This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: k+E360rLJxdBremKZtaITibfbSZhtW4ctidWLMgVe5w= Subject key identifier: 52:D6:40:66:1B:04:D5:E8:80:67:02:F9:E1:CE:B1:83:EF:86:22:EC Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 39430C5ECA1DF88DFA786016602316E10560483B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: F7 Signing time: Tue 02 Dec 2025 03:00:42 +0000 Manifest this update: Tue 02 Dec 2025 02:55:42 +0000 Manifest next update: Fri 05 Dec 2025 04:52:42 +0000 Files and hashes: 1: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: ztwT0b/RRL8JmA2A1xEIyDAku/obP4kwaW2vaWiLopQ=) 2: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: iBbkMLOvSYs3Ot+U0S1Rw0zfctP5wFgXDPMWA7kjIbY=) 3: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: jrKOilPCIf2Ja6+AaaEcXg/8k0wsYFPn+K9KWKLrdzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:43:0c:5e:ca:1d:f8:8d:fa:78:60:16:60:23:16:e1:05:60:48:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Dec 2 02:55:42 2025 GMT Not After : Dec 5 04:52:42 2025 GMT Subject: CN=52D640661B04D5E8806702F9E1CEB183EF8622EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:4f:2a:bf:44:f5:94:aa:8f:5d:03:52:8a: 14:3b:db:43:87:ce:c4:8f:a8:70:d7:ae:d2:b5:b6: 9c:5d:1e:a5:d0:89:4b:5b:01:0d:fe:12:7b:e7:a4: ed:85:d7:69:ef:50:98:8f:0b:b2:8e:75:f2:b4:22: 1f:07:f2:c6:16:5b:a0:b6:3b:be:65:21:b8:cd:58: 65:ef:05:68:ef:58:7a:52:72:4e:43:d0:98:5e:83: 8f:48:b2:b7:6c:8b:88:fe:a9:ea:29:54:74:42:9b: 52:78:3b:1c:40:29:96:90:88:ee:bc:2d:92:ab:64: cd:95:f3:1e:a5:b7:77:52:82:5d:bf:07:cb:7f:e0: cf:bc:ef:0f:01:4a:6c:75:c7:8a:33:e1:51:ca:4e: 4f:53:49:e1:49:69:49:01:7b:9f:c8:88:c7:94:00: 93:58:de:c5:4f:f9:4b:4b:4a:42:21:25:87:4f:07: 66:41:ad:6d:ce:f7:54:99:03:57:6d:a5:e8:6a:7a: 9b:dc:78:22:05:de:d7:a4:56:20:06:06:51:86:ca: 39:61:6a:61:da:af:02:ce:fe:a9:c8:ca:49:1c:5b: 9f:0b:6b:65:0e:3d:73:1c:f5:a4:3a:8c:af:1e:0a: a5:94:5f:9f:a3:15:a2:2a:3a:de:fc:e5:11:36:3f: 63:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D6:40:66:1B:04:D5:E8:80:67:02:F9:E1:CE:B1:83:EF:86:22:EC X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5a:86:af:f4:6d:a2:fe:75:0b:5f:ea:44:db:fb:5d:f8:eb: 9e:53:01:b5:d5:55:a0:a9:d5:4d:3c:7c:00:0e:f8:18:33:d6: 46:7a:d8:13:f2:5b:96:9d:c3:12:81:f2:21:30:58:a9:f2:dc: 8c:f1:9b:ad:f5:92:d3:0c:63:5d:f8:44:d5:8d:3a:42:4e:01: 88:73:38:d6:46:09:d6:8d:40:fa:2b:80:64:94:11:12:56:f0: ef:8b:e0:e5:37:d1:bd:6f:2f:f1:df:4a:0b:80:c5:d5:5a:14: 3e:5f:3b:c7:c5:0a:b0:28:9b:49:0b:76:e4:bb:ec:52:d1:17: 6f:12:f4:6f:e3:38:62:72:f6:ed:05:91:06:5a:e3:35:62:4b: b7:cc:25:e0:b9:d3:4a:ec:c8:59:3f:59:f8:64:f0:91:2c:d7: 8b:73:a4:39:5b:30:0a:ac:10:8b:61:8a:06:33:fe:d0:78:4f: 04:90:3a:9e:d9:5b:3d:70:05:dc:6f:cd:dd:31:a2:4a:ae:b0: 95:88:53:92:f2:89:e9:63:5a:50:f2:e7:f9:09:3b:85:f6:7d: 54:17:b3:b7:48:ef:23:72:4a:47:35:bb:d2:7a:ae:20:b7:76: 2e:e6:8a:9b:f4:9e:c0:c6:b2:db:08:27:6b:93:36:ba:74:dd: 5d:6a:53:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUMMXsod+I36eGAWYCMW4QVgSDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTEyMDIwMjU1NDJaFw0yNTEyMDUwNDUyNDJaMDMxMTAvBgNV BAMTKDUyRDY0MDY2MUIwNEQ1RTg4MDY3MDJGOUUxQ0VCMTgzRUY4NjIyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCME8qv0T1lKqPXQNSihQ720OH zsSPqHDXrtK1tpxdHqXQiUtbAQ3+EnvnpO2F12nvUJiPC7KOdfK0Ih8H8sYWW6C2 O75lIbjNWGXvBWjvWHpSck5D0Jheg49Isrdsi4j+qeopVHRCm1J4OxxAKZaQiO68 LZKrZM2V8x6lt3dSgl2/B8t/4M+87w8BSmx1x4oz4VHKTk9TSeFJaUkBe5/IiMeU AJNY3sVP+UtLSkIhJYdPB2ZBrW3O91SZA1dtpehqepvceCIF3tekViAGBlGGyjlh amHarwLO/qnIykkcW58La2UOPXMc9aQ6jK8eCqWUX5+jFaIqOt785RE2P2PnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUtZAZhsE1eiAZwL54c6xg++GIuwwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVahq/0baL+dQtf6kTb+134655TAbXVVaCp 1U08fAAO+Bgz1kZ62BPyW5adwxKB8iEwWKny3Izxm631ktMMY134RNWNOkJOAYhz ONZGCdaNQPorgGSUERJW8O+L4OU30b1vL/HfSguAxdVaFD5fO8fFCrAom0kLduS7 7FLRF28S9G/jOGJy9u0FkQZa4zViS7fMJeC500rsyFk/Wfhk8JEs14tzpDlbMAqs EIthigYz/tB4TwSQOp7ZWz1wBdxvzd0xokqusJWIU5LyieljWlDy5/kJO4X2fVQX s7dI7yNySkc1u9J6riC3di7mipv0nsDGstsIJ2uTNrp03V1qU24= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:37 2025 by rpki-client