This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: GM3/0hyBVL+SRJG0x7TWeQOJLP9eMd30jpoHkUhuISM= Subject key identifier: AB:62:9A:E1:14:4C:4E:9A:0D:5D:F6:7D:9E:48:1D:E9:6F:1C:BE:51 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 68FEA4B2EA4E9030D4CB22216C6374A20E9F6A7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 0242 Signing time: Wed 03 Dec 2025 13:41:44 +0000 Manifest this update: Wed 03 Dec 2025 13:36:44 +0000 Manifest next update: Sat 06 Dec 2025 19:39:44 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: SuCOwwunqZdorUkwBp4+VKDhwn20dURa75a0t7qoi80=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 19:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fe:a4:b2:ea:4e:90:30:d4:cb:22:21:6c:63:74:a2:0e:9f:6a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Dec 3 13:36:44 2025 GMT Not After : Dec 6 19:39:44 2025 GMT Subject: CN=AB629AE1144C4E9A0D5DF67D9E481DE96F1CBE51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:ac:66:7f:de:03:88:1d:b5:ab:58:d6:04: 14:13:77:3c:03:ff:13:e1:d1:0e:7f:48:88:8f:e3: 92:e3:00:00:9b:ee:df:19:ae:ba:c1:52:a8:3b:29: 1e:37:f9:df:5a:94:f3:7a:ab:2a:78:37:07:a3:ca: f2:0a:2e:03:11:31:53:d4:57:b2:79:f8:18:09:e1: 17:b1:f9:1e:38:69:b4:16:85:cd:ab:43:4b:dd:9c: b9:34:8c:5d:d3:9d:ee:3e:74:c0:df:0a:4d:3f:09: e6:d5:7c:35:fc:57:82:19:07:22:28:ac:ce:6f:29: 6d:3c:cb:f9:31:b8:df:be:e3:d0:61:e3:91:f5:64: 7f:46:f2:c3:6c:d5:3c:3f:85:bb:72:e2:c6:ef:7a: 08:33:c8:32:a3:42:47:7e:3f:6b:d6:17:af:6c:b2: 62:31:0f:7c:e7:8d:0f:24:44:7f:43:0b:e5:6f:d3: 79:e4:c2:a0:34:53:68:e8:16:a3:ec:5f:c7:4c:c0: 66:7b:7d:89:77:a7:bf:bf:df:33:a1:f1:ec:0a:ca: 94:95:83:37:7b:5b:e9:12:84:b2:27:dd:74:43:fa: de:00:7b:d2:be:8c:e4:87:86:ff:80:0e:aa:19:1f: e0:22:fb:9b:58:df:fc:ae:b0:fc:65:4f:c2:ac:63: d7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:62:9A:E1:14:4C:4E:9A:0D:5D:F6:7D:9E:48:1D:E9:6F:1C:BE:51 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d9:af:fc:5e:f9:9e:74:ac:ca:87:88:f8:3a:fd:42:03:3c: 6e:c5:9e:57:8e:14:6a:27:08:c3:a4:68:02:fe:bf:c7:50:47: c5:cc:8a:17:76:f4:fe:02:74:0c:9d:33:7e:a4:3a:f5:bf:51: 93:92:53:84:e5:06:74:9d:20:50:4b:7a:37:d9:dd:82:0f:57: e9:ee:e8:1e:fb:4b:f8:5b:10:1f:a9:d8:0e:39:0d:a7:b7:1c: a2:4a:c1:8d:2e:b2:e3:25:5b:2a:47:8d:bd:c0:42:ef:38:98: f7:63:d0:ba:af:39:51:af:8e:c4:0c:b3:35:96:bf:87:c9:21: 3d:54:b8:8d:1a:a8:6b:2d:20:a8:3b:07:0e:50:6b:c4:73:87: 08:4e:69:55:00:d4:3c:fc:eb:76:39:5d:5b:b0:9e:43:53:2d: 20:23:f9:63:79:35:31:4b:b7:13:ef:08:08:79:7c:93:69:98: 1d:f5:ad:68:c1:d7:bc:16:2d:f0:f6:b1:24:6c:df:33:eb:52: d0:b6:0f:d4:b0:f3:60:41:4f:be:18:ce:7a:97:b3:6a:94:75: 8c:d4:17:ee:a0:89:52:c3:8b:10:d5:a7:10:74:fd:24:a7:82: 18:d5:54:11:8f:96:db:5f:ed:3e:de:13:29:8f:ef:b7:49:15: 1c:b0:15:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaP6ksupOkDDUyyIhbGN0og6fanswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTEyMDMxMzM2NDRaFw0yNTEyMDYxOTM5NDRaMDMxMTAvBgNV BAMTKEFCNjI5QUUxMTQ0QzRFOUEwRDVERjY3RDlFNDgxREU5NkYxQ0JFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uaxmf94DiB21q1jWBBQTdzwD /xPh0Q5/SIiP45LjAACb7t8ZrrrBUqg7KR43+d9alPN6qyp4NwejyvIKLgMRMVPU V7J5+BgJ4Rex+R44abQWhc2rQ0vdnLk0jF3Tne4+dMDfCk0/CebVfDX8V4IZByIo rM5vKW08y/kxuN++49Bh45H1ZH9G8sNs1Tw/hbty4sbveggzyDKjQkd+P2vWF69s smIxD3znjQ8kRH9DC+Vv03nkwqA0U2joFqPsX8dMwGZ7fYl3p7+/3zOh8ewKypSV gzd7W+kShLIn3XRD+t4Ae9K+jOSHhv+ADqoZH+Ai+5tY3/yusPxlT8KsY9c3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq2Ka4RRMTpoNXfZ9nkgd6W8cvlEwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPZr/xe+Z50rMqHiPg6/UIDPG7FnleOFGon CMOkaAL+v8dQR8XMihd29P4CdAydM36kOvW/UZOSU4TlBnSdIFBLejfZ3YIPV+nu 6B77S/hbEB+p2A45Dae3HKJKwY0usuMlWypHjb3AQu84mPdj0LqvOVGvjsQMszWW v4fJIT1UuI0aqGstIKg7Bw5Qa8RzhwhOaVUA1Dz863Y5XVuwnkNTLSAj+WN5NTFL txPvCAh5fJNpmB31rWjB17wWLfD2sSRs3zPrUtC2D9Sw82BBT74YznqXs2qUdYzU F+6giVLDixDVpxB0/SSnghjVVBGPlttf7T7eEymP77dJFRywFco= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:14 2025 by rpki-client