This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json) Hash identifier: 3FlLcgJ3xytn4m4DlX5eP31WHHkogAftq6a8C4lYHWM= Subject key identifier: BA:17:E3:39:D6:74:AE:26:BE:73:98:2C:01:A9:EC:80:17:E5:4E:2E Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 54272689BA0251BEF55DED151D31E5B5F6CF28E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft Manifest number: EA Signing time: Tue 23 Dec 2025 23:24:30 +0000 Manifest this update: Tue 23 Dec 2025 23:19:30 +0000 Manifest next update: Fri 26 Dec 2025 23:32:30 +0000 Files and hashes: 1: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: loVyslr/h+TM0W5aQr4JactmzkZ+IiPdoKn69TKOvqY=) 2: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 23:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:27:26:89:ba:02:51:be:f5:5d:ed:15:1d:31:e5:b5:f6:cf:28:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Dec 23 23:19:30 2025 GMT Not After : Dec 26 23:32:30 2025 GMT Subject: CN=BA17E339D674AE26BE73982C01A9EC8017E54E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c5:9c:3e:6a:c1:14:f5:83:6f:15:b3:10:3f: da:8a:6a:e0:b8:81:73:3d:b7:c9:eb:1b:95:51:ca: 21:53:01:cf:74:73:da:7c:46:77:c4:fe:59:d7:cc: c3:0b:10:1d:a9:09:59:17:7c:50:93:a4:b4:52:18: fa:6c:68:61:6d:fe:88:7b:a5:c3:0d:ba:fa:5d:f1: 84:a6:6a:31:9e:ff:3f:1f:2d:ef:11:61:71:ce:fc: ca:81:37:32:0d:56:70:56:41:1f:58:f7:75:6a:47: 7d:92:71:99:6a:44:62:a3:f4:48:5d:6c:55:57:18: 3e:69:94:5b:d5:01:78:ee:40:42:70:e0:92:6b:9c: a3:ef:4a:92:3e:2a:a5:52:72:27:15:2b:a5:ea:4e: 8d:44:d4:ab:83:88:a6:2b:d8:7d:49:9c:f0:82:af: e5:5a:b2:b2:c4:db:f6:d9:d8:6f:4e:e1:9d:fe:bb: e9:2a:c5:76:e3:e1:d0:af:99:21:27:2c:2e:ce:b5: 71:5d:f3:16:e5:f8:60:6a:12:78:ea:98:8e:9b:da: ad:da:34:03:80:88:31:f5:d2:57:c9:24:f1:c2:b9: ba:d1:cf:ef:3b:f4:2f:b6:a2:b9:63:96:d0:b2:7c: ca:9b:49:49:b1:ea:92:02:d2:9d:63:4c:f5:33:18: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:17:E3:39:D6:74:AE:26:BE:73:98:2C:01:A9:EC:80:17:E5:4E:2E X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c0:bc:ab:9e:9d:ff:07:70:25:08:42:a0:61:39:bc:3b:95: 30:1a:88:dd:0c:d9:b1:76:21:34:6e:2b:54:e7:4e:66:c4:46: 14:f4:d9:35:c7:f4:c1:3e:47:8d:02:ce:81:05:f0:4a:65:1a: e5:a7:cc:aa:51:8e:23:e7:6e:a6:44:73:e8:98:76:3d:7b:77: 13:42:a2:1d:f9:cb:e0:f6:7c:95:8b:c0:c3:88:52:b1:3d:82: 2b:53:de:e5:56:46:09:90:0a:7b:37:ac:39:eb:56:f7:7e:d4: c9:a5:12:fe:ad:b5:0b:58:f1:da:0a:da:0a:03:d7:cb:13:47: 2b:88:c8:44:80:36:53:8a:97:4b:75:0a:69:7a:60:d7:a4:60: be:0a:54:41:58:cd:c6:f4:57:72:e6:82:83:3b:a8:83:09:03: f0:40:92:5e:ed:c3:55:bf:50:b7:5a:55:dc:46:be:d7:fb:97: ef:a0:ac:28:d8:39:ec:0b:0a:4f:24:ba:47:42:51:71:1a:6a: 84:14:6c:37:c2:2f:e6:95:64:72:80:31:fe:85:12:41:62:36: cf:3e:90:ac:9e:9a:a1:7d:34:13:4e:92:41:f3:93:94:16:e0: c5:2d:24:45:9b:93:cf:cb:a4:f3:be:fb:5d:80:72:ed:e6:1a: 59:36:73:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCcmiboCUb71Xe0VHTHltfbPKOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNTEyMjMyMzE5MzBaFw0yNTEyMjYyMzMyMzBaMDMxMTAvBgNV BAMTKEJBMTdFMzM5RDY3NEFFMjZCRTczOTgyQzAxQTlFQzgwMTdFNTRFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDixZw+asEU9YNvFbMQP9qKauC4 gXM9t8nrG5VRyiFTAc90c9p8RnfE/lnXzMMLEB2pCVkXfFCTpLRSGPpsaGFt/oh7 pcMNuvpd8YSmajGe/z8fLe8RYXHO/MqBNzINVnBWQR9Y93VqR32ScZlqRGKj9Ehd bFVXGD5plFvVAXjuQEJw4JJrnKPvSpI+KqVScicVK6XqTo1E1KuDiKYr2H1JnPCC r+VasrLE2/bZ2G9O4Z3+u+kqxXbj4dCvmSEnLC7OtXFd8xbl+GBqEnjqmI6b2q3a NAOAiDH10lfJJPHCubrRz+879C+2orljltCyfMqbSUmx6pIC0p1jTPUzGDn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuhfjOdZ0ria+c5gsAansgBflTi4wHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErAvKuenf8HcCUIQqBhObw7lTAaiN0M2bF2 ITRuK1TnTmbERhT02TXH9ME+R40CzoEF8EplGuWnzKpRjiPnbqZEc+iYdj17dxNC oh35y+D2fJWLwMOIUrE9gitT3uVWRgmQCns3rDnrVvd+1MmlEv6ttQtY8doK2goD 18sTRyuIyESANlOKl0t1Cml6YNekYL4KVEFYzcb0V3LmgoM7qIMJA/BAkl7tw1W/ ULdaVdxGvtf7l++grCjYOewLCk8kukdCUXEaaoQUbDfCL+aVZHKAMf6FEkFiNs8+ kKyemqF9NBNOkkHzk5QW4MUtJEWbk8/LpPO++12Acu3mGlk2c1g= -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:19 2025 by rpki-client