This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft File: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json) Hash identifier: rzMKrDaX3dy6suCbi/K90e3IiHqFP6mXBalh5l5yJmY= Subject key identifier: 13:6A:20:11:4A:22:3D:59:FE:FA:5D:73:7F:D6:6B:E9:BA:37:FE:25 Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 6437F0EA7F0016D3857CD7D9AD70C5E30BC6F865 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft Manifest number: 0533 Signing time: Fri 19 Dec 2025 13:02:33 +0000 Manifest this update: Fri 19 Dec 2025 12:57:33 +0000 Manifest next update: Mon 22 Dec 2025 17:19:33 +0000 Files and hashes: 1: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: KrFiIsKebuclmAnJCp7i0qAQI2dNZ1dLN7tW2prCRMk=) 2: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gxzjhOqlSfyvVQV8GuZutKZCxMRY+U2lIgUsJNuDYjo=) 3: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=) 4: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: kKOPYDd68IbPpSS7OOzul5ii2GOnq8I9waVsMp0r138=) 5: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: ilM9RAmwvO1dG3ExUEMwQHrtjXNmincWYpLPMSpzles=) 6: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: RarippCnWnMmEjTgkPvYhkG55G9O0lUfwe2+0FeUYpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 17:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:37:f0:ea:7f:00:16:d3:85:7c:d7:d9:ad:70:c5:e3:0b:c6:f8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Dec 19 12:57:33 2025 GMT Not After : Dec 22 17:19:33 2025 GMT Subject: CN=136A20114A223D59FEFA5D737FD66BE9BA37FE25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:fd:1e:11:f0:37:94:3f:dd:b7:b1:19:f1: 2c:4f:b7:76:08:77:5b:41:88:1f:23:7c:c0:41:65: 26:9d:f7:25:7f:ef:5d:f2:84:bf:ad:fe:97:75:ed: 6f:be:98:f0:3e:6f:d6:90:55:cb:7b:53:a4:62:58: 7c:85:24:0f:5d:39:f1:57:94:87:2e:78:0c:92:94: fb:ba:2f:7d:5c:42:03:c6:e6:b0:36:71:02:8c:d3: 36:07:95:e5:56:fb:44:98:0d:bb:08:b1:09:1f:bd: c1:de:c0:ac:66:9b:f2:c6:bd:ee:b8:8e:e9:fa:51: b5:59:f7:b7:96:bf:23:44:1e:88:a0:10:46:a1:41: de:dc:32:b2:44:f5:55:88:37:3b:b3:eb:f0:3e:bf: 6a:95:7d:98:eb:9c:1f:6e:58:f2:59:c7:66:1f:f9: 5b:47:5f:94:c5:70:aa:03:4b:fc:36:4a:50:91:db: 32:2e:b2:e8:75:28:ee:62:87:2c:85:bf:25:a2:dc: 7b:e5:f7:dd:f6:30:8a:f4:2d:7d:ab:f9:bd:70:4a: 0d:e1:2d:ee:b7:6c:53:7e:71:40:d9:f2:eb:ea:3b: 14:83:cc:98:3a:d7:e5:50:17:fc:9a:62:28:c9:51: bb:b4:f8:7f:2e:1c:24:95:77:1a:81:e3:32:b4:19: 22:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6A:20:11:4A:22:3D:59:FE:FA:5D:73:7F:D6:6B:E9:BA:37:FE:25 X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:44:fc:1c:3d:80:22:e1:a4:d4:d6:88:3e:a4:3e:b8:52:69: 68:98:b9:59:72:96:0d:94:33:e3:fb:9f:e7:0e:cf:b5:a3:76: c3:21:dd:8e:9c:c0:a0:33:58:25:61:b9:68:19:bb:ca:59:a4: 77:38:b5:73:29:54:53:e9:1a:41:3f:24:1b:00:50:af:ab:44: 73:ff:5c:ff:f6:60:c7:43:2b:5c:a7:2a:1a:35:8b:42:89:2d: f7:d0:b8:c3:29:9f:d2:10:82:26:40:e9:93:ad:b3:2d:04:8a: 7a:ac:69:c2:66:a4:7e:70:8d:68:71:c8:ea:18:77:f9:ff:4d: 13:0d:62:69:dd:d3:de:f4:3b:1f:4c:ef:ca:a7:66:47:d1:2a: 63:ac:75:7d:fa:64:4d:ec:c3:cf:6e:20:93:25:6b:05:c9:72: 7e:9a:b9:9a:e9:67:74:87:f1:dd:dc:c3:62:92:2d:c3:89:9f: 74:f0:90:59:06:c5:30:b2:e4:71:2a:91:fb:ad:f2:5b:9d:94: ce:b4:dd:ef:d0:09:ed:65:e3:bb:a8:7c:2e:cb:a6:08:93:34: df:07:99:86:79:1d:e1:5d:81:c8:2c:2d:cd:65:c2:2c:42:e3: d9:b0:a4:b5:44:e7:cb:c4:f3:b0:83:e6:08:32:93:88:ab:80: b2:15:37:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDfw6n8AFtOFfNfZrXDF4wvG+GUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNTEyMTkxMjU3MzNaFw0yNTEyMjIxNzE5MzNaMDMxMTAvBgNV BAMTKDEzNkEyMDExNEEyMjNENTlGRUZBNUQ3MzdGRDY2QkU5QkEzN0ZFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFP0eEfA3lD/dt7EZ8SxPt3YI d1tBiB8jfMBBZSad9yV/713yhL+t/pd17W++mPA+b9aQVct7U6RiWHyFJA9dOfFX lIcueAySlPu6L31cQgPG5rA2cQKM0zYHleVW+0SYDbsIsQkfvcHewKxmm/LGve64 jun6UbVZ97eWvyNEHoigEEahQd7cMrJE9VWINzuz6/A+v2qVfZjrnB9uWPJZx2Yf +VtHX5TFcKoDS/w2SlCR2zIusuh1KO5ihyyFvyWi3Hvl9932MIr0LX2r+b1wSg3h Le63bFN+cUDZ8uvqOxSDzJg61+VQF/yaYijJUbu0+H8uHCSVdxqB4zK0GSKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2ogEUoiPVn++l1zf9Zr6bo3/iUwHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NF NDQxQTc4M0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRE/Bw9gCLhpNTWiD6kPrhSaWiYuVlylg2U M+P7n+cOz7WjdsMh3Y6cwKAzWCVhuWgZu8pZpHc4tXMpVFPpGkE/JBsAUK+rRHP/ XP/2YMdDK1ynKho1i0KJLffQuMMpn9IQgiZA6ZOtsy0EinqsacJmpH5wjWhxyOoY d/n/TRMNYmnd0970Ox9M78qnZkfRKmOsdX36ZE3sw89uIJMlawXJcn6auZrpZ3SH 8d3cw2KSLcOJn3TwkFkGxTCy5HEqkfut8ludlM603e/QCe1l47uofC7LpgiTNN8H mYZ5HeFdgcgsLc1lwixC49mwpLVE58vE87CD5ggyk4irgLIVN/U= -----END CERTIFICATE-----Generated at Sat Dec 20 22:04:06 2025 by rpki-client