This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: JZEf8ghm17QYzHGC3vyuDvivYUrb7pFlMJuEyZtV2vY= Subject key identifier: 50:03:74:AD:DF:1A:EE:4E:D8:17:D5:F8:74:76:EC:12:29:C0:56:17 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 75EFD1F03F6E265E685C8404A4827A45E44AAA51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01CC Signing time: Wed 03 Dec 2025 01:41:36 +0000 Manifest this update: Wed 03 Dec 2025 01:36:36 +0000 Manifest next update: Sat 06 Dec 2025 12:38:36 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: WvA2JFm1OCiObbV4owSHIvkJpV0e6REQe/TCSDG98G4=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: EWZ8aolNNLiVVbkuT7UicoQ0CTjjE+TbqDmkXpjzrr8=) 3: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: T245Pm0KECwehLqXzcrv1WAO4Dn0H1sHY3kGVogLXIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ef:d1:f0:3f:6e:26:5e:68:5c:84:04:a4:82:7a:45:e4:4a:aa:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Dec 3 01:36:36 2025 GMT Not After : Dec 6 12:38:36 2025 GMT Subject: CN=500374ADDF1AEE4ED817D5F87476EC1229C05617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:fa:49:4d:7c:3e:28:76:f0:60:34:45:38: 59:64:d7:4f:6f:6f:e3:f6:f2:46:b6:ea:38:f2:d2: 6f:72:6b:dc:f7:d8:ca:70:6c:5f:f3:05:76:fa:a3: 95:52:0f:c8:ca:58:48:7d:fc:8d:fe:fa:6d:54:b9: fb:04:01:4b:ac:10:6e:cc:33:83:01:2e:77:ee:60: b4:09:41:08:ac:cc:2a:ef:9b:91:90:37:eb:49:5c: 19:1b:ea:6a:fe:47:ba:6f:74:ac:4b:66:0d:6f:0f: 97:08:77:62:f2:a6:7d:c4:bb:69:07:b6:6b:78:08: 15:15:67:62:e0:d0:fd:af:26:aa:cc:bd:be:37:f8: 2d:79:31:b0:b8:2b:82:2f:54:87:fa:6e:ac:f4:b7: b4:19:b6:76:0f:2b:bc:8b:cf:cc:5c:bf:be:ea:13: 8b:25:ff:eb:a4:28:cb:dc:50:2e:3d:78:bd:63:44: f7:b0:61:1b:d6:06:5f:d1:a0:65:d0:29:6e:e3:b4: ad:8f:92:14:be:f2:ec:87:64:93:0b:4e:82:9e:29: 13:f5:9c:9d:a1:1d:8e:e1:9c:d9:de:76:97:a8:c5: f5:a2:24:d8:dd:91:79:38:c1:20:ff:d4:c5:8a:d3: 1d:1a:d1:7a:d7:86:02:a4:1b:46:5d:90:cc:fd:59: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:03:74:AD:DF:1A:EE:4E:D8:17:D5:F8:74:76:EC:12:29:C0:56:17 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:91:fa:cc:30:98:5e:7a:fa:78:c5:1e:22:be:05:f1:f3:83: 68:51:9e:53:4b:d9:c7:80:7d:ff:fe:07:db:fc:69:1a:30:e9: 46:72:90:87:d1:fa:f4:11:69:0b:f0:27:1c:fc:ae:4f:c7:df: a7:34:d3:20:15:8e:e0:72:47:87:2b:32:5e:32:43:65:9b:ce: c9:c5:3a:cf:0c:71:fc:67:2e:c3:8d:07:51:1c:3f:7b:ff:09: be:68:d5:b8:42:2b:db:2b:97:5d:b4:7d:4c:18:ff:db:4c:9e: 38:39:95:e8:30:57:b4:40:ea:d1:79:79:d8:26:47:d1:d1:38: b3:bd:84:27:c0:7d:fb:45:1a:fc:41:be:aa:51:69:77:bd:1a: 8b:54:7e:c3:07:32:ba:55:ab:79:8f:04:07:73:f7:7c:4c:36: 49:42:dc:c8:61:58:0b:8f:4c:87:2c:80:82:27:ac:5c:06:af: c6:4d:4a:c3:38:b4:d8:46:89:d0:23:5d:0f:55:69:15:35:97: 6f:ac:af:ab:4b:e6:d1:af:2d:a7:ee:5e:6d:57:fe:28:d4:33: 81:e8:60:a8:06:49:79:c4:ca:ce:04:75:50:3e:11:20:aa:13: cc:ee:3a:3c:1b:25:c4:0d:81:5b:65:9b:7b:91:b2:2e:3b:33: a9:f2:9b:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUde/R8D9uJl5oXIQEpIJ6ReRKqlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTEyMDMwMTM2MzZaFw0yNTEyMDYxMjM4MzZaMDMxMTAvBgNV BAMTKDUwMDM3NEFEREYxQUVFNEVEODE3RDVGODc0NzZFQzEyMjlDMDU2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYcvpJTXw+KHbwYDRFOFlk109v b+P28ka26jjy0m9ya9z32MpwbF/zBXb6o5VSD8jKWEh9/I3++m1UufsEAUusEG7M M4MBLnfuYLQJQQiszCrvm5GQN+tJXBkb6mr+R7pvdKxLZg1vD5cId2Lypn3Eu2kH tmt4CBUVZ2Lg0P2vJqrMvb43+C15MbC4K4IvVIf6bqz0t7QZtnYPK7yLz8xcv77q E4sl/+ukKMvcUC49eL1jRPewYRvWBl/RoGXQKW7jtK2PkhS+8uyHZJMLToKeKRP1 nJ2hHY7hnNnedpeoxfWiJNjdkXk4wSD/1MWK0x0a0XrXhgKkG0ZdkMz9WVq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUAN0rd8a7k7YF9X4dHbsEinAVhcwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqR+swwmF56+njFHiK+BfHzg2hRnlNL2ceA ff/+B9v8aRow6UZykIfR+vQRaQvwJxz8rk/H36c00yAVjuByR4crMl4yQ2WbzsnF Os8McfxnLsONB1EcP3v/Cb5o1bhCK9srl120fUwY/9tMnjg5legwV7RA6tF5edgm R9HROLO9hCfAfftFGvxBvqpRaXe9GotUfsMHMrpVq3mPBAdz93xMNklC3MhhWAuP TIcsgIInrFwGr8ZNSsM4tNhGidAjXQ9VaRU1l2+sr6tL5tGvLafuXm1X/ijUM4Ho YKgGSXnEys4EdVA+ESCqE8zuOjwbJcQNgVtlm3uRsi47M6nym4k= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:26 2025 by rpki-client