This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: 674hQbY0pSI4lUq2iwPwuomaHzHdw+R1ZyBKGgH/7L4= Subject key identifier: 3C:63:0A:DC:FB:9B:6B:BE:28:24:A9:AA:20:87:AB:4D:7D:0F:CA:52 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 64EE34E3DDE9048E6445FD01C87F1574CD713809 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 01CA Signing time: Wed 17 Dec 2025 00:41:04 +0000 Manifest this update: Wed 17 Dec 2025 00:36:04 +0000 Manifest next update: Sat 20 Dec 2025 03:19:04 +0000 Files and hashes: 1: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) 2: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: 1oLsMJXbmP6VMRpP1Ob4Pkz62tkBEz3oSlAPsaVIPzc=) 3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ee:34:e3:dd:e9:04:8e:64:45:fd:01:c8:7f:15:74:cd:71:38:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Dec 17 00:36:04 2025 GMT Not After : Dec 20 03:19:04 2025 GMT Subject: CN=3C630ADCFB9B6BBE2824A9AA2087AB4D7D0FCA52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1c:61:91:dd:3a:d0:60:5f:08:f8:a6:68:93: 29:c0:a0:54:6d:81:4e:24:22:aa:72:40:12:19:f1: 9d:2e:56:4f:42:a6:86:79:a6:21:70:f7:ea:83:a9: 3a:0a:f4:86:2a:f1:f9:1b:5f:7a:51:c1:b9:cb:41: 79:1d:b1:2f:4f:2b:c4:3d:08:ed:e7:7f:04:3c:86: 72:b2:36:d0:8a:31:b6:16:44:32:1a:91:d6:6e:db: 7f:80:69:dc:19:91:6f:e6:ce:b0:9d:63:46:b3:2a: e4:ed:fb:0f:a9:93:75:45:bd:e1:65:f0:45:a9:77: aa:48:43:98:c3:a0:bc:ac:0f:e9:fa:b1:73:86:30: 07:1a:0e:f4:95:1e:51:30:47:a0:80:1e:f8:41:49: 3c:2b:3e:5a:1f:2a:58:e8:19:79:e4:e8:e4:1d:86: e7:39:ac:9a:a2:2b:62:1e:19:51:86:52:1c:bd:47: 07:8a:43:8f:47:95:84:d0:ab:b5:3b:7f:31:4d:6a: 17:43:8e:aa:d1:76:f5:b7:c8:e9:79:72:b4:38:c2: 18:4d:d1:8d:79:61:82:36:29:81:e3:16:5b:2e:2a: 2a:7e:83:fb:bf:40:8d:28:ed:c6:32:6e:f0:9e:88: 0a:9e:e4:0d:be:e4:75:46:fe:10:10:14:83:27:6a: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:63:0A:DC:FB:9B:6B:BE:28:24:A9:AA:20:87:AB:4D:7D:0F:CA:52 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a2:eb:11:51:87:76:f5:23:a4:b3:03:6e:99:6b:ff:73:b1: 66:a6:ca:12:49:d9:d6:a7:ad:2f:9d:d4:83:db:cc:be:9a:18: 9d:55:30:e4:21:69:84:6c:53:a7:50:d4:ea:71:c0:69:9a:14: 8f:a8:d6:83:22:96:1c:15:91:92:7c:ca:7c:69:ff:d8:28:2c: d2:b4:d7:1f:55:1a:a7:d1:2a:b2:6a:fa:0a:9a:6e:9d:30:9c: 95:cb:6c:dd:d7:ad:3b:8f:5a:92:bd:74:d2:25:9c:fe:ec:66: 75:fb:90:f7:c1:0f:22:76:75:9d:a5:d5:24:3b:f7:0d:38:91: 25:8d:31:2b:a2:8e:5f:a9:fa:87:f1:2a:eb:96:52:c6:b9:0d: ee:18:04:89:f0:9b:ba:cf:9c:e8:a7:50:98:7e:25:d0:44:4e: 81:32:7e:04:48:e7:c8:38:d5:17:0a:be:94:02:32:b4:bf:66: bc:7f:bd:01:0b:34:f7:c2:80:32:00:42:d1:a6:89:0b:67:60: 94:84:01:83:41:05:53:49:29:ba:09:b4:14:81:c4:c0:f5:26: fa:34:9e:a9:71:da:d7:3c:6d:bf:3a:4f:e4:3a:1a:af:b6:1c: aa:c3:a7:da:be:8d:19:d5:50:d2:db:09:ac:55:ba:90:50:e0: 8e:74:8b:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZO40493pBI5kRf0ByH8VdM1xOAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTEyMTcwMDM2MDRaFw0yNTEyMjAwMzE5MDRaMDMxMTAvBgNV BAMTKDNDNjMwQURDRkI5QjZCQkUyODI0QTlBQTIwODdBQjREN0QwRkNBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHGGR3TrQYF8I+KZokynAoFRt gU4kIqpyQBIZ8Z0uVk9CpoZ5piFw9+qDqToK9IYq8fkbX3pRwbnLQXkdsS9PK8Q9 CO3nfwQ8hnKyNtCKMbYWRDIakdZu23+AadwZkW/mzrCdY0azKuTt+w+pk3VFveFl 8EWpd6pIQ5jDoLysD+n6sXOGMAcaDvSVHlEwR6CAHvhBSTwrPlofKljoGXnk6OQd huc5rJqiK2IeGVGGUhy9RweKQ49HlYTQq7U7fzFNahdDjqrRdvW3yOl5crQ4whhN 0Y15YYI2KYHjFlsuKip+g/u/QI0o7cYybvCeiAqe5A2+5HVG/hAQFIMnav+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPGMK3Puba74oJKmqIIerTX0PylIwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6i6xFRh3b1I6SzA26Za/9zsWamyhJJ2dan rS+d1IPbzL6aGJ1VMOQhaYRsU6dQ1OpxwGmaFI+o1oMilhwVkZJ8ynxp/9goLNK0 1x9VGqfRKrJq+gqabp0wnJXLbN3XrTuPWpK9dNIlnP7sZnX7kPfBDyJ2dZ2l1SQ7 9w04kSWNMSuijl+p+ofxKuuWUsa5De4YBInwm7rPnOinUJh+JdBEToEyfgRI58g4 1RcKvpQCMrS/Zrx/vQELNPfCgDIAQtGmiQtnYJSEAYNBBVNJKboJtBSBxMD1Jvo0 nqlx2tc8bb86T+Q6Gq+2HKrDp9q+jRnVUNLbCaxVupBQ4I50i50= -----END CERTIFICATE-----Generated at Fri Dec 19 05:22:02 2025 by rpki-client