This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: csP5aJoGTPHyMNa0c9V2nioI7gE2IiOuxsunOI3cqfc= Subject key identifier: C2:8F:8C:F8:50:30:50:F8:C0:79:4E:13:D4:C7:7B:E3:79:C0:BC:08 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 4580C410A3457873C01909B6B3A4011E9AE2DD3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 02FD Signing time: Wed 03 Dec 2025 06:12:23 +0000 Manifest this update: Wed 03 Dec 2025 06:07:23 +0000 Manifest next update: Sat 06 Dec 2025 17:04:23 +0000 Files and hashes: 1: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=) 2: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=) 3: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=) 4: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: yohlnmmqzk5KcsMKUj6dbn7guYQwdzOkO7YNJBK1hTE=) 5: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=) 6: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=) 7: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=) 8: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:80:c4:10:a3:45:78:73:c0:19:09:b6:b3:a4:01:1e:9a:e2:dd:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Dec 3 06:07:23 2025 GMT Not After : Dec 6 17:04:23 2025 GMT Subject: CN=C28F8CF8503050F8C0794E13D4C77BE379C0BC08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:22:56:ec:6e:9f:40:4b:c9:8b:e6:9b:37: a0:0b:8f:d2:a6:4a:9b:44:14:e8:45:8a:e8:ac:c1: 0b:b1:5a:2b:6d:16:55:77:26:18:e7:17:41:01:5e: 2a:3b:f4:20:f7:9f:43:d5:95:cb:67:0e:5b:6e:59: 7b:fa:5d:c7:6e:d3:5e:7b:88:a6:37:2c:75:ba:e2: f9:95:d3:eb:10:56:50:99:6f:bb:3d:f0:6f:ca:66: a9:49:b5:9f:22:e3:e0:06:f8:69:5b:0e:a4:c9:f8: 2d:a4:d2:37:a4:72:da:b1:dc:33:37:72:6a:14:4d: 69:28:4d:9f:39:b2:e7:2e:e3:b5:89:62:91:33:95: 97:3d:70:b4:f2:44:80:02:23:aa:a0:fa:1c:b2:1e: 51:72:38:6e:7d:8a:85:22:d5:e8:81:cd:3e:9b:f7: 43:23:14:73:2d:ae:ff:7d:d0:4d:52:57:e0:2c:b9: e2:a5:a9:90:35:d2:07:e9:c9:c4:c6:bc:c2:3e:84: 46:42:ec:b3:0b:a1:39:90:ad:bc:8a:ed:27:ec:23: 8a:ec:f8:ec:ea:6a:e8:3c:38:db:b4:07:bc:7d:94: f2:b8:ed:03:e1:55:5d:58:d8:55:cf:89:c3:c5:cb: c3:e4:ee:7d:48:49:77:60:10:3d:39:f5:59:c3:ce: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8F:8C:F8:50:30:50:F8:C0:79:4E:13:D4:C7:7B:E3:79:C0:BC:08 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d9:09:4d:99:9f:ce:c6:67:54:09:7d:37:55:6c:95:ee:66: eb:15:89:50:4b:e4:6a:30:60:a3:54:cc:c7:1b:22:55:12:0d: 14:f0:9f:80:7e:a6:c8:9e:9d:19:09:67:f6:d3:e7:21:4e:6b: be:90:b8:15:66:bc:8c:b2:74:70:e5:2d:54:3b:dc:12:c6:1b: ce:35:cf:58:36:b1:fa:f9:94:6b:01:4b:85:51:f1:60:9e:67: fb:5f:0a:65:d5:bf:25:b5:59:e5:03:46:06:bc:61:ab:88:26: c5:b2:3e:c5:27:73:ec:04:46:26:3a:8c:7c:9e:1c:7b:bc:ac: 4d:3e:1a:d1:47:d3:74:f9:7c:52:fd:0b:93:24:4d:de:b8:9f: f0:d4:00:55:7d:84:c7:68:95:8a:a7:fe:f8:00:d0:8e:16:87: 41:dc:1a:a4:55:d3:a7:08:79:17:70:a2:93:cc:5b:1d:2d:a5: 74:75:60:49:e2:6d:5a:d6:79:77:db:c1:af:92:91:cc:05:83: a6:f7:d0:4d:e9:48:5e:fd:ba:26:fc:b7:c6:fb:0d:66:7a:9b: 92:ac:29:53:a7:b9:a7:19:c3:50:84:f1:b1:96:88:42:79:0a: 2b:1c:30:ac:5a:2d:0c:ff:df:0c:d8:2c:8f:72:d0:11:4a:d0: 1d:a6:28:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURYDEEKNFeHPAGQm2s6QBHpri3TwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTEyMDMwNjA3MjNaFw0yNTEyMDYxNzA0MjNaMDMxMTAvBgNV BAMTKEMyOEY4Q0Y4NTAzMDUwRjhDMDc5NEUxM0Q0Qzc3QkUzNzlDMEJDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51SJW7G6fQEvJi+abN6ALj9Km SptEFOhFiuiswQuxWittFlV3JhjnF0EBXio79CD3n0PVlctnDltuWXv6Xcdu0157 iKY3LHW64vmV0+sQVlCZb7s98G/KZqlJtZ8i4+AG+GlbDqTJ+C2k0jekctqx3DM3 cmoUTWkoTZ85sucu47WJYpEzlZc9cLTyRIACI6qg+hyyHlFyOG59ioUi1eiBzT6b 90MjFHMtrv990E1SV+AsueKlqZA10gfpycTGvMI+hEZC7LMLoTmQrbyK7SfsI4rs +Ozqaug8ONu0B7x9lPK47QPhVV1Y2FXPicPFy8Pk7n1ISXdgED059VnDzuG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwo+M+FAwUPjAeU4T1Md743nAvAgwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjZCU2Zn87GZ1QJfTdVbJXuZusViVBL5Gow YKNUzMcbIlUSDRTwn4B+psienRkJZ/bT5yFOa76QuBVmvIyydHDlLVQ73BLGG841 z1g2sfr5lGsBS4VR8WCeZ/tfCmXVvyW1WeUDRga8YauIJsWyPsUnc+wERiY6jHye HHu8rE0+GtFH03T5fFL9C5MkTd64n/DUAFV9hMdolYqn/vgA0I4Wh0HcGqRV06cI eRdwopPMWx0tpXR1YEnibVrWeXfbwa+SkcwFg6b30E3pSF79uib8t8b7DWZ6m5Ks KVOnuacZw1CE8bGWiEJ5CiscMKxaLQz/3wzYLI9y0BFK0B2mKFI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:35 2025 by rpki-client