This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: M/9FIcGFvCRIgir6vCHo2FJCiAp3hOyDICKFLAkj5fI= Subject key identifier: 8D:95:09:C6:7B:FB:FB:23:CE:DC:5A:99:08:4F:0E:A4:11:89:CE:F8 Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 05442C71679B8DEFB793FD0D242E3326DB544E29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 0164 Signing time: Fri 19 Dec 2025 05:53:19 +0000 Manifest this update: Fri 19 Dec 2025 05:48:19 +0000 Manifest next update: Mon 22 Dec 2025 06:57:19 +0000 Files and hashes: 1: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: WMWtIWXP3rHM6u9VZyFOIHKvW80yliOmPYEco+tmVZQ=) 2: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: odjbNJf3BBd66bySCfoiPThNc7vybdoSr+v/UZt9Nmg=) 3: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 0SClEliKB0AlO5DzEurqFtVJ6yiiJ9eJczPmmj9dw18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 06:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:44:2c:71:67:9b:8d:ef:b7:93:fd:0d:24:2e:33:26:db:54:4e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Dec 19 05:48:19 2025 GMT Not After : Dec 22 06:57:19 2025 GMT Subject: CN=8D9509C67BFBFB23CEDC5A99084F0EA41189CEF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:6d:bd:4a:c2:9f:f8:6d:78:cc:13:08:76: b9:c1:e3:85:0c:35:4a:eb:2e:ff:0e:c7:e4:e8:0e: d0:6a:49:70:c2:97:35:4f:a1:73:67:6c:20:9d:c5: 2a:35:8a:a6:b2:17:75:c6:59:62:21:67:cb:2f:e2: f2:36:e0:e2:09:18:6e:e3:0a:61:2f:b0:1d:92:12: 28:a9:cf:c2:b9:c5:a6:1e:b7:6b:67:63:10:56:47: b7:1b:a8:14:db:a7:85:18:2c:2f:1c:c2:32:31:73: b8:fb:94:60:2d:b7:72:19:70:4c:7a:e0:a4:fc:0d: 62:95:bf:25:eb:04:c1:a6:af:a0:ae:9d:a2:cc:59: 39:aa:ef:f2:4a:1f:d6:dd:cf:cf:59:b8:3d:64:51: f0:5e:4e:73:60:be:83:4e:12:1f:ce:b4:b7:65:8e: a8:88:b8:25:9e:d5:84:df:77:db:96:17:c3:c6:35: ad:ef:fa:b8:07:b1:62:a9:4a:e9:ad:5a:94:cf:89: 0c:2d:91:fb:4a:10:58:05:60:1b:4b:bf:15:5f:76: a0:04:5f:fb:92:a3:84:d8:b1:2d:e2:b8:87:bc:ba: d1:28:15:60:94:25:88:02:75:34:a4:fb:44:1e:24: fb:d4:fb:eb:40:a1:fe:fa:56:c6:2d:6f:5d:b3:7d: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:95:09:C6:7B:FB:FB:23:CE:DC:5A:99:08:4F:0E:A4:11:89:CE:F8 X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e4:a9:fb:07:73:2d:02:8f:cb:e2:18:d4:2d:78:2d:77:fb: ad:0e:a4:f6:cf:f4:15:9a:33:01:74:11:da:f2:ef:a5:59:c5: bf:fd:99:d1:fc:32:bf:d7:c3:9b:42:64:8b:cb:37:40:31:01: dc:9c:2d:6e:f2:19:a5:02:fe:84:a4:69:fb:b4:d7:8a:dd:7f: 3d:d7:b4:c5:96:f2:f5:20:26:d4:02:af:bf:c9:91:f1:6e:ec: 86:e8:75:a3:70:1a:28:d1:7c:55:73:e9:1e:a1:38:94:b9:01: 05:93:2e:b4:13:ac:e1:ba:d9:33:81:fa:a6:de:3d:cc:38:93: 1b:06:0a:c4:79:1d:81:eb:a4:40:bc:d3:27:43:e7:df:a8:d6: 1c:e7:64:2e:71:51:6f:0d:25:d0:0f:15:67:ae:cc:c9:d7:0c: a0:83:89:e7:94:44:34:77:f1:ca:2f:e1:d9:85:bc:42:87:cf: c9:ff:73:68:da:f3:c6:41:d3:72:ad:e6:02:2c:c0:cd:6a:cb: ec:d6:4f:20:ad:49:1c:13:8a:5e:11:82:72:d9:1f:3f:4f:f2: 93:d7:f4:63:a5:39:0c:a1:f4:b4:d0:c2:24:22:f8:f3:ce:03: a8:6a:a6:26:40:85:c9:0e:c7:81:36:b6:91:80:d4:f3:aa:80: 8b:a6:5b:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUQscWebje+3k/0NJC4zJttUTikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNTEyMTkwNTQ4MTlaFw0yNTEyMjIwNjU3MTlaMDMxMTAvBgNV BAMTKDhEOTUwOUM2N0JGQkZCMjNDRURDNUE5OTA4NEYwRUE0MTE4OUNFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDam29SsKf+G14zBMIdrnB44UM NUrrLv8Ox+ToDtBqSXDClzVPoXNnbCCdxSo1iqayF3XGWWIhZ8sv4vI24OIJGG7j CmEvsB2SEiipz8K5xaYet2tnYxBWR7cbqBTbp4UYLC8cwjIxc7j7lGAtt3IZcEx6 4KT8DWKVvyXrBMGmr6CunaLMWTmq7/JKH9bdz89ZuD1kUfBeTnNgvoNOEh/OtLdl jqiIuCWe1YTfd9uWF8PGNa3v+rgHsWKpSumtWpTPiQwtkftKEFgFYBtLvxVfdqAE X/uSo4TYsS3iuIe8utEoFWCUJYgCdTSk+0QeJPvU++tAof76VsYtb12zfTsNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjZUJxnv7+yPO3FqZCE8OpBGJzvgwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLkqfsHcy0Cj8viGNQteC13+60OpPbP9BWa MwF0Edry76VZxb/9mdH8Mr/Xw5tCZIvLN0AxAdycLW7yGaUC/oSkafu014rdfz3X tMWW8vUgJtQCr7/JkfFu7IbodaNwGijRfFVz6R6hOJS5AQWTLrQTrOG62TOB+qbe Pcw4kxsGCsR5HYHrpEC80ydD59+o1hznZC5xUW8NJdAPFWeuzMnXDKCDieeURDR3 8cov4dmFvEKHz8n/c2ja88ZB03Kt5gIswM1qy+zWTyCtSRwTil4RgnLZHz9P8pPX 9GOlOQyh9LTQwiQi+PPOA6hqpiZAhckOx4E2tpGA1POqgIumWwU= -----END CERTIFICATE-----Generated at Sat Dec 20 16:47:56 2025 by rpki-client