This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: CCx1GXJ5usZU5qtD2LgcCJGiWtmLysnMakCwhAmgQzI= Subject key identifier: FD:84:6E:6F:B5:73:9E:C0:86:81:4B:8D:3A:07:F2:30:0E:41:42:A2 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 327D39711A0122649AB86EBA2140E87A1413C722 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01D5 Signing time: Tue 23 Dec 2025 17:52:13 +0000 Manifest this update: Tue 23 Dec 2025 17:47:13 +0000 Manifest next update: Sat 27 Dec 2025 03:34:13 +0000 Files and hashes: 1: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: 0CDe56tzkDm/PSwEbXZpJY/qSqwedgDcq5LXPMqjdKg=) 2: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: WvA2JFm1OCiObbV4owSHIvkJpV0e6REQe/TCSDG98G4=) 3: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: EWZ8aolNNLiVVbkuT7UicoQ0CTjjE+TbqDmkXpjzrr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7d:39:71:1a:01:22:64:9a:b8:6e:ba:21:40:e8:7a:14:13:c7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Dec 23 17:47:13 2025 GMT Not After : Dec 27 03:34:13 2025 GMT Subject: CN=FD846E6FB5739EC086814B8D3A07F2300E4142A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4b:ce:3b:e6:6f:ac:9f:f9:12:9a:83:43:c5: 23:b9:6f:a3:d6:4a:bc:95:ec:1f:29:d0:44:57:4a: 56:21:06:c1:9b:96:bb:80:8f:3f:a9:1c:2b:fa:75: 9f:7b:1a:4e:1b:58:11:db:dd:91:22:b8:83:1b:26: c4:54:38:73:b5:a2:5c:18:55:a3:dd:e2:dc:8d:a3: 0f:4d:f5:1c:40:89:a6:1b:bc:34:7a:69:02:e0:d9: 87:d7:07:12:b4:a1:ef:47:ed:ce:b0:79:9a:4c:ef: 30:03:89:55:6d:62:85:63:ad:ec:6b:e9:2a:14:a9: 84:56:82:71:23:af:9a:20:97:30:ac:17:7f:92:90: 70:52:ac:af:63:77:be:0a:e6:f5:9e:28:e6:f8:95: 80:85:4e:5e:b8:e5:5c:ea:04:a3:0e:52:84:66:00: a4:08:ea:19:2b:4e:4f:e5:08:fd:f4:a1:3e:5b:55: cc:88:ca:2f:15:0a:e4:cb:3f:fd:a2:c9:26:a6:16: 17:95:b8:87:78:6c:f6:01:35:df:37:0f:c7:52:de: 31:77:b8:32:5d:92:27:f0:17:b9:88:8d:3e:72:bb: 50:12:5a:de:8e:61:7c:3d:8c:2f:91:4e:a8:60:ae: 77:6f:03:2e:96:7b:77:37:91:11:e8:27:9d:cf:e5: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:84:6E:6F:B5:73:9E:C0:86:81:4B:8D:3A:07:F2:30:0E:41:42:A2 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:34:e4:8f:0c:fa:b4:73:b7:a8:85:21:b4:f1:2f:dd:41:b3: 65:8d:3e:d8:d0:4a:b8:c2:bc:38:23:b1:8d:de:55:f7:f0:61: 9b:5c:a5:0b:62:7f:16:08:fa:2c:9b:75:e6:16:ed:6d:be:db: b9:27:c2:af:39:7a:11:04:0d:2d:9e:5a:63:c1:17:18:48:58: ff:46:23:27:95:89:d2:f8:ab:e7:13:d9:2b:f7:b5:59:20:3b: c0:47:47:c3:72:aa:c2:65:72:98:2a:29:53:60:0b:20:d3:f3: 47:86:59:a3:9a:cc:6e:b7:86:19:f5:91:d5:99:a8:bb:4f:2e: 7e:fd:99:21:0a:90:d6:6c:67:39:9a:42:6c:fc:d5:71:fa:02: a4:c3:2d:b2:c8:b9:a0:d9:86:94:4f:97:5d:64:b4:c1:29:26: aa:74:23:57:3f:0d:01:4e:23:7e:5a:64:b6:2a:9a:f7:f6:54: d3:cc:b4:26:f7:a8:35:22:c9:a3:c8:79:77:cb:0d:90:6f:b0: e7:c0:ab:f9:8b:2c:ee:de:b8:41:ac:06:ac:6b:e6:e7:41:27: 2c:38:a0:4b:8a:fe:16:e5:75:80:23:82:3d:7a:d5:2f:ab:69: 34:db:45:3d:14:ae:e1:af:99:da:15:91:2f:8f:17:9c:4e:e4: c9:69:95:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMn05cRoBImSauG66IUDoehQTxyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTEyMjMxNzQ3MTNaFw0yNTEyMjcwMzM0MTNaMDMxMTAvBgNV BAMTKEZEODQ2RTZGQjU3MzlFQzA4NjgxNEI4RDNBMDdGMjMwMEU0MTQyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqS8475m+sn/kSmoNDxSO5b6PW SryV7B8p0ERXSlYhBsGblruAjz+pHCv6dZ97Gk4bWBHb3ZEiuIMbJsRUOHO1olwY VaPd4tyNow9N9RxAiaYbvDR6aQLg2YfXBxK0oe9H7c6weZpM7zADiVVtYoVjrexr 6SoUqYRWgnEjr5oglzCsF3+SkHBSrK9jd74K5vWeKOb4lYCFTl645VzqBKMOUoRm AKQI6hkrTk/lCP30oT5bVcyIyi8VCuTLP/2iySamFheVuId4bPYBNd83D8dS3jF3 uDJdkifwF7mIjT5yu1ASWt6OYXw9jC+RTqhgrndvAy6We3c3kRHoJ53P5aghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/YRub7VznsCGgUuNOgfyMA5BQqIwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABE05I8M+rRzt6iFIbTxL91Bs2WNPtjQSrjC vDgjsY3eVffwYZtcpQtifxYI+iybdeYW7W2+27knwq85ehEEDS2eWmPBFxhIWP9G IyeVidL4q+cT2Sv3tVkgO8BHR8NyqsJlcpgqKVNgCyDT80eGWaOazG63hhn1kdWZ qLtPLn79mSEKkNZsZzmaQmz81XH6AqTDLbLIuaDZhpRPl11ktMEpJqp0I1c/DQFO I35aZLYqmvf2VNPMtCb3qDUiyaPIeXfLDZBvsOfAq/mLLO7euEGsBqxr5udBJyw4 oEuK/hbldYAjgj161S+raTTbRT0UruGvmdoVkS+PF5xO5MlplbE= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:50 2025 by rpki-client