This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: bAGt8NgaQJOh3OG3A70xPZPWMTq3dXLEep5YbmYUijc= Subject key identifier: 11:00:BD:5A:19:C7:DE:5E:57:19:06:4E:30:64:CF:6D:1D:54:82:CA Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 55D708E65EAD9DC79660631D9DC254D578B1A507 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 01D1 Signing time: Tue 02 Dec 2025 13:02:21 +0000 Manifest this update: Tue 02 Dec 2025 12:57:21 +0000 Manifest next update: Fri 05 Dec 2025 23:34:21 +0000 Files and hashes: 1: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) 2: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: RV3NliuVkxciDR5N2rt27hHnF4WlIyzXy1MtyNewnOU=) 3: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: KJBcxzna1Sdf4Z3z5OZgBn5Ib7elkK6g0XAXxdhyUSQ=) 4: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d7:08:e6:5e:ad:9d:c7:96:60:63:1d:9d:c2:54:d5:78:b1:a5:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Dec 2 12:57:21 2025 GMT Not After : Dec 5 23:34:21 2025 GMT Subject: CN=1100BD5A19C7DE5E5719064E3064CF6D1D5482CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b6:4e:cd:c8:2c:4a:14:2c:ea:14:ad:09:42: ef:79:a9:3c:43:49:a4:93:62:07:8b:4c:3b:16:2f: 10:ba:3f:d5:ae:11:db:d6:1a:d1:df:00:52:25:ff: 1c:e1:79:9f:47:d8:5d:28:05:75:f9:4f:11:48:36: 1e:22:32:69:64:15:0b:27:9f:c7:64:9a:b7:11:6f: c8:9f:37:c8:a4:4e:e5:9d:bd:4b:4c:19:fc:5f:ac: 96:c8:37:8d:da:34:6e:54:e9:6a:8f:9e:66:50:41: e1:14:c6:b6:e9:4e:32:51:fc:b4:88:f7:b5:13:e7: 85:91:58:a9:bd:37:00:53:1d:f0:65:41:c6:e9:55: dd:33:0e:23:28:d9:cc:a6:fd:fa:a2:c5:6a:13:84: c1:13:3b:ee:64:56:01:c2:20:b5:58:1a:d3:67:d3: ca:1a:f3:d1:13:56:76:7b:f8:ab:de:ae:d0:54:db: dd:85:f7:f2:cc:1c:e5:ee:77:29:7f:0d:67:15:47: a7:93:ed:37:ac:31:d3:d7:c5:f4:c6:9d:95:57:86: b0:74:43:38:29:98:ff:46:ce:32:4e:c2:90:a2:c3: c1:bf:21:85:31:d0:4c:b8:77:d1:ad:a6:51:16:67: 73:74:4e:f5:fe:6f:42:e3:7b:21:32:ae:74:53:5e: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:00:BD:5A:19:C7:DE:5E:57:19:06:4E:30:64:CF:6D:1D:54:82:CA X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:84:e0:56:38:6d:8e:a5:c0:b2:8a:33:bd:4f:43:58:24:af: 1b:f3:22:d3:ce:2d:05:43:37:b8:f1:48:99:06:91:6c:63:5e: 95:ed:b9:99:9a:4b:84:45:a6:78:6f:88:75:1a:7a:a6:c1:a7: 33:7a:cb:50:f5:52:6d:cd:c4:52:6c:f2:54:78:75:d0:63:fe: 83:e3:c3:08:d7:99:d0:9a:c5:7c:42:56:f4:4b:37:63:96:65: 07:1c:ff:02:59:83:56:1b:a5:1b:1e:6d:d7:7d:4e:50:ce:0b: 24:66:00:23:a1:b3:fb:84:d5:e9:2d:46:62:30:de:d8:6e:d0: c7:c0:0b:90:d3:c1:18:99:fe:5e:01:04:1f:a5:ef:2e:5e:60: 15:06:96:e9:a7:a5:95:22:79:54:fe:46:56:ef:e7:9b:ea:43: 8f:46:ee:bf:f4:0c:4c:f2:83:2d:dd:a9:c3:d2:59:59:f5:26: 6a:a1:92:f3:07:bd:30:b8:95:17:68:77:2a:4e:95:59:88:7f: 0c:4d:d2:95:ee:85:76:9a:aa:f4:6f:b1:00:38:ec:c2:ca:15: f3:69:1e:59:9c:0a:4a:ab:2a:ca:3f:4c:5b:05:1c:2c:9e:a9: 4f:12:da:b6:f6:7d:dc:9c:69:30:8c:e2:7a:bb:13:e4:2e:99: 0a:92:59:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVdcI5l6tnceWYGMdncJU1XixpQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNTEyMDIxMjU3MjFaFw0yNTEyMDUyMzM0MjFaMDMxMTAvBgNV BAMTKDExMDBCRDVBMTlDN0RFNUU1NzE5MDY0RTMwNjRDRjZEMUQ1NDgyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtk7NyCxKFCzqFK0JQu95qTxD SaSTYgeLTDsWLxC6P9WuEdvWGtHfAFIl/xzheZ9H2F0oBXX5TxFINh4iMmlkFQsn n8dkmrcRb8ifN8ikTuWdvUtMGfxfrJbIN43aNG5U6WqPnmZQQeEUxrbpTjJR/LSI 97UT54WRWKm9NwBTHfBlQcbpVd0zDiMo2cym/fqixWoThMETO+5kVgHCILVYGtNn 08oa89ETVnZ7+KvertBU292F9/LMHOXudyl/DWcVR6eT7TesMdPXxfTGnZVXhrB0 QzgpmP9GzjJOwpCiw8G/IYUx0Ey4d9GtplEWZ3N0TvX+b0LjeyEyrnRTXhWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEQC9WhnH3l5XGQZOMGTPbR1UgsowHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESE4FY4bY6lwLKKM71PQ1gkrxvzItPOLQVD N7jxSJkGkWxjXpXtuZmaS4RFpnhviHUaeqbBpzN6y1D1Um3NxFJs8lR4ddBj/oPj wwjXmdCaxXxCVvRLN2OWZQcc/wJZg1YbpRsebdd9TlDOCyRmACOhs/uE1ektRmIw 3thu0MfAC5DTwRiZ/l4BBB+l7y5eYBUGlumnpZUieVT+Rlbv55vqQ49G7r/0DEzy gy3dqcPSWVn1JmqhkvMHvTC4lRdodypOlVmIfwxN0pXuhXaaqvRvsQA47MLKFfNp HlmcCkqrKso/TFsFHCyeqU8S2rb2fdycaTCM4nq7E+QumQqSWSE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:54 2025 by rpki-client