa4SFVvjy7xqppbYnT0 gwFzPfryldRcG/cip3v68h+7UiBsVYJ8ZzHy/7ezGv3o3KolqGX9XvjlPzJpE9BJ Vi1oTAnvF32sVHJQ08B0JKeXuNsgHJ+MGR7v7MQnozwyAh14euiML0ooFxq71dAm G1SSxUy1w2srF1JXPG6tsKbyew+pEBtr2GzlFORTZ3lt3bcc59pWk4BIfV8yzMTF uDeDnLHYsWicavKZPpD3G2WRcxFvBxsuqoid+qBK5ueqxMO6ssQ= -----END CERTIFICATE-----Generated at Fri Dec 19 18:17:07 2025 by rpki-client