This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: OY3bH+Zb0CJj+ODLzkw4ia1nzKc7h5SjF8vX+p6IpQ4= Subject key identifier: 8C:44:0D:58:5D:35:27:C6:FE:A5:D4:07:07:06:14:B1:78:FB:0B:82 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 766247B6ECB42868BF58377F65E5E83C8FDDBF60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 0123 Signing time: Sun 21 Dec 2025 09:41:16 +0000 Manifest this update: Sun 21 Dec 2025 09:36:16 +0000 Manifest next update: Wed 24 Dec 2025 17:59:16 +0000 Files and hashes: 1: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g=) 2: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: x6ZV1Wl+WBaRGXPvArCfDSB+gNTaB80RBBLsR8syzeM=) 3: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM=) 4: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: 7fNNYtfgwnu/LjDtY/syi40MZvhZpTQ1HVsQda/1D+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:62:47:b6:ec:b4:28:68:bf:58:37:7f:65:e5:e8:3c:8f:dd:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Dec 21 09:36:16 2025 GMT Not After : Dec 24 17:59:16 2025 GMT Subject: CN=8C440D585D3527C6FEA5D407070614B178FB0B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:22:30:ee:77:4b:1f:e2:94:2a:3a:7c:d5: 86:77:ee:e5:2e:db:e8:0b:5b:b9:ff:03:20:47:7f: f4:5e:f9:67:8d:76:4b:67:68:09:0a:2c:f9:52:a6: 4b:81:94:b3:f2:70:49:be:37:f3:20:b7:71:07:de: 29:f3:ff:4a:ce:cb:cf:f6:2d:ec:db:a5:9d:2a:ec: e1:15:46:b5:e8:fe:e7:78:51:83:7c:64:26:2e:c2: eb:f1:1b:9a:48:2b:92:8c:d3:b5:3a:94:30:fb:a8: 12:f7:ad:8f:2f:dd:81:bd:55:c8:04:ce:c7:29:88: e2:e1:f9:a8:52:b1:53:68:bb:d5:da:5e:0c:27:d6: 1a:4d:81:48:d5:84:ac:97:e2:bc:5f:f9:ee:09:57: cd:1b:d4:88:79:f3:ba:39:8e:ef:56:a9:41:90:ec: c3:dc:bf:f8:31:5b:30:27:33:b6:0c:9d:0b:22:0d: 35:1b:b5:b6:f9:12:a1:67:a9:42:94:4d:57:94:d0: 47:64:b8:7a:aa:52:99:70:75:8f:74:5e:82:29:b8: 87:99:cc:5a:b6:e4:7d:d5:34:32:9a:5f:46:81:49: 2a:d5:78:19:4a:6e:78:45:ee:c7:b0:01:21:1f:7a: 8d:5f:bc:d3:3a:8e:3a:5f:2a:71:0e:f1:5a:5e:51: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:44:0D:58:5D:35:27:C6:FE:A5:D4:07:07:06:14:B1:78:FB:0B:82 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ce:1d:26:95:6e:7e:41:38:f4:54:67:1e:4d:c1:88:32:64: 65:f3:99:b3:f9:db:f4:97:ca:1a:83:85:ea:c6:bc:8a:91:2e: e3:d3:fd:98:fc:d0:31:71:ff:78:fc:ed:8b:17:bd:ce:2a:ed: 6d:79:2b:91:cd:f0:7f:e6:c1:74:0e:f7:2a:b1:6d:7c:bd:5e: ae:e7:52:bc:f7:64:18:29:78:7b:66:58:44:af:19:88:8d:b5: 83:8f:60:e6:e4:d2:1f:28:45:ce:cb:b5:dc:d3:fd:cd:78:92: 8b:cb:45:bd:d2:00:5e:a5:1d:c2:a7:95:e7:53:12:22:df:8e: 41:8f:e7:71:11:fa:9e:95:97:e0:82:72:1b:bb:8a:90:6a:75: 90:14:d4:1a:17:dd:94:b2:10:b5:80:37:f8:1d:53:5b:01:a3: c3:81:80:ea:a8:71:42:51:dd:ac:45:e6:ee:bc:47:8b:da:ea: e6:24:ce:fd:cc:53:7f:c5:25:4b:94:ff:cc:92:50:1e:89:c4: 6c:2a:8d:e0:90:b5:8e:65:cc:28:8e:88:53:96:71:58:dd:f9: e1:e5:27:03:ec:9c:21:21:4a:ea:62:4c:4c:58:6b:1c:64:97: 05:6c:84:91:7c:b4:a9:39:77:c4:8a:9d:96:80:d8:a2:d8:52: 92:d5:8f:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmJHtuy0KGi/WDd/ZeXoPI/dv2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTEyMjEwOTM2MTZaFw0yNTEyMjQxNzU5MTZaMDMxMTAvBgNV BAMTKDhDNDQwRDU4NUQzNTI3QzZGRUE1RDQwNzA3MDYxNEIxNzhGQjBCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRRSIw7ndLH+KUKjp81YZ37uUu 2+gLW7n/AyBHf/Re+WeNdktnaAkKLPlSpkuBlLPycEm+N/Mgt3EH3inz/0rOy8/2 LezbpZ0q7OEVRrXo/ud4UYN8ZCYuwuvxG5pIK5KM07U6lDD7qBL3rY8v3YG9VcgE zscpiOLh+ahSsVNou9XaXgwn1hpNgUjVhKyX4rxf+e4JV80b1Ih587o5ju9WqUGQ 7MPcv/gxWzAnM7YMnQsiDTUbtbb5EqFnqUKUTVeU0EdkuHqqUplwdY90XoIpuIeZ zFq25H3VNDKaX0aBSSrVeBlKbnhF7sewASEfeo1fvNM6jjpfKnEO8VpeUQLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjEQNWF01J8b+pdQHBwYUsXj7C4IwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3OHSaVbn5BOPRUZx5NwYgyZGXzmbP52/SX yhqDherGvIqRLuPT/Zj80DFx/3j87YsXvc4q7W15K5HN8H/mwXQO9yqxbXy9Xq7n Urz3ZBgpeHtmWESvGYiNtYOPYObk0h8oRc7LtdzT/c14kovLRb3SAF6lHcKnledT EiLfjkGP53ER+p6Vl+CCchu7ipBqdZAU1BoX3ZSyELWAN/gdU1sBo8OBgOqocUJR 3axF5u68R4va6uYkzv3MU3/FJUuU/8ySUB6JxGwqjeCQtY5lzCiOiFOWcVjd+eHl JwPsnCEhSupiTExYaxxklwVshJF8tKk5d8SKnZaA2KLYUpLVjwM= -----END CERTIFICATE-----Generated at Mon Dec 22 08:12:21 2025 by rpki-client