This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: Bhj84Q6HLrBJfj9fLcx0F6UlH5bH0GV+V9v7eXA7Uuo= Subject key identifier: AF:70:6D:0D:73:F9:83:F7:CF:2C:68:5A:55:88:32:4B:7E:96:83:0E Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 3E1B595CD71D2351031234F5E35919C5AA4AA4CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 0532 Signing time: Tue 23 Dec 2025 10:13:42 +0000 Manifest this update: Tue 23 Dec 2025 10:08:42 +0000 Manifest next update: Fri 26 Dec 2025 13:43:42 +0000 Files and hashes: 1: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) 2: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) 3: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: EyKq6KU60cSA8VxucwQO0G773/RR9EfgKjVes/Pi1Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 13:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1b:59:5c:d7:1d:23:51:03:12:34:f5:e3:59:19:c5:aa:4a:a4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Dec 23 10:08:42 2025 GMT Not After : Dec 26 13:43:42 2025 GMT Subject: CN=AF706D0D73F983F7CF2C685A5588324B7E96830E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b8:2e:13:0b:1d:ba:e3:96:31:d9:46:5f:15: 26:3d:a7:7b:49:44:03:f2:69:4e:a9:0a:40:1b:06: f5:44:e2:56:e8:dc:b0:af:ca:7f:62:a3:6f:62:53: 6c:ed:4f:c8:1c:cd:f0:af:9e:9c:34:37:b5:89:6a: 87:ae:1f:7d:4e:f7:e9:ff:39:61:0e:36:2b:4d:b7: 48:4c:8b:b2:b5:6f:22:cc:16:b5:cf:14:ce:96:e2: 93:28:45:d3:24:1c:bc:81:fd:fd:c4:2c:f6:50:10: db:df:39:4d:38:f1:36:55:39:da:67:0d:41:9f:95: ca:43:44:6a:fc:eb:70:e1:b4:59:fc:6c:1c:4a:ab: 32:a8:41:f3:55:1a:fc:e7:ca:8c:96:d8:ed:42:d5: 5f:c4:69:b7:30:18:c0:0f:8a:64:f1:0a:2a:03:b9: f1:12:d4:a1:0b:9c:4a:27:56:f3:1d:79:6a:f6:36: 03:74:a2:35:75:23:06:0a:fc:89:39:9b:41:fb:b1: 46:f5:5d:22:b7:b2:ac:04:d4:33:1b:70:38:bc:7d: 0e:98:22:a2:ee:28:4f:54:6e:06:f3:cb:a9:f5:70: eb:52:a7:18:0e:0e:86:11:c4:6a:00:cc:67:3a:ae: d6:21:b6:fc:af:2d:c0:2d:7a:76:e7:a4:45:40:43: f7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:70:6D:0D:73:F9:83:F7:CF:2C:68:5A:55:88:32:4B:7E:96:83:0E X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:1e:c7:7e:06:e2:9b:d6:8d:05:a6:11:2e:08:2a:ea:ad:75: 72:94:08:56:1e:02:20:25:07:5f:b5:6b:20:85:47:e0:e0:cc: 1c:07:45:3b:66:35:f4:7b:87:bb:2c:2e:af:ee:03:70:75:14: 4d:e7:13:16:74:0d:f4:ab:a0:6c:2a:89:4f:df:5c:aa:94:d5: 5c:0a:d7:3d:15:f5:21:50:9a:01:11:ea:d2:ce:72:70:98:16: de:46:44:a6:c1:dd:3a:71:6e:36:da:83:20:fc:de:86:b9:7d: 40:d0:35:d5:06:aa:4d:b9:a7:9b:f1:46:6c:75:b2:44:65:a6: b8:11:a3:a2:da:1e:ff:22:ba:e9:5b:64:6d:5f:3f:7a:ef:81: 64:9f:25:0c:fe:1d:b6:39:49:3f:d1:27:fd:35:aa:84:76:ce: 09:82:47:82:2c:c3:c3:80:75:07:78:ac:cc:6b:61:f0:03:b8: 5e:36:7f:38:0b:68:ea:c8:9b:c1:66:68:77:3f:d2:b6:78:5c: 16:8d:df:f3:1c:a1:db:e0:ce:f2:0e:55:cc:19:69:94:f1:68: c0:b6:22:59:97:47:4c:84:76:3a:fa:fb:6d:b8:07:c4:d9:60: f7:54:82:e8:d4:2d:02:af:84:9f:45:6e:bb:8b:d5:a3:bd:ed: 5b:79:9b:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhtZXNcdI1EDEjT141kZxapKpM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTEyMjMxMDA4NDJaFw0yNTEyMjYxMzQzNDJaMDMxMTAvBgNV BAMTKEFGNzA2RDBENzNGOTgzRjdDRjJDNjg1QTU1ODgzMjRCN0U5NjgzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbuC4TCx2645Yx2UZfFSY9p3tJ RAPyaU6pCkAbBvVE4lbo3LCvyn9io29iU2ztT8gczfCvnpw0N7WJaoeuH31O9+n/ OWEONitNt0hMi7K1byLMFrXPFM6W4pMoRdMkHLyB/f3ELPZQENvfOU048TZVOdpn DUGflcpDRGr863DhtFn8bBxKqzKoQfNVGvznyoyW2O1C1V/EabcwGMAPimTxCioD ufES1KELnEonVvMdeWr2NgN0ojV1IwYK/Ik5m0H7sUb1XSK3sqwE1DMbcDi8fQ6Y IqLuKE9Ubgbzy6n1cOtSpxgODoYRxGoAzGc6rtYhtvyvLcAtenbnpEVAQ/c9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr3BtDXP5g/fPLGhaVYgyS36Wgw4wHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMex34G4pvWjQWmES4IKuqtdXKUCFYeAiAl B1+1ayCFR+DgzBwHRTtmNfR7h7ssLq/uA3B1FE3nExZ0DfSroGwqiU/fXKqU1VwK 1z0V9SFQmgER6tLOcnCYFt5GRKbB3TpxbjbagyD83oa5fUDQNdUGqk25p5vxRmx1 skRlprgRo6LaHv8iuulbZG1fP3rvgWSfJQz+HbY5ST/RJ/01qoR2zgmCR4Isw8OA dQd4rMxrYfADuF42fzgLaOrIm8FmaHc/0rZ4XBaN3/McodvgzvIOVcwZaZTxaMC2 IlmXR0yEdjr6+224B8TZYPdUgujULQKvhJ9FbruL1aO97Vt5m28= -----END CERTIFICATE-----Generated at Wed Dec 24 21:24:10 2025 by rpki-client