This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: CnRSA+dxyKm3dh4tC2DfEPlQRw4cBq650XTrPVqlRCk= Subject key identifier: 8E:5C:17:67:CE:C7:F8:0E:12:BB:18:CC:EA:FE:86:4D:73:0F:1C:F0 Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 67ED393097111699724F26CDF49EF309A07FE11F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 052A Signing time: Tue 02 Dec 2025 09:42:12 +0000 Manifest this update: Tue 02 Dec 2025 09:37:12 +0000 Manifest next update: Fri 05 Dec 2025 17:07:12 +0000 Files and hashes: 1: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: VY0reLZgneAzg7R84Tad2iOKQP0XACwiXAAd1W212Yc=) 2: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 3: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: 6kcKSH4eXGtr3PL70W6JqHi1qIZEOPjmVkd6LGmTPvA=) 4: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 5: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ed:39:30:97:11:16:99:72:4f:26:cd:f4:9e:f3:09:a0:7f:e1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Dec 2 09:37:12 2025 GMT Not After : Dec 5 17:07:12 2025 GMT Subject: CN=8E5C1767CEC7F80E12BB18CCEAFE864D730F1CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:dd:f5:b9:57:8b:2a:f6:bb:14:33:d4:e9:d1: df:77:2f:5a:73:a5:e1:04:b5:b8:28:b8:b6:b0:1f: a9:9c:bd:e1:ca:d2:c1:30:10:d5:0f:76:42:a6:bf: c4:b2:89:bc:44:32:0d:29:96:01:55:d3:0c:fa:30: 00:52:e2:8c:a1:9c:98:73:43:93:96:d4:ba:99:09: ac:ed:ef:29:e3:50:70:79:c2:0e:0a:1e:01:52:12: 64:74:f5:ae:ad:92:a6:99:00:c8:55:33:e3:83:d8: f7:85:8d:76:3d:cf:2f:94:4a:64:da:b6:8d:77:5a: e2:80:22:ae:59:f9:e1:69:6b:96:a8:d2:66:c9:8b: dc:53:d7:2e:07:e0:f0:d8:e3:60:d2:d7:cd:4c:fc: b0:0d:77:a2:b5:a4:1d:a8:68:8e:3a:36:75:fe:2b: 91:6b:90:68:74:62:9f:52:78:77:60:9f:fc:b5:3c: 35:87:19:01:05:d0:8e:08:0b:fb:e5:dd:a5:a9:36: f7:61:73:48:0d:f7:a8:1b:54:f1:3b:b2:56:1d:80: 19:59:69:c6:de:9c:00:cc:92:7e:93:6c:68:64:a3: 73:f2:07:cd:e1:ef:38:be:27:4d:13:57:ad:1a:c9: 85:a8:d6:5b:fb:23:e0:d7:cd:9d:35:33:6e:b6:de: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5C:17:67:CE:C7:F8:0E:12:BB:18:CC:EA:FE:86:4D:73:0F:1C:F0 X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cf:4f:58:4c:f0:5c:97:b2:2c:fe:80:fb:71:b0:1b:a8:99: 26:ab:8f:8a:ce:1e:4f:06:37:4f:5d:e0:5e:f3:2d:29:4e:4b: b9:d6:6f:d3:1a:91:5c:e4:51:9c:65:15:d2:74:2b:ac:44:c2: 21:84:09:6a:a7:24:4d:bb:b6:0c:eb:ff:70:d8:f8:cc:62:f4: e0:12:61:09:b6:9f:a5:36:18:c5:4a:f6:40:f8:45:92:c6:ba: 10:3e:09:a7:f5:10:07:9b:24:ed:98:7e:5a:0d:80:42:0a:02: 30:1d:f0:c5:20:26:70:45:3e:d8:bd:5d:de:2f:fb:3d:a1:aa: f7:9d:65:ac:d2:34:40:7a:7f:77:01:4d:9f:fa:e0:0c:1e:5e: 29:69:e7:25:c8:30:bb:3f:94:03:80:dd:90:c1:4d:0a:d9:92: 12:9e:d5:58:3d:51:1d:3f:cc:9d:f4:e6:a8:d7:f9:60:80:aa: d8:77:6a:76:e9:c9:2b:52:64:c7:86:1c:16:09:59:10:00:65: be:84:b9:65:56:61:7c:aa:24:00:73:43:b2:a0:6b:18:62:0d: cc:f3:73:d1:dd:d3:00:99:08:4b:af:39:66:7a:fd:d8:03:f4: ce:9d:7a:e0:54:78:ee:83:ab:2f:7f:28:63:93:f4:fc:b8:00: 0e:58:d2:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+05MJcRFplyTybN9J7zCaB/4R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNTEyMDIwOTM3MTJaFw0yNTEyMDUxNzA3MTJaMDMxMTAvBgNV BAMTKDhFNUMxNzY3Q0VDN0Y4MEUxMkJCMThDQ0VBRkU4NjRENzMwRjFDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr3fW5V4sq9rsUM9Tp0d93L1pz peEEtbgouLawH6mcveHK0sEwENUPdkKmv8SyibxEMg0plgFV0wz6MABS4oyhnJhz Q5OW1LqZCazt7ynjUHB5wg4KHgFSEmR09a6tkqaZAMhVM+OD2PeFjXY9zy+USmTa to13WuKAIq5Z+eFpa5ao0mbJi9xT1y4H4PDY42DS181M/LANd6K1pB2oaI46NnX+ K5FrkGh0Yp9SeHdgn/y1PDWHGQEF0I4IC/vl3aWpNvdhc0gN96gbVPE7slYdgBlZ acbenADMkn6TbGhko3PyB83h7zi+J00TV60ayYWo1lv7I+DXzZ01M2623l8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjlwXZ87H+A4SuxjM6v6GTXMPHPAwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7PT1hM8FyXsiz+gPtxsBuomSarj4rOHk8G N09d4F7zLSlOS7nWb9MakVzkUZxlFdJ0K6xEwiGECWqnJE27tgzr/3DY+Mxi9OAS YQm2n6U2GMVK9kD4RZLGuhA+Caf1EAebJO2YfloNgEIKAjAd8MUgJnBFPti9Xd4v +z2hqvedZazSNEB6f3cBTZ/64AweXilp5yXIMLs/lAOA3ZDBTQrZkhKe1Vg9UR0/ zJ305qjX+WCAqth3anbpyStSZMeGHBYJWRAAZb6EuWVWYXyqJABzQ7KgaxhiDczz c9Hd0wCZCEuvOWZ6/dgD9M6deuBUeO6Dqy9/KGOT9Py4AA5Y0ro= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:23 2025 by rpki-client