This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: 8SKaZmJ9y9cucc+QtY12j0G7JR55MPryxQR5uz0CwpQ= Subject key identifier: 80:19:AC:ED:9C:18:7E:0F:3E:28:E1:1C:D1:01:36:E9:37:50:39:BC Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 3AF00722711D51F226F1B61BFA67C37B27547E4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 04A6 Signing time: Tue 02 Dec 2025 09:32:32 +0000 Manifest this update: Tue 02 Dec 2025 09:27:32 +0000 Manifest next update: Fri 05 Dec 2025 14:32:32 +0000 Files and hashes: 1: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: c6Eip0OpTbHRoDFgsvPW5enjj2NhGltWFcqdh5PkwKk=) 2: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: V3QHQK/gWQFy09rLOPxob5SyVyg/wx9t2yimUS9bwPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f0:07:22:71:1d:51:f2:26:f1:b6:1b:fa:67:c3:7b:27:54:7e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Dec 2 09:27:32 2025 GMT Not After : Dec 5 14:32:32 2025 GMT Subject: CN=8019ACED9C187E0F3E28E11CD10136E9375039BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:06:3f:d2:cc:23:2d:19:46:8d:d4:94:7c: af:35:6a:bb:a6:f7:c8:56:fa:1c:0c:d4:19:4e:f1: 7c:7d:66:a8:33:53:9b:18:69:c4:25:5d:da:45:6c: a5:8c:fd:7a:5c:b9:38:cd:86:a6:0d:f4:cd:b8:99: b1:9b:46:b4:f4:a8:14:90:b7:29:ec:bd:14:7b:c9: 68:37:32:94:03:d1:7c:62:06:34:ff:ed:99:44:7a: 75:37:96:29:ed:20:aa:e7:a8:34:d3:91:0b:46:7a: bf:04:6e:3a:bf:a6:94:14:37:2e:b6:6b:db:0d:da: 64:c3:14:c0:ab:54:d0:85:89:e9:67:b9:c1:0f:7f: f9:cd:7f:37:24:21:27:c3:eb:66:b2:c2:ab:a7:4a: f7:93:f7:88:63:87:ca:80:18:e4:d7:dd:5a:71:80: bb:ad:ad:5d:ab:b8:73:1f:55:c7:81:07:b7:4e:09: 70:71:d6:e4:50:f4:a3:29:fb:3f:10:72:36:b6:10: 1a:80:07:a1:0c:e3:45:12:3c:94:8e:01:56:89:b3: e8:05:31:d2:4c:f7:45:fd:a0:a4:4d:ba:38:87:07: 88:48:2c:c9:7b:9b:00:01:f9:b0:da:9a:a8:77:de: 3f:fc:46:ff:c1:64:c1:60:cc:f8:86:53:bd:6c:2a: 8d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:19:AC:ED:9C:18:7E:0F:3E:28:E1:1C:D1:01:36:E9:37:50:39:BC X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:49:ad:94:b2:97:f5:4f:2d:87:3e:da:a2:f0:ff:3d:4b:aa: 0a:6d:f4:da:f5:22:2f:01:04:08:de:5c:96:f5:dd:70:c8:c4: b1:57:78:c5:d5:ce:f9:54:c0:ee:67:e0:0c:45:d2:8c:22:78: 36:75:56:d4:9c:e2:72:30:d9:e0:8b:2d:6d:c6:aa:19:37:45: 13:22:19:be:43:a0:86:7c:e4:c7:7f:ad:06:62:c9:71:d6:21: a5:08:2d:54:0e:0f:1a:50:59:1b:59:27:12:cf:9d:f9:d0:b3: fc:2e:0d:04:61:1e:d4:4e:46:12:e7:21:61:38:3d:55:85:7d: b3:27:e1:4b:44:4b:b0:61:20:59:bb:0c:bc:d6:92:14:8c:76: ce:8f:aa:72:21:ca:64:e7:3e:3f:87:2b:3b:a0:d6:0a:b4:ff: 05:69:34:8c:11:e9:7d:de:e5:cb:f4:e6:d5:be:58:bb:00:9e: dd:98:c6:cc:b8:13:b4:8d:ac:4d:b1:b7:a1:c6:ef:1e:02:36: 80:e6:46:40:81:a9:ad:42:77:71:1d:7c:ac:24:be:b0:44:f2: ef:2e:b3:8e:48:8e:5d:eb:80:42:d6:b2:d9:e3:6a:49:d0:a9: 49:ec:6c:0f:2e:5e:92:18:f7:c1:85:3c:aa:0d:b9:79:39:f9: de:a4:99:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOvAHInEdUfIm8bYb+mfDeydUfkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTEyMDIwOTI3MzJaFw0yNTEyMDUxNDMyMzJaMDMxMTAvBgNV BAMTKDgwMTlBQ0VEOUMxODdFMEYzRTI4RTExQ0QxMDEzNkU5Mzc1MDM5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ygY/0swjLRlGjdSUfK81arum 98hW+hwM1BlO8Xx9ZqgzU5sYacQlXdpFbKWM/XpcuTjNhqYN9M24mbGbRrT0qBSQ tynsvRR7yWg3MpQD0XxiBjT/7ZlEenU3lintIKrnqDTTkQtGer8Ebjq/ppQUNy62 a9sN2mTDFMCrVNCFielnucEPf/nNfzckISfD62aywqunSveT94hjh8qAGOTX3Vpx gLutrV2ruHMfVceBB7dOCXBx1uRQ9KMp+z8Qcja2EBqAB6EM40USPJSOAVaJs+gF MdJM90X9oKRNujiHB4hILMl7mwAB+bDamqh33j/8Rv/BZMFgzPiGU71sKo3zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgBms7ZwYfg8+KOEc0QE26TdQObwwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRJrZSyl/VPLYc+2qLw/z1Lqgpt9Nr1Ii8B BAjeXJb13XDIxLFXeMXVzvlUwO5n4AxF0owieDZ1VtSc4nIw2eCLLW3Gqhk3RRMi Gb5DoIZ85Md/rQZiyXHWIaUILVQODxpQWRtZJxLPnfnQs/wuDQRhHtRORhLnIWE4 PVWFfbMn4UtES7BhIFm7DLzWkhSMds6PqnIhymTnPj+HKzug1gq0/wVpNIwR6X3e 5cv05tW+WLsAnt2Yxsy4E7SNrE2xt6HG7x4CNoDmRkCBqa1Cd3EdfKwkvrBE8u8u s45Ijl3rgELWstnjaknQqUnsbA8uXpIY98GFPKoNuXk5+d6kmS8= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:50 2025 by rpki-client