This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: nrraJZxCA3zNnd3G5FAUphJfNWlEd1ayJvYoTAHIqCE= Subject key identifier: DD:C9:E1:6F:06:A3:1F:FE:FD:A5:46:ED:F7:9C:90:59:0B:4C:D9:69 Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 36BC3C97DFF981C7005F4EB17B928A70874E6F18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: 0112 Signing time: Mon 01 Dec 2025 20:52:28 +0000 Manifest this update: Mon 01 Dec 2025 20:47:28 +0000 Manifest next update: Thu 04 Dec 2025 22:47:28 +0000 Files and hashes: 1: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 2: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: jBIa4HSzeigduc+WuSYCDNjGBqKvWW2I5nbEHbDvIhs=) 3: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) 4: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bc:3c:97:df:f9:81:c7:00:5f:4e:b1:7b:92:8a:70:87:4e:6f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Dec 1 20:47:28 2025 GMT Not After : Dec 4 22:47:28 2025 GMT Subject: CN=DDC9E16F06A31FFEFDA546EDF79C90590B4CD969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:16:bf:0e:7e:8f:a7:e4:c2:32:ee:05:c6: 5f:8c:c0:85:ae:23:ca:1a:55:d8:cf:bc:0b:b0:8e: 52:d7:c8:1c:9e:9f:53:10:91:ec:c3:64:02:07:71: 6c:60:4d:65:48:e0:fa:bc:76:e5:f2:97:54:9e:fe: c0:d3:11:45:c3:90:c4:3b:2e:f1:c9:9b:3d:f7:0d: c3:ad:8c:e7:2a:68:40:89:20:40:82:14:1c:88:e5: 9d:71:af:ae:62:18:14:1b:99:cf:e1:97:2b:8d:73: 1b:74:de:a1:be:cd:98:be:8a:1b:77:76:7b:bd:0e: 30:54:0e:75:64:b8:42:c3:25:5d:45:00:d1:df:51: 9d:33:25:0e:b7:93:0f:bd:23:51:a8:fa:12:53:f5: 51:43:96:92:15:0b:17:ef:79:77:4d:27:35:ef:a0: 0f:ce:23:84:f1:a7:dd:15:57:32:57:8c:22:7d:94: b4:64:83:eb:7d:db:1a:94:a0:5d:b8:a3:00:1b:9e: 57:08:de:ed:4e:37:b4:09:cb:cf:e1:ad:e9:e9:16: ce:b9:f4:f8:de:f9:b0:32:71:8f:5d:86:eb:f0:ed: 7d:d6:60:43:b9:48:85:97:d9:e0:69:d1:67:d5:f3: b5:07:6c:d7:73:5f:40:aa:95:69:4b:7b:05:9a:87: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C9:E1:6F:06:A3:1F:FE:FD:A5:46:ED:F7:9C:90:59:0B:4C:D9:69 X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:5a:8f:45:40:2a:b5:2b:71:35:fd:db:8a:d2:f4:97:47:cf: 41:f2:2f:3d:e9:cc:dc:54:a6:3b:30:f6:03:70:e5:70:9c:50: 76:2d:dd:38:e8:5d:0a:f9:02:fe:dd:ac:f0:fe:f0:2c:94:bc: 64:b5:00:db:9a:bd:58:b5:27:ea:d8:60:f1:be:a9:5d:54:ee: f6:26:e9:51:38:71:74:71:d0:29:98:3c:bc:13:1d:ec:2a:52: be:1f:98:47:1a:b5:ef:b1:19:ea:86:38:ba:07:1d:90:b6:09: ce:fa:ee:65:f1:10:89:74:80:30:cf:6f:12:18:03:3c:e3:8a: 78:d7:4a:ef:81:4a:c5:48:7d:49:b0:ba:41:81:b2:91:a3:49: b7:ee:3e:3e:24:39:58:19:aa:99:4d:08:ba:05:f6:90:ba:19: 58:78:a7:82:37:d4:0b:4a:30:92:b1:bf:c7:8e:59:45:a2:86: 84:50:40:ea:e8:94:f2:d9:9e:c3:88:e4:ae:00:65:8e:e5:48: c3:64:7e:6e:3d:46:aa:01:6e:f8:cc:2e:87:8d:6a:48:83:9c: 05:df:d3:a1:ef:d3:ac:39:f9:7c:81:5f:c5:92:e3:31:41:f2: 51:0b:1e:de:90:70:8c:ca:b7:16:71:e9:52:35:71:a2:54:40: 9d:81:46:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrw8l9/5gccAX06xe5KKcIdObxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNTEyMDEyMDQ3MjhaFw0yNTEyMDQyMjQ3MjhaMDMxMTAvBgNV BAMTKEREQzlFMTZGMDZBMzFGRkVGREE1NDZFREY3OUM5MDU5MEI0Q0Q5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0YBa/Dn6Pp+TCMu4Fxl+MwIWu I8oaVdjPvAuwjlLXyByen1MQkezDZAIHcWxgTWVI4Pq8duXyl1Se/sDTEUXDkMQ7 LvHJmz33DcOtjOcqaECJIECCFByI5Z1xr65iGBQbmc/hlyuNcxt03qG+zZi+iht3 dnu9DjBUDnVkuELDJV1FANHfUZ0zJQ63kw+9I1Go+hJT9VFDlpIVCxfveXdNJzXv oA/OI4Txp90VVzJXjCJ9lLRkg+t92xqUoF24owAbnlcI3u1ON7QJy8/hrenpFs65 9Pje+bAycY9dhuvw7X3WYEO5SIWX2eBp0WfV87UHbNdzX0CqlWlLewWahxJRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3cnhbwajH/79pUbt95yQWQtM2WkwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZaj0VAKrUrcTX924rS9JdHz0HyLz3pzNxU pjsw9gNw5XCcUHYt3TjoXQr5Av7drPD+8CyUvGS1ANuavVi1J+rYYPG+qV1U7vYm 6VE4cXRx0CmYPLwTHewqUr4fmEcate+xGeqGOLoHHZC2Cc767mXxEIl0gDDPbxIY AzzjinjXSu+BSsVIfUmwukGBspGjSbfuPj4kOVgZqplNCLoF9pC6GVh4p4I31AtK MJKxv8eOWUWihoRQQOrolPLZnsOI5K4AZY7lSMNkfm49RqoBbvjMLoeNakiDnAXf 06Hv06w5+XyBX8WS4zFB8lELHt6QcIzKtxZx6VI1caJUQJ2BRjM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:00 2025 by rpki-client