This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: 01XxOOg+m42reWBNA66O+t29HQHjSuw7zmy2AGDCVvU= Subject key identifier: FA:2C:97:12:04:B2:84:F3:FF:97:B9:2E:D6:EA:B1:2C:0E:D7:ED:2E Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 043B783D52DA99DF6D2F430D27DED43A24DE9ED1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: 011A Signing time: Thu 25 Dec 2025 12:41:42 +0000 Manifest this update: Thu 25 Dec 2025 12:36:42 +0000 Manifest next update: Sun 28 Dec 2025 22:02:42 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) 2: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: rN6Trn04wL7Q+zkVt8meWFAo2fShjOQK74kphq+ugQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3b:78:3d:52:da:99:df:6d:2f:43:0d:27:de:d4:3a:24:de:9e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Dec 25 12:36:42 2025 GMT Not After : Dec 28 22:02:42 2025 GMT Subject: CN=FA2C971204B284F3FF97B92ED6EAB12C0ED7ED2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:11:01:8d:12:56:17:06:78:99:5a:78:be: be:b7:a1:89:05:0c:b4:f0:04:87:7d:63:c1:89:b6: aa:b4:5f:54:13:80:a3:bf:6c:be:e8:02:32:ab:32: 66:0e:fc:b0:7a:17:7b:f2:a5:ee:9b:b0:43:95:f1: 69:1f:7e:6e:e3:dc:67:48:b8:cf:78:5f:4e:85:6c: e2:5e:94:3d:7a:29:ba:e4:15:7b:54:b0:8b:84:84: b8:1b:9e:4c:cb:aa:2b:64:db:16:e4:20:5a:08:fc: a4:e2:74:a6:8d:41:1c:67:5e:b6:a9:e8:20:96:76: 6e:5d:6c:94:74:c4:2a:61:d8:b8:94:47:af:df:54: 05:eb:80:d0:47:26:7f:17:4e:9f:7c:7c:8b:97:fc: bc:86:88:d2:8b:da:03:cd:47:56:59:08:5c:7e:e9: a5:cb:ab:3c:8a:9c:5e:58:99:d0:c5:2a:5b:88:77: 7d:f1:41:b5:69:d8:de:d3:ff:06:c4:ce:e8:04:10: 8d:77:ad:c8:17:31:8e:9a:ce:32:75:ed:6d:c8:54: d2:4e:ce:01:2e:7e:37:b0:93:8f:5a:02:eb:48:c1: a6:5d:7b:6f:b4:cc:f6:d4:2e:97:2e:cb:dd:df:0d: 87:b6:a9:d7:ac:15:9f:88:a1:99:82:92:c8:a5:b1: 11:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2C:97:12:04:B2:84:F3:FF:97:B9:2E:D6:EA:B1:2C:0E:D7:ED:2E X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:af:ed:1b:a3:53:eb:5b:90:e3:a5:a8:77:49:49:10:f2:73: e1:26:08:16:97:e2:24:eb:5a:b6:74:b8:98:db:93:9f:59:0a: 25:dc:f8:08:9a:73:66:7d:c5:93:d3:ce:3f:4a:fa:5b:78:1e: 8b:01:fd:47:a9:72:bd:37:73:ca:be:51:e2:30:5e:e8:8d:b0: 6b:f5:42:3e:43:27:50:af:ad:3b:0a:d7:8f:81:fc:59:b2:38: 9d:44:8c:cb:68:ae:16:5e:5d:9c:46:e0:e8:7e:44:5d:bd:c4: db:05:1f:88:b8:f3:b8:23:8a:26:28:1d:a0:eb:ba:c8:17:4c: 1c:5c:09:f7:b2:03:64:e4:e9:7f:42:a5:ae:24:d2:7d:89:33: 68:34:88:ce:18:15:fb:c0:da:c3:42:b3:a5:29:be:d4:ef:a8: c3:90:bb:7d:7d:8d:a2:43:75:20:5b:e0:86:14:06:f3:67:7e: 2d:23:5d:c6:bd:94:85:2f:0b:f5:64:9c:33:00:3b:7c:36:a9: 2a:29:61:02:27:f2:a5:5e:e6:57:48:26:c0:89:c9:40:ca:b1: 2e:ca:10:bc:b5:50:2c:c8:fb:74:78:c2:2f:18:98:c6:5e:65: 8b:ad:a3:ea:59:1e:5f:8c:9b:44:e2:21:ad:40:fa:e7:eb:bc: f9:4e:90:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDt4PVLamd9tL0MNJ97UOiTentEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTEyMjUxMjM2NDJaFw0yNTEyMjgyMjAyNDJaMDMxMTAvBgNV BAMTKEZBMkM5NzEyMDRCMjg0RjNGRjk3QjkyRUQ2RUFCMTJDMEVEN0VEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLxEBjRJWFwZ4mVp4vr63oYkF DLTwBId9Y8GJtqq0X1QTgKO/bL7oAjKrMmYO/LB6F3vype6bsEOV8Wkffm7j3GdI uM94X06FbOJelD16KbrkFXtUsIuEhLgbnkzLqitk2xbkIFoI/KTidKaNQRxnXrap 6CCWdm5dbJR0xCph2LiUR6/fVAXrgNBHJn8XTp98fIuX/LyGiNKL2gPNR1ZZCFx+ 6aXLqzyKnF5YmdDFKluId33xQbVp2N7T/wbEzugEEI13rcgXMY6azjJ17W3IVNJO zgEufjewk49aAutIwaZde2+0zPbULpcuy93fDYe2qdesFZ+IoZmCksilsRHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+iyXEgSyhPP/l7ku1uqxLA7X7S4wHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECv7RujU+tbkOOlqHdJSRDyc+EmCBaX4iTr WrZ0uJjbk59ZCiXc+Aiac2Z9xZPTzj9K+lt4HosB/Uepcr03c8q+UeIwXuiNsGv1 Qj5DJ1CvrTsK14+B/FmyOJ1EjMtorhZeXZxG4Oh+RF29xNsFH4i487gjiiYoHaDr usgXTBxcCfeyA2Tk6X9Cpa4k0n2JM2g0iM4YFfvA2sNCs6UpvtTvqMOQu319jaJD dSBb4IYUBvNnfi0jXca9lIUvC/VknDMAO3w2qSopYQIn8qVe5ldIJsCJyUDKsS7K ELy1UCzI+3R4wi8YmMZeZYuto+pZHl+Mm0TiIa1A+ufrvPlOkKQ= -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:09 2025 by rpki-client