This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: pkhdOuNKlnk3ss01biUhpe16JhX/drX6dd58omxQzbA= Subject key identifier: 58:17:3A:CC:70:C8:CC:B2:CE:29:F6:A2:8F:A9:70:47:D2:EF:0B:C7 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 4B13D0DB4F84EEBF75219FB8D0D66A479B97D946 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 0157 Signing time: Wed 03 Dec 2025 06:22:29 +0000 Manifest this update: Wed 03 Dec 2025 06:17:29 +0000 Manifest next update: Sat 06 Dec 2025 08:36:29 +0000 Files and hashes: 1: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: oj2Mb1OGYQCQOR+ebMdZD3sN/2dEIYrSyfl//iTWsxA=) 2: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: BXIKEbp3orzobWDQOxRP4yZHbZeEm5j1Qo8aYx25BZE=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: EjIlnJwLN6tob8lWzuv6YJeMCHTcSGWnYIQOvyIdVqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:13:d0:db:4f:84:ee:bf:75:21:9f:b8:d0:d6:6a:47:9b:97:d9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Dec 3 06:17:29 2025 GMT Not After : Dec 6 08:36:29 2025 GMT Subject: CN=58173ACC70C8CCB2CE29F6A28FA97047D2EF0BC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:b6:42:4f:02:56:3d:e5:f1:d9:a9:cd:0b: 0e:a9:10:e0:25:85:e0:e9:e7:88:9a:20:37:e4:9c: 7b:11:e4:b3:b5:21:71:09:eb:6b:21:40:98:9c:e1: e3:71:d5:55:3d:56:31:96:84:a6:5a:bc:bc:b0:ba: 8b:79:f8:e5:32:4b:cf:cf:8a:ee:2c:02:a6:15:8d: a3:38:0d:ce:87:6b:3d:26:22:70:a8:90:96:ff:36: 6f:b4:c2:9a:33:fb:31:76:1f:07:01:e2:4c:88:93: 44:8d:61:2b:6c:c8:04:f5:1d:5b:7b:c3:b0:73:90: a7:fb:42:4b:df:7f:ab:42:5d:85:73:dc:59:70:69: f3:d3:98:a2:50:9b:df:2a:17:d2:6c:b9:fd:24:fa: 04:b5:ac:9e:b2:02:8e:8c:6d:62:fb:7f:7b:a7:25: f1:a5:39:f0:4c:d1:72:fc:22:42:23:49:70:fb:65: 64:1e:26:d5:3a:62:60:74:aa:68:57:e2:35:72:11: df:87:69:16:f8:eb:99:ec:ab:77:15:5c:d0:c8:90: de:da:32:9a:45:e3:f5:0c:3b:5f:a1:0b:c1:da:25: 6c:30:d3:d8:46:dd:c5:91:76:d5:15:51:a0:95:6c: 9b:a8:6c:ec:8d:df:f5:73:1d:d5:27:3f:ab:44:98: ee:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:17:3A:CC:70:C8:CC:B2:CE:29:F6:A2:8F:A9:70:47:D2:EF:0B:C7 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d8:ca:6f:32:1b:55:54:4e:95:41:fb:65:22:dc:3f:8c:3d: ef:6c:93:d8:87:f7:4f:fa:70:62:c7:6b:14:37:69:65:db:c9: a6:88:5a:fc:b7:e9:17:31:3f:63:81:eb:a9:0d:20:da:0b:5d: 38:4e:56:fb:0d:84:d2:1c:ee:db:4c:5e:25:3b:62:fe:c2:2f: 85:8d:6a:1b:6c:ad:00:a0:1b:a2:97:ef:41:2a:b0:c2:67:38: 16:57:ff:51:cd:7c:3c:16:fa:a1:33:5a:01:22:5e:aa:7b:ee: b4:21:b2:95:75:42:72:f6:2c:41:84:bd:bf:9e:b5:d1:ee:6e: a3:0f:a2:9a:21:61:c4:cc:b1:5e:37:17:9d:f0:9d:18:b0:61: f3:88:02:09:09:f4:1b:d4:ac:06:3b:f8:a6:40:35:74:58:29: 67:62:c7:1b:69:8b:22:7d:7b:0b:06:ed:eb:88:4e:c4:d3:38: e6:7d:fe:0c:16:fe:e0:5b:6f:82:05:c3:d9:61:6c:db:65:46: b9:6a:59:65:66:14:b2:b9:ee:39:ea:4b:46:79:1e:4b:9b:b3: 58:4d:4f:c5:e5:6f:63:71:fc:41:43:5b:be:8a:90:cc:25:9f: 9a:a9:67:c9:ab:f5:98:3f:bd:81:07:c2:dc:b7:92:47:4a:15: 24:5d:96:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxPQ20+E7r91IZ+40NZqR5uX2UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTEyMDMwNjE3MjlaFw0yNTEyMDYwODM2MjlaMDMxMTAvBgNV BAMTKDU4MTczQUNDNzBDOENDQjJDRTI5RjZBMjhGQTk3MDQ3RDJFRjBCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvrZCTwJWPeXx2anNCw6pEOAl heDp54iaIDfknHsR5LO1IXEJ62shQJic4eNx1VU9VjGWhKZavLywuot5+OUyS8/P iu4sAqYVjaM4Dc6Haz0mInCokJb/Nm+0wpoz+zF2HwcB4kyIk0SNYStsyAT1HVt7 w7BzkKf7Qkvff6tCXYVz3FlwafPTmKJQm98qF9Jsuf0k+gS1rJ6yAo6MbWL7f3un JfGlOfBM0XL8IkIjSXD7ZWQeJtU6YmB0qmhX4jVyEd+HaRb465nsq3cVXNDIkN7a MppF4/UMO1+hC8HaJWww09hG3cWRdtUVUaCVbJuobOyN3/VzHdUnP6tEmO6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWBc6zHDIzLLOKfaij6lwR9LvC8cwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPYym8yG1VUTpVB+2Ui3D+MPe9sk9iH90/6 cGLHaxQ3aWXbyaaIWvy36RcxP2OB66kNINoLXThOVvsNhNIc7ttMXiU7Yv7CL4WN ahtsrQCgG6KX70EqsMJnOBZX/1HNfDwW+qEzWgEiXqp77rQhspV1QnL2LEGEvb+e tdHubqMPopohYcTMsV43F53wnRiwYfOIAgkJ9BvUrAY7+KZANXRYKWdixxtpiyJ9 ewsG7euITsTTOOZ9/gwW/uBbb4IFw9lhbNtlRrlqWWVmFLK57jnqS0Z5Hkubs1hN T8Xlb2Nx/EFDW76KkMwln5qpZ8mr9Zg/vYEHwty3kkdKFSRdlkM= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:54 2025 by rpki-client