This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: 0XBG/sXXWPWrIPhq3ra43TfiahPQQBJ48VpVqLLPkNI= Subject key identifier: 58:A3:EC:FC:C8:3B:9B:E1:12:CB:58:67:9D:6D:D5:5B:31:A4:F5:F1 Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 2C9625D7F49A51106534DA63D23B166BC2EA116C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 01C2 Signing time: Mon 01 Dec 2025 22:21:38 +0000 Manifest this update: Mon 01 Dec 2025 22:16:38 +0000 Manifest next update: Fri 05 Dec 2025 09:42:38 +0000 Files and hashes: 1: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: fGjo9VOZ5RUS3cvJ6RUswjO8vNyvkd1oyZAFtwv/ips=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: 6oB2NEdb1J8wzFdKjlXlM7HaXvyVJb+FJhi1JoqHPbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:96:25:d7:f4:9a:51:10:65:34:da:63:d2:3b:16:6b:c2:ea:11:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Dec 1 22:16:38 2025 GMT Not After : Dec 5 09:42:38 2025 GMT Subject: CN=58A3ECFCC83B9BE112CB58679D6DD55B31A4F5F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:33:67:ff:86:ab:92:cf:2c:56:ec:b7:03:3b: 75:17:7a:6c:48:b2:0f:2f:ef:1e:f3:fb:42:e4:30: e2:e3:02:a5:57:03:22:b6:3f:9b:e0:df:36:1a:b7: 6c:e0:56:20:18:b3:f0:4d:98:e5:3b:f3:c1:bd:fa: 57:89:49:29:86:f6:f4:ae:d4:69:dd:f4:bd:62:63: 32:5f:01:9c:c1:df:2b:51:9e:53:bd:96:6f:56:bf: 4f:90:9f:51:66:05:54:d0:4e:88:2b:37:5e:19:59: 27:53:9a:60:bf:44:19:2f:38:35:cd:0b:5d:65:a3: f7:70:da:e4:1b:a4:f7:90:f0:80:99:c3:7b:14:62: 8a:29:f2:84:90:28:3c:c5:65:8d:c0:f8:1d:59:10: 0e:b4:90:c9:0d:08:c2:40:56:2d:f4:8a:0c:f2:91: 1f:4f:a2:d4:0f:62:d8:53:3d:f3:5e:57:53:34:e2: d2:8a:77:8f:19:6a:ce:ec:00:47:5b:1b:47:7f:f4: 56:37:35:82:09:b3:f8:b5:dc:1f:48:cf:f2:ca:d6: c2:b8:d4:dd:43:b5:68:ac:f2:c3:e9:fe:c5:83:66: 66:90:10:b7:4a:49:f1:b6:5f:c0:c7:9c:0f:db:7f: 6e:87:b8:31:9e:da:7b:b8:44:63:75:2e:ee:9d:62: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:EC:FC:C8:3B:9B:E1:12:CB:58:67:9D:6D:D5:5B:31:A4:F5:F1 X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:8c:33:23:d8:da:27:b9:2c:08:a2:1e:c0:d2:87:fe:d0:38: 0d:70:4c:1e:db:99:60:e3:ba:11:18:4f:6c:ec:19:1e:41:d7: e4:b0:be:52:e1:04:7a:76:47:a4:5f:19:61:73:d2:a2:51:09: d0:c1:97:5f:5c:cc:c7:15:98:f7:e7:0f:ab:9e:0b:01:7d:43: fd:1a:1f:80:84:22:53:07:30:52:11:03:22:70:88:b0:e9:45: c6:aa:a4:b8:e7:89:af:74:43:ae:78:55:78:95:47:af:ae:64: c9:2b:be:ae:84:07:ed:d9:aa:c1:68:b6:ed:dd:27:3b:64:ee: 86:1f:20:0e:ea:7c:93:ad:65:3b:d9:e9:74:16:0c:55:39:0d: 62:d3:0c:c2:d4:55:5c:ea:fe:1e:7a:02:e0:80:de:d0:04:c7: af:d5:9f:ce:40:ef:3b:15:8e:6c:35:19:21:dc:d4:95:76:89: 16:38:e6:96:29:bc:e7:21:e5:5f:26:2a:5c:53:15:3b:c8:55: d0:45:fe:f0:8f:db:69:2d:9b:4c:ca:6f:e7:16:a1:5b:05:d4: 3e:9a:08:fc:e4:ac:7f:fc:b2:03:45:87:d9:d9:92:80:53:bb: d0:23:d4:6b:d3:ba:e8:1c:6e:14:b2:dd:9e:b5:38:30:a9:68: cf:0a:de:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJYl1/SaURBlNNpj0jsWa8LqEWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNTEyMDEyMjE2MzhaFw0yNTEyMDUwOTQyMzhaMDMxMTAvBgNV BAMTKDU4QTNFQ0ZDQzgzQjlCRTExMkNCNTg2NzlENkRENTVCMzFBNEY1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpM2f/hquSzyxW7LcDO3UXemxI sg8v7x7z+0LkMOLjAqVXAyK2P5vg3zYat2zgViAYs/BNmOU788G9+leJSSmG9vSu 1Gnd9L1iYzJfAZzB3ytRnlO9lm9Wv0+Qn1FmBVTQTogrN14ZWSdTmmC/RBkvODXN C11lo/dw2uQbpPeQ8ICZw3sUYoop8oSQKDzFZY3A+B1ZEA60kMkNCMJAVi30igzy kR9PotQPYthTPfNeV1M04tKKd48Zas7sAEdbG0d/9FY3NYIJs/i13B9Iz/LK1sK4 1N1DtWis8sPp/sWDZmaQELdKSfG2X8DHnA/bf26HuDGe2nu4RGN1Lu6dYq+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKPs/Mg7m+ESy1hnnW3VWzGk9fEwHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiMMyPY2ie5LAiiHsDSh/7QOA1wTB7bmWDj uhEYT2zsGR5B1+SwvlLhBHp2R6RfGWFz0qJRCdDBl19czMcVmPfnD6ueCwF9Q/0a H4CEIlMHMFIRAyJwiLDpRcaqpLjnia90Q654VXiVR6+uZMkrvq6EB+3ZqsFotu3d Jztk7oYfIA7qfJOtZTvZ6XQWDFU5DWLTDMLUVVzq/h56AuCA3tAEx6/Vn85A7zsV jmw1GSHc1JV2iRY45pYpvOch5V8mKlxTFTvIVdBF/vCP22ktm0zKb+cWoVsF1D6a CPzkrH/8sgNFh9nZkoBTu9Aj1GvTuugcbhSy3Z61ODCpaM8K3hg= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:21 2025 by rpki-client