This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: 7o+mRfTNbZv4ufmshkVxOG7pSRdsztbtZCOAWJgjc+k= Subject key identifier: E8:33:F8:B7:2F:86:B0:DF:B6:00:ED:42:2B:A9:BA:09:AF:41:9E:B7 Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 2362222AC0938ACE3E2E556EAD1BA9E3234F79D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: DD Signing time: Wed 03 Dec 2025 09:10:54 +0000 Manifest this update: Wed 03 Dec 2025 09:05:54 +0000 Manifest next update: Sat 06 Dec 2025 11:16:54 +0000 Files and hashes: 1: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: NgmTATzSBbtaNSNhVAivXQI0YveV8vzSYtlPPvcMZQg=) 2: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: 8hYT6Y/pfowP/KBmfZIn8BXYiG2OvY6NAk7Ce/h0YCw=) 3: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: hFEJcZgFcoA0OsCR/KSwRiYCycDz3fj8AW7G8OvlQww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:62:22:2a:c0:93:8a:ce:3e:2e:55:6e:ad:1b:a9:e3:23:4f:79:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Dec 3 09:05:54 2025 GMT Not After : Dec 6 11:16:54 2025 GMT Subject: CN=E833F8B72F86B0DFB600ED422BA9BA09AF419EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:2e:73:e2:63:aa:55:7f:f9:9f:a1:eb:ea: ee:45:aa:04:89:49:d6:3c:96:3a:b5:d6:bf:17:33: 75:b4:e4:d4:8d:f5:11:a3:a3:0c:9d:64:68:ad:d8: 9e:72:97:18:b6:41:18:5f:56:2e:6b:79:7e:27:06: 16:f4:b0:3c:67:63:5e:ba:80:35:3b:32:cf:cc:8b: fe:45:64:ab:4d:a3:31:38:17:3e:ff:1d:dd:7d:70: b1:61:1b:b0:82:b9:9a:82:ec:ab:eb:20:48:de:32: 33:a2:2b:aa:78:67:8d:6a:00:f7:64:63:9b:76:a5: 2d:59:33:f4:6a:48:fc:fb:cc:df:b4:3f:07:d4:7f: 3b:4f:f3:f0:a4:0b:69:90:05:9b:9c:2b:23:96:64: d5:84:68:91:a5:4a:7f:11:5b:e8:11:12:01:a9:b6: c2:03:3b:be:62:38:57:0b:ba:fe:23:f8:f9:c9:78: d0:e6:68:c9:e0:83:eb:53:ad:50:4d:0b:8b:70:5b: d2:2e:8f:d3:ed:4b:23:9b:32:3e:6b:95:e7:ca:aa: 26:8c:90:eb:88:3d:a4:11:da:9c:52:38:63:fe:a0: 66:83:de:36:c5:4f:12:9c:9c:6b:cd:51:23:2b:34: 12:68:a6:23:99:cd:be:5c:f5:01:17:47:63:27:c8: fc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:33:F8:B7:2F:86:B0:DF:B6:00:ED:42:2B:A9:BA:09:AF:41:9E:B7 X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:4b:90:9f:ae:46:b0:07:8c:51:0e:6e:bd:eb:df:3a:68:70: a4:1e:a1:58:dd:36:2f:af:dd:7e:40:37:90:c1:22:b2:21:fb: 46:d1:14:63:8a:a4:44:80:55:0c:fc:5f:bb:33:33:1e:57:7d: 1e:cd:0c:5c:c8:6f:ed:bd:f6:f3:c9:ec:85:b2:d3:02:e4:04: 48:8a:d4:02:0a:b9:20:fa:15:11:d4:27:4c:08:54:f8:22:b7: af:fd:ee:84:de:a0:a2:08:97:0e:ca:33:ee:0a:80:ed:e4:73: f2:ca:0d:22:87:fd:6b:c4:25:dd:23:30:31:32:ad:b1:0f:6c: bd:ae:c6:2f:b6:80:c5:32:85:e2:b7:9f:28:b0:84:f3:29:3d: 39:85:88:39:9e:f1:1f:1b:8a:f1:36:96:dc:0b:c4:41:1a:11: 4d:bc:7f:47:73:b7:c0:59:8a:76:51:12:90:c6:ac:98:be:3f: 86:13:08:72:2b:ae:c8:71:be:d8:e6:59:80:db:77:d1:e1:57: 7b:3a:0d:65:57:8f:00:32:32:80:f3:f1:cd:e5:57:ef:fd:ce: 85:19:c9:17:48:11:fa:18:be:54:5f:fb:7a:43:53:a8:d7:84: b4:4f:14:0a:0a:82:1a:69:62:c7:8e:c9:63:cb:f3:57:96:de: d7:ba:5b:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2IiKsCTis4+LlVurRup4yNPedUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTEyMDMwOTA1NTRaFw0yNTEyMDYxMTE2NTRaMDMxMTAvBgNV BAMTKEU4MzNGOEI3MkY4NkIwREZCNjAwRUQ0MjJCQTlCQTA5QUY0MTlFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4S5z4mOqVX/5n6Hr6u5FqgSJ SdY8ljq11r8XM3W05NSN9RGjowydZGit2J5ylxi2QRhfVi5reX4nBhb0sDxnY166 gDU7Ms/Mi/5FZKtNozE4Fz7/Hd19cLFhG7CCuZqC7KvrIEjeMjOiK6p4Z41qAPdk Y5t2pS1ZM/RqSPz7zN+0PwfUfztP8/CkC2mQBZucKyOWZNWEaJGlSn8RW+gREgGp tsIDO75iOFcLuv4j+PnJeNDmaMngg+tTrVBNC4twW9Iuj9PtSyObMj5rlefKqiaM kOuIPaQR2pxSOGP+oGaD3jbFTxKcnGvNUSMrNBJopiOZzb5c9QEXR2MnyPy/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6DP4ty+GsN+2AO1CK6m6Ca9BnrcwHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtLkJ+uRrAHjFEObr3r3zpocKQeoVjdNi+v 3X5AN5DBIrIh+0bRFGOKpESAVQz8X7szMx5XfR7NDFzIb+299vPJ7IWy0wLkBEiK 1AIKuSD6FRHUJ0wIVPgit6/97oTeoKIIlw7KM+4KgO3kc/LKDSKH/WvEJd0jMDEy rbEPbL2uxi+2gMUyheK3nyiwhPMpPTmFiDme8R8bivE2ltwLxEEaEU28f0dzt8BZ inZREpDGrJi+P4YTCHIrrshxvtjmWYDbd9HhV3s6DWVXjwAyMoDz8c3lV+/9zoUZ yRdIEfoYvlRf+3pDU6jXhLRPFAoKghppYseOyWPL81eW3te6WyE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:26 2025 by rpki-client