This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: cfMER9hCJIHbSt34CoCh8gAjIam8RLemkvrn5hKeTKQ= Subject key identifier: A6:D5:3C:37:41:8E:1A:87:FC:47:77:0A:61:D8:DE:97:50:1A:04:B7 Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 3AB73DBF08099FB3A9859DF1E26B457D6DA032B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 0533 Signing time: Mon 22 Dec 2025 11:41:49 +0000 Manifest this update: Mon 22 Dec 2025 11:36:49 +0000 Manifest next update: Thu 25 Dec 2025 22:17:49 +0000 Files and hashes: 1: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) 2: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: QKjlOlbFvbWBhI535yS7d7IZyOuOkUuFZDnumAFOO/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b7:3d:bf:08:09:9f:b3:a9:85:9d:f1:e2:6b:45:7d:6d:a0:32:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Dec 22 11:36:49 2025 GMT Not After : Dec 25 22:17:49 2025 GMT Subject: CN=A6D53C37418E1A87FC47770A61D8DE97501A04B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:f4:b2:6e:a0:a5:71:80:8a:ce:24:24:76: 85:a1:f5:4f:52:8d:30:66:51:94:b9:94:c9:74:34: 88:d0:a7:52:9c:4c:0a:83:2a:84:0f:8c:02:5d:e5: 5b:a9:d3:24:06:c7:dd:d6:9c:43:60:41:12:28:3d: ae:4e:f2:9e:a2:6a:02:0a:ca:96:81:f6:ac:88:74: 31:2e:c9:c1:06:ed:77:a3:d8:66:69:b2:56:b7:98: 94:6f:cd:81:43:d7:00:36:f5:af:8e:1d:4b:e2:b8: 86:12:4b:b0:00:86:11:3f:4b:af:4a:17:20:b5:83: aa:f8:fb:a6:1e:ac:51:9e:0e:01:f8:05:f0:25:5a: 0c:bb:02:bb:80:15:94:bf:29:ee:54:08:36:75:38: 4d:4b:5a:2c:d0:44:be:d4:e9:3c:95:7e:9a:41:59: 93:fa:b8:c8:8d:4e:b0:08:f2:a2:56:42:9c:95:ac: 52:fa:11:84:21:df:22:e7:05:a9:f1:79:3d:fd:d3: 3d:ca:81:7a:a5:4c:06:28:96:e4:be:76:a0:f0:e4: 8a:4e:d3:8b:79:91:ae:24:99:d7:0b:bd:b1:c4:8f: 57:7c:17:0a:0f:19:d7:1c:94:b0:ce:f8:fc:ad:54: 0a:c7:c2:e9:7b:34:17:f8:88:ae:1c:63:47:30:7d: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D5:3C:37:41:8E:1A:87:FC:47:77:0A:61:D8:DE:97:50:1A:04:B7 X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9e:f2:a8:14:08:61:a5:71:ba:fd:1b:a6:00:52:bd:44:e6: 5c:8f:1b:cd:98:40:7c:32:b2:4c:df:c0:4a:b5:5a:c3:79:e1: a9:3e:41:59:e7:af:52:bb:8f:07:a3:27:fd:08:29:d6:1d:5e: 67:46:fa:b9:c4:12:4a:0f:d7:cf:ad:b1:5c:61:e4:8f:ec:04: 6b:ba:20:96:3c:2e:3c:18:bc:7a:bc:e4:71:56:2e:6b:0f:5a: 39:7f:e8:6e:fa:ee:6d:f6:1e:7e:3e:84:9c:f9:58:21:e5:19: 42:eb:70:47:90:36:c2:d8:80:c8:64:55:0e:8f:23:7f:95:7b: dd:f3:69:02:85:87:00:cc:d5:1e:5f:d0:4a:97:82:50:74:3c: ba:b2:e6:84:74:25:32:b6:08:b1:52:be:e7:59:71:14:21:c2: 1b:3a:af:a5:ba:0b:11:05:22:39:04:c0:f1:67:20:c8:48:6a: ba:a5:5c:95:20:d9:e1:fa:7a:18:74:a0:e8:6a:63:b7:84:80: 78:47:1d:8f:20:e5:7b:24:83:8c:f5:99:b0:2a:ec:77:bb:5b: 6a:c5:ce:b3:17:df:49:c1:f9:0c:85:de:4f:58:d2:39:04:2f: 12:80:f5:99:11:bc:36:01:22:38:2e:f7:6b:c1:2a:70:d9:07: 89:b5:72:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrc9vwgJn7OphZ3x4mtFfW2gMrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNTEyMjIxMTM2NDlaFw0yNTEyMjUyMjE3NDlaMDMxMTAvBgNV BAMTKEE2RDUzQzM3NDE4RTFBODdGQzQ3NzcwQTYxRDhERTk3NTAxQTA0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFPSybqClcYCKziQkdoWh9U9S jTBmUZS5lMl0NIjQp1KcTAqDKoQPjAJd5Vup0yQGx93WnENgQRIoPa5O8p6iagIK ypaB9qyIdDEuycEG7Xej2GZpsla3mJRvzYFD1wA29a+OHUviuIYSS7AAhhE/S69K FyC1g6r4+6YerFGeDgH4BfAlWgy7AruAFZS/Ke5UCDZ1OE1LWizQRL7U6TyVfppB WZP6uMiNTrAI8qJWQpyVrFL6EYQh3yLnBanxeT390z3KgXqlTAYoluS+dqDw5IpO 04t5ka4kmdcLvbHEj1d8FwoPGdcclLDO+PytVArHwul7NBf4iK4cY0cwfblHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUptU8N0GOGof8R3cKYdjel1AaBLcwHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADme8qgUCGGlcbr9G6YAUr1E5lyPG82YQHwy skzfwEq1WsN54ak+QVnnr1K7jwejJ/0IKdYdXmdG+rnEEkoP18+tsVxh5I/sBGu6 IJY8LjwYvHq85HFWLmsPWjl/6G767m32Hn4+hJz5WCHlGULrcEeQNsLYgMhkVQ6P I3+Ve93zaQKFhwDM1R5f0EqXglB0PLqy5oR0JTK2CLFSvudZcRQhwhs6r6W6CxEF IjkEwPFnIMhIarqlXJUg2eH6ehh0oOhqY7eEgHhHHY8g5Xskg4z1mbAq7He7W2rF zrMX30nB+QyF3k9Y0jkELxKA9ZkRvDYBIjgu92vBKnDZB4m1cvs= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:36 2025 by rpki-client