This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json) Hash identifier: a6Zc7hH7xeSt088kiYhinadZNEXQox/0GX6+sAGJNck= Subject key identifier: 55:37:D2:E2:04:C0:E0:E2:A1:4F:1B:8E:1E:3A:8D:5A:96:AF:BE:E1 Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Certificate serial: 3008551F7F1BA35D9E0A5758FED2D4336A021198 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft Manifest number: 0208 Signing time: Tue 02 Dec 2025 10:01:24 +0000 Manifest this update: Tue 02 Dec 2025 09:56:24 +0000 Manifest next update: Fri 05 Dec 2025 19:02:24 +0000 Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: Yqx9Dw1Y0Wwb/SjfQ6VZl3Jkk0CY0PiViE00pN+nAIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:08:55:1f:7f:1b:a3:5d:9e:0a:57:58:fe:d2:d4:33:6a:02:11:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Validity Not Before: Dec 2 09:56:24 2025 GMT Not After : Dec 5 19:02:24 2025 GMT Subject: CN=5537D2E204C0E0E2A14F1B8E1E3A8D5A96AFBEE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:97:8b:64:cf:3e:99:cf:f8:1c:9c:9b:56: f9:f4:cb:4b:bb:51:71:e3:39:4c:f7:1e:5d:6b:f7: 88:89:14:2e:33:ac:0d:bd:db:cb:62:b1:0d:5b:7c: 5d:71:f8:cf:88:7a:dd:af:78:8c:96:4e:00:1f:14: 66:ce:a7:e1:75:ee:ff:e5:b8:cf:66:5b:86:36:90: 27:4a:60:e1:be:3c:d1:db:e1:51:da:f9:19:e3:24: 94:b6:ed:17:75:cd:58:5b:f7:2c:95:4a:ce:a8:56: 6a:64:8f:21:2d:36:95:31:b0:5d:33:eb:68:8a:9a: 15:22:c4:06:a1:6b:3f:36:f0:09:e0:31:07:38:24: e0:3a:e5:b1:d7:00:9e:17:9f:9e:4b:41:6e:be:53: c1:73:e8:e1:30:4c:d7:34:92:da:f8:99:30:28:08: 59:e2:5d:0a:5a:eb:ac:60:a7:48:59:a7:c8:16:0d: 58:ef:93:6f:3d:27:19:77:c3:b0:b2:4e:cb:9e:31: d8:9b:e2:e3:67:de:55:e9:db:d6:71:05:eb:92:35: 76:ad:35:a4:9a:5f:88:fd:c5:e9:5d:c6:86:f2:34: e4:fd:87:0a:19:97:05:8d:87:ed:1c:46:eb:8b:e0: 9d:2a:77:b4:6d:a1:ca:85:68:89:1c:4e:4a:a4:6e: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:37:D2:E2:04:C0:E0:E2:A1:4F:1B:8E:1E:3A:8D:5A:96:AF:BE:E1 X509v3 Authority Key Identifier: keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a0:3b:47:34:16:c4:17:0a:1d:9e:6b:6d:08:81:7b:8d:18: a4:11:aa:03:54:a8:95:bd:b4:50:2a:f3:8c:bf:5f:da:25:2a: c0:aa:cd:66:d1:5c:6f:7c:9b:98:14:ab:30:a3:ff:cf:a8:1c: bc:2c:46:3e:7c:85:74:bb:d5:b1:61:e0:3c:ec:b6:2b:8d:d6: e1:e3:db:c0:f7:ff:ec:f5:8e:f8:f6:12:42:e9:a6:55:1b:e4: 1f:64:08:83:a8:68:78:0f:92:5e:49:81:c9:e4:51:4c:45:93: af:93:6d:da:e8:26:3c:43:1d:36:fb:6d:d9:dc:29:3d:ec:b4: 0c:fe:65:55:11:a7:2b:e5:7a:1a:fc:ad:9b:d5:df:02:cf:a3: e7:ec:3b:19:87:5c:dd:ea:a7:c5:73:11:9c:8d:d3:aa:e0:85: a4:a3:8d:cc:d1:64:55:f8:c9:80:cf:4c:7b:d5:dd:a5:2e:b5: 14:bb:20:1d:57:a1:27:19:c5:36:57:47:17:49:09:7d:91:62: 0c:6b:b8:71:02:39:70:f5:62:3b:69:42:b0:59:1d:77:7b:ed: 3d:63:8c:83:9a:27:1c:43:76:aa:9c:db:b0:ac:0f:1d:c7:67: 02:25:a2:c3:68:ba:97:77:f4:3c:ba:2c:84:9e:80:a8:99:a1: 5c:dc:98:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAhVH38bo12eCldY/tLUM2oCEZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3 OTdDNDE2NTAeFw0yNTEyMDIwOTU2MjRaFw0yNTEyMDUxOTAyMjRaMDMxMTAvBgNV BAMTKDU1MzdEMkUyMDRDMEUwRTJBMTRGMUI4RTFFM0E4RDVBOTZBRkJFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZZeLZM8+mc/4HJybVvn0y0u7 UXHjOUz3Hl1r94iJFC4zrA2928tisQ1bfF1x+M+Iet2veIyWTgAfFGbOp+F17v/l uM9mW4Y2kCdKYOG+PNHb4VHa+RnjJJS27Rd1zVhb9yyVSs6oVmpkjyEtNpUxsF0z 62iKmhUixAahaz828AngMQc4JOA65bHXAJ4Xn55LQW6+U8Fz6OEwTNc0ktr4mTAo CFniXQpa66xgp0hZp8gWDVjvk289Jxl3w7CyTsueMdib4uNn3lXp29ZxBeuSNXat NaSaX4j9xeldxobyNOT9hwoZlwWNh+0cRuuL4J0qd7RtocqFaIkcTkqkbk7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVTfS4gTA4OKhTxuOHjqNWpavvuEwHwYDVR0j BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4 OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqgO0c0FsQXCh2ea20IgXuNGKQRqgNUqJW9 tFAq84y/X9olKsCqzWbRXG98m5gUqzCj/8+oHLwsRj58hXS71bFh4DzstiuN1uHj 28D3/+z1jvj2EkLpplUb5B9kCIOoaHgPkl5JgcnkUUxFk6+TbdroJjxDHTb7bdnc KT3stAz+ZVURpyvlehr8rZvV3wLPo+fsOxmHXN3qp8VzEZyN06rghaSjjczRZFX4 yYDPTHvV3aUutRS7IB1XoScZxTZXRxdJCX2RYgxruHECOXD1YjtpQrBZHXd77T1j jIOaJxxDdqqc27CsDx3HZwIlosNoupd39Dy6LISegKiZoVzcmIA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:21 2025 by rpki-client