This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft File: 4AA75AF77EC48924696455B9F02192353D9C4014.mft (raw, json) Hash identifier: ZNvRy44NEub/UaUsGfQo5JaOFutFOs9D4SxX7N1+2hM= Subject key identifier: 4D:1E:9F:14:63:0E:3B:40:99:70:9A:63:E4:9D:18:F5:87:AD:91:97 Authority key identifier: 4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 Certificate issuer: /CN=4AA75AF77EC48924696455B9F02192353D9C4014 Certificate serial: 7595675529EEDFA497034F1E9F130F94F20B7CE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft Manifest number: E9 Signing time: Fri 19 Dec 2025 18:32:24 +0000 Manifest this update: Fri 19 Dec 2025 18:27:24 +0000 Manifest next update: Mon 22 Dec 2025 21:03:24 +0000 Files and hashes: 1: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: AbwriW0SgoijAVFc1a2C3A7Illyl/gL1e8q6s9TC+bw=) 2: 4AA75AF77EC48924696455B9F02192353D9C4014.crl (hash: 9lZLo39ned/fCxd/jk4sUNFCnJijmm9CRQBqhYkKu4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 21:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:95:67:55:29:ee:df:a4:97:03:4f:1e:9f:13:0f:94:f2:0b:7c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA75AF77EC48924696455B9F02192353D9C4014 Validity Not Before: Dec 19 18:27:24 2025 GMT Not After : Dec 22 21:03:24 2025 GMT Subject: CN=4D1E9F14630E3B4099709A63E49D18F587AD9197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:4a:68:f0:fb:cf:a7:40:02:f2:6f:8b:e9: d9:26:4f:fe:b2:b0:30:2e:ee:2d:5c:51:8d:43:8e: b5:b1:71:11:e9:10:51:cf:4e:1c:3f:f1:fb:51:73: 48:33:e7:b2:9f:b6:74:ac:1b:6b:c0:18:44:cf:ec: 6e:dc:f7:37:63:6b:7f:13:a8:0f:62:42:43:4f:73: 66:c2:41:1b:4c:87:b3:e8:48:ed:f4:54:d1:56:00: ee:c3:b4:80:e2:98:6f:db:75:fd:93:fe:7f:77:2d: 38:36:dc:f6:7e:83:a0:e1:7e:7a:85:1f:fb:cd:51: 8b:dc:b0:72:17:89:2e:64:db:dc:a1:b0:03:49:c8: ea:fd:cb:28:8d:e0:02:83:ce:d5:a4:52:00:cf:72: 2d:35:06:ab:c1:b1:83:a0:07:86:53:e8:5b:60:70: be:cf:68:ea:dd:76:55:40:dc:19:eb:8f:32:65:77: 8e:86:77:f1:d3:6a:0c:3a:c0:bc:97:f4:0c:d1:2e: 06:0f:36:e3:e4:92:82:ab:1b:61:00:7f:05:1b:3e: b3:ec:95:21:1d:c5:1c:63:3f:2e:65:70:2d:7c:c7: 96:ac:30:ee:b8:c1:c3:b7:03:03:26:47:6c:4e:90: 4f:fb:b7:13:f1:70:33:ff:c9:ab:f4:81:ff:f5:da: a1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1E:9F:14:63:0E:3B:40:99:70:9A:63:E4:9D:18:F5:87:AD:91:97 X509v3 Authority Key Identifier: keyid:4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e8:02:4f:e8:04:bc:5e:d0:50:84:4e:f8:3d:6a:f5:e0:c0: f4:7e:ec:42:30:09:92:6e:d1:5b:5e:6c:a5:f5:f0:cf:c2:6f: a4:5f:f3:5c:25:f5:2f:8d:e7:e6:91:0d:5b:7e:3e:e4:cc:e3: 57:42:70:00:ac:e1:57:3d:ce:52:10:be:1b:0e:44:c7:2b:1c: dc:79:4c:9f:9f:cd:75:99:52:0a:1c:72:da:9e:4a:89:45:cb: 42:0a:94:1a:68:34:3f:0d:a7:0c:70:0a:fa:27:15:aa:b1:5b: d0:ac:de:fe:65:5d:14:bb:91:0f:32:fa:af:06:08:b4:81:e2: 69:dd:ba:6b:5f:48:10:89:c2:66:6c:30:41:45:4e:d8:47:72: 0c:9d:13:47:9e:22:f2:42:07:09:e5:62:c4:36:a8:57:69:8e: a4:fa:02:32:cb:20:ee:a4:da:43:32:5b:95:9b:33:e2:50:ab: b3:1c:34:ff:ec:ea:c5:c0:a7:db:94:bd:0f:67:53:55:1f:0f: d7:79:57:86:1d:4c:b0:25:b3:2b:a9:e4:5b:4c:c0:4d:52:92: d2:cc:4d:76:87:0f:47:91:0b:75:e3:cb:df:c1:ed:10:93:6e: f6:70:ea:e5:dc:92:b1:34:c1:d2:e5:fe:fc:df:89:a2:11:7c: 75:cc:25:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZVnVSnu36SXA08enxMPlPILfOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUz RDlDNDAxNDAeFw0yNTEyMTkxODI3MjRaFw0yNTEyMjIyMTAzMjRaMDMxMTAvBgNV BAMTKDREMUU5RjE0NjMwRTNCNDA5OTcwOUE2M0U0OUQxOEY1ODdBRDkxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdkpo8PvPp0AC8m+L6dkmT/6y sDAu7i1cUY1DjrWxcRHpEFHPThw/8ftRc0gz57KftnSsG2vAGETP7G7c9zdja38T qA9iQkNPc2bCQRtMh7PoSO30VNFWAO7DtIDimG/bdf2T/n93LTg23PZ+g6DhfnqF H/vNUYvcsHIXiS5k29yhsANJyOr9yyiN4AKDztWkUgDPci01BqvBsYOgB4ZT6Ftg cL7PaOrddlVA3BnrjzJld46Gd/HTagw6wLyX9AzRLgYPNuPkkoKrG2EAfwUbPrPs lSEdxRxjPy5lcC18x5asMO64wcO3AwMmR2xOkE/7txPxcDP/yav0gf/12qGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTR6fFGMOO0CZcJpj5J0Y9YetkZcwHwYDVR0j BBgwFoAUSqda937EiSRpZFW58CGSNT2cQBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWYyOWFiYS02ZDdjLTQ0MzUtOTUzYy02MDQ5ODg3MzE1OTYvMC80QUE3NUFGNzdF QzQ4OTI0Njk2NDU1QjlGMDIxOTIzNTNEOUM0MDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUzRDlD NDAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTky MzUzRDlDNDAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJToAk/oBLxe0FCETvg9avXgwPR+7EIwCZJu 0VtebKX18M/Cb6Rf81wl9S+N5+aRDVt+PuTM41dCcACs4Vc9zlIQvhsORMcrHNx5 TJ+fzXWZUgocctqeSolFy0IKlBpoND8NpwxwCvonFaqxW9Cs3v5lXRS7kQ8y+q8G CLSB4mndumtfSBCJwmZsMEFFTthHcgydE0eeIvJCBwnlYsQ2qFdpjqT6AjLLIO6k 2kMyW5WbM+JQq7McNP/s6sXAp9uUvQ9nU1UfD9d5V4YdTLAlsyup5FtMwE1SktLM TXaHD0eRC3Xjy9/B7RCTbvZw6uXckrE0wdLl/vzfiaIRfHXMJQs= -----END CERTIFICATE-----Generated at Sat Dec 20 06:53:08 2025 by rpki-client