This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: dD8B0+jaJybGUNbtXqN9chqZ0NGU1GNhFpM3gIFPJUM= Subject key identifier: E5:F9:73:73:5A:E3:E0:74:DB:ED:B8:94:C8:61:EF:33:2B:96:79:FE Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 5DD59E7593667380CDC3D6B5DD7F966950EA07A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 01B5 Signing time: Tue 02 Dec 2025 15:10:49 +0000 Manifest this update: Tue 02 Dec 2025 15:05:49 +0000 Manifest next update: Fri 05 Dec 2025 22:11:49 +0000 Files and hashes: 1: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) 2: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: xwffDWqiomLXw2vFIO7YFfmi5y7ZrpC3NpljZbCkr0g=) 3: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d5:9e:75:93:66:73:80:cd:c3:d6:b5:dd:7f:96:69:50:ea:07:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Dec 2 15:05:49 2025 GMT Not After : Dec 5 22:11:49 2025 GMT Subject: CN=E5F973735AE3E074DBEDB894C861EF332B9679FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:c4:b2:70:b2:7e:c0:36:be:d6:b0:52:96: 61:2f:72:6b:29:49:07:5a:f8:f2:a2:ee:ad:4d:45: 7e:73:aa:b8:e9:1e:fa:04:f6:dd:65:c5:79:78:1e: 70:3d:de:91:73:78:97:d5:c7:7f:6b:65:d5:5c:f6: a8:3c:d8:7c:d6:59:53:06:b3:09:9e:7c:1a:71:a4: 11:34:1d:7e:88:68:2f:a6:61:5a:e4:2b:38:56:23: 88:bd:fc:fe:f6:3d:bb:f6:41:7f:af:3d:1c:87:e6: e9:d6:f6:e9:fc:fb:df:db:07:3d:14:6a:4d:2a:2e: a4:7e:2e:dc:02:d0:11:7d:77:e9:a2:7c:c1:d9:1e: c7:b3:a1:8d:17:b9:37:a0:01:81:54:46:21:4d:0f: e2:ab:6b:76:18:e4:69:d9:10:a5:c3:c3:47:a1:9b: 29:71:0c:27:5e:e6:36:78:04:89:4b:42:01:a6:f8: 47:02:fe:82:12:73:15:3c:74:ec:23:3d:7c:be:d6: 8f:4b:76:c7:9c:f6:99:d7:d0:65:d7:3c:31:e9:71: 18:25:db:f3:a5:dd:fb:91:ff:15:64:b1:0e:b3:d9: 48:b2:ea:44:f9:b9:d3:52:83:ad:a1:28:3e:05:dc: e1:84:bb:d0:96:d4:e7:3a:99:88:50:2d:ea:a2:72: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F9:73:73:5A:E3:E0:74:DB:ED:B8:94:C8:61:EF:33:2B:96:79:FE X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ad:55:53:87:d0:e0:a4:4b:21:74:65:1d:e0:f8:73:45:88: 92:d0:e5:a0:c1:07:b0:fb:2d:3a:4e:0d:b3:f1:8d:4f:4e:00: ae:b1:dd:03:f0:dd:1b:3d:c8:bd:95:b4:a9:3c:de:a1:37:32: 45:62:93:60:f2:a3:e1:9d:fc:7e:4f:1c:16:b6:e7:da:b3:e8: a1:56:de:11:da:b5:b6:3f:96:d1:d2:aa:c5:dd:63:30:8c:6b: c6:b2:e2:cd:da:07:bc:51:b5:ea:2b:d8:ac:b1:4f:09:b7:ab: 2b:1a:e0:e9:48:e6:c7:cd:e3:58:5f:40:68:17:1f:ee:6b:c7: d0:c8:2c:d8:37:14:c3:12:62:64:22:85:bf:2c:62:bf:96:4a: 84:3b:f3:da:f8:38:a3:b9:16:91:32:21:e7:5b:04:45:ea:7f: 70:2a:46:a8:13:44:45:e9:8d:dd:76:76:ef:a5:23:44:44:99: 89:d6:ec:d3:3a:83:8a:cc:8e:c2:67:6c:e9:2d:24:44:d9:8d: 0e:bb:1b:ee:1f:c6:43:7d:ab:a5:af:ed:6c:1b:19:50:16:61: f5:4b:8f:4f:0f:17:84:8c:b9:6b:96:94:24:e3:72:7f:af:b7: 2f:3a:55:14:85:55:cf:54:62:9f:55:9b:3f:9b:93:71:30:b8: 40:f3:c8:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdWedZNmc4DNw9a13X+WaVDqB6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTEyMDIxNTA1NDlaFw0yNTEyMDUyMjExNDlaMDMxMTAvBgNV BAMTKEU1Rjk3MzczNUFFM0UwNzREQkVEQjg5NEM4NjFFRjMzMkI5Njc5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSsSycLJ+wDa+1rBSlmEvcmsp SQda+PKi7q1NRX5zqrjpHvoE9t1lxXl4HnA93pFzeJfVx39rZdVc9qg82HzWWVMG swmefBpxpBE0HX6IaC+mYVrkKzhWI4i9/P72Pbv2QX+vPRyH5unW9un8+9/bBz0U ak0qLqR+LtwC0BF9d+mifMHZHsezoY0XuTegAYFURiFND+Kra3YY5GnZEKXDw0eh mylxDCde5jZ4BIlLQgGm+EcC/oIScxU8dOwjPXy+1o9Ldsec9pnX0GXXPDHpcRgl 2/Ol3fuR/xVksQ6z2Uiy6kT5udNSg62hKD4F3OGEu9CW1Oc6mYhQLeqicmZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5flzc1rj4HTb7biUyGHvMyuWef4wHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECtVVOH0OCkSyF0ZR3g+HNFiJLQ5aDBB7D7 LTpODbPxjU9OAK6x3QPw3Rs9yL2VtKk83qE3MkVik2Dyo+Gd/H5PHBa259qz6KFW 3hHatbY/ltHSqsXdYzCMa8ay4s3aB7xRteor2KyxTwm3qysa4OlI5sfN41hfQGgX H+5rx9DILNg3FMMSYmQihb8sYr+WSoQ789r4OKO5FpEyIedbBEXqf3AqRqgTREXp jd12du+lI0REmYnW7NM6g4rMjsJnbOktJETZjQ67G+4fxkN9q6Wv7WwbGVAWYfVL j08PF4SMuWuWlCTjcn+vty86VRSFVc9UYp9Vmz+bk3EwuEDzyJQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:42 2025 by rpki-client