This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: CtMLts5dxdsVfbgCbH8XWx9N9sh3BG96CWN4aA1xMlg= Subject key identifier: 6C:61:AF:C8:54:0B:0F:81:6A:18:94:E4:C6:E3:C0:4A:CB:D0:4A:9F Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 0E996973649AEC86DC22550976596E1D2D9E2D47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 020A Signing time: Mon 01 Dec 2025 22:11:05 +0000 Manifest this update: Mon 01 Dec 2025 22:06:05 +0000 Manifest next update: Fri 05 Dec 2025 00:56:05 +0000 Files and hashes: 1: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) 2: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 3: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 4: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) 5: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) 6: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) 7: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) 8: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: jDP8AZLj11E7woKspRxhDFiygeXDUUDk0I1tD5/wj4M=) 9: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 10: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:99:69:73:64:9a:ec:86:dc:22:55:09:76:59:6e:1d:2d:9e:2d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Dec 1 22:06:05 2025 GMT Not After : Dec 5 00:56:05 2025 GMT Subject: CN=6C61AFC8540B0F816A1894E4C6E3C04ACBD04A9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4c:19:4d:0b:ca:ab:dd:5a:90:41:34:e0:3c: b9:42:f1:ee:69:00:e0:95:ce:c8:e3:8c:9b:03:c4: 50:c1:bf:7a:93:10:0f:c7:04:0e:39:cc:6d:c0:ae: 46:68:1b:99:ff:a7:c9:61:9f:ea:7b:8d:d2:72:bc: d6:37:05:0e:35:29:9b:59:8e:11:43:17:95:94:81: 82:ff:01:cd:a3:b9:52:92:7c:ee:55:1b:e6:70:23: 1b:c4:02:7a:3f:8d:36:47:53:16:d6:1e:54:13:94: 16:56:a4:db:7e:a2:2a:4c:2d:0a:9a:a1:57:0a:b9: 9d:2b:e4:3e:35:eb:66:46:cc:88:4a:9d:37:c6:a4: 96:42:a4:93:3d:a8:66:9d:53:fe:3c:e3:5c:7a:99: a3:f3:66:13:8b:23:93:c7:ea:a9:79:ab:9c:99:8a: 79:89:0c:ab:c2:58:68:f5:ae:86:85:57:9c:a2:ba: d8:11:1b:a2:61:2a:3a:1c:19:82:a6:27:85:76:5b: 30:65:64:8c:94:cc:ef:18:3b:9c:76:f7:32:fc:90: 3b:ce:ba:8a:b8:2e:2d:12:64:12:ff:05:7c:30:94: 5a:f4:dd:b6:1c:8c:df:b7:07:57:6e:26:74:d5:8f: 02:28:04:50:1e:66:54:f2:c4:b9:a1:8d:95:58:1b: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:61:AF:C8:54:0B:0F:81:6A:18:94:E4:C6:E3:C0:4A:CB:D0:4A:9F X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:51:16:b7:1f:9a:96:71:cc:c2:8e:ac:db:b8:ae:2b:5a:9e: fc:10:56:dd:e1:dc:b4:f8:88:b4:ad:67:c0:e0:b8:b7:d1:11: 85:94:33:5c:29:c8:71:25:f7:6e:78:8d:a4:84:3c:2a:b2:fd: 1c:00:a1:09:55:96:38:51:ad:74:4a:6a:26:20:60:98:ef:c6: 18:d4:9d:50:0d:cf:ef:6f:74:01:33:41:e2:9c:8b:38:9f:b0: 6e:a9:5b:60:7a:48:57:ca:38:55:e0:4d:60:1e:2d:0f:2c:59: 25:6c:34:fd:ea:5d:6d:90:91:b3:98:79:61:2a:c0:a5:06:b6: 54:30:41:49:39:35:a1:52:43:57:9d:f8:86:c2:42:5b:f9:38: 00:43:01:e1:da:a3:58:5d:04:3c:09:fd:c4:aa:77:b0:ba:6c: 1a:5d:bc:9a:51:45:b1:3d:3c:85:f3:a1:de:69:0e:36:36:7d: 3f:62:c1:4e:16:7b:ea:00:76:4a:30:84:6c:2d:8e:64:b5:98: 4a:b4:69:7a:3d:6c:1c:69:1b:b7:0d:75:1b:0a:1d:e7:06:2f: 6b:f8:3a:bb:2b:0d:bc:aa:a2:5a:de:fc:ca:3d:98:73:a1:a3: 8d:fa:55:d1:58:61:0a:08:cb:59:fa:a4:b5:0d:d1:02:9d:37: ca:e3:9f:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDplpc2Sa7IbcIlUJdlluHS2eLUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTEyMDEyMjA2MDVaFw0yNTEyMDUwMDU2MDVaMDMxMTAvBgNV BAMTKDZDNjFBRkM4NTQwQjBGODE2QTE4OTRFNEM2RTNDMDRBQ0JEMDRBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpTBlNC8qr3VqQQTTgPLlC8e5p AOCVzsjjjJsDxFDBv3qTEA/HBA45zG3ArkZoG5n/p8lhn+p7jdJyvNY3BQ41KZtZ jhFDF5WUgYL/Ac2juVKSfO5VG+ZwIxvEAno/jTZHUxbWHlQTlBZWpNt+oipMLQqa oVcKuZ0r5D4162ZGzIhKnTfGpJZCpJM9qGadU/4841x6maPzZhOLI5PH6ql5q5yZ inmJDKvCWGj1roaFV5yiutgRG6JhKjocGYKmJ4V2WzBlZIyUzO8YO5x29zL8kDvO uoq4Li0SZBL/BXwwlFr03bYcjN+3B1duJnTVjwIoBFAeZlTyxLmhjZVYGzrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbGGvyFQLD4FqGJTkxuPASsvQSp8wHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARRFrcfmpZxzMKOrNu4ritanvwQVt3h3LT4 iLStZ8DguLfREYWUM1wpyHEl9254jaSEPCqy/RwAoQlVljhRrXRKaiYgYJjvxhjU nVANz+9vdAEzQeKcizifsG6pW2B6SFfKOFXgTWAeLQ8sWSVsNP3qXW2QkbOYeWEq wKUGtlQwQUk5NaFSQ1ed+IbCQlv5OABDAeHao1hdBDwJ/cSqd7C6bBpdvJpRRbE9 PIXzod5pDjY2fT9iwU4We+oAdkowhGwtjmS1mEq0aXo9bBxpG7cNdRsKHecGL2v4 OrsrDbyqolre/Mo9mHOho436VdFYYQoIy1n6pLUN0QKdN8rjnw8= -----END CERTIFICATE-----Generated at Wed Dec 3 16:52:45 2025 by rpki-client