This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: ZqUZufZNYGc59hmAPL2luFPV2t6/Rjs+jYThxHic4lo= Subject key identifier: 1E:CC:B2:3B:F2:4C:7B:92:CC:36:0A:5D:06:78:7A:36:BB:B1:50:BD Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 6247CC5CDEF9549233F5E0479BAFA2CF731B3B6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: 014D Signing time: Mon 01 Dec 2025 16:32:00 +0000 Manifest this update: Mon 01 Dec 2025 16:27:00 +0000 Manifest next update: Thu 04 Dec 2025 20:36:00 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: e1+ItrJvzIO0S4bQFZcdXkdN1GthczkYuZfqHn1YrHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:47:cc:5c:de:f9:54:92:33:f5:e0:47:9b:af:a2:cf:73:1b:3b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Dec 1 16:27:00 2025 GMT Not After : Dec 4 20:36:00 2025 GMT Subject: CN=1ECCB23BF24C7B92CC360A5D06787A36BBB150BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:c1:1e:af:3b:20:22:65:53:8c:c7:67:0b: 61:bb:4e:91:3d:18:93:7a:ba:30:3b:fc:73:c0:78: 2f:80:12:c7:a0:fd:3f:38:db:d9:fb:8f:50:12:0c: 64:c4:dc:47:bc:fc:7f:3c:b4:8a:c2:89:58:30:1a: e6:4b:05:41:f9:85:5f:dd:9a:5f:47:33:c1:c8:b7: de:ef:dc:e4:cd:97:9f:f8:9c:77:0e:84:60:28:d8: 06:38:92:1c:06:8b:5d:8f:ab:db:4a:f9:a0:1e:a3: 39:bf:3b:ba:b4:40:55:9e:a6:04:75:ee:69:96:64: b7:57:be:f0:43:94:df:98:3e:3f:9f:d0:9d:29:fa: 03:08:de:1d:b6:23:43:72:53:c3:d5:4a:3f:57:33: fb:b4:07:7f:09:f9:35:67:33:81:e6:d7:73:83:89: 78:42:c3:6f:05:23:d2:e3:a7:06:e5:18:31:72:a4: 2c:48:1c:06:a0:fc:f5:bb:88:60:1d:98:94:7d:81: b4:55:1a:5e:14:e3:a2:10:ed:d7:16:a6:68:79:d8: f2:c8:8d:8d:0a:04:30:d2:e9:b2:c9:74:ae:5f:1c: 9e:54:de:c2:24:4e:dd:08:66:4a:54:59:5d:32:fb: 1d:c0:38:2e:a1:ec:3b:40:89:14:62:b5:23:28:86: 59:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CC:B2:3B:F2:4C:7B:92:CC:36:0A:5D:06:78:7A:36:BB:B1:50:BD X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7f:9d:cc:0b:b6:be:04:1d:59:18:f7:c8:6d:de:8b:ff:ef: f6:e1:7e:ea:06:6e:a9:a1:b2:64:d6:73:30:b6:04:d2:55:88: 64:36:d9:ec:cc:3a:de:85:9c:09:ab:3f:bc:db:66:5f:ba:32: 7e:ec:7a:7d:68:68:58:d4:67:f0:5b:1e:44:da:3d:76:28:ae: 5b:1a:cb:db:ae:69:80:c6:ca:88:09:65:d8:73:59:8e:54:7d: 26:a5:6c:df:41:a8:ee:06:2c:60:8b:3a:11:67:82:b8:f1:82: ae:35:26:31:25:aa:3a:16:22:f5:8b:e5:d1:6f:33:bb:f3:11: f2:22:46:fa:94:26:91:44:fe:53:f9:b2:42:87:dd:ed:78:5b: 1c:3c:75:74:8d:29:6e:fd:46:a5:43:41:63:cb:90:60:41:4a: 44:e8:08:4d:7b:ac:dd:67:a1:5c:e5:f4:4f:1b:a3:49:38:c3: f1:16:b8:c7:e6:0a:fe:b0:d7:e8:11:d6:8b:8b:8a:e2:c5:bf: c8:1e:ef:de:f3:09:61:9b:18:06:57:25:dc:9d:3d:04:b7:64: f1:35:88:9a:f2:bc:92:38:cf:ea:ed:ad:a4:67:3b:58:7f:11: 3a:35:2b:c9:de:70:04:e7:9a:77:fb:ca:60:3d:cb:da:14:04: 66:a4:a4:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkfMXN75VJIz9eBHm6+iz3MbO28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNTEyMDExNjI3MDBaFw0yNTEyMDQyMDM2MDBaMDMxMTAvBgNV BAMTKDFFQ0NCMjNCRjI0QzdCOTJDQzM2MEE1RDA2Nzg3QTM2QkJCMTUwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQsEerzsgImVTjMdnC2G7TpE9 GJN6ujA7/HPAeC+AEseg/T8429n7j1ASDGTE3Ee8/H88tIrCiVgwGuZLBUH5hV/d ml9HM8HIt97v3OTNl5/4nHcOhGAo2AY4khwGi12Pq9tK+aAeozm/O7q0QFWepgR1 7mmWZLdXvvBDlN+YPj+f0J0p+gMI3h22I0NyU8PVSj9XM/u0B38J+TVnM4Hm13OD iXhCw28FI9LjpwblGDFypCxIHAag/PW7iGAdmJR9gbRVGl4U46IQ7dcWpmh52PLI jY0KBDDS6bLJdK5fHJ5U3sIkTt0IZkpUWV0y+x3AOC6h7DtAiRRitSMohlmZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHsyyO/JMe5LMNgpdBnh6NruxUL0wHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx/ncwLtr4EHVkY98ht3ov/7/bhfuoGbqmh smTWczC2BNJViGQ22ezMOt6FnAmrP7zbZl+6Mn7sen1oaFjUZ/BbHkTaPXYorlsa y9uuaYDGyogJZdhzWY5UfSalbN9BqO4GLGCLOhFngrjxgq41JjElqjoWIvWL5dFv M7vzEfIiRvqUJpFE/lP5skKH3e14Wxw8dXSNKW79RqVDQWPLkGBBSkToCE17rN1n oVzl9E8bo0k4w/EWuMfmCv6w1+gR1ouLiuLFv8ge797zCWGbGAZXJdydPQS3ZPE1 iJryvJI4z+rtraRnO1h/ETo1K8necATnmnf7ymA9y9oUBGakpPk= -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:19 2025 by rpki-client