This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: YlnQ3s9UOlM4YRGfWl4ecLxYR7NrH86c6ef0DKLdfZI= Subject key identifier: 5A:64:6C:F3:2D:A6:DA:AE:AC:C1:64:10:AF:14:2F:91:0E:CC:45:E2 Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 06022549940E91748420D873ED995F0086ACEE71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 0238 Signing time: Mon 01 Dec 2025 14:31:27 +0000 Manifest this update: Mon 01 Dec 2025 14:26:27 +0000 Manifest next update: Thu 04 Dec 2025 15:16:27 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) 2: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) 3: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) 4: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: oxoYT373VWi5jc0Scpnva8gViXT/R5pvUinEUvGq4p8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:02:25:49:94:0e:91:74:84:20:d8:73:ed:99:5f:00:86:ac:ee:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Dec 1 14:26:27 2025 GMT Not After : Dec 4 15:16:27 2025 GMT Subject: CN=5A646CF32DA6DAAEACC16410AF142F910ECC45E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:e7:e0:20:c5:6d:a4:c3:30:a9:fd:99:fe: 4d:36:6f:e7:5e:9a:a3:9c:1c:fd:e3:f3:da:74:28: 15:6a:43:c8:e5:7a:d8:d6:dc:d2:2f:2e:2e:37:af: 94:68:3b:1d:81:f9:3b:b4:6e:ed:44:63:12:d8:77: f7:d2:2d:3c:4b:e3:0a:41:0f:a5:2e:ed:c8:64:1f: 7d:d7:b6:cb:e7:b4:27:e6:12:55:48:70:18:35:a2: 39:bd:9f:fd:e2:f5:60:8b:b2:97:18:49:47:69:d0: 00:50:3f:db:86:97:51:7e:d7:84:6c:67:23:7f:d6: 5d:0a:d2:71:98:a0:9e:91:44:86:8b:fc:b3:68:2a: 3b:7f:60:21:d5:b6:b8:f6:af:59:a7:c5:27:05:38: 35:3d:b3:bb:39:7f:bf:34:83:2e:1c:4e:ef:e6:12: 6b:0e:ac:c5:50:96:26:0b:aa:fa:25:80:cb:ec:ef: 70:35:a7:41:27:a6:af:df:1e:71:7d:4b:52:42:e7: 7f:61:1c:c3:8b:51:30:cd:4b:bc:b8:44:27:d7:ee: 1e:5a:59:75:22:b2:fd:9f:55:fd:47:65:92:0b:cc: 29:96:32:ed:26:07:aa:d2:d2:87:ee:33:1f:4a:39: 7c:c2:93:ca:93:cf:4c:dc:6e:76:c6:b5:89:b8:8a: dc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:64:6C:F3:2D:A6:DA:AE:AC:C1:64:10:AF:14:2F:91:0E:CC:45:E2 X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ac:94:60:b5:79:08:d2:2e:b0:11:48:31:46:e7:11:22:34: 69:bd:86:69:c9:5e:1f:4a:07:73:e9:57:8e:8a:b5:66:be:45: 34:5d:3d:d9:46:73:a2:e5:6c:40:c4:35:d3:aa:9d:f4:19:51: 64:d4:c7:e9:4b:72:81:8e:d9:e2:66:e3:c2:80:fd:c7:02:d1: 83:f8:53:69:be:54:26:d3:e6:0e:87:a5:14:88:a7:8f:d5:a9: 8a:02:70:c2:ef:0d:cc:18:6e:da:a5:9d:58:df:12:83:a0:f4: 41:ca:7e:1e:1e:a0:46:75:9f:c1:63:10:2f:c3:04:37:ed:07: 68:87:19:00:9d:11:b9:ce:b4:17:29:57:e3:6b:17:2e:49:83: 69:4a:b1:56:80:6a:78:5f:18:49:a0:8c:78:34:29:ef:a3:a8: 98:02:ad:d5:dd:bb:4b:e7:57:47:11:0e:4f:82:cf:71:fc:36: a6:3a:76:c7:e4:a4:c8:c6:0c:cd:6c:b7:07:2e:fb:77:0a:a0: 1b:df:0d:a4:15:fe:9f:43:ec:5a:51:50:49:8a:e9:77:ba:8e: e7:c0:d7:9b:c0:f0:1d:de:d3:6b:34:b2:21:bb:67:71:5d:32: 47:a8:6c:8e:7f:64:02:65:76:4b:8f:d1:f0:79:19:6b:de:0f: e9:cf:70:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgIlSZQOkXSEINhz7ZlfAIas7nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNTEyMDExNDI2MjdaFw0yNTEyMDQxNTE2MjdaMDMxMTAvBgNV BAMTKDVBNjQ2Q0YzMkRBNkRBQUVBQ0MxNjQxMEFGMTQyRjkxMEVDQzQ1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTr+fgIMVtpMMwqf2Z/k02b+de mqOcHP3j89p0KBVqQ8jletjW3NIvLi43r5RoOx2B+Tu0bu1EYxLYd/fSLTxL4wpB D6Uu7chkH33XtsvntCfmElVIcBg1ojm9n/3i9WCLspcYSUdp0ABQP9uGl1F+14Rs ZyN/1l0K0nGYoJ6RRIaL/LNoKjt/YCHVtrj2r1mnxScFODU9s7s5f780gy4cTu/m EmsOrMVQliYLqvolgMvs73A1p0Enpq/fHnF9S1JC539hHMOLUTDNS7y4RCfX7h5a WXUisv2fVf1HZZILzCmWMu0mB6rS0ofuMx9KOXzCk8qTz0zcbnbGtYm4ityLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWmRs8y2m2q6swWQQrxQvkQ7MReIwHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqslGC1eQjSLrARSDFG5xEiNGm9hmnJXh9K B3PpV46KtWa+RTRdPdlGc6LlbEDENdOqnfQZUWTUx+lLcoGO2eJm48KA/ccC0YP4 U2m+VCbT5g6HpRSIp4/VqYoCcMLvDcwYbtqlnVjfEoOg9EHKfh4eoEZ1n8FjEC/D BDftB2iHGQCdEbnOtBcpV+NrFy5Jg2lKsVaAanhfGEmgjHg0Ke+jqJgCrdXdu0vn V0cRDk+Cz3H8NqY6dsfkpMjGDM1stwcu+3cKoBvfDaQV/p9D7FpRUEmK6Xe6jufA 15vA8B3e02s0siG7Z3FdMkeobI5/ZAJldkuP0fB5GWveD+nPcHg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:45 2025 by rpki-client