This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: IZsOMp9V5vbFsqz2ZkiwdLm3hhPBS2GrzbMtZpl5JgI= Subject key identifier: 16:72:6E:6D:2A:B1:D8:F5:46:30:34:78:50:F4:EB:9A:33:17:B4:36 Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 40E67537ECDCE965BB0C20677881AF4772B40E75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 01F2 Signing time: Wed 03 Dec 2025 00:22:07 +0000 Manifest this update: Wed 03 Dec 2025 00:17:07 +0000 Manifest next update: Sat 06 Dec 2025 06:44:07 +0000 Files and hashes: 1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: qsAO4cOsO4ax3oPbTen8Sd837s3C+50yjyG9ueyoUI8=) 2: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: Hd/09mnD1U40GsddMxVZd1ZhkFR77uaJDFv1YUPYR0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e6:75:37:ec:dc:e9:65:bb:0c:20:67:78:81:af:47:72:b4:0e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Dec 3 00:17:07 2025 GMT Not After : Dec 6 06:44:07 2025 GMT Subject: CN=16726E6D2AB1D8F54630347850F4EB9A3317B436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:df:0b:69:04:61:cd:0c:e5:bc:21:c3:54: d0:89:89:37:a7:0d:dc:a1:7b:f8:a8:77:34:c7:e9: e7:90:f9:ea:ca:1b:09:ff:10:32:df:a0:70:e4:85: a8:7f:e4:ab:c9:be:2d:1e:d7:53:a4:61:cb:0c:31: 0c:97:a1:3a:33:b4:0a:b6:6b:ee:39:49:15:1a:a8: 58:e4:3f:7b:77:d2:6e:84:dd:ef:ae:ee:e5:cd:36: 9f:64:51:6e:1b:66:51:a2:47:27:1e:39:f3:82:ff: dd:74:d6:60:c8:85:84:e5:29:f8:75:63:54:07:f4: b5:87:d1:bd:69:28:f7:b5:bb:ff:a9:de:ce:86:e2: c2:56:f0:73:3b:26:a3:f7:e3:cc:b6:7d:98:32:93: 72:6e:79:a4:0f:15:96:77:33:6a:d3:c8:11:a1:58: 9b:2b:d4:80:1b:4b:12:e0:07:16:8b:93:c2:f9:de: 87:a5:01:15:f6:9f:39:fd:c9:02:8c:13:6b:c3:82: a4:0b:39:cf:0a:d0:8d:36:73:df:7a:63:c5:bb:65: 3b:f7:f7:ab:a5:3b:24:54:9c:b9:e1:fd:80:d5:06: 36:45:1d:df:58:c4:f6:45:4b:4a:93:e7:76:4b:c0: e1:db:31:01:75:f5:7b:10:12:eb:64:62:b0:80:ee: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:72:6E:6D:2A:B1:D8:F5:46:30:34:78:50:F4:EB:9A:33:17:B4:36 X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ae:bf:42:8e:fd:9b:28:ae:0f:44:b6:4e:f9:70:2c:cc:88: 67:da:21:6f:74:d8:bc:a9:3e:f9:97:2c:bb:32:87:e4:34:c7: b4:39:6f:8b:a1:af:4c:7b:19:b7:fb:e8:48:68:9a:f7:37:63: 31:07:8d:9f:a7:e3:1c:59:1a:21:ca:17:4a:81:dd:66:99:89: 0e:9d:4f:6e:33:5f:d6:3a:1f:f7:91:02:a6:cf:71:56:d9:70: 95:6b:09:89:4e:9d:e1:8e:ae:01:b6:e4:82:13:1f:07:92:9c: 00:3d:3c:82:1d:a5:db:e8:01:96:c4:ee:df:9e:b9:63:ea:cf: 32:38:ea:08:40:ce:9a:5f:ae:e7:6e:af:c5:f0:7d:03:be:b8: 90:39:bb:72:33:b2:ca:21:e2:dc:9e:7e:e8:1a:32:63:32:72: 6f:ee:b1:7c:24:26:1f:a3:0b:52:6b:b9:db:13:fa:92:0c:62: 63:be:48:79:44:90:05:32:af:69:22:a4:a8:d9:37:83:22:3c: 57:cf:3d:49:39:34:55:19:b3:be:ff:19:56:d1:0c:42:b7:19: 73:d3:1c:fb:e0:9d:37:04:1a:9e:00:42:37:12:1a:53:bf:5f: 0b:a1:88:0f:b3:7e:d6:d7:67:3e:3f:25:06:a3:c3:29:1b:e8: 20:0a:f3:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQOZ1N+zc6WW7DCBneIGvR3K0DnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNTEyMDMwMDE3MDdaFw0yNTEyMDYwNjQ0MDdaMDMxMTAvBgNV BAMTKDE2NzI2RTZEMkFCMUQ4RjU0NjMwMzQ3ODUwRjRFQjlBMzMxN0I0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9N8LaQRhzQzlvCHDVNCJiTen Ddyhe/iodzTH6eeQ+erKGwn/EDLfoHDkhah/5KvJvi0e11OkYcsMMQyXoToztAq2 a+45SRUaqFjkP3t30m6E3e+u7uXNNp9kUW4bZlGiRyceOfOC/9101mDIhYTlKfh1 Y1QH9LWH0b1pKPe1u/+p3s6G4sJW8HM7JqP348y2fZgyk3JueaQPFZZ3M2rTyBGh WJsr1IAbSxLgBxaLk8L53oelARX2nzn9yQKME2vDgqQLOc8K0I02c996Y8W7ZTv3 96ulOyRUnLnh/YDVBjZFHd9YxPZFS0qT53ZLwOHbMQF19XsQEutkYrCA7u2xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFnJubSqx2PVGMDR4UPTrmjMXtDYwHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+uv0KO/Zsorg9Etk75cCzMiGfaIW902Lyp PvmXLLsyh+Q0x7Q5b4uhr0x7Gbf76Ehomvc3YzEHjZ+n4xxZGiHKF0qB3WaZiQ6d T24zX9Y6H/eRAqbPcVbZcJVrCYlOneGOrgG25IITHweSnAA9PIIdpdvoAZbE7t+e uWPqzzI46ghAzppfrudur8XwfQO+uJA5u3Izssoh4tyefugaMmMycm/usXwkJh+j C1JrudsT+pIMYmO+SHlEkAUyr2kipKjZN4MiPFfPPUk5NFUZs77/GVbRDEK3GXPT HPvgnTcEGp4AQjcSGlO/XwuhiA+zftbXZz4/JQajwykb6CAK8w8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:39 2025 by rpki-client