This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: 6Fe1fJEii9z5TFtC92v8fUAJQj2JM0Z+S4nuMsB20z4= Subject key identifier: B1:AB:E9:58:89:A1:E8:0D:C7:9D:D2:A8:8E:6A:04:39:56:65:A6:AB Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 423072598EFAA1BB781E65C86BF420C55B801A72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 01AC Signing time: Thu 18 Dec 2025 19:53:01 +0000 Manifest this update: Thu 18 Dec 2025 19:48:01 +0000 Manifest next update: Mon 22 Dec 2025 07:42:01 +0000 Files and hashes: 1: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) 2: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) 3: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: 8iowY7ZyplJ0RiltcFYumkjAYxXk2NYvDCG/r/v5SeI=) 4: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:30:72:59:8e:fa:a1:bb:78:1e:65:c8:6b:f4:20:c5:5b:80:1a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Dec 18 19:48:01 2025 GMT Not After : Dec 22 07:42:01 2025 GMT Subject: CN=B1ABE95889A1E80DC79DD2A88E6A04395665A6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:9c:d0:d6:3a:c7:0d:a0:ea:be:79:d8:eb: f8:57:a2:09:81:0f:ab:19:57:5a:97:77:35:55:2f: b8:d0:b9:86:5f:43:d3:d4:a6:44:69:20:48:e9:d1: 23:f0:e3:37:59:85:54:97:09:e0:61:c8:8c:62:69: 92:ae:0f:10:52:83:82:64:9c:ed:25:fe:12:60:16: 47:79:07:26:fb:83:19:dc:c7:32:73:1f:be:2c:ee: 38:76:d9:0a:4b:eb:5e:7e:3a:37:c3:c5:8f:06:d5: cd:cb:db:af:32:c0:31:3f:0e:27:bd:c6:f5:84:17: 3d:0b:a1:93:5b:af:69:18:c2:2e:3c:74:dc:3b:1e: 5b:f4:d9:d5:bd:b6:5f:c3:fe:88:a7:e6:12:cd:56: 38:60:48:e8:74:e2:0d:e2:0e:c4:22:cf:db:18:9d: 88:ec:55:c1:a9:b8:bd:f5:12:30:97:a9:fd:b4:d8: 0f:0b:cb:63:59:97:46:1a:5d:84:b1:55:6b:7c:15: e4:9a:17:ec:9a:67:47:fb:f7:c2:5a:c4:0c:e9:7a: 1b:cc:ad:79:2c:9b:58:10:1e:0f:35:67:76:12:0d: 8f:b5:9c:8b:90:1b:49:3d:2b:0b:ba:3d:ce:91:a7: 99:55:14:42:d5:94:d5:4e:d1:34:72:fb:af:a7:8c: 79:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AB:E9:58:89:A1:E8:0D:C7:9D:D2:A8:8E:6A:04:39:56:65:A6:AB X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:45:86:76:e2:9d:30:38:9d:d3:69:c3:fe:68:5f:8d:d7:e7: 7a:b4:9f:7f:58:fd:a4:11:f2:f2:2f:d5:76:3e:b2:f0:29:a5: 5a:99:15:87:b0:18:df:e3:2f:a5:83:09:59:da:60:b6:91:44: 68:e3:2e:c3:c6:79:7b:e6:38:e2:9d:ce:5b:00:8e:a2:b5:41: 83:db:8d:a3:b7:de:a8:f3:79:c3:40:c3:f1:f6:ee:74:24:a6: 70:18:b6:ba:33:6b:34:96:26:cc:71:e2:87:f1:c5:43:11:d9: eb:d5:b9:23:c0:c8:f6:99:8b:19:84:9d:d4:9b:a4:17:39:03: f9:ae:72:02:a6:38:03:b9:c8:a1:1e:70:17:59:8c:3b:72:e5: 6b:cb:2d:fc:68:97:1b:05:15:ec:e8:6b:2c:72:36:36:42:47: 09:cc:d8:ef:45:8a:73:f4:92:46:b8:c2:02:9a:43:db:06:7d: e0:c7:81:b1:9e:42:34:0c:82:21:6a:33:c9:9c:1b:4d:35:0d: b0:3a:c4:ff:eb:17:68:b2:5a:fa:97:91:56:3f:6c:9c:0c:30: 54:b9:41:b6:0f:4d:88:11:7b:30:58:f1:1c:b7:a8:3b:c1:47: b0:6b:d2:98:1f:b6:a1:4c:99:01:51:ad:8a:d3:1d:a8:65:29: 0b:81:71:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQjByWY76obt4HmXIa/QgxVuAGnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTEyMTgxOTQ4MDFaFw0yNTEyMjIwNzQyMDFaMDMxMTAvBgNV BAMTKEIxQUJFOTU4ODlBMUU4MERDNzlERDJBODhFNkEwNDM5NTY2NUE2QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9kpzQ1jrHDaDqvnnY6/hXogmB D6sZV1qXdzVVL7jQuYZfQ9PUpkRpIEjp0SPw4zdZhVSXCeBhyIxiaZKuDxBSg4Jk nO0l/hJgFkd5Byb7gxncxzJzH74s7jh22QpL615+OjfDxY8G1c3L268ywDE/Die9 xvWEFz0LoZNbr2kYwi48dNw7Hlv02dW9tl/D/oin5hLNVjhgSOh04g3iDsQiz9sY nYjsVcGpuL31EjCXqf202A8Ly2NZl0YaXYSxVWt8FeSaF+yaZ0f798JaxAzpehvM rXksm1gQHg81Z3YSDY+1nIuQG0k9Kwu6Pc6Rp5lVFELVlNVO0TRy+6+njHmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsavpWImh6A3HndKojmoEOVZlpqswHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1FhnbinTA4ndNpw/5oX43X53q0n39Y/aQR 8vIv1XY+svAppVqZFYewGN/jL6WDCVnaYLaRRGjjLsPGeXvmOOKdzlsAjqK1QYPb jaO33qjzecNAw/H27nQkpnAYtrozazSWJsxx4ofxxUMR2evVuSPAyPaZixmEndSb pBc5A/mucgKmOAO5yKEecBdZjDty5WvLLfxolxsFFezoayxyNjZCRwnM2O9FinP0 kka4wgKaQ9sGfeDHgbGeQjQMgiFqM8mcG001DbA6xP/rF2iyWvqXkVY/bJwMMFS5 QbYPTYgRezBY8Ry3qDvBR7Br0pgftqFMmQFRrYrTHahlKQuBcd0= -----END CERTIFICATE-----Generated at Fri Dec 19 21:15:20 2025 by rpki-client