This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json) Hash identifier: fjdDtKisFSuMT/VLxiO+z82Zztpt5nU+h/5l+CFPBS8= Subject key identifier: 21:28:CE:2F:50:68:3C:C5:64:B3:68:8F:EA:FA:D8:FB:52:9B:0E:8C Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 5DD96D944A6824A3D48ADC36888CAB368043D7B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft Manifest number: E1 Signing time: Wed 03 Dec 2025 13:12:25 +0000 Manifest this update: Wed 03 Dec 2025 13:07:25 +0000 Manifest next update: Sat 06 Dec 2025 14:55:25 +0000 Files and hashes: 1: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: 9fwpFHJxVlXttZvgjNwjS7VO23WmCHtcPtoKXyrumcc=) 2: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d9:6d:94:4a:68:24:a3:d4:8a:dc:36:88:8c:ab:36:80:43:d7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Dec 3 13:07:25 2025 GMT Not After : Dec 6 14:55:25 2025 GMT Subject: CN=2128CE2F50683CC564B3688FEAFAD8FB529B0E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:2d:8c:62:eb:71:21:52:8e:28:95:85:d6: 2d:cf:a9:03:06:ed:16:69:bd:33:20:12:9a:ac:be: b6:84:03:71:11:f2:fd:aa:5f:58:52:95:34:79:a6: 0d:96:d9:fc:0c:6e:58:20:24:21:71:b5:7a:fa:33: 56:f8:7c:b1:64:de:aa:1d:04:30:7a:23:43:37:da: d2:96:eb:1c:59:9f:83:4b:6b:ec:c9:a2:a0:23:1f: 4a:93:2d:fb:b7:79:b6:4b:ea:65:a3:38:c2:a4:31: 17:9d:08:9f:fb:8f:c4:6a:17:80:5a:ef:68:ca:38: 27:f8:6d:79:93:64:b6:23:65:78:29:0b:4d:5c:ee: 8b:23:07:f5:10:d2:3a:fc:21:39:f8:cf:40:47:3b: d2:e9:2e:fb:72:13:b9:76:b3:5e:15:4e:67:f4:d1: 37:b4:d4:ec:3a:09:be:e4:14:25:7d:30:d8:8d:da: a2:11:36:c9:62:49:f2:60:f7:5f:b4:4e:cd:c3:35: 86:3b:b6:9b:1a:55:f2:cd:33:f8:c1:e3:30:24:c2: 41:33:2e:0e:f5:ae:7e:cc:37:6c:48:0b:48:dc:30: 22:40:ad:8b:c8:e7:7a:5e:ab:7a:90:fe:5d:19:a1: f9:fb:7c:3d:f9:04:4b:47:71:93:2c:e5:7e:6d:bd: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:28:CE:2F:50:68:3C:C5:64:B3:68:8F:EA:FA:D8:FB:52:9B:0E:8C X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:16:c2:f0:65:69:31:58:07:a9:d9:5d:51:57:09:89:53:f1: 95:8f:b9:fa:38:a3:a4:37:67:eb:c0:d3:3e:39:20:45:99:16: d1:06:1c:ef:c6:8e:10:e1:de:da:23:40:79:83:ca:3a:3b:24: 20:fc:5b:f7:56:7f:eb:00:96:f0:0d:00:b6:25:03:0d:ba:ab: b6:15:65:82:84:50:c7:0a:66:f7:c2:ba:b6:3b:e2:40:da:41: ff:8a:37:fd:3a:09:64:90:39:6a:e6:ab:55:c2:48:9c:d1:00: 74:f8:81:01:ef:36:c1:df:51:5d:5a:39:62:4f:a3:04:7b:ce: e6:17:ba:91:86:83:e8:0e:d1:66:67:a1:53:93:e1:7c:42:17: 2b:4b:99:40:d6:2b:74:72:c3:05:a7:f4:5a:4c:bf:70:65:38: 05:e3:1c:6a:9c:b3:d7:89:e5:ea:f9:d6:43:0e:7b:b6:5c:bc: 31:06:9d:dd:8b:4a:13:f2:82:67:fb:ad:76:8c:88:78:a1:09: 30:6e:9d:f0:a7:ac:d8:9b:ac:f4:a4:90:f1:e3:e4:af:96:55: 94:1d:63:a4:02:08:bf:aa:4b:fd:25:2d:d7:08:81:63:91:e3: 32:57:6b:44:d8:ea:ef:1c:76:f8:8e:a0:18:d5:04:f1:14:f3: 6f:09:20:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdltlEpoJKPUitw2iIyrNoBD17kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNTEyMDMxMzA3MjVaFw0yNTEyMDYxNDU1MjVaMDMxMTAvBgNV BAMTKDIxMjhDRTJGNTA2ODNDQzU2NEIzNjg4RkVBRkFEOEZCNTI5QjBFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CS2MYutxIVKOKJWF1i3PqQMG 7RZpvTMgEpqsvraEA3ER8v2qX1hSlTR5pg2W2fwMblggJCFxtXr6M1b4fLFk3qod BDB6I0M32tKW6xxZn4NLa+zJoqAjH0qTLfu3ebZL6mWjOMKkMRedCJ/7j8RqF4Ba 72jKOCf4bXmTZLYjZXgpC01c7osjB/UQ0jr8ITn4z0BHO9LpLvtyE7l2s14VTmf0 0Te01Ow6Cb7kFCV9MNiN2qIRNsliSfJg91+0Ts3DNYY7tpsaVfLNM/jB4zAkwkEz Lg71rn7MN2xIC0jcMCJArYvI53peq3qQ/l0Zofn7fD35BEtHcZMs5X5tvfRtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUISjOL1BoPMVks2iP6vrY+1KbDowwHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcWwvBlaTFYB6nZXVFXCYlT8ZWPufo4o6Q3 Z+vA0z45IEWZFtEGHO/GjhDh3tojQHmDyjo7JCD8W/dWf+sAlvANALYlAw26q7YV ZYKEUMcKZvfCurY74kDaQf+KN/06CWSQOWrmq1XCSJzRAHT4gQHvNsHfUV1aOWJP owR7zuYXupGGg+gO0WZnoVOT4XxCFytLmUDWK3RywwWn9FpMv3BlOAXjHGqcs9eJ 5er51kMOe7ZcvDEGnd2LShPygmf7rXaMiHihCTBunfCnrNibrPSkkPHj5K+WVZQd Y6QCCL+qS/0lLdcIgWOR4zJXa0TY6u8cdviOoBjVBPEU828JIDs= -----END CERTIFICATE-----Generated at Wed Dec 3 17:14:41 2025 by rpki-client