This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: 99SO8baJnFG2a7yZmHDhAfyrpPYfAOWZMlYHsIA4aNY= Subject key identifier: F7:CA:F5:22:15:C1:DE:A8:A0:BA:0C:87:FD:D5:B9:D1:38:1F:5B:36 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 5015C21B436E4EA2639D2552E06622831E2B1EFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01D2 Signing time: Tue 16 Dec 2025 17:01:35 +0000 Manifest this update: Tue 16 Dec 2025 16:56:35 +0000 Manifest next update: Sat 20 Dec 2025 04:57:35 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: WvA2JFm1OCiObbV4owSHIvkJpV0e6REQe/TCSDG98G4=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: EWZ8aolNNLiVVbkuT7UicoQ0CTjjE+TbqDmkXpjzrr8=) 3: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: FS3WgpCFoVeQpZ7hQ+KgaBiKH84mw1r2RZF8LNmWOPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:15:c2:1b:43:6e:4e:a2:63:9d:25:52:e0:66:22:83:1e:2b:1e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Dec 16 16:56:35 2025 GMT Not After : Dec 20 04:57:35 2025 GMT Subject: CN=F7CAF52215C1DEA8A0BA0C87FDD5B9D1381F5B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:3b:47:61:29:56:b9:79:19:5f:ec:a3:66: 18:c1:d7:7a:6a:97:4b:3a:8a:df:cd:ab:8e:a7:1f: a8:39:68:08:57:fe:ef:6f:70:4e:fb:4b:4a:8e:3f: d9:f5:bd:e7:25:e9:5c:f0:2f:54:2b:ee:1b:2e:fb: 3c:47:ef:f5:f9:7b:82:ee:58:d5:27:24:b9:52:13: 6f:5b:82:a7:d9:7d:76:a8:4d:89:b4:53:60:ef:29: d3:5e:73:e0:a9:40:8f:d0:ef:ce:d4:7e:b5:64:18: 5c:74:0f:df:2b:6b:9d:a7:3f:d8:d4:66:23:71:c4: 1b:02:86:92:df:7b:38:34:58:5d:2b:c6:54:8f:85: aa:35:6c:7d:35:16:be:9d:d7:19:d9:79:94:7a:4d: fe:54:85:29:9b:84:6f:cc:87:f2:07:5f:9a:f9:76: b1:22:18:e3:1b:14:f0:74:02:75:fa:68:a4:05:42: ea:30:1a:f2:ce:00:b0:94:bc:f6:d4:ba:34:bd:22: 2f:1c:14:b1:10:79:e5:bd:92:dc:96:2c:92:d5:bf: 7a:1d:bd:e2:ac:56:7c:7e:e4:2a:26:1a:3a:69:cf: 1f:10:87:11:0e:37:e1:17:e2:62:93:7f:4e:bd:54: a2:25:4e:6a:4f:90:b7:39:b8:29:c3:4b:43:af:62: cb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CA:F5:22:15:C1:DE:A8:A0:BA:0C:87:FD:D5:B9:D1:38:1F:5B:36 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:0d:65:9d:23:60:d6:2f:5d:33:dd:cc:53:85:f2:1a:40:b5: 9e:e0:20:22:33:bf:7a:4c:d0:2e:da:44:02:e3:c8:99:8e:03: 84:eb:95:b8:11:e3:60:d6:66:d9:fd:25:a5:2b:d0:2f:cc:3e: 8f:06:4c:c3:eb:24:b3:b0:3e:6c:f4:f4:10:59:f9:2c:00:44: d3:0e:10:df:31:69:0a:93:f6:03:5a:52:51:10:3d:c4:e9:e8: ee:6d:6a:11:0d:94:10:c9:5c:67:41:59:96:ba:a3:a8:f2:38: ea:a6:f0:7f:c9:5e:19:e3:51:b6:fd:05:e5:9a:63:75:c6:9c: 0b:a0:b1:3c:30:b0:b3:96:99:a5:70:9b:80:a9:49:9c:a3:a4: 32:9f:42:97:30:d0:55:16:4f:72:e0:51:7a:86:4c:7b:c7:90: ca:1e:89:e3:d0:c1:ae:3a:7b:b1:78:b1:3d:05:10:61:75:4d: 2b:f8:fc:cb:56:a0:67:54:f7:20:65:ff:9a:71:b1:f5:06:18: 2e:e7:07:87:69:42:c6:d5:54:8d:13:5c:cc:df:1f:59:0b:d3: d6:a4:38:79:f2:fb:00:02:28:32:53:1e:5c:ec:ad:dc:7e:8e: 23:17:0f:38:e9:5a:b7:3e:8f:00:bb:c0:9d:a6:e7:58:52:47: 45:03:0a:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBXCG0NuTqJjnSVS4GYigx4rHvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTEyMTYxNjU2MzVaFw0yNTEyMjAwNDU3MzVaMDMxMTAvBgNV BAMTKEY3Q0FGNTIyMTVDMURFQThBMEJBMEM4N0ZERDVCOUQxMzgxRjVCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaDtHYSlWuXkZX+yjZhjB13pq l0s6it/Nq46nH6g5aAhX/u9vcE77S0qOP9n1vecl6VzwL1Qr7hsu+zxH7/X5e4Lu WNUnJLlSE29bgqfZfXaoTYm0U2DvKdNec+CpQI/Q787UfrVkGFx0D98ra52nP9jU ZiNxxBsChpLfezg0WF0rxlSPhao1bH01Fr6d1xnZeZR6Tf5UhSmbhG/Mh/IHX5r5 drEiGOMbFPB0AnX6aKQFQuowGvLOALCUvPbUujS9Ii8cFLEQeeW9ktyWLJLVv3od veKsVnx+5ComGjppzx8QhxEON+EX4mKTf069VKIlTmpPkLc5uCnDS0OvYssfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU98r1IhXB3qigugyH/dW50TgfWzYwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYNZZ0jYNYvXTPdzFOF8hpAtZ7gICIzv3pM 0C7aRALjyJmOA4TrlbgR42DWZtn9JaUr0C/MPo8GTMPrJLOwPmz09BBZ+SwARNMO EN8xaQqT9gNaUlEQPcTp6O5tahENlBDJXGdBWZa6o6jyOOqm8H/JXhnjUbb9BeWa Y3XGnAugsTwwsLOWmaVwm4CpSZyjpDKfQpcw0FUWT3LgUXqGTHvHkMoeiePQwa46 e7F4sT0FEGF1TSv4/MtWoGdU9yBl/5pxsfUGGC7nB4dpQsbVVI0TXMzfH1kL09ak OHny+wACKDJTHlzsrdx+jiMXDzjpWrc+jwC7wJ2m51hSR0UDCqo= -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:07 2025 by rpki-client