This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: 4NxoazEEfI5CLZeyOv1jaHz8RsG+o3moqpkdC/fRkxs= Subject key identifier: 32:10:10:E7:AE:1E:10:F6:C1:3D:49:63:C6:24:85:39:E2:58:6E:AC Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 3E036943F2415E17FB6B9F40945C3572D17D8B52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0529 Signing time: Tue 25 Nov 2025 09:11:10 +0000 Manifest this update: Tue 25 Nov 2025 09:06:10 +0000 Manifest next update: Fri 28 Nov 2025 15:41:10 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: ODXfB4yimXcWItpsmdVq0BFZhY/HZYgbLsoKRE+ow2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Nov 2025 15:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:03:69:43:f2:41:5e:17:fb:6b:9f:40:94:5c:35:72:d1:7d:8b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Nov 25 09:06:10 2025 GMT Not After : Nov 28 15:41:10 2025 GMT Subject: CN=321010E7AE1E10F6C13D4963C6248539E2586EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:22:87:44:5c:3b:ec:2f:f8:ae:04:f9:52: 6e:72:d1:c0:88:a0:01:bb:37:d6:c3:ad:b2:c0:a7: 4e:fa:f6:19:1e:b7:ee:36:64:39:df:3b:43:1a:5f: 4f:71:f7:40:41:e2:71:47:c0:94:a4:61:0a:e4:77: 3e:aa:91:75:28:d4:ff:61:b0:0a:3b:8a:95:ac:61: fd:4c:d7:6f:17:f3:5a:19:bd:d7:e4:85:ab:a9:72: d1:7a:3d:90:21:c3:60:ae:ed:a0:0f:e7:9b:1c:4e: 8e:d7:d4:97:af:1e:50:51:0c:a5:c9:15:1c:4d:fe: ad:be:6e:d8:1d:d7:85:94:23:4f:1f:41:6d:44:8b: 62:c6:a5:fd:55:1f:1a:46:29:f6:53:43:33:48:cc: 25:c1:a7:e0:8c:b2:24:6c:2d:85:17:33:2c:4e:e2: e5:12:35:3f:ff:80:2b:06:24:e7:02:01:6b:16:99: 0f:dc:79:b8:c7:17:a2:bd:19:56:16:17:a7:c8:a0: b2:4e:2b:aa:a1:96:bc:1d:c6:df:7b:c7:27:f9:89: 53:29:44:cc:9c:4b:1c:39:a5:42:1f:4c:42:a6:4a: 84:c6:7f:9d:63:1e:ae:6b:c2:21:ff:7e:75:e3:db: ba:f5:5a:63:12:bb:ea:30:6c:c5:11:3e:bf:ec:f0: dc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:10:10:E7:AE:1E:10:F6:C1:3D:49:63:C6:24:85:39:E2:58:6E:AC X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a6:76:da:c5:0d:b0:b5:ff:a7:c0:da:26:d7:9d:3c:36:c9: c6:9a:b1:69:91:e7:88:c1:57:2d:8f:e4:3a:5c:81:8a:0d:01: 31:59:7e:8e:e8:00:d5:9f:66:44:c7:40:f4:f1:ee:15:de:a1: 83:f7:44:34:47:8e:b3:45:52:b5:7d:78:27:e2:48:73:2e:3e: 75:bf:8f:93:cb:cf:83:10:5a:59:30:4a:c2:02:b8:01:6e:58: 12:cf:0c:b7:ab:09:43:b4:34:09:99:70:10:c7:71:a2:54:b8: b6:9e:33:cb:c7:31:20:f6:15:9f:dc:49:db:44:23:a1:62:3e: 95:5d:b9:d3:41:66:43:60:93:e6:c9:04:7f:3a:92:0f:e5:cd: ec:8a:d4:55:bd:76:12:c4:48:c8:13:5c:7c:03:f7:3a:5b:fc: 4f:f5:be:7f:f4:da:51:2c:8a:3b:a0:85:78:9e:a1:39:21:f8: 1c:08:3c:1a:39:4b:ce:95:2e:d4:6b:a6:8e:21:e0:e1:73:7d: 51:76:19:65:d7:a6:8b:c2:a3:dc:cd:9b:fb:6a:87:a2:72:fd: 8f:ac:84:79:a3:00:87:95:e4:5e:a4:cf:ad:f5:8f:43:35:0a: 07:c5:cf:f2:a3:7a:d4:fc:d4:6f:84:da:ef:db:e4:4e:d1:ac: 8d:a4:75:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgNpQ/JBXhf7a59AlFw1ctF9i1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTExMjUwOTA2MTBaFw0yNTExMjgxNTQxMTBaMDMxMTAvBgNV BAMTKDMyMTAxMEU3QUUxRTEwRjZDMTNENDk2M0M2MjQ4NTM5RTI1ODZFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6yKHRFw77C/4rgT5Um5y0cCI oAG7N9bDrbLAp0769hket+42ZDnfO0MaX09x90BB4nFHwJSkYQrkdz6qkXUo1P9h sAo7ipWsYf1M128X81oZvdfkhaupctF6PZAhw2Cu7aAP55scTo7X1JevHlBRDKXJ FRxN/q2+btgd14WUI08fQW1Ei2LGpf1VHxpGKfZTQzNIzCXBp+CMsiRsLYUXMyxO 4uUSNT//gCsGJOcCAWsWmQ/cebjHF6K9GVYWF6fIoLJOK6qhlrwdxt97xyf5iVMp RMycSxw5pUIfTEKmSoTGf51jHq5rwiH/fnXj27r1WmMSu+owbMURPr/s8NyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMhAQ564eEPbBPUljxiSFOeJYbqwwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOmdtrFDbC1/6fA2ibXnTw2ycaasWmR54jB Vy2P5DpcgYoNATFZfo7oANWfZkTHQPTx7hXeoYP3RDRHjrNFUrV9eCfiSHMuPnW/ j5PLz4MQWlkwSsICuAFuWBLPDLerCUO0NAmZcBDHcaJUuLaeM8vHMSD2FZ/cSdtE I6FiPpVdudNBZkNgk+bJBH86kg/lzeyK1FW9dhLESMgTXHwD9zpb/E/1vn/02lEs ijughXieoTkh+BwIPBo5S86VLtRrpo4h4OFzfVF2GWXXpovCo9zNm/tqh6Jy/Y+s hHmjAIeV5F6kz631j0M1CgfFz/KjetT81G+E2u/b5E7RrI2kdQ4= -----END CERTIFICATE-----Generated at Wed Nov 26 03:45:18 2025 by rpki-client