This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft File: 461B039429CF609C76235D70C58DE1D0AB6EA915.mft (raw, json) Hash identifier: 9QKGc2KZf0okeE0LKmYF9PVC8KA/FHAVGYhV0sv2N1o= Subject key identifier: 5A:33:7C:71:43:C2:1B:14:C5:6A:E2:AD:DF:4A:62:FF:43:9F:B9:1A Authority key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 Certificate issuer: /CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Certificate serial: 31BAA443902C6C59551AC5F04F49FBB3146E661E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft Manifest number: 0118 Signing time: Tue 02 Dec 2025 00:01:37 +0000 Manifest this update: Mon 01 Dec 2025 23:56:37 +0000 Manifest next update: Fri 05 Dec 2025 03:10:37 +0000 Files and hashes: 1: 461B039429CF609C76235D70C58DE1D0AB6EA915.crl (hash: RraJL8zTpSBmxW4bdv55Ni7LHeHEh0gHFX7wK5GOjV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ba:a4:43:90:2c:6c:59:55:1a:c5:f0:4f:49:fb:b3:14:6e:66:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Validity Not Before: Dec 1 23:56:37 2025 GMT Not After : Dec 5 03:10:37 2025 GMT Subject: CN=5A337C7143C21B14C56AE2ADDF4A62FF439FB91A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:9e:89:67:88:00:63:68:f4:3a:8a:be:46: ef:1f:98:0e:55:74:67:f3:35:f2:71:c4:d1:e4:99: a2:8c:36:75:b1:97:8f:0b:70:8c:e9:49:87:1a:96: bc:a5:b4:72:98:b2:39:a4:f5:ff:21:69:45:ce:16: a2:ac:c3:cf:ac:b6:0c:7a:10:06:15:b7:d5:84:ef: c1:31:27:cd:26:bc:7d:24:ac:09:61:66:5b:4f:3a: 03:71:6f:41:e9:72:65:67:36:e3:4c:ef:de:bd:07: 37:b2:ee:03:54:8a:dc:3c:cd:74:ba:68:b7:6e:db: 04:39:ea:4b:93:75:6f:de:db:aa:6f:d4:77:9f:39: 19:0f:ad:99:6a:c7:18:3c:21:ec:e8:0c:05:e8:79: e4:d5:d7:ca:c4:81:86:39:65:ae:cf:5f:cd:39:fc: 7c:cf:45:45:3d:81:b6:67:4a:be:c7:6d:e9:6d:a5: 51:b9:9d:e5:2c:aa:70:9a:32:a5:59:5a:21:b4:d9: 18:f5:03:ec:9d:69:24:cc:93:1e:03:ba:1b:82:11: 05:0c:1c:7b:09:4d:64:ea:bb:b3:a5:a7:de:b4:55: 3d:08:de:60:0d:59:16:12:0c:f2:ea:20:93:a4:48: 70:06:2d:0b:88:cd:c6:94:c8:23:23:b8:f0:00:75: 70:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:33:7C:71:43:C2:1B:14:C5:6A:E2:AD:DF:4A:62:FF:43:9F:B9:1A X509v3 Authority Key Identifier: keyid:46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0f:75:48:61:4a:d2:ca:7a:53:ab:4c:91:36:94:00:fa:14: 36:a9:2e:f9:45:80:29:78:c0:5f:66:28:8b:22:76:02:ba:1c: 11:72:f5:d7:1d:10:99:15:1f:16:a0:c4:b8:7d:b5:e9:3e:f7: ec:8a:01:29:29:ec:80:5d:08:d6:32:ca:1a:4c:40:ab:e7:82: c6:56:fb:c2:cb:d1:d1:37:3d:5d:d1:ec:05:f4:ec:e5:4e:4a: 73:8d:90:d9:3f:ed:dc:25:66:aa:32:ea:5a:9c:f7:c4:3d:19: aa:e9:b6:d1:50:c6:f2:29:be:be:cc:b3:53:91:2a:40:a4:b9: 9e:ab:18:4b:66:a3:92:1a:63:62:27:59:29:b7:3e:ae:14:0f: 8c:73:80:d6:e1:b8:9e:93:38:be:f1:62:ee:d4:cf:4d:11:24: aa:9b:bf:a2:32:e0:d1:3f:d3:f3:60:89:82:20:51:64:67:4e: 7e:56:2e:cb:b9:e0:38:49:69:b3:fa:0b:55:63:80:91:7e:20: 7b:69:58:6f:6a:3c:64:4f:9a:b9:85:66:65:37:d7:1e:3d:c6: d7:3c:bb:24:5f:b5:3a:c1:fc:68:c8:32:3b:36:4c:20:e5:78: 57:54:a9:af:f1:7d:a5:37:f2:e5:79:f2:c9:88:24:ca:54:ac: d1:2e:ae:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbqkQ5AsbFlVGsXwT0n7sxRuZh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBB QjZFQTkxNTAeFw0yNTEyMDEyMzU2MzdaFw0yNTEyMDUwMzEwMzdaMDMxMTAvBgNV BAMTKDVBMzM3QzcxNDNDMjFCMTRDNTZBRTJBRERGNEE2MkZGNDM5RkI5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3r56JZ4gAY2j0Ooq+Ru8fmA5V dGfzNfJxxNHkmaKMNnWxl48LcIzpSYcalryltHKYsjmk9f8haUXOFqKsw8+stgx6 EAYVt9WE78ExJ80mvH0krAlhZltPOgNxb0HpcmVnNuNM7969Bzey7gNUitw8zXS6 aLdu2wQ56kuTdW/e26pv1HefORkPrZlqxxg8IezoDAXoeeTV18rEgYY5Za7PX805 /HzPRUU9gbZnSr7HbeltpVG5neUsqnCaMqVZWiG02Rj1A+ydaSTMkx4DuhuCEQUM HHsJTWTqu7Olp960VT0I3mANWRYSDPLqIJOkSHAGLQuIzcaUyCMjuPAAdXBLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjN8cUPCGxTFauKt30pi/0OfuRowHwYDVR0j BBgwFoAURhsDlCnPYJx2I11wxY3h0KtuqRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDI3ZmEwMi1lNDlmLTQyMTUtODYyYi03ZmFhZWZkOGFiM2UvMC80NjFCMDM5NDI5 Q0Y2MDlDNzYyMzVENzBDNThERTFEMEFCNkVBOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBBQjZF QTkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUx RDBBQjZFQTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwPdUhhStLKelOrTJE2lAD6FDapLvlFgCl4 wF9mKIsidgK6HBFy9dcdEJkVHxagxLh9tek+9+yKASkp7IBdCNYyyhpMQKvngsZW +8LL0dE3PV3R7AX07OVOSnONkNk/7dwlZqoy6lqc98Q9GarpttFQxvIpvr7Ms1OR KkCkuZ6rGEtmo5IaY2InWSm3Pq4UD4xzgNbhuJ6TOL7xYu7Uz00RJKqbv6Iy4NE/ 0/NgiYIgUWRnTn5WLsu54DhJabP6C1VjgJF+IHtpWG9qPGRPmrmFZmU31x49xtc8 uyRftTrB/GjIMjs2TCDleFdUqa/xfaU38uV58smIJMpUrNEurlI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:27 2025 by rpki-client