This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft File: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json) Hash identifier: qlYtT/e3QM35jbwetD0kXrlNll1a5pL0bJ1LiNUKciE= Subject key identifier: C3:88:CA:4F:4F:B5:EE:EB:D2:96:C4:CB:E2:1B:71:38:9B:BD:79:45 Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 28540ABBEBA199EC34B3742D99959D86ECB7BE00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft Manifest number: 0541 Signing time: Sat 13 Dec 2025 09:41:01 +0000 Manifest this update: Sat 13 Dec 2025 09:36:01 +0000 Manifest next update: Tue 16 Dec 2025 17:07:01 +0000 Files and hashes: 1: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=) 2: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=) 3: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: Lkl4hSR7NGSEzKzZzmu1qkwANNNPQYa46Fii80W7KSg=) 4: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=) 5: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=) 6: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=) 7: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=) 8: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=) 9: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=) 10: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: oB/vhstXZMp/NrIW4LRl/1sAx+Z4F2PADaOoaPT6ySw=) 11: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 17:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:54:0a:bb:eb:a1:99:ec:34:b3:74:2d:99:95:9d:86:ec:b7:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Dec 13 09:36:01 2025 GMT Not After : Dec 16 17:07:01 2025 GMT Subject: CN=C388CA4F4FB5EEEBD296C4CBE21B71389BBD7945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:9a:2e:de:17:25:ef:d0:3b:13:6d:0d:45: 0e:33:14:50:80:2d:4f:01:a7:62:7a:5d:5d:81:06: 99:66:3e:ac:b1:80:cc:32:94:cf:68:55:af:fd:06: 83:60:00:53:7b:d6:ed:2c:9a:de:20:9a:09:ef:bd: ec:b5:db:84:6b:5d:95:6d:ba:9f:09:a2:85:fb:4b: de:f4:05:1a:77:e9:86:d6:e8:42:43:ab:28:fd:ac: 33:43:58:ec:43:fb:1e:1c:ec:32:48:fe:84:f2:27: 1a:b1:85:f9:cd:e7:fa:8f:32:a3:fa:e8:7a:c0:66: de:67:57:7e:bc:23:e9:1c:2b:83:27:f8:5c:28:8a: a4:5a:81:a3:9c:56:65:9d:1f:42:e3:8a:55:b1:cf: a5:33:99:f1:e9:2b:02:ea:3d:d8:18:4c:f7:58:75: 63:3e:1b:65:8d:90:d2:c6:c5:0c:2e:3d:eb:72:65: b7:63:8d:21:7c:5d:5b:88:f8:47:3e:ae:21:46:47: 6e:67:ee:a3:0b:14:53:28:75:49:80:1b:53:7c:f6: fb:d5:0b:fc:ae:40:b3:62:39:d9:5f:0a:46:97:22: 6d:85:a0:47:0a:a9:ab:3e:14:30:c9:c9:f9:35:8d: 48:06:41:7a:9b:5d:8d:ae:9e:29:cd:25:ac:bd:ea: 1f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:88:CA:4F:4F:B5:EE:EB:D2:96:C4:CB:E2:1B:71:38:9B:BD:79:45 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0b:97:8c:bd:29:53:21:8d:31:36:0c:2a:9c:cb:f0:24:7e: 2e:50:f3:a1:b9:e5:15:a4:87:a5:44:7e:c9:cf:f6:eb:cc:dc: f1:18:88:54:00:44:00:d6:d4:37:60:88:a2:9e:a2:36:23:a0: 3a:d5:19:c6:2f:4f:bc:a3:e9:b8:e4:e7:77:3a:d7:08:a3:35: 67:bc:6c:c6:d3:3c:41:8b:30:e8:9a:b6:11:02:6a:11:40:1b: db:d2:bb:97:f1:c5:77:7d:78:2a:6b:cb:f0:a9:6d:c2:4a:41: 40:dc:15:2c:5d:a2:89:8b:0e:53:b7:db:6d:79:00:43:34:7f: 16:4c:cc:13:47:40:27:5f:8b:b7:9e:4e:02:c3:15:b3:05:2a: 3f:67:a1:42:47:8d:3a:56:4d:87:12:5d:44:62:9c:39:50:e4: d7:49:9c:24:8a:9a:e4:0d:c6:41:45:77:ae:93:64:f6:77:7d: be:d3:8e:6b:f4:7a:20:12:dd:88:2a:12:19:0f:12:05:6c:0c: 22:cb:9c:bf:cb:a5:49:03:a3:5a:36:0c:b1:02:cd:db:75:f8: d4:49:7d:54:16:7a:2f:e7:8d:6f:6e:a5:8c:12:44:5f:e6:7d: ea:85:e5:9d:c6:bb:33:3c:e1:27:9e:54:b4:a3:80:16:75:da: cd:d5:79:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKFQKu+uhmew0s3QtmZWdhuy3vgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNTEyMTMwOTM2MDFaFw0yNTEyMTYxNzA3MDFaMDMxMTAvBgNV BAMTKEMzODhDQTRGNEZCNUVFRUJEMjk2QzRDQkUyMUI3MTM4OUJCRDc5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/5ou3hcl79A7E20NRQ4zFFCA LU8Bp2J6XV2BBplmPqyxgMwylM9oVa/9BoNgAFN71u0smt4gmgnvvey124RrXZVt up8JooX7S970BRp36YbW6EJDqyj9rDNDWOxD+x4c7DJI/oTyJxqxhfnN5/qPMqP6 6HrAZt5nV368I+kcK4Mn+FwoiqRagaOcVmWdH0LjilWxz6UzmfHpKwLqPdgYTPdY dWM+G2WNkNLGxQwuPetyZbdjjSF8XVuI+Ec+riFGR25n7qMLFFModUmAG1N89vvV C/yuQLNiOdlfCkaXIm2FoEcKqas+FDDJyfk1jUgGQXqbXY2uninNJay96h+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw4jKT0+17uvSlsTL4htxOJu9eUUwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoLl4y9KVMhjTE2DCqcy/Akfi5Q86G55RWk h6VEfsnP9uvM3PEYiFQARADW1DdgiKKeojYjoDrVGcYvT7yj6bjk53c61wijNWe8 bMbTPEGLMOiathECahFAG9vSu5fxxXd9eCpry/CpbcJKQUDcFSxdoomLDlO32215 AEM0fxZMzBNHQCdfi7eeTgLDFbMFKj9noUJHjTpWTYcSXURinDlQ5NdJnCSKmuQN xkFFd66TZPZ3fb7Tjmv0eiAS3YgqEhkPEgVsDCLLnL/LpUkDo1o2DLECzdt1+NRJ fVQWei/njW9upYwSRF/mfeqF5Z3GuzM84SeeVLSjgBZ12s3VeZM= -----END CERTIFICATE-----Generated at Sun Dec 14 19:14:24 2025 by rpki-client