This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: o4YmhFL/BLQK4TRQkUlmgtXkOH4IhIsudeuEljmfwH0= Subject key identifier: 0B:D2:58:3B:04:A1:CD:FC:30:63:98:E7:A2:04:20:EA:0A:DC:90:DE Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 531C6829039F892ABC1F55D7FD1E3690D4BD0ABC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 01EE Signing time: Fri 19 Dec 2025 23:44:38 +0000 Manifest this update: Fri 19 Dec 2025 23:39:38 +0000 Manifest next update: Tue 23 Dec 2025 09:40:38 +0000 Files and hashes: 1: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: lErVtCJlJ99qdLyNM63Qc8dGtmVES+Gq6hMVSb2l3Bw=) 2: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: k3TWS9EMIy8Aq2EwD+5FTkmYFXY12HmYmh8vOGdwopQ=) 3: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: o2mdyr8Mq4Ag/ZbjKPO7j0I85QVkIpCUvoa3EKIYpr0=) 4: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: +DUYJRF9jOOzr505d8fEOet+gT8K/JULeZjzetsH0Vc=) 5: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: Nlbwhvq6RNX8tKRWUBvBeTEEQD1O0jz0pdRla10hmjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 09:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1c:68:29:03:9f:89:2a:bc:1f:55:d7:fd:1e:36:90:d4:bd:0a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Dec 19 23:39:38 2025 GMT Not After : Dec 23 09:40:38 2025 GMT Subject: CN=0BD2583B04A1CDFC306398E7A20420EA0ADC90DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:29:ba:38:66:27:34:9a:c2:0f:3a:4f:28:ed: 08:9e:c3:c4:a0:bf:21:29:75:c1:d3:bd:cb:94:ef: 15:ff:71:9d:be:c6:49:ce:e7:d8:8f:e4:74:f3:d3: 26:25:28:eb:39:a4:70:23:f9:85:d7:3f:d4:b0:27: bc:b1:7f:0f:b3:3f:b0:19:e1:90:f9:24:99:c5:12: a2:c7:d9:9b:dc:00:db:09:f2:76:59:ba:3c:88:41: ec:26:aa:52:fb:bf:74:b8:12:10:61:85:1b:8e:20: e9:84:25:ff:28:29:47:ce:62:ef:47:05:c8:b2:86: 73:fd:43:7e:0c:18:06:0a:ae:d7:be:2d:57:fd:a3: 34:e3:32:ae:97:2f:7f:86:b2:f6:5b:f5:cb:a9:95: 46:a0:5d:66:96:28:01:fa:86:7f:f4:57:d1:87:ae: 47:7e:02:2c:51:df:5c:25:bc:c8:f0:c4:c5:64:ac: 2d:08:5f:3a:63:95:10:26:de:ee:3f:43:21:00:6d: 56:99:ef:a2:1e:e3:f0:07:7f:f2:ad:ec:54:83:be: d5:51:7b:17:ca:f2:03:2f:5f:6a:53:1c:72:1e:4a: 9d:be:a3:b2:09:7c:b9:93:09:59:ef:ff:6b:61:b2: 1a:4f:4d:d8:79:c6:32:7c:c8:29:24:7b:34:ae:50: 38:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D2:58:3B:04:A1:CD:FC:30:63:98:E7:A2:04:20:EA:0A:DC:90:DE X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:4a:f7:b3:40:fb:16:f4:0e:cc:6a:91:8e:7e:3d:3b:30:6b: c2:f4:eb:0c:8b:b7:53:b5:9f:9c:1d:f9:b1:cb:2e:c6:08:6e: 04:eb:39:04:04:a7:e4:33:b3:d1:68:a6:84:54:c0:53:f8:98: ba:ba:38:c1:ff:91:f9:6c:ac:37:5e:e6:a7:2f:34:20:32:16: f3:9f:86:71:0c:c4:ea:c2:a1:02:f6:2f:6a:5f:d8:d0:19:12: 8d:bd:a5:b5:78:c9:23:97:56:6e:93:71:66:16:50:29:7c:f4: f6:33:64:51:15:f8:2b:5a:b3:5b:91:e6:8b:41:5f:a5:ea:23: 29:85:c5:35:0d:7c:4c:98:34:cb:dc:b8:39:29:f1:12:21:5b: 09:43:a3:69:ac:5b:48:aa:3f:00:08:30:c4:4a:17:da:e4:2e: 41:7b:25:90:f0:ae:e8:1e:4e:5c:55:e0:32:73:f2:e4:96:a2: f3:36:a1:cd:8a:c9:9f:16:88:b0:f8:71:00:ee:7a:d9:04:ab: 6a:0d:33:a8:c2:4f:6a:6e:52:bf:e6:5c:37:04:c3:d1:f7:1c: 3b:dc:0e:29:03:55:90:98:1b:f9:24:5b:2e:3d:db:ab:61:14: 1d:b3:51:26:15:4a:01:ae:a4:11:64:3e:bc:3f:9d:7e:96:ba: ad:f0:aa:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxxoKQOfiSq8H1XX/R42kNS9CrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTEyMTkyMzM5MzhaFw0yNTEyMjMwOTQwMzhaMDMxMTAvBgNV BAMTKDBCRDI1ODNCMDRBMUNERkMzMDYzOThFN0EyMDQyMEVBMEFEQzkwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsKbo4Zic0msIPOk8o7Qiew8Sg vyEpdcHTvcuU7xX/cZ2+xknO59iP5HTz0yYlKOs5pHAj+YXXP9SwJ7yxfw+zP7AZ 4ZD5JJnFEqLH2ZvcANsJ8nZZujyIQewmqlL7v3S4EhBhhRuOIOmEJf8oKUfOYu9H BciyhnP9Q34MGAYKrte+LVf9ozTjMq6XL3+GsvZb9cuplUagXWaWKAH6hn/0V9GH rkd+AixR31wlvMjwxMVkrC0IXzpjlRAm3u4/QyEAbVaZ76Ie4/AHf/Kt7FSDvtVR exfK8gMvX2pTHHIeSp2+o7IJfLmTCVnv/2thshpPTdh5xjJ8yCkkezSuUDjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC9JYOwShzfwwY5jnogQg6grckN4wHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINK97NA+xb0DsxqkY5+PTswa8L06wyLt1O1 n5wd+bHLLsYIbgTrOQQEp+Qzs9FopoRUwFP4mLq6OMH/kflsrDde5qcvNCAyFvOf hnEMxOrCoQL2L2pf2NAZEo29pbV4ySOXVm6TcWYWUCl89PYzZFEV+Ctas1uR5otB X6XqIymFxTUNfEyYNMvcuDkp8RIhWwlDo2msW0iqPwAIMMRKF9rkLkF7JZDwruge TlxV4DJz8uSWovM2oc2KyZ8WiLD4cQDuetkEq2oNM6jCT2puUr/mXDcEw9H3HDvc DikDVZCYG/kkWy4926thFB2zUSYVSgGupBFkPrw/nX6Wuq3wqtk= -----END CERTIFICATE-----Generated at Mon Dec 22 02:36:59 2025 by rpki-client