This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft File: 483F366E1FE9C068ED4417FD71D5B18420D56B62.mft (raw, json) Hash identifier: dwwzWHiCSnYkBOV23fmfc7TytYhqLYKKyGqpY1lsx5g= Subject key identifier: E3:72:06:FE:AF:24:33:48:73:D7:07:74:CF:FA:6A:9F:F3:9B:E2:36 Authority key identifier: 48:3F:36:6E:1F:E9:C0:68:ED:44:17:FD:71:D5:B1:84:20:D5:6B:62 Certificate issuer: /CN=483F366E1FE9C068ED4417FD71D5B18420D56B62 Certificate serial: 674458EC28E8599982A8466867A9A40B3A9F8A12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft Manifest number: 04F1 Signing time: Tue 02 Dec 2025 13:50:46 +0000 Manifest this update: Tue 02 Dec 2025 13:45:46 +0000 Manifest next update: Fri 05 Dec 2025 18:18:46 +0000 Files and hashes: 1: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (hash: nJfbDfnLQ0hPzTdK1jvw4RWKNmgPHIKJaKdLROAz98U=) 2: 483F366E1FE9C068ED4417FD71D5B18420D56B62.crl (hash: +HEt4TpjhfpEKZCKj1zVqG6ccAsa5SyrPTSpCUNz+S0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.crl rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:44:58:ec:28:e8:59:99:82:a8:46:68:67:a9:a4:0b:3a:9f:8a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=483F366E1FE9C068ED4417FD71D5B18420D56B62 Validity Not Before: Dec 2 13:45:46 2025 GMT Not After : Dec 5 18:18:46 2025 GMT Subject: CN=E37206FEAF24334873D70774CFFA6A9FF39BE236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:ed:7a:56:25:6f:63:36:63:a6:a7:ee:a9: 49:f9:e0:b1:11:e8:9e:51:b2:e3:a8:64:fa:d7:53: 31:64:63:d2:27:c3:2d:6f:cd:37:02:9b:a2:b2:8b: c5:f7:ff:d8:f4:9f:03:95:e8:c8:49:e6:32:d9:ce: 8a:75:32:34:8f:36:7b:0b:d2:a3:cc:19:76:4a:5c: c4:71:a4:96:ba:4a:94:ea:b1:36:04:2f:d9:25:37: fe:de:b2:a0:ee:5c:5b:21:5c:e3:4b:ba:1f:3d:6a: 26:da:fa:e8:b6:9e:c0:1c:ad:a4:d5:2c:ba:e1:be: 2a:a1:46:87:a4:95:0e:77:ea:f5:9e:12:26:7b:55: 34:2b:c2:34:56:da:7d:bb:8d:cf:52:2b:88:11:80: bd:c4:ab:a3:19:59:12:6c:3e:89:46:ac:4b:32:f7: a5:bd:93:0d:ed:0c:20:4e:fa:02:41:40:e1:5b:ae: 4b:eb:4f:1c:6a:b0:0e:4f:ce:cf:22:5b:77:ec:9c: 99:c2:8d:42:36:34:85:80:b0:89:9c:45:5c:8d:41: da:09:74:2a:b3:d0:85:57:86:96:04:eb:7c:1f:c2: 2a:dd:23:bd:ad:4f:21:69:10:33:0d:e0:d3:c4:de: 02:51:bc:63:80:57:f5:e1:3e:2b:12:5e:63:3c:85: a8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:72:06:FE:AF:24:33:48:73:D7:07:74:CF:FA:6A:9F:F3:9B:E2:36 X509v3 Authority Key Identifier: keyid:48:3F:36:6E:1F:E9:C0:68:ED:44:17:FD:71:D5:B1:84:20:D5:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9f:28:eb:68:68:09:f1:47:24:49:df:b4:b6:79:d1:40:a5: 77:03:6c:ec:7f:7a:91:ff:0d:fd:8c:7e:34:2a:cb:1a:40:f1: 2f:ce:89:22:84:6c:4f:58:e1:60:4b:66:a5:df:60:85:76:e3: 7b:be:cc:8c:1b:7c:4f:34:f5:e4:04:9d:7e:ad:01:2c:08:9b: 91:02:e5:f3:5a:3b:a7:b7:5b:b2:2a:48:65:96:6d:26:63:f2: 6f:01:1f:4b:15:b7:74:18:c2:26:5a:5b:46:cc:05:85:de:c3: 86:7d:9c:d2:cf:ed:68:4c:f2:47:cb:1d:3b:52:91:a5:2e:00: 2c:ef:cd:9f:77:62:30:59:d0:37:50:c2:da:26:9e:83:28:a0: 62:a6:3e:a3:b3:40:b0:c7:95:7a:cd:3f:92:42:88:c7:fd:d7: d1:17:dc:56:f1:a2:3a:29:6c:6f:d2:6b:1d:b4:2a:c4:b1:57: 5e:c0:da:c5:81:46:3b:f9:82:d8:c6:4f:80:66:82:3c:78:33: c8:aa:54:90:78:88:07:74:6e:49:62:88:fc:0c:9d:0e:b2:25: 32:fa:61:76:63:52:69:03:ea:4c:56:99:82:2a:e3:bd:19:8f: 68:08:94:41:cb:64:45:5e:ac:a5:b7:af:7a:18:a4:43:ff:51: 9b:5e:33:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0RY7CjoWZmCqEZoZ6mkCzqfihIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgzRjM2NkUxRkU5QzA2OEVENDQxN0ZENzFENUIxODQy MEQ1NkI2MjAeFw0yNTEyMDIxMzQ1NDZaFw0yNTEyMDUxODE4NDZaMDMxMTAvBgNV BAMTKEUzNzIwNkZFQUYyNDMzNDg3M0Q3MDc3NENGRkE2QTlGRjM5QkUyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCww+16ViVvYzZjpqfuqUn54LER 6J5RsuOoZPrXUzFkY9Inwy1vzTcCm6Kyi8X3/9j0nwOV6MhJ5jLZzop1MjSPNnsL 0qPMGXZKXMRxpJa6SpTqsTYEL9klN/7esqDuXFshXONLuh89aiba+ui2nsAcraTV LLrhviqhRoeklQ536vWeEiZ7VTQrwjRW2n27jc9SK4gRgL3Eq6MZWRJsPolGrEsy 96W9kw3tDCBO+gJBQOFbrkvrTxxqsA5Pzs8iW3fsnJnCjUI2NIWAsImcRVyNQdoJ dCqz0IVXhpYE63wfwirdI72tTyFpEDMN4NPE3gJRvGOAV/XhPisSXmM8haizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU43IG/q8kM0hz1wd0z/pqn/Ob4jYwHwYDVR0j BBgwFoAUSD82bh/pwGjtRBf9cdWxhCDVa2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmYyYWQ0Zi1hNzJhLTQ2ZDEtYmQ3ZC1hNTYwYzMxZWZjYWQvMC80ODNGMzY2RTFG RTlDMDY4RUQ0NDE3RkQ3MUQ1QjE4NDIwRDU2QjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDgzRjM2NkUxRkU5QzA2OEVENDQxN0ZENzFENUIxODQyMEQ1 NkI2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJmMmFkNGYtYTcyYS00NmQxLWJk N2QtYTU2MGMzMWVmY2FkLzAvNDgzRjM2NkUxRkU5QzA2OEVENDQxN0ZENzFENUIx ODQyMEQ1NkI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWfKOtoaAnxRyRJ37S2edFApXcDbOx/epH/ Df2MfjQqyxpA8S/OiSKEbE9Y4WBLZqXfYIV243u+zIwbfE809eQEnX6tASwIm5EC 5fNaO6e3W7IqSGWWbSZj8m8BH0sVt3QYwiZaW0bMBYXew4Z9nNLP7WhM8kfLHTtS kaUuACzvzZ93YjBZ0DdQwtomnoMooGKmPqOzQLDHlXrNP5JCiMf919EX3Fbxojop bG/Sax20KsSxV17A2sWBRjv5gtjGT4Bmgjx4M8iqVJB4iAd0bkliiPwMnQ6yJTL6 YXZjUmkD6kxWmYIq470Zj2gIlEHLZEVerKW3r3oYpEP/UZteMxo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:45 2025 by rpki-client