This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft File: 4ED16B9231905A1C7A353DF749BF99487E69E313.mft (raw, json) Hash identifier: bXOAyDrcjWc0pmGhEIZtCXiSw6oTCTXQolRyZBswaRc= Subject key identifier: E6:CD:C7:FB:01:BD:C3:5C:71:E7:83:D8:58:6B:A8:4C:19:A0:A3:F0 Authority key identifier: 4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 Certificate issuer: /CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Certificate serial: 69179A617E657777F23C4829195C031A33F6F7D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft Manifest number: 011D Signing time: Mon 29 Dec 2025 17:01:32 +0000 Manifest this update: Mon 29 Dec 2025 16:56:32 +0000 Manifest next update: Fri 02 Jan 2026 01:56:32 +0000 Files and hashes: 1: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: bm0cLaD/jg5NiXGndb/98PNppE3HSK9OAR2k8wtE41Y=) 2: 4ED16B9231905A1C7A353DF749BF99487E69E313.crl (hash: Ike1FZ8zTacJp9SMhtoG0yZoE9DHPAJxXXdqr2J7cVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 01:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:17:9a:61:7e:65:77:77:f2:3c:48:29:19:5c:03:1a:33:f6:f7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Validity Not Before: Dec 29 16:56:32 2025 GMT Not After : Jan 2 01:56:32 2026 GMT Subject: CN=E6CDC7FB01BDC35C71E783D8586BA84C19A0A3F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:8d:ab:a7:0c:00:c3:54:4d:8a:c0:06:16: b4:cd:34:b4:59:a6:20:3f:bb:c6:d9:f0:2d:2d:9a: 96:f4:a5:1e:da:21:3e:b1:c2:6a:66:6b:61:37:9b: 38:4b:a7:85:be:07:b5:19:f9:cc:14:6c:8e:6c:41: b3:61:a4:ff:2e:f9:f7:e7:f6:70:92:5a:13:82:e4: 68:d3:0c:29:e3:59:bf:db:e5:46:8a:30:ad:a5:68: 92:58:11:73:dc:00:3f:a5:18:4c:ce:8a:ad:e1:09: 75:e0:52:6d:87:8e:5b:e6:e9:ec:33:83:7e:e8:f7: be:27:9a:9a:50:2d:9f:46:19:81:a3:40:95:a2:ea: d9:23:f0:f3:a3:39:39:7d:ac:81:7c:5e:d1:8a:15: 86:55:23:2e:1c:bb:e9:09:42:2d:f9:e6:93:ad:15: 06:eb:fe:53:2d:c4:f7:bc:82:ab:26:b8:c5:6a:3e: 6e:de:97:60:49:3c:07:30:a1:a7:af:38:cb:c0:ce: ca:43:3f:9c:b0:bc:46:73:88:54:dd:a6:d1:1a:57: 55:a7:d2:b5:58:a3:13:93:46:04:67:3a:56:32:60: 8d:50:4e:3e:68:7e:e2:48:2b:0f:3f:db:3e:7f:1f: 8e:1a:17:98:4a:15:e6:1c:e8:bb:b6:3e:81:30:35: ea:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CD:C7:FB:01:BD:C3:5C:71:E7:83:D8:58:6B:A8:4C:19:A0:A3:F0 X509v3 Authority Key Identifier: keyid:4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:07:80:9a:76:43:77:a6:11:00:03:49:4f:46:c8:d9:0c:83: 95:75:44:db:80:0c:28:8d:96:0d:28:27:51:85:ba:a4:d7:a9: a3:ff:39:b4:38:f5:02:35:01:40:5e:ed:8f:31:a4:44:87:f4: c9:0f:9a:4d:2e:78:b8:f9:dd:ec:4e:d4:b1:b1:a8:e1:ec:77: bb:0e:d3:0c:bf:f7:2a:14:42:d5:a4:bc:cb:06:2d:7f:3d:7a: c1:5b:5d:32:a2:90:18:65:12:ed:0b:16:b0:68:3a:19:e8:c3: 80:42:d1:74:c5:10:e8:9b:84:2e:d7:01:0f:af:2d:e6:ec:43: 37:44:8e:f3:77:0a:0c:cc:fb:8f:91:09:06:5d:61:67:47:de: 70:ab:87:bc:5d:2b:66:00:4b:1b:52:a3:71:ca:86:3c:6c:61: 74:75:c5:4d:26:7d:8c:f2:e5:23:e5:74:ce:1a:13:93:ee:e8: 47:a0:f8:f4:e2:7d:eb:21:78:b7:8c:c3:b9:ee:2d:58:87:6e: ec:fd:8e:5c:7c:1b:bb:e1:80:1c:c1:86:a9:a9:64:67:8b:47: a0:1b:78:e4:ea:38:6c:dc:5c:9d:93:fc:8d:6b:f9:ef:49:9d: 49:1c:78:e0:03:a5:e8:c5:8c:91:12:fb:58:e4:9b:4f:47:24: 29:a9:23:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaReaYX5ld3fyPEgpGVwDGjP299EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5NDg3 RTY5RTMxMzAeFw0yNTEyMjkxNjU2MzJaFw0yNjAxMDIwMTU2MzJaMDMxMTAvBgNV BAMTKEU2Q0RDN0ZCMDFCREMzNUM3MUU3ODNEODU4NkJBODRDMTlBMEEzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2o2rpwwAw1RNisAGFrTNNLRZ piA/u8bZ8C0tmpb0pR7aIT6xwmpma2E3mzhLp4W+B7UZ+cwUbI5sQbNhpP8u+ffn 9nCSWhOC5GjTDCnjWb/b5UaKMK2laJJYEXPcAD+lGEzOiq3hCXXgUm2Hjlvm6ewz g37o974nmppQLZ9GGYGjQJWi6tkj8POjOTl9rIF8XtGKFYZVIy4cu+kJQi355pOt FQbr/lMtxPe8gqsmuMVqPm7el2BJPAcwoaevOMvAzspDP5ywvEZziFTdptEaV1Wn 0rVYoxOTRgRnOlYyYI1QTj5ofuJIKw8/2z5/H44aF5hKFeYc6Lu2PoEwNerrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5s3H+wG9w1xx54PYWGuoTBmgo/AwHwYDVR0j BBgwFoAUTtFrkjGQWhx6NT33Sb+ZSH5p4xMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yjg4ZDJjYS0yMjliLTRhYWMtOWI1Yy00MmMxNTEwNWJiODIvMC80RUQxNkI5MjMx OTA1QTFDN0EzNTNERjc0OUJGOTk0ODdFNjlFMzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5NDg3RTY5 RTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWI4OGQyY2EtMjI5Yi00YWFjLTli NWMtNDJjMTUxMDViYjgyLzAvNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5 NDg3RTY5RTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8HgJp2Q3emEQADSU9GyNkMg5V1RNuADCiN lg0oJ1GFuqTXqaP/ObQ49QI1AUBe7Y8xpESH9MkPmk0ueLj53exO1LGxqOHsd7sO 0wy/9yoUQtWkvMsGLX89esFbXTKikBhlEu0LFrBoOhnow4BC0XTFEOibhC7XAQ+v LebsQzdEjvN3CgzM+4+RCQZdYWdH3nCrh7xdK2YASxtSo3HKhjxsYXR1xU0mfYzy 5SPldM4aE5Pu6Eeg+PTifesheLeMw7nuLViHbuz9jlx8G7vhgBzBhqmpZGeLR6Ab eOTqOGzcXJ2T/I1r+e9JnUkceOADpejFjJES+1jkm09HJCmpI8g= -----END CERTIFICATE-----Generated at Wed Dec 31 10:28:12 2025 by rpki-client