This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: MVbMYNfQ+PaMC/q1v63bKpNeaU10xG2n1Pu+/2eW4uY= Subject key identifier: C7:5E:07:56:C0:12:6A:97:AC:D7:81:27:2E:6A:F0:B2:E2:64:EE:C2 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 1FA37D8DAD4D3E29557D8DA561F9633EB8F6142F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 0236 Signing time: Wed 03 Dec 2025 12:30:49 +0000 Manifest this update: Wed 03 Dec 2025 12:25:48 +0000 Manifest next update: Sat 06 Dec 2025 18:11:48 +0000 Files and hashes: 1: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 1IuZ+1sb5CuVWfx/fjE2EJ1GmWjRaqNz5VL2CGRsg+c=) 2: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: 3PeI4c1+04C9ghzq6F40f5013YnnignJ8PNDhSKl9BY=) 3: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: UrGzpQyb4OcG13ECSRKSWIFvQeDrPkoBtijveesvtFQ=) 4: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) 5: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: bKJyvoi7p+BzolG1XoCYLQleBnjuh/B4ZD/s4VrNS2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a3:7d:8d:ad:4d:3e:29:55:7d:8d:a5:61:f9:63:3e:b8:f6:14:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Dec 3 12:25:48 2025 GMT Not After : Dec 6 18:11:48 2025 GMT Subject: CN=C75E0756C0126A97ACD781272E6AF0B2E264EEC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f3:88:10:84:db:ac:08:bc:f0:35:4e:9d:e9: 68:fd:44:ac:34:ed:5c:1c:e3:9a:9a:4a:b1:6e:02: dc:8b:21:dd:b1:73:12:ae:e6:48:b9:cb:b0:f5:62: 8d:31:c7:d3:46:7b:8c:e0:06:df:2c:d2:0e:13:6f: f8:4f:ab:d1:b9:f9:7e:1f:c0:57:1b:5b:62:08:dc: e1:86:9c:38:1d:26:37:c2:d6:2d:26:b2:90:1f:5b: a7:c4:f4:17:50:29:30:d3:9e:cd:8f:a8:b5:69:85: f4:50:b0:b2:67:83:4b:e8:2f:08:d8:aa:8f:57:51: d2:9e:e1:12:67:74:3d:c3:ad:c5:66:cc:c7:ad:a5: d8:d3:2c:14:0c:9f:86:c0:81:fc:f7:b2:69:6a:1f: 30:c0:1d:15:16:7d:9e:94:19:8e:b6:b2:98:75:b9: 07:f3:53:8f:9b:13:9c:d8:a9:09:f1:d8:5c:63:55: 96:52:cb:9d:77:5a:25:7c:67:d4:70:8b:0d:a3:4b: 21:fe:85:0d:77:7a:8a:44:e7:13:f3:2b:01:08:37: b0:94:98:7b:a4:75:59:85:68:3f:00:89:45:5a:9e: 89:65:02:db:1c:34:36:2d:9c:b2:3d:cc:ed:0d:e7: 67:58:1f:e0:fb:cb:9b:36:cf:fd:77:d0:56:15:08: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:07:56:C0:12:6A:97:AC:D7:81:27:2E:6A:F0:B2:E2:64:EE:C2 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c5:de:06:31:12:e3:01:4b:d7:1c:a4:de:24:a4:04:89:e5: 2a:d8:66:18:02:06:26:f2:95:3b:34:04:ca:ae:be:73:cf:a1: 69:44:30:0a:54:22:0d:03:d3:58:3d:ff:a7:c1:77:6a:e9:51: 43:08:54:bf:94:bf:cc:7b:fe:b6:63:84:fd:ba:8c:95:d0:b8: 61:f9:96:43:fa:c2:cf:4a:b5:24:74:14:66:22:05:ff:18:06: 1a:1b:27:30:ba:5a:13:e9:47:8f:05:9e:71:72:9b:e3:dc:30: 68:41:5c:48:8d:5a:12:40:40:d3:4b:bd:49:ed:9d:de:5b:8c: b1:2b:b3:9e:cf:1f:23:80:8f:85:3c:57:c5:a3:96:b0:38:03: bc:29:f6:40:ae:40:7b:51:de:16:d0:73:78:a0:73:27:18:45: 48:2b:16:a4:d8:4d:9c:9f:4d:cf:f1:b9:32:d2:22:46:91:f9: 05:4b:24:8c:2e:ae:23:34:c1:c0:ae:1c:a5:e4:eb:82:e9:dc: 33:ea:2e:21:e3:9f:08:51:8d:c8:79:44:f8:37:79:16:25:cd: cd:63:9b:42:b7:28:3e:3f:e8:62:38:14:d4:b7:e1:c4:22:b5: 81:1d:08:c7:d4:7b:24:ce:84:73:84:90:1c:fb:5a:75:54:2e: e8:5f:c0:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6N9ja1NPilVfY2lYfljPrj2FC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNTEyMDMxMjI1NDhaFw0yNTEyMDYxODExNDhaMDMxMTAvBgNV BAMTKEM3NUUwNzU2QzAxMjZBOTdBQ0Q3ODEyNzJFNkFGMEIyRTI2NEVFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW84gQhNusCLzwNU6d6Wj9RKw0 7Vwc45qaSrFuAtyLId2xcxKu5ki5y7D1Yo0xx9NGe4zgBt8s0g4Tb/hPq9G5+X4f wFcbW2II3OGGnDgdJjfC1i0mspAfW6fE9BdQKTDTns2PqLVphfRQsLJng0voLwjY qo9XUdKe4RJndD3DrcVmzMetpdjTLBQMn4bAgfz3smlqHzDAHRUWfZ6UGY62sph1 uQfzU4+bE5zYqQnx2FxjVZZSy513WiV8Z9Rwiw2jSyH+hQ13eopE5xPzKwEIN7CU mHukdVmFaD8AiUVanollAtscNDYtnLI9zO0N52dYH+D7y5s2z/130FYVCBMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx14HVsASapes14EnLmrwsuJk7sIwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLF3gYxEuMBS9ccpN4kpASJ5SrYZhgCBiby lTs0BMquvnPPoWlEMApUIg0D01g9/6fBd2rpUUMIVL+Uv8x7/rZjhP26jJXQuGH5 lkP6ws9KtSR0FGYiBf8YBhobJzC6WhPpR48FnnFym+PcMGhBXEiNWhJAQNNLvUnt nd5bjLErs57PHyOAj4U8V8WjlrA4A7wp9kCuQHtR3hbQc3igcycYRUgrFqTYTZyf Tc/xuTLSIkaR+QVLJIwuriM0wcCuHKXk64Lp3DPqLiHjnwhRjch5RPg3eRYlzc1j m0K3KD4/6GI4FNS34cQitYEdCMfUeyTOhHOEkBz7WnVULuhfwCc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:20 2025 by rpki-client