This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json) Hash identifier: 2J0NFrAkmWpgPu+34WlGSC/JbRJz/7YauWXAuHu4k00= Subject key identifier: 4D:D8:E9:E7:58:02:F3:1E:63:CB:5E:A9:66:DB:AE:9D:AF:74:79:B0 Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 2C7C64BB173B700918882CCBEE7DE5B2F677EE60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft Manifest number: 0531 Signing time: Mon 08 Dec 2025 21:32:19 +0000 Manifest this update: Mon 08 Dec 2025 21:27:19 +0000 Manifest next update: Fri 12 Dec 2025 00:10:19 +0000 Files and hashes: 1: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: uTii8pPA5aO7a5TMixfvukdUpeyv5cfADq1YOdMO8jM=) 2: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: kZ6+BhGljQylz/AhW+5O41yNHq5oDRG+mIs3e+fq18E=) 3: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: AgqSIkRIGOrQPc+1mZW5lGFc3zRhyUQtTv3vz8FdAPU=) 4: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: AI/USbQ/a0LFBdjZWtV22hxC6HEFmmDia8w1dNa/lbM=) 5: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: bVu2SaAa9IWvlQ6o6+veKHD0ZA7xlveBNCWEZ2Ja1Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7c:64:bb:17:3b:70:09:18:88:2c:cb:ee:7d:e5:b2:f6:77:ee:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Dec 8 21:27:19 2025 GMT Not After : Dec 12 00:10:19 2025 GMT Subject: CN=4DD8E9E75802F31E63CB5EA966DBAE9DAF7479B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:76:87:fc:94:63:80:4f:b3:d9:13:52:93:76: 00:0d:65:00:aa:70:86:ac:03:8c:8b:e6:6a:06:32: 89:91:23:bb:0c:b6:4c:9f:41:23:17:a7:c4:79:40: 18:fe:a0:94:72:0f:28:3d:c2:65:ad:c8:e2:9f:d2: c8:00:62:55:5d:bb:1a:06:1d:10:68:ae:12:38:06: a4:81:42:53:db:d7:68:d0:ed:33:89:5b:51:36:19: 87:76:f7:fb:7e:e5:e5:a5:91:0d:b3:99:e2:af:8b: 95:8d:6e:d7:72:86:6b:41:a9:ad:52:4e:7c:f9:92: 5c:8f:eb:05:70:12:58:6e:8d:88:2b:fe:0d:4f:4b: a7:27:e7:ee:c9:8d:aa:b5:f0:cb:0d:4e:85:75:c8: 99:64:d0:32:cf:e6:36:c8:6a:3a:62:4a:40:94:c6: 3d:53:1c:df:e2:62:86:c9:63:08:f4:c6:ca:08:2c: 62:41:11:67:3b:fb:41:cf:f1:a5:d1:ae:ee:d5:34: 46:af:f5:a7:0e:c1:6d:9e:af:31:45:3e:3b:b0:cc: 8b:04:33:93:65:85:5d:ab:b1:35:89:f1:06:80:f8: d5:ed:c7:eb:dc:67:b8:7e:83:81:59:68:67:48:82: 33:f9:de:72:51:41:47:ba:9e:3a:13:02:86:52:5b: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D8:E9:E7:58:02:F3:1E:63:CB:5E:A9:66:DB:AE:9D:AF:74:79:B0 X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:58:c4:0d:76:54:27:5d:12:3b:ce:70:d6:fc:46:29:d3:31: cc:e0:94:47:6f:bd:e6:36:36:99:a3:24:71:ae:fd:29:3c:98: f9:2c:ce:0e:5f:82:d2:47:67:b7:35:bf:bc:a4:25:44:16:fb: 2c:76:71:81:b4:7d:a6:44:b4:c2:52:c1:90:99:09:98:58:15: b9:15:f7:c2:41:4d:7f:d5:7f:53:0f:11:6d:6c:eb:1e:bc:fa: ea:0d:89:cd:48:1b:a7:7b:f0:9d:70:5c:8e:26:97:ae:53:5c: f5:e1:70:6f:c3:7f:16:8f:89:e5:ba:57:be:de:74:c6:9b:68: 83:95:83:dc:38:b4:70:8f:e7:b2:0c:11:ae:0b:fd:53:2b:d2: a4:e9:32:48:b8:95:9d:fa:92:94:0b:ee:1c:34:65:f2:5d:95: d3:4a:05:fc:32:16:0d:4b:bf:7e:43:13:9a:82:9c:14:00:c6: 53:b3:41:03:4c:30:b3:f1:67:4a:0b:d3:e9:ed:de:ea:2e:ff: 56:38:e5:cd:ed:5f:ed:d6:26:0c:6b:78:cf:36:25:9b:29:4a: 99:12:27:4b:7b:6d:7a:ee:f5:16:49:0b:c6:9b:27:8d:4f:a4: b2:87:19:8c:e6:b1:0d:8b:b8:2d:c5:22:2c:a8:b0:97:c1:53: 40:8a:13:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHxkuxc7cAkYiCzL7n3lsvZ37mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNTEyMDgyMTI3MTlaFw0yNTEyMTIwMDEwMTlaMDMxMTAvBgNV BAMTKDRERDhFOUU3NTgwMkYzMUU2M0NCNUVBOTY2REJBRTlEQUY3NDc5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDodof8lGOAT7PZE1KTdgANZQCq cIasA4yL5moGMomRI7sMtkyfQSMXp8R5QBj+oJRyDyg9wmWtyOKf0sgAYlVduxoG HRBorhI4BqSBQlPb12jQ7TOJW1E2GYd29/t+5eWlkQ2zmeKvi5WNbtdyhmtBqa1S Tnz5klyP6wVwElhujYgr/g1PS6cn5+7Jjaq18MsNToV1yJlk0DLP5jbIajpiSkCU xj1THN/iYobJYwj0xsoILGJBEWc7+0HP8aXRru7VNEav9acOwW2erzFFPjuwzIsE M5NlhV2rsTWJ8QaA+NXtx+vcZ7h+g4FZaGdIgjP53nJRQUe6njoTAoZSWyTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdjp51gC8x5jy16pZtuuna90ebAwHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhD MEQxQ0UzQjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBYxA12VCddEjvOcNb8RinTMczglEdvveY2 NpmjJHGu/Sk8mPkszg5fgtJHZ7c1v7ykJUQW+yx2cYG0faZEtMJSwZCZCZhYFbkV 98JBTX/Vf1MPEW1s6x68+uoNic1IG6d78J1wXI4ml65TXPXhcG/DfxaPieW6V77e dMabaIOVg9w4tHCP57IMEa4L/VMr0qTpMki4lZ36kpQL7hw0ZfJdldNKBfwyFg1L v35DE5qCnBQAxlOzQQNMMLPxZ0oL0+nt3uou/1Y45c3tX+3WJgxreM82JZspSpkS J0t7bXru9RZJC8abJ41PpLKHGYzmsQ2LuC3FIiyosJfBU0CKE78= -----END CERTIFICATE-----Generated at Wed Dec 10 18:23:49 2025 by rpki-client