This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: KbozV2z1ocrmjHlDOOU7yHC0OysqXjebJynBxg4xDZ0= Subject key identifier: 52:AD:1B:9A:36:D6:28:3C:8E:50:FB:3E:DD:C2:13:4C:D2:41:12:A6 Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 13D4E9E80FE375B1155EC3E54547C535F933EBFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 0163 Signing time: Tue 16 Dec 2025 19:01:46 +0000 Manifest this update: Tue 16 Dec 2025 18:56:46 +0000 Manifest next update: Sat 20 Dec 2025 05:51:46 +0000 Files and hashes: 1: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: kY+mcCZBQD7VwiU9ZdYSYn14piEuodR3NBAGbLTfy9I=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: WMWtIWXP3rHM6u9VZyFOIHKvW80yliOmPYEco+tmVZQ=) 3: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 0SClEliKB0AlO5DzEurqFtVJ6yiiJ9eJczPmmj9dw18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d4:e9:e8:0f:e3:75:b1:15:5e:c3:e5:45:47:c5:35:f9:33:eb:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Dec 16 18:56:46 2025 GMT Not After : Dec 20 05:51:46 2025 GMT Subject: CN=52AD1B9A36D6283C8E50FB3EDDC2134CD24112A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:27:b8:e3:11:fd:00:a4:0d:a2:9d:d5:df: 74:52:dd:0f:b6:82:26:ce:57:44:be:73:d5:9f:20: 06:31:a6:15:82:e8:ae:4e:f8:6d:a2:81:0d:93:63: 2e:35:e8:52:38:20:59:a9:0d:02:28:46:4b:09:a6: 2d:46:30:e1:1a:15:ed:2f:f6:5a:fe:89:c5:91:86: db:62:78:27:20:0f:56:a6:19:66:c0:44:2a:e4:7a: 23:a5:d7:b2:70:4c:e7:cb:87:20:b7:a8:c4:ca:fa: 88:54:84:ad:a0:2a:d8:71:58:9a:08:49:c2:40:e5: 56:47:2a:0a:cc:fc:f2:48:58:3e:ae:0b:ba:77:55: ea:ad:bf:f1:c4:49:02:4a:7e:e5:73:9f:76:2b:cf: 88:a9:70:b9:02:d1:eb:7d:b3:6a:ac:89:5f:c7:ef: a6:6c:2b:0f:d2:42:75:a0:3a:af:4a:1c:d9:51:73: 93:af:d5:ff:36:8f:d8:f8:f2:cf:45:e6:ff:2d:dc: 5c:91:bf:60:f0:03:3c:6c:29:e1:4f:83:67:ca:88: 88:ab:7c:bd:33:16:1a:9d:07:b7:e0:2a:1d:8a:12: 8e:c4:dc:36:bd:31:e6:67:dc:e3:fb:72:51:ba:de: 85:13:30:3b:65:76:8a:6b:2a:84:4c:0a:ab:14:f8: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AD:1B:9A:36:D6:28:3C:8E:50:FB:3E:DD:C2:13:4C:D2:41:12:A6 X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:d2:2e:e9:fb:fc:72:82:ef:9a:85:51:f4:39:58:9a:23:d8: 5f:15:df:ba:b5:27:08:f8:8a:fc:64:a2:0f:e9:10:30:03:b7: 4b:fb:ca:eb:45:70:c0:28:c5:19:37:df:1e:83:6b:05:8c:bd: 85:6d:22:53:dc:73:31:9a:4c:73:4a:32:4a:f0:84:af:ef:4a: 0a:43:b9:ab:85:06:83:7d:65:f6:59:40:3a:19:62:08:c2:0d: f0:fe:37:d6:21:db:e7:08:7d:bf:47:6c:60:12:2d:85:fc:97: 97:d2:90:58:03:b6:a6:2c:91:7d:24:8e:6f:fc:07:f1:e2:72: 62:1b:2e:6e:8f:bc:e8:59:1c:76:34:75:a7:ca:53:10:ae:7d: c0:d2:60:cf:72:5b:20:a0:af:ec:16:a9:79:07:92:1c:f1:26: cf:25:e7:3a:0d:1c:ff:9f:71:b2:87:5e:fb:6c:13:22:78:91: 95:3b:ae:9e:1f:20:66:c6:ae:98:e8:44:43:37:78:3d:ec:c0: 58:37:81:d3:ba:30:15:a0:76:ce:93:d2:45:8c:b8:a9:32:af: d5:c6:97:95:22:0e:d5:a0:d8:be:a2:d8:88:1c:85:0f:ae:28: 9c:32:c8:fc:97:10:e5:e2:69:da:3c:b7:25:73:f9:aa:61:80: 77:62:93:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE9Tp6A/jdbEVXsPlRUfFNfkz6/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNTEyMTYxODU2NDZaFw0yNTEyMjAwNTUxNDZaMDMxMTAvBgNV BAMTKDUyQUQxQjlBMzZENjI4M0M4RTUwRkIzRUREQzIxMzRDRDI0MTEyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNSe44xH9AKQNop3V33RS3Q+2 gibOV0S+c9WfIAYxphWC6K5O+G2igQ2TYy416FI4IFmpDQIoRksJpi1GMOEaFe0v 9lr+icWRhttieCcgD1amGWbARCrkeiOl17JwTOfLhyC3qMTK+ohUhK2gKthxWJoI ScJA5VZHKgrM/PJIWD6uC7p3Veqtv/HESQJKfuVzn3Yrz4ipcLkC0et9s2qsiV/H 76ZsKw/SQnWgOq9KHNlRc5Ov1f82j9j48s9F5v8t3FyRv2DwAzxsKeFPg2fKiIir fL0zFhqdB7fgKh2KEo7E3Da9MeZn3OP7clG63oUTMDtldoprKoRMCqsU+PYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUq0bmjbWKDyOUPs+3cITTNJBEqYwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMrSLun7/HKC75qFUfQ5WJoj2F8V37q1Jwj4 ivxkog/pEDADt0v7yutFcMAoxRk33x6DawWMvYVtIlPcczGaTHNKMkrwhK/vSgpD uauFBoN9ZfZZQDoZYgjCDfD+N9Yh2+cIfb9HbGASLYX8l5fSkFgDtqYskX0kjm/8 B/HicmIbLm6PvOhZHHY0dafKUxCufcDSYM9yWyCgr+wWqXkHkhzxJs8l5zoNHP+f cbKHXvtsEyJ4kZU7rp4fIGbGrpjoREM3eD3swFg3gdO6MBWgds6T0kWMuKkyr9XG l5UiDtWg2L6i2IgchQ+uKJwyyPyXEOXiado8tyVz+aphgHdik2E= -----END CERTIFICATE-----Generated at Fri Dec 19 14:00:09 2025 by rpki-client