This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: oa3LKmZ75aS/v6XQAxC2uftKbCmsl2Y3ZobqOMr6jq8= Subject key identifier: 18:51:E8:78:1E:FA:BA:D5:45:09:19:6C:6D:90:52:6E:B6:48:11:1B Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 1891D8E4B0F73FA85A6E5CC8F3F4C0E413092EE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 0203 Signing time: Mon 15 Dec 2025 21:31:12 +0000 Manifest this update: Mon 15 Dec 2025 21:26:12 +0000 Manifest next update: Fri 19 Dec 2025 06:47:12 +0000 Files and hashes: 1: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: An6EMR5UX4KSjk0FZOrqiyzcjniIuBPOS2x0pcY6vGs=) 2: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s=) 3: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: v6SlmhoWrtuKVznzpSx4Zev/W+xvrA9nKwiYzaVD9y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 06:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:91:d8:e4:b0:f7:3f:a8:5a:6e:5c:c8:f3:f4:c0:e4:13:09:2e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Dec 15 21:26:12 2025 GMT Not After : Dec 19 06:47:12 2025 GMT Subject: CN=1851E8781EFABAD54509196C6D90526EB648111B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:f6:41:33:45:68:aa:84:a3:26:8f:d9:ee: d6:1c:c8:34:7b:95:29:35:5a:92:56:83:f8:53:c9: 1e:94:61:27:bc:8c:cd:ab:8a:02:24:21:58:ad:f6: 6d:0e:52:9b:b7:d4:84:e2:22:99:58:83:ec:79:cd: aa:77:b0:b5:40:00:66:14:bb:e3:a2:a1:22:6f:75: 43:7d:dc:af:d7:8d:cd:3b:7a:1a:09:25:b3:57:00: c2:b5:d8:65:57:85:a5:bd:bd:1a:ed:91:c3:d8:48: 5d:c1:7b:86:dc:6b:5a:33:21:2c:ee:f4:b8:96:c8: 64:90:f2:45:9b:0b:b0:13:b0:c6:e2:56:e7:e0:f6: 2e:7e:49:91:63:d2:8f:6e:0b:6c:a0:64:b3:b6:59: be:33:7b:4f:bd:11:16:15:4b:f5:72:1b:72:ea:09: 59:dc:b7:65:9a:04:18:7c:00:e3:1b:7d:73:5d:b0: 92:7f:2c:13:84:9c:9f:d4:b7:ad:6d:10:72:1a:62: 37:b2:6a:76:c3:93:d2:d0:f6:5a:89:21:c3:24:01: 7a:2c:45:f7:b5:cb:ce:42:77:f1:fc:4a:d6:47:5d: a9:2e:f1:9a:86:11:30:a1:de:f2:0a:f3:10:31:88: 2c:88:35:33:e6:17:3f:20:0f:70:ff:69:fb:09:64: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:51:E8:78:1E:FA:BA:D5:45:09:19:6C:6D:90:52:6E:B6:48:11:1B X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d9:1e:a8:a9:3b:71:b9:3f:a7:0b:3d:e3:77:01:b2:84:16: e6:73:99:1e:f8:a7:3b:c3:b8:4b:77:8a:92:52:4c:0a:05:07: a5:e8:42:11:61:92:cc:94:fc:a2:f0:56:73:bb:35:2c:63:54: 85:7b:49:a4:77:67:c7:6a:ad:ea:f9:c9:13:b5:5e:9e:6c:c2: 7f:f1:c6:96:1e:a9:8b:4a:0d:9f:d0:5c:39:d3:bb:a4:60:b8: 72:ef:50:50:a6:6a:c4:11:12:c5:f5:0e:7c:ba:23:d7:c4:59: 7c:df:70:a6:13:3f:5f:ce:88:7b:b1:e9:62:7a:0a:c9:1f:29: 3b:0a:60:90:0e:47:d7:ad:b4:7a:8e:54:41:64:42:ce:a5:11: ee:82:96:54:df:7b:df:84:9e:50:c4:77:11:98:e0:e3:1f:f6: a0:02:b5:4c:e7:8a:1d:9e:7e:fd:02:f2:ac:fc:4a:4a:ac:87: c6:df:84:11:6b:f4:29:cd:9f:81:11:73:1e:d8:74:29:27:28: 18:fa:f2:10:27:31:92:86:6b:4f:d5:f0:f4:b1:88:77:1d:dd: 0b:97:e2:9e:43:b5:a5:c9:36:f8:51:00:15:42:a7:8c:f3:21: e0:95:48:a6:20:70:03:99:56:a2:42:2e:7b:ea:82:84:3d:42: 15:d4:3e:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJHY5LD3P6hablzI8/TA5BMJLuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNTEyMTUyMTI2MTJaFw0yNTEyMTkwNjQ3MTJaMDMxMTAvBgNV BAMTKDE4NTFFODc4MUVGQUJBRDU0NTA5MTk2QzZEOTA1MjZFQjY0ODExMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGufZBM0VoqoSjJo/Z7tYcyDR7 lSk1WpJWg/hTyR6UYSe8jM2rigIkIVit9m0OUpu31ITiIplYg+x5zap3sLVAAGYU u+OioSJvdUN93K/Xjc07ehoJJbNXAMK12GVXhaW9vRrtkcPYSF3Be4bca1ozISzu 9LiWyGSQ8kWbC7ATsMbiVufg9i5+SZFj0o9uC2ygZLO2Wb4ze0+9ERYVS/VyG3Lq CVnct2WaBBh8AOMbfXNdsJJ/LBOEnJ/Ut61tEHIaYjeyanbDk9LQ9lqJIcMkAXos Rfe1y85Cd/H8StZHXaku8ZqGETCh3vIK8xAxiCyINTPmFz8gD3D/afsJZGf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGFHoeB76utVFCRlsbZBSbrZIERswHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7ZHqipO3G5P6cLPeN3AbKEFuZzmR74pzvD uEt3ipJSTAoFB6XoQhFhksyU/KLwVnO7NSxjVIV7SaR3Z8dqrer5yRO1Xp5swn/x xpYeqYtKDZ/QXDnTu6RguHLvUFCmasQREsX1Dny6I9fEWXzfcKYTP1/OiHux6WJ6 CskfKTsKYJAOR9ettHqOVEFkQs6lEe6CllTfe9+EnlDEdxGY4OMf9qACtUznih2e fv0C8qz8Skqsh8bfhBFr9CnNn4ERcx7YdCknKBj68hAnMZKGa0/V8PSxiHcd3QuX 4p5DtaXJNvhRABVCp4zzIeCVSKYgcAOZVqJCLnvqgoQ9QhXUPs0= -----END CERTIFICATE-----Generated at Tue Dec 16 23:16:56 2025 by rpki-client