This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft File: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft (raw, json) Hash identifier: etSW87odyhJOhm5hWDTF6MAoZnRusUlXcd9y9I5qsPU= Subject key identifier: 8D:6D:1F:EB:CA:3E:DF:3E:30:C3:05:98:EC:6C:2B:73:DF:58:63:06 Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Certificate serial: 6D4F637B19B389A9D1ED658B27335415E0576A29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft Manifest number: 0538 Signing time: Tue 02 Dec 2025 09:00:02 +0000 Manifest this update: Tue 02 Dec 2025 08:55:01 +0000 Manifest next update: Fri 05 Dec 2025 09:30:01 +0000 Files and hashes: 1: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl (hash: uCkbHN33K13YZV2aQXa3J1VfUhEl1QffLgDtP0p6t3w=) 2: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: Rijq6K1g57KijomhL6W8vMskGlfJbmrteuOacH80VQM=) 3: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: hxX9wVbrBCOouQsOFqq88JkVfKelw0pXrTTftPM/8Pg=) 4: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: ap/TAn2i+zkksu9/CGCNCkYifXPZgmxnJOJkOH4ZWr8=) 5: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: yF5QYDSmZl11Br5OhVCNQy6ELbgnz0I3Y8PMUZejcuI=) 6: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: DvXqXB3KDxEUrIvLC7HCxRYW39FKt6kOul7sjWDdzKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4f:63:7b:19:b3:89:a9:d1:ed:65:8b:27:33:54:15:e0:57:6a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Validity Not Before: Dec 2 08:55:01 2025 GMT Not After : Dec 5 09:30:01 2025 GMT Subject: CN=8D6D1FEBCA3EDF3E30C30598EC6C2B73DF586306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:a1:d1:40:04:13:bc:36:74:16:cf:ce:5c: cf:e0:f3:6d:c5:8d:c3:07:70:6a:0b:d3:fe:26:2d: 28:03:6c:86:72:14:37:76:07:1e:3a:ae:18:a6:93: 73:a8:e3:44:a3:5f:df:db:07:db:28:96:b1:e2:8e: b7:7d:db:43:ed:7f:cb:b8:39:84:d6:21:bd:81:16: 2f:41:87:19:ed:ea:79:b5:e8:c2:b7:81:ba:6d:21: fb:f6:21:0f:0e:64:e7:12:43:4f:38:ba:04:b0:71: ac:a9:0f:45:1b:78:78:a5:d9:fd:f3:61:a6:ce:75: 3e:eb:fa:c3:a1:2d:3e:ca:14:4d:58:10:be:53:b2: e2:a3:ca:2c:48:b4:24:bd:eb:34:7b:15:6a:a0:1c: d7:f6:1b:e2:e5:c8:2f:3e:6c:de:76:0d:f2:9d:cf: 9b:fb:4e:61:cc:18:cc:75:47:51:e9:9d:9d:7b:14: 31:9e:bb:b7:f1:99:9b:65:8a:ed:07:4f:5e:32:ca: 17:21:e2:25:33:cb:a2:77:4e:f4:fc:da:87:82:e9: da:ca:f6:e6:fc:bf:73:60:a6:e2:d9:9c:58:f0:6d: 33:dd:b3:68:31:81:a5:6f:b8:10:27:f6:c4:01:1e: b6:3a:2c:7d:ff:a8:2e:59:1c:2c:f6:4e:6f:93:a2: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6D:1F:EB:CA:3E:DF:3E:30:C3:05:98:EC:6C:2B:73:DF:58:63:06 X509v3 Authority Key Identifier: keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:88:75:51:9b:f0:bd:7d:d6:43:00:1a:55:ec:8d:a4:e0:fa: 96:dc:e1:95:36:03:ea:bd:9b:1a:0a:b4:04:5e:e3:42:36:28: 31:52:15:03:84:2e:74:f0:55:ec:f2:34:82:49:c7:2c:85:47: ae:91:b4:aa:5c:f5:74:b0:94:be:e1:18:74:02:53:93:47:ad: 25:01:03:43:ed:5f:f4:4c:bc:71:fa:f8:2c:8a:48:c0:c0:6d: 50:49:16:82:24:88:7e:43:d1:88:c4:e4:9f:80:51:85:d6:3f: a9:40:cd:8d:fd:a5:2f:e6:f1:07:47:b6:83:27:6c:40:38:e2: c5:c9:58:4c:9b:4c:06:92:ba:a4:cb:7c:aa:78:bc:d7:28:02: b2:4e:85:75:b0:d9:b4:ab:64:d4:a2:e5:1f:60:7e:e1:78:12: 98:87:d5:96:e1:83:68:2f:74:60:04:f1:fc:fd:27:44:ff:74: cf:1e:63:8b:47:8e:b7:c5:6d:7c:88:5f:fe:5e:35:fc:f6:0c: 9f:d3:e7:95:8e:a5:56:dd:8a:27:bd:e1:07:de:67:d0:f2:aa: 94:71:b1:e2:af:4b:99:3d:4c:87:f3:44:c0:b2:d8:a8:08:47: 0b:2a:4e:aa:84:4e:17:2f:81:83:ed:c9:6a:2f:76:6d:9b:a2: 42:b3:9f:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbU9jexmzianR7WWLJzNUFeBXaikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNF RTZBRDFGOTAeFw0yNTEyMDIwODU1MDFaFw0yNTEyMDUwOTMwMDFaMDMxMTAvBgNV BAMTKDhENkQxRkVCQ0EzRURGM0UzMEMzMDU5OEVDNkMyQjczREY1ODYzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CaHRQAQTvDZ0Fs/OXM/g823F jcMHcGoL0/4mLSgDbIZyFDd2Bx46rhimk3Oo40SjX9/bB9solrHijrd920Ptf8u4 OYTWIb2BFi9Bhxnt6nm16MK3gbptIfv2IQ8OZOcSQ084ugSwcaypD0UbeHil2f3z YabOdT7r+sOhLT7KFE1YEL5TsuKjyixItCS96zR7FWqgHNf2G+LlyC8+bN52DfKd z5v7TmHMGMx1R1HpnZ17FDGeu7fxmZtliu0HT14yyhch4iUzy6J3TvT82oeC6drK 9ub8v3NgpuLZnFjwbTPds2gxgaVvuBAn9sQBHrY6LH3/qC5ZHCz2Tm+Tov+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjW0f68o+3z4wwwWY7Gwrc99YYwYwHwYDVR0j BBgwFoAUTe+92YVL6NHij3MwoLgCw+5q0fkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MGRlMjMxZi1mYjhhLTQyN2EtYWEzNi0wYTNmYzk3MjMyOGQvMC80REVGQkREOTg1 NEJFOEQxRTI4RjczMzBBMEI4MDJDM0VFNkFEMUY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNFRTZB RDFGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAy QzNFRTZBRDFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOIdVGb8L191kMAGlXsjaTg+pbc4ZU2A+q9 mxoKtARe40I2KDFSFQOELnTwVezyNIJJxyyFR66RtKpc9XSwlL7hGHQCU5NHrSUB A0PtX/RMvHH6+CyKSMDAbVBJFoIkiH5D0YjE5J+AUYXWP6lAzY39pS/m8QdHtoMn bEA44sXJWEybTAaSuqTLfKp4vNcoArJOhXWw2bSrZNSi5R9gfuF4EpiH1Zbhg2gv dGAE8fz9J0T/dM8eY4tHjrfFbXyIX/5eNfz2DJ/T55WOpVbdiie94QfeZ9DyqpRx seKvS5k9TIfzRMCy2KgIRwsqTqqEThcvgYPtyWovdm2bokKzn4U= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:18 2025 by rpki-client