This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: AbBDLdY7Ia6aeWcZr7sD4e1BFdtJBfNi4BoPBWquErk= Subject key identifier: 90:1B:64:71:42:35:8C:4E:60:6D:DF:44:39:07:41:E4:34:6C:08:0D Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 7B894493AF16DA2A1260F4721C0466C81C7A3487 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 072D Signing time: Tue 16 Dec 2025 21:40:04 +0000 Manifest this update: Tue 16 Dec 2025 21:35:04 +0000 Manifest next update: Fri 19 Dec 2025 22:02:04 +0000 Files and hashes: 1: AS139994.roa (hash: mQEJNXJ3XVh/s4Uqn72Xq0FcwJo74FkotAw0eOv4kCI=) 2: AS17885.roa (hash: RX8oo/DiJqJzJBqmubTqeGmmpOVT1csa63gvxFqyKec=) 3: AS24203.roa (hash: C68gmTP9H6AGgXibFFHApE8cuP0Li5Pg7Pn1ljOTa6g=) 4: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: AXZNIlVbzpZw9bAbvTl0rxpRxhwowfxz87yUXLdG7Ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 22:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:89:44:93:af:16:da:2a:12:60:f4:72:1c:04:66:c8:1c:7a:34:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Dec 16 21:35:04 2025 GMT Not After : Dec 19 22:02:04 2025 GMT Subject: CN=901B647142358C4E606DDF44390741E4346C080D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:c9:8e:93:ae:5c:e8:47:ca:dd:f0:b4:9d: 73:ff:c0:a7:42:5f:bc:df:9f:0c:32:af:53:bf:b6: 59:38:e6:78:e2:3a:35:56:3f:28:9b:4e:e1:b9:d2: cb:c7:54:b6:af:6e:11:1f:46:b5:8e:00:59:26:0e: da:41:13:e8:84:74:be:ec:c6:3f:47:68:fb:b3:7c: 05:df:8a:28:c3:3b:83:f5:8c:be:a3:b5:10:9d:22: 9d:9d:cc:fc:33:74:bf:a2:00:83:5a:bc:9e:b2:4d: 46:d0:5c:1e:13:26:e8:22:a8:46:a8:99:0a:00:dc: 00:2a:be:35:2f:1e:7c:a4:a2:f9:32:69:0a:8d:f0: c7:7f:a7:f3:0a:e4:62:be:d2:ad:67:46:1e:5d:3a: 75:3c:95:7c:dc:d7:02:0c:a4:fa:7a:0b:05:31:d7: 87:be:f4:7c:e9:ad:b9:da:2f:a3:1f:94:de:95:0a: ae:3a:44:f0:e5:d7:c1:83:85:d6:af:f6:93:95:07: b7:24:02:11:00:c1:b1:f4:d6:cc:14:0f:58:41:84: 52:ff:96:51:f0:fa:66:79:ef:5e:5f:a7:3a:5d:12: 3d:2c:07:4f:7a:4f:22:31:63:e4:6b:c5:07:29:d6: e0:1b:21:e0:70:5c:1a:33:c2:1a:1b:61:87:2a:a6: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1B:64:71:42:35:8C:4E:60:6D:DF:44:39:07:41:E4:34:6C:08:0D X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:71:5c:9b:77:e9:45:00:7f:43:bf:90:a2:d1:f4:17:66:0e: c0:57:b9:59:4a:4f:4f:b3:32:71:d6:77:75:89:0f:a0:14:35: 32:06:ed:e4:ef:d6:23:5a:df:04:2f:b6:4d:3d:8f:73:bd:fa: b6:78:9b:e6:27:75:5e:b0:d0:b9:98:7d:09:fe:93:3f:ec:b0: ea:92:c8:a5:44:7a:3b:97:ae:20:23:56:8f:08:e1:59:6f:ad: b7:d9:d0:c6:4c:19:75:17:d6:43:8e:db:0f:61:3f:a1:e9:0e: 20:0c:9d:2e:7b:3a:e6:a0:8f:10:cf:34:89:75:da:a4:de:da: 5c:16:34:42:98:fe:23:02:37:a0:0d:5a:2a:13:2d:45:9d:57: 8e:e4:66:3d:a8:cc:31:2a:c8:46:03:e9:9c:7d:bc:e6:f8:66: 77:3f:fa:23:a9:d5:d9:88:29:ff:8d:85:25:30:27:7c:39:a8: 06:95:f2:19:b4:83:45:2a:2e:62:c3:35:f6:47:0a:60:5b:96: 67:f3:03:56:4b:03:77:54:3f:81:51:b5:2e:6a:d6:54:3f:71: 17:ac:b2:d3:92:42:80:3c:6f:96:18:6d:f5:46:f7:3c:4e:75: cd:33:2f:8b:03:f6:f9:df:ed:34:41:61:a1:11:df:69:6b:36: f3:c4:3e:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe4lEk68W2ioSYPRyHARmyBx6NIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTEyMTYyMTM1MDRaFw0yNTEyMTkyMjAyMDRaMDMxMTAvBgNV BAMTKDkwMUI2NDcxNDIzNThDNEU2MDZEREY0NDM5MDc0MUU0MzQ2QzA4MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bsmOk65c6EfK3fC0nXP/wKdC X7zfnwwyr1O/tlk45njiOjVWPyibTuG50svHVLavbhEfRrWOAFkmDtpBE+iEdL7s xj9HaPuzfAXfiijDO4P1jL6jtRCdIp2dzPwzdL+iAINavJ6yTUbQXB4TJugiqEao mQoA3AAqvjUvHnykovkyaQqN8Md/p/MK5GK+0q1nRh5dOnU8lXzc1wIMpPp6CwUx 14e+9HzprbnaL6MflN6VCq46RPDl18GDhdav9pOVB7ckAhEAwbH01swUD1hBhFL/ llHw+mZ5715fpzpdEj0sB096TyIxY+RrxQcp1uAbIeBwXBozwhobYYcqpuQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkBtkcUI1jE5gbd9EOQdB5DRsCA0wHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRxXJt36UUAf0O/kKLR9BdmDsBXuVlKT0+z MnHWd3WJD6AUNTIG7eTv1iNa3wQvtk09j3O9+rZ4m+YndV6w0LmYfQn+kz/ssOqS yKVEejuXriAjVo8I4VlvrbfZ0MZMGXUX1kOO2w9hP6HpDiAMnS57OuagjxDPNIl1 2qTe2lwWNEKY/iMCN6ANWioTLUWdV47kZj2ozDEqyEYD6Zx9vOb4Znc/+iOp1dmI Kf+NhSUwJ3w5qAaV8hm0g0UqLmLDNfZHCmBblmfzA1ZLA3dUP4FRtS5q1lQ/cRes stOSQoA8b5YYbfVG9zxOdc0zL4sD9vnf7TRBYaER32lrNvPEPhA= -----END CERTIFICATE-----Generated at Thu Dec 18 11:39:08 2025 by rpki-client