This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft File: 157748842D6BEE36DEE3B1999F10079808FF41C0.mft (raw, json) Hash identifier: SKee/vxKuVNjjfkam4nfeG2mV4OcVnRKETDKajUjnMw= Subject key identifier: F6:D3:0B:CF:52:58:50:7C:FF:C5:89:62:F2:7E:F6:13:CF:AB:A7:F3 Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 4C2EEDDCB97FDC414BC35A407D6F4C914E9089E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft Manifest number: 049E Signing time: Wed 17 Dec 2025 09:10:45 +0000 Manifest this update: Wed 17 Dec 2025 09:05:45 +0000 Manifest next update: Sat 20 Dec 2025 15:24:45 +0000 Files and hashes: 1: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: CxideEppeSjpo62C99uXU/oA6ba7hNbNjMc3zZT0ZTs=) 2: 157748842D6BEE36DEE3B1999F10079808FF41C0.crl (hash: ++hFomZrq0aF0Pr+X6RULxvVoH8s96tCTPyPtXR8AYw=) 3: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2e:ed:dc:b9:7f:dc:41:4b:c3:5a:40:7d:6f:4c:91:4e:90:89:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Dec 17 09:05:45 2025 GMT Not After : Dec 20 15:24:45 2025 GMT Subject: CN=F6D30BCF5258507CFFC58962F27EF613CFABA7F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:23:86:93:fe:4e:05:df:75:9f:19:22:0a: 0a:eb:a3:57:9a:ab:7b:54:73:38:44:3f:2d:38:43: 68:f7:20:1c:1a:21:ea:9a:42:5d:b0:0b:31:9d:9d: 16:95:0a:2a:c2:e0:08:cc:7a:09:ad:dd:a9:d4:f2: db:02:81:af:b4:a9:dc:f8:b0:98:61:fc:d1:a5:85: e8:a2:d2:eb:52:53:b1:33:99:28:ac:b4:27:9e:c2: 38:dc:00:39:9e:13:35:98:55:0a:61:1a:4e:c6:ff: 41:f6:be:4e:de:d1:3f:9b:a4:ec:63:5c:ef:b5:89: 35:e0:65:d3:74:bc:3d:19:62:2c:3f:cc:17:8d:6b: 53:b2:d6:5b:ff:08:0a:fd:36:35:f1:1d:31:32:ed: a7:c3:a1:70:e2:f7:36:d9:4d:07:dc:c9:72:32:cb: ac:9f:41:ff:2d:e0:35:02:7c:26:84:4f:ed:12:9b: 9e:d9:91:37:ac:ee:ae:f1:f5:92:7d:db:c4:98:c9: 63:ac:b2:1d:e3:e2:f6:85:b4:aa:0a:91:a3:9e:84: 80:df:e2:30:5b:04:df:4c:29:8a:31:29:4f:b5:26: 58:8e:f2:27:dc:19:46:ae:d4:d5:74:07:94:08:69: cf:03:f7:7f:06:4a:4b:0f:c6:8c:78:97:c2:48:cb: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D3:0B:CF:52:58:50:7C:FF:C5:89:62:F2:7E:F6:13:CF:AB:A7:F3 X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ad:09:25:d6:4e:4b:45:51:4a:15:59:a7:a8:4e:8e:f4:85: 16:64:08:4c:4f:6d:9a:96:e0:26:95:34:9f:3c:48:b4:e0:fe: f3:fa:5a:03:8b:c7:2b:29:d1:84:ad:79:d7:a1:5d:87:e8:1d: 66:28:a3:5a:5d:0e:a7:06:28:89:f8:07:90:ff:3e:59:53:61: 7e:90:4f:f8:66:e0:5a:9b:76:fc:48:2b:ec:0c:20:00:d1:6c: 30:41:9a:ae:22:81:6a:4c:37:b0:4c:e6:cb:f3:53:1f:8d:b9: 74:a2:52:42:28:40:e8:0d:b4:6f:78:05:08:9a:30:47:88:0e: 21:24:e5:97:ed:89:f9:5b:65:2f:44:6d:87:ca:35:be:19:49: d1:ea:9d:73:cc:29:6a:3b:64:96:36:10:bd:c1:19:14:98:14: 1f:a7:43:83:bb:4f:ff:5b:dc:82:e3:22:cd:8e:fa:65:43:ab: f7:75:4a:f8:b2:0a:03:ca:bc:a5:48:f9:93:3a:45:7b:a3:f6: 2f:bb:74:63:2a:a0:21:d3:6a:a3:84:ea:15:8f:cf:01:3a:c6: f2:a7:81:14:ea:04:67:b4:0d:c3:60:3c:d0:d6:08:6e:53:a5: 32:b0:fd:51:39:b5:6d:35:51:ab:1b:73:6c:37:88:2b:a3:c9: b2:c4:84:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTC7t3Ll/3EFLw1pAfW9MkU6QieEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNTEyMTcwOTA1NDVaFw0yNTEyMjAxNTI0NDVaMDMxMTAvBgNV BAMTKEY2RDMwQkNGNTI1ODUwN0NGRkM1ODk2MkYyN0VGNjEzQ0ZBQkE3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoiOGk/5OBd91nxkiCgrro1ea q3tUczhEPy04Q2j3IBwaIeqaQl2wCzGdnRaVCirC4AjMegmt3anU8tsCga+0qdz4 sJhh/NGlheii0utSU7EzmSistCeewjjcADmeEzWYVQphGk7G/0H2vk7e0T+bpOxj XO+1iTXgZdN0vD0ZYiw/zBeNa1Oy1lv/CAr9NjXxHTEy7afDoXDi9zbZTQfcyXIy y6yfQf8t4DUCfCaET+0Sm57ZkTes7q7x9ZJ928SYyWOssh3j4vaFtKoKkaOehIDf 4jBbBN9MKYoxKU+1JliO8ifcGUau1NV0B5QIac8D938GSksPxox4l8JIy7vdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9tMLz1JYUHz/xYli8n72E8+rp/MwHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3 OTgwOEZGNDFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGtCSXWTktFUUoVWaeoTo70hRZkCExPbZqW 4CaVNJ88SLTg/vP6WgOLxysp0YStedehXYfoHWYoo1pdDqcGKIn4B5D/PllTYX6Q T/hm4FqbdvxIK+wMIADRbDBBmq4igWpMN7BM5svzUx+NuXSiUkIoQOgNtG94BQia MEeIDiEk5ZftiflbZS9EbYfKNb4ZSdHqnXPMKWo7ZJY2EL3BGRSYFB+nQ4O7T/9b 3ILjIs2O+mVDq/d1SviyCgPKvKVI+ZM6RXuj9i+7dGMqoCHTaqOE6hWPzwE6xvKn gRTqBGe0DcNgPNDWCG5TpTKw/VE5tW01Uasbc2w3iCujybLEhEY= -----END CERTIFICATE-----Generated at Thu Dec 18 03:52:30 2025 by rpki-client