This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json) Hash identifier: MJU3lC3zLJWbZhYwm21k+8SlJoEP+vD7Qk8X4BfWYEg= Subject key identifier: 20:B0:6D:33:A0:E5:41:DB:6C:1B:76:9E:6E:85:7F:AB:5C:A5:CB:34 Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 Certificate issuer: /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Certificate serial: 2D2AF23EDC01A452D1B47C7A1C2B5662212EB153 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft Manifest number: C8 Signing time: Tue 02 Dec 2025 01:42:14 +0000 Manifest this update: Tue 02 Dec 2025 01:37:14 +0000 Manifest next update: Fri 05 Dec 2025 02:52:14 +0000 Files and hashes: 1: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: eoVvdypYJLqfgPBBPzl8GLooJ6S/TctynM4YwpeX9Cc=) 2: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: BoTluS9h9fXmYVG5ixZmkF8QGw01I8U2x/hhTczYeKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2a:f2:3e:dc:01:a4:52:d1:b4:7c:7a:1c:2b:56:62:21:2e:b1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Validity Not Before: Dec 2 01:37:14 2025 GMT Not After : Dec 5 02:52:14 2025 GMT Subject: CN=20B06D33A0E541DB6C1B769E6E857FAB5CA5CB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:20:b1:a2:34:cf:12:43:e2:37:da:ef:0b:5b: 28:65:1a:ee:72:c1:05:a3:f6:c7:69:05:6f:19:45: db:dd:0b:8f:90:73:96:6c:6f:1f:70:fb:b9:8b:7c: d4:0f:20:5c:d8:56:3a:1a:d3:1b:a1:24:fa:da:8f: 86:3c:95:80:1c:78:35:da:4b:03:b9:c1:ba:64:28: ea:ad:a2:67:84:b2:2b:67:80:78:87:2b:5c:bd:23: d9:1d:0d:cc:8e:f5:64:da:ad:4b:55:5f:33:af:65: 48:76:be:e1:6f:80:74:1f:d7:b5:c2:95:a8:ed:56: 12:bd:b6:0a:36:72:36:38:55:6d:00:39:99:fc:c1: 97:40:b9:8d:7f:ac:05:25:10:ee:82:d5:c6:b8:4b: 31:b3:6d:59:d3:e1:ae:8b:f4:1f:6c:2d:fc:9d:2c: be:ea:23:b1:0e:6e:f1:f7:68:21:61:cf:fc:81:eb: 3d:d0:7a:4b:ce:f7:7d:51:a8:ed:c2:ca:df:ec:5f: e7:ba:73:7a:72:1c:08:e0:79:dc:01:fc:fa:60:40: 35:f5:02:52:9d:90:83:7e:6b:5d:b1:b4:1d:20:38: e6:20:0b:a8:5c:fa:38:24:1e:b6:c1:1f:91:35:8e: 32:c2:d9:97:e4:f6:9a:eb:39:a8:59:ac:d6:7b:44: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B0:6D:33:A0:E5:41:DB:6C:1B:76:9E:6E:85:7F:AB:5C:A5:CB:34 X509v3 Authority Key Identifier: keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:bb:27:c5:db:ab:d2:14:e9:d0:b1:94:73:6b:51:65:c8:aa: 7e:8e:78:71:2d:a1:ea:3a:27:ae:ad:02:40:74:80:fc:e5:c1: 57:24:35:3a:39:c6:11:a9:f8:4c:46:b5:cd:a9:84:c4:3a:5f: 05:1a:ff:11:a2:c4:a6:7f:48:32:e0:c1:e0:ef:03:88:fa:d6: 46:7d:f2:46:45:51:ca:0f:f5:14:ec:75:16:97:11:8d:e9:2c: a4:5e:b5:05:d5:35:94:a0:7a:86:4b:2b:97:5c:ba:21:31:32: 56:15:86:1f:2f:d6:7a:c0:7f:17:84:f9:10:ba:90:30:e7:32: a8:44:7d:e2:94:99:65:df:d7:64:ac:de:94:38:93:37:4c:07: 56:ac:2e:49:2d:94:51:e5:8b:98:e0:81:b1:f6:ce:55:2f:2d: d5:f5:98:1a:25:30:6a:17:4b:a7:5b:30:29:bd:ef:ac:c3:b4: f8:ec:51:de:1c:7f:49:36:7f:2d:f7:2c:9f:ba:7e:d8:71:52: c5:6b:82:c2:76:a5:1c:6b:7b:62:7a:1d:9e:e6:f8:60:8c:83: b6:0f:93:66:a8:f4:29:b6:4b:0f:54:c5:73:b9:57:5f:a8:5f: 57:9d:76:1f:b6:3c:b1:8e:57:34:63:71:07:6f:9d:6d:46:0a: 1c:97:a6:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSryPtwBpFLRtHx6HCtWYiEusVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FB RTA2Mzc0NTAeFw0yNTEyMDIwMTM3MTRaFw0yNTEyMDUwMjUyMTRaMDMxMTAvBgNV BAMTKDIwQjA2RDMzQTBFNTQxREI2QzFCNzY5RTZFODU3RkFCNUNBNUNCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpILGiNM8SQ+I32u8LWyhlGu5y wQWj9sdpBW8ZRdvdC4+Qc5Zsbx9w+7mLfNQPIFzYVjoa0xuhJPraj4Y8lYAceDXa SwO5wbpkKOqtomeEsitngHiHK1y9I9kdDcyO9WTarUtVXzOvZUh2vuFvgHQf17XC lajtVhK9tgo2cjY4VW0AOZn8wZdAuY1/rAUlEO6C1ca4SzGzbVnT4a6L9B9sLfyd LL7qI7EObvH3aCFhz/yB6z3QekvO931RqO3Cyt/sX+e6c3pyHAjgedwB/PpgQDX1 AlKdkIN+a12xtB0gOOYgC6hc+jgkHrbBH5E1jjLC2Zfk9prrOahZrNZ7RAItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUILBtM6DlQdtsG3aeboV/q1ylyzQwHwYDVR0j BBgwFoAUSWCoQn/qWBTvnoDvN4bgyq4GN0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDQ1N2QyMC0wMjNhLTQ1MDktYmI0YS02MmM4NjkyOWRkOTcvMC80OTYwQTg0MjdG RUE1ODE0RUY5RTgwRUYzNzg2RTBDQUFFMDYzNzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FBRTA2 Mzc0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUw Q0FBRTA2Mzc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJK7J8Xbq9IU6dCxlHNrUWXIqn6OeHEtoeo6 J66tAkB0gPzlwVckNTo5xhGp+ExGtc2phMQ6XwUa/xGixKZ/SDLgweDvA4j61kZ9 8kZFUcoP9RTsdRaXEY3pLKRetQXVNZSgeoZLK5dcuiExMlYVhh8v1nrAfxeE+RC6 kDDnMqhEfeKUmWXf12Ss3pQ4kzdMB1asLkktlFHli5jggbH2zlUvLdX1mBolMGoX S6dbMCm976zDtPjsUd4cf0k2fy33LJ+6fthxUsVrgsJ2pRxre2J6HZ7m+GCMg7YP k2ao9Cm2Sw9UxXO5V1+oX1eddh+2PLGOVzRjcQdvnW1GChyXpgI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:24 2025 by rpki-client