This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: vYWyCvX8bOyky7pu3R8V99X1P6uYHycv347v/nKNS5U= Subject key identifier: 44:36:D8:65:63:3E:41:C0:68:91:22:1B:8E:02:C7:79:C4:A6:96:36 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 678BEC72B55F5202BFB0216A1B07DAFA6B20385F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 0537 Signing time: Mon 22 Dec 2025 22:12:58 +0000 Manifest this update: Mon 22 Dec 2025 22:07:58 +0000 Manifest next update: Fri 26 Dec 2025 06:56:58 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) 2: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: M/EH2rI4ldQhZaUe9MI4EQP0BkiCCMhjU2Ci0XOya8Q=) 3: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: XVdQS0VLPYYwvJL1wB1gS/EnNKmAaiKcWDXT7Uz3gIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8b:ec:72:b5:5f:52:02:bf:b0:21:6a:1b:07:da:fa:6b:20:38:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Dec 22 22:07:58 2025 GMT Not After : Dec 26 06:56:58 2025 GMT Subject: CN=4436D865633E41C06891221B8E02C779C4A69636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:76:7b:8b:bb:e5:be:c3:4e:75:0d:af:8a: e6:4a:56:fb:5c:36:90:31:56:6a:33:0f:b3:b7:f1: 05:75:ff:aa:5d:2d:26:96:bf:a6:4a:2c:8a:04:3b: e1:6f:27:1e:ee:28:94:21:de:ff:2c:3d:34:2b:21: 66:08:bd:1d:ca:cb:43:f9:c0:b8:8f:2e:29:fe:16: f4:b7:72:24:50:cf:da:cb:04:70:00:49:c6:b2:62: 43:00:94:82:a5:ba:bf:49:03:53:5e:87:27:1d:b1: 1b:1a:66:9e:3b:98:c9:ec:5f:5b:cd:01:9c:85:c6: f0:69:9c:b0:6f:d2:50:4a:9c:fc:cd:cd:9d:78:42: 95:6c:97:7e:c7:d6:fe:d5:f0:11:aa:5b:80:06:39: f8:fc:dc:e6:8e:dd:7d:6b:b9:3b:32:b3:aa:a9:b5: 46:92:28:8d:83:b7:64:1c:d5:23:e2:5a:c2:e8:e9: 13:6f:d0:e5:d3:6c:08:a5:5f:0e:0c:54:a2:c8:52: 05:be:ad:e6:c5:b8:da:fc:9d:a7:08:4b:7d:a4:15: ca:22:2f:ff:75:27:1a:31:5c:e8:78:7c:b9:bc:5a: 00:89:86:25:4d:1b:86:21:f6:d5:48:f7:1f:95:ae: c9:de:ba:02:9b:62:43:f8:d4:9d:8a:8a:a0:90:11: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:36:D8:65:63:3E:41:C0:68:91:22:1B:8E:02:C7:79:C4:A6:96:36 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:63:a2:80:e0:4c:30:de:3b:e3:f7:e4:3e:5a:c6:cb:e3:c4: aa:a9:41:46:02:3c:4f:ea:06:7b:c4:aa:ba:6e:c9:3a:bd:41: a8:2f:ef:c8:3a:ed:31:26:6d:2c:50:28:71:fc:2a:77:dd:af: 89:96:6c:dd:d3:b6:d0:ed:39:0a:f7:d3:03:62:6a:20:0b:b8: 62:dd:19:0c:35:b6:8d:50:88:a4:1a:4f:8f:a5:ad:ed:e3:a7: 4e:d0:aa:ff:e3:5c:e6:04:89:83:76:22:d3:7d:13:64:66:34: fa:34:97:61:3a:f8:cd:1b:53:a8:26:c4:57:ed:76:e0:26:3d: e7:38:25:e8:8c:a7:9a:6f:d0:a4:61:ed:fd:6b:a6:81:9c:78: 69:93:98:3f:67:e8:70:da:c8:a0:23:b5:24:d2:22:65:30:dc: 70:f1:21:36:db:90:2e:9b:91:3f:97:8c:50:fd:4f:e5:25:b5: 00:2b:99:a4:20:b8:e9:6d:5c:3f:85:2f:c4:16:47:a4:46:e4: 68:97:cf:d0:ef:87:a1:64:6a:55:84:29:69:84:42:06:40:14: 0d:64:2c:90:e0:14:b9:d6:a2:3e:46:f5:e1:ed:c4:56:ad:09: a0:95:79:44:be:93:04:97:0e:07:67:65:8b:3a:cd:10:36:da: cf:0b:cc:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4vscrVfUgK/sCFqGwfa+msgOF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTEyMjIyMjA3NThaFw0yNTEyMjYwNjU2NThaMDMxMTAvBgNV BAMTKDQ0MzZEODY1NjMzRTQxQzA2ODkxMjIxQjhFMDJDNzc5QzRBNjk2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgXZ7i7vlvsNOdQ2viuZKVvtc NpAxVmozD7O38QV1/6pdLSaWv6ZKLIoEO+FvJx7uKJQh3v8sPTQrIWYIvR3Ky0P5 wLiPLin+FvS3ciRQz9rLBHAAScayYkMAlIKlur9JA1NehycdsRsaZp47mMnsX1vN AZyFxvBpnLBv0lBKnPzNzZ14QpVsl37H1v7V8BGqW4AGOfj83OaO3X1ruTsys6qp tUaSKI2Dt2Qc1SPiWsLo6RNv0OXTbAilXw4MVKLIUgW+rebFuNr8nacIS32kFcoi L/91JxoxXOh4fLm8WgCJhiVNG4Yh9tVI9x+VrsneugKbYkP41J2KiqCQEc2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURDbYZWM+QcBokSIbjgLHecSmljYwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFjooDgTDDeO+P35D5axsvjxKqpQUYCPE/q BnvEqrpuyTq9Qagv78g67TEmbSxQKHH8Knfdr4mWbN3TttDtOQr30wNiaiALuGLd GQw1to1QiKQaT4+lre3jp07Qqv/jXOYEiYN2ItN9E2RmNPo0l2E6+M0bU6gmxFft duAmPec4JeiMp5pv0KRh7f1rpoGceGmTmD9n6HDayKAjtSTSImUw3HDxITbbkC6b kT+XjFD9T+UltQArmaQguOltXD+FL8QWR6RG5GiXz9Dvh6FkalWEKWmEQgZAFA1k LJDgFLnWoj5G9eHtxFatCaCVeUS+kwSXDgdnZYs6zRA22s8LzMA= -----END CERTIFICATE-----Generated at Wed Dec 24 09:12:19 2025 by rpki-client