This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json) Hash identifier: YWYxMo2tFwsmyEw38z9DZ6Tm7yB2doted6ykRDKgLGs= Subject key identifier: EB:23:B5:F2:84:8F:E5:98:50:A9:38:98:6F:84:FC:BD:5E:A3:73:03 Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Certificate serial: 1240A22F3C764C67CE2E1C6E28E4F45FA6DEC2B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft Manifest number: 012D Signing time: Mon 01 Dec 2025 23:11:58 +0000 Manifest this update: Mon 01 Dec 2025 23:06:58 +0000 Manifest next update: Thu 04 Dec 2025 23:16:58 +0000 Files and hashes: 1: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 65o0DOggNTjLHcFcDRlMhe0oYRHC/QwrSAVc9jQxyHo=) 2: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: 2tW9xy7YLk3K5ceNSfQO6HqNP5D/riXvrsF647isxEQ=) 3: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: VTVieA6u93MGGXcpw/BOIG2PPQw8gdCUs7g/agJ/hek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:40:a2:2f:3c:76:4c:67:ce:2e:1c:6e:28:e4:f4:5f:a6:de:c2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Validity Not Before: Dec 1 23:06:58 2025 GMT Not After : Dec 4 23:16:58 2025 GMT Subject: CN=EB23B5F2848FE59850A938986F84FCBD5EA37303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:e1:f2:f9:59:f4:d1:4e:fb:88:d2:75:7e: 80:c1:30:ca:08:a1:68:25:e7:1a:d4:f1:1a:32:5c: 97:89:4e:df:49:31:58:53:b4:4f:5e:73:5d:82:e0: a8:4d:0b:06:52:af:a1:6b:73:e9:a6:12:06:1f:c6: 97:b7:8b:4f:e1:b1:dd:66:a2:f3:bc:72:b1:ed:90: df:f2:be:bc:4a:ea:1d:ce:23:f6:71:ea:60:a4:43: e3:4d:8b:22:0d:fe:74:86:b2:99:06:e3:96:99:5b: 77:d8:fc:00:52:56:7a:d1:e2:f7:db:ce:3a:ed:27: e7:43:ec:52:2a:81:e7:03:8d:69:6d:99:51:e1:fd: 19:b0:9c:9b:4d:fd:5a:f1:3c:3e:b8:a4:7a:80:b4: 86:e8:56:da:d0:a7:84:d9:3f:fb:bd:72:17:42:aa: 67:9b:ad:b5:e8:60:ba:81:8a:b5:7c:f2:24:3e:48: db:2f:4b:08:77:6f:4a:e9:7e:f3:91:4b:6b:65:e9: 2d:ca:ee:1c:f9:64:43:b1:ea:6e:e2:b7:f5:b6:94: e8:a9:74:1e:85:26:b6:18:ea:15:4d:2c:f6:3f:de: e9:4e:7e:50:07:0e:06:71:79:87:92:50:d0:36:f5: da:4f:86:18:ce:1e:97:17:9b:8c:c9:b6:69:c0:62: 45:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:23:B5:F2:84:8F:E5:98:50:A9:38:98:6F:84:FC:BD:5E:A3:73:03 X509v3 Authority Key Identifier: keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8d:75:26:6b:b7:9f:4f:21:b5:6c:0a:c5:a6:7a:ef:9b:4e: cf:3f:66:26:fc:46:ac:4c:63:c4:6d:e4:f9:0d:d7:a8:be:1f: 3b:39:03:07:c0:b3:f3:d0:bc:c3:78:a0:71:61:18:ac:c2:fb: 4f:63:d1:54:29:28:f5:61:d2:71:57:57:f4:b9:a8:46:4c:3c: 04:c7:60:69:e0:b6:ef:c2:53:77:09:9e:1e:c1:60:b5:ac:25: 45:e4:8f:1e:b7:9f:29:eb:82:61:6a:85:39:9d:7e:a8:d2:1d: c4:2b:8b:84:11:65:9a:d7:42:5b:b7:0a:0a:85:f8:51:ab:9e: 6c:10:4a:25:e2:18:71:0c:9a:fd:0f:3f:c6:b7:b5:b6:d5:b0: ab:e4:7c:a9:24:7d:73:80:1f:57:67:c1:3b:76:8a:6b:62:4a: 4a:c9:e5:f8:8e:5f:fd:e1:7c:68:6b:1c:f4:d5:3a:b4:d2:4a: 35:ac:25:5f:37:9b:e3:22:f6:2b:6f:fd:42:0c:9c:94:73:c5: 94:ee:e4:cb:67:9f:d5:80:6b:69:69:35:1e:d8:cf:90:4d:64: 0c:52:f8:43:93:31:a2:ff:df:c6:34:fb:32:e1:d6:d2:53:9b: 1b:fb:b0:c2:11:a9:fb:00:63:12:2d:6d:90:12:db:2c:08:bd: a7:cc:03:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkCiLzx2TGfOLhxuKOT0X6bewrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE RTM2RUExQjAeFw0yNTEyMDEyMzA2NThaFw0yNTEyMDQyMzE2NThaMDMxMTAvBgNV BAMTKEVCMjNCNUYyODQ4RkU1OTg1MEE5Mzg5ODZGODRGQ0JENUVBMzczMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XeHy+Vn00U77iNJ1foDBMMoI oWgl5xrU8RoyXJeJTt9JMVhTtE9ec12C4KhNCwZSr6Frc+mmEgYfxpe3i0/hsd1m ovO8crHtkN/yvrxK6h3OI/Zx6mCkQ+NNiyIN/nSGspkG45aZW3fY/ABSVnrR4vfb zjrtJ+dD7FIqgecDjWltmVHh/RmwnJtN/VrxPD64pHqAtIboVtrQp4TZP/u9chdC qmebrbXoYLqBirV88iQ+SNsvSwh3b0rpfvORS2tl6S3K7hz5ZEOx6m7it/W2lOip dB6FJrYY6hVNLPY/3ulOflAHDgZxeYeSUNA29dpPhhjOHpcXm4zJtmnAYkXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6yO18oSP5ZhQqTiYb4T8vV6jcwMwHwYDVR0j BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4 Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2 RUExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm NjYtNTcyNmE3OTJhZGFiLzAvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFE MzhERTM2RUExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6NdSZrt59PIbVsCsWmeu+bTs8/Zib8RqxM Y8Rt5PkN16i+Hzs5AwfAs/PQvMN4oHFhGKzC+09j0VQpKPVh0nFXV/S5qEZMPATH YGngtu/CU3cJnh7BYLWsJUXkjx63nynrgmFqhTmdfqjSHcQri4QRZZrXQlu3CgqF +FGrnmwQSiXiGHEMmv0PP8a3tbbVsKvkfKkkfXOAH1dnwTt2imtiSkrJ5fiOX/3h fGhrHPTVOrTSSjWsJV83m+Mi9itv/UIMnJRzxZTu5Mtnn9WAa2lpNR7Yz5BNZAxS +EOTMaL/38Y0+zLh1tJTmxv7sMIRqfsAYxItbZAS2ywIvafMA4k= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:35 2025 by rpki-client