This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json) Hash identifier: CkFiR9idV4kEZ804EqsAM/tr4PkBIzYz1lHL1Ajqvuc= Subject key identifier: 31:66:20:9F:B3:5D:15:4B:CE:A0:08:72:F0:1A:4C:41:19:30:9E:85 Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Certificate serial: 4D5AF67601AF21DE0936B89C491450ECD204BD45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft Manifest number: DC Signing time: Wed 17 Dec 2025 15:40:43 +0000 Manifest this update: Wed 17 Dec 2025 15:35:43 +0000 Manifest next update: Sun 21 Dec 2025 02:06:43 +0000 Files and hashes: 1: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: dbUmmKyin6WUYUUPyKM6mQjJUeFapSy/TJCtTw7pKyc=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5a:f6:76:01:af:21:de:09:36:b8:9c:49:14:50:ec:d2:04:bd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Validity Not Before: Dec 17 15:35:43 2025 GMT Not After : Dec 21 02:06:43 2025 GMT Subject: CN=3166209FB35D154BCEA00872F01A4C4119309E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:3f:44:e8:4b:43:c6:03:69:cc:52:fc:63: 7c:36:6f:14:f9:1d:c7:1d:57:8a:48:33:41:b1:5a: c7:c5:4d:3a:78:0e:0f:96:b4:01:ab:a7:eb:d7:95: c1:51:87:a4:6d:2e:47:5f:78:90:f6:2c:91:94:eb: b2:f9:d7:cb:12:e6:64:20:36:7b:6e:88:d6:f3:b5: 00:43:6b:b8:bc:cd:4b:ce:c1:c8:ff:86:40:ab:11: a2:60:66:88:9d:be:2f:2e:c3:4f:92:ce:8e:a8:1a: 17:3e:15:dd:d1:a7:60:c0:78:13:ce:cc:27:bc:de: 3d:70:bc:79:6b:26:6b:11:16:6a:d3:5a:cb:2c:e6: 68:ae:7e:50:5c:80:3b:0f:ee:06:cd:12:7c:df:14: 3f:70:94:2f:ad:1e:19:c7:c9:7d:9a:5d:cf:cb:47: d1:58:09:09:78:64:9c:50:d0:1a:0f:e6:22:ad:2e: 89:22:4d:b5:57:8b:95:33:da:df:d3:7a:eb:e4:08: b0:eb:75:ac:8c:52:ca:49:5b:b8:10:ff:ec:54:3f: 22:b0:33:0d:b3:a3:02:cf:f0:4e:ab:7b:1f:f8:a3: 7d:45:e8:20:68:8c:ae:9a:84:86:f9:f3:79:48:fd: db:ba:36:36:0a:fb:04:27:52:2f:dd:bd:cb:bf:69: 77:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:66:20:9F:B3:5D:15:4B:CE:A0:08:72:F0:1A:4C:41:19:30:9E:85 X509v3 Authority Key Identifier: keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b4:e3:e6:36:a8:7b:53:3a:8b:97:44:89:2d:65:88:fb:7f: c4:57:36:07:10:56:38:8d:f0:54:dd:f9:b4:06:5b:15:f7:ec: fb:81:e3:4d:2e:a4:a4:3c:5b:71:63:c5:dd:0e:85:d1:48:e6: 60:1c:64:ae:8c:3c:28:ff:4f:3f:81:6a:52:cf:9f:8b:4d:0a: 63:6f:4b:57:75:63:d6:ef:01:76:7e:29:36:1c:fd:70:6b:ec: fb:f7:f7:ad:2f:b7:b0:2b:20:ba:7e:b9:17:72:63:98:70:88: 70:b2:3f:1f:31:b2:62:b0:e0:29:13:40:fd:07:12:b6:1e:f2: a3:f5:4d:42:7f:1f:dc:4b:57:6e:d4:ec:25:4c:1b:82:80:63: ec:70:23:f2:17:63:4b:4f:df:ef:26:0c:90:4d:fb:e2:e4:52: 21:51:1b:1f:61:d2:35:a8:d6:eb:52:97:18:36:92:3a:44:f3: cd:da:55:40:83:c1:5f:e9:35:f9:fb:1b:a0:5e:8d:bd:45:03: 53:27:cb:92:a5:3b:e6:d9:b9:fa:6a:58:f5:13:f5:6d:ac:88: 2c:32:a0:df:f2:e9:e6:b2:80:41:8c:46:0d:a1:3f:e5:bc:d9: 86:b4:5b:fe:7d:92:92:90:84:61:7a:68:39:8f:fb:a9:d2:97: fe:3d:1f:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVr2dgGvId4JNricSRRQ7NIEvUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy REMxRTg3NjAeFw0yNTEyMTcxNTM1NDNaFw0yNTEyMjEwMjA2NDNaMDMxMTAvBgNV BAMTKDMxNjYyMDlGQjM1RDE1NEJDRUEwMDg3MkYwMUE0QzQxMTkzMDlFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4T9E6EtDxgNpzFL8Y3w2bxT5 HccdV4pIM0GxWsfFTTp4Dg+WtAGrp+vXlcFRh6RtLkdfeJD2LJGU67L518sS5mQg NntuiNbztQBDa7i8zUvOwcj/hkCrEaJgZoidvi8uw0+Szo6oGhc+Fd3Rp2DAeBPO zCe83j1wvHlrJmsRFmrTWsss5miuflBcgDsP7gbNEnzfFD9wlC+tHhnHyX2aXc/L R9FYCQl4ZJxQ0BoP5iKtLokiTbVXi5Uz2t/TeuvkCLDrdayMUspJW7gQ/+xUPyKw Mw2zowLP8E6rex/4o31F6CBojK6ahIb583lI/du6NjYK+wQnUi/dvcu/aXdbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWYgn7NdFUvOoAhy8BpMQRkwnoUwHwYDVR0j BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5 MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKK04+Y2qHtTOouXRIktZYj7f8RXNgcQVjiN 8FTd+bQGWxX37PuB400upKQ8W3Fjxd0OhdFI5mAcZK6MPCj/Tz+BalLPn4tNCmNv S1d1Y9bvAXZ+KTYc/XBr7Pv3960vt7ArILp+uRdyY5hwiHCyPx8xsmKw4CkTQP0H ErYe8qP1TUJ/H9xLV27U7CVMG4KAY+xwI/IXY0tP3+8mDJBN++LkUiFRGx9h0jWo 1utSlxg2kjpE883aVUCDwV/pNfn7G6Bejb1FA1Mny5KlO+bZufpqWPUT9W2siCwy oN/y6eaygEGMRg2hP+W82Ya0W/59kpKQhGF6aDmP+6nSl/49H6s= -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:03 2025 by rpki-client