This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: 2kTRLqNnxU1ncO/0fOjffg4Wr4LIytlReLmFKHzViLg= Subject key identifier: BE:9A:18:94:79:79:AE:A0:94:A7:CC:5C:BE:0D:B4:F5:79:2E:4E:92 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 14941647D51739DE83FC785182B48FEE1C6C28F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 0122 Signing time: Fri 19 Dec 2025 05:12:36 +0000 Manifest this update: Fri 19 Dec 2025 05:07:36 +0000 Manifest next update: Mon 22 Dec 2025 09:36:36 +0000 Files and hashes: 1: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g=) 2: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: xjP04kf3DWi1bZ6uTQ5THWifOWFT2Bzhvt6Udyq4yqk=) 3: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: x6ZV1Wl+WBaRGXPvArCfDSB+gNTaB80RBBLsR8syzeM=) 4: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 09:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:94:16:47:d5:17:39:de:83:fc:78:51:82:b4:8f:ee:1c:6c:28:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Dec 19 05:07:36 2025 GMT Not After : Dec 22 09:36:36 2025 GMT Subject: CN=BE9A18947979AEA094A7CC5CBE0DB4F5792E4E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e3:19:0c:d9:0d:34:2e:94:cc:e0:27:cd:c9: a9:21:46:56:94:5c:52:24:8a:f1:fa:a8:9b:c7:f6: 34:59:c3:8e:cf:47:6e:02:68:34:0d:19:b1:bf:12: 45:38:cb:88:91:27:0b:cf:ba:52:2f:09:78:cc:57: 85:00:d8:b3:65:19:36:16:dc:d3:f9:28:5f:ba:53: 32:d5:e7:93:ea:37:5e:8c:89:0e:d1:10:26:d1:39: f8:3d:da:41:ca:80:6c:9a:54:c0:29:86:3c:f7:cd: 26:85:25:6a:94:3c:6c:f4:02:d4:a8:79:d4:92:5f: 35:3f:e1:e6:97:ec:1f:43:54:7e:e6:58:22:5a:5d: 2f:08:eb:89:90:c8:c0:1a:a7:37:fe:4f:83:1f:7f: 90:98:2b:84:87:c1:42:1a:76:48:22:a4:4c:f8:d1: 45:5b:9b:b5:aa:db:8d:ad:53:dd:06:60:34:74:ae: 5e:cd:72:04:b8:e4:70:10:5e:e8:35:c3:ca:c5:c5: 68:47:13:a6:b6:a9:9e:3a:a9:1b:10:f0:80:8f:e5: 24:dc:ac:1c:dc:97:d9:61:67:2d:1a:be:fb:b2:cd: 28:d0:c5:f0:11:ae:f2:14:d2:46:17:3f:10:09:55: 18:04:02:b8:76:a2:73:9d:d8:c8:35:20:af:f3:2e: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9A:18:94:79:79:AE:A0:94:A7:CC:5C:BE:0D:B4:F5:79:2E:4E:92 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:59:e5:2e:cb:fe:c9:e0:f8:4d:6a:0c:4a:32:1e:f3:d8:9c: e8:09:c2:fb:eb:ad:33:dd:38:a2:44:ee:78:af:8e:d3:40:64: 05:be:b9:02:59:70:68:5a:41:51:a0:b1:4d:d5:00:bc:57:b8: 52:ea:0b:87:d4:bf:1d:f2:f8:52:4e:d7:26:ee:5d:5d:bf:4f: 76:a4:33:e9:f7:19:6c:0c:bc:b1:ef:51:c2:db:a6:79:a3:b7: 5b:03:66:f4:e2:62:a9:44:ee:b8:1d:13:71:d9:d4:e6:e6:da: 54:ed:7c:29:fa:ff:f8:29:10:2c:a9:20:6e:a0:4a:c4:f7:6b: 8d:74:b7:1a:15:e6:67:cd:4d:e7:f2:9b:32:08:b9:b1:5f:11: 56:40:48:50:ce:25:82:0c:d9:04:d5:72:4c:f5:18:8b:07:48: bc:f7:86:9b:fc:5d:db:90:95:35:95:fd:0b:dc:d5:2b:41:6b: 0d:68:70:1f:1a:77:b9:6a:8c:37:27:a9:0c:7d:a6:98:11:cf: 76:f5:ab:97:a2:4a:d3:49:76:03:c4:e1:8b:aa:46:d7:dd:9c: 98:ea:d3:ea:13:c6:f8:6a:4c:0c:d9:74:25:72:c7:51:b3:1e: 0e:13:83:dc:c4:95:89:c6:50:af:d5:03:c7:ee:8d:05:77:b0: 60:7e:db:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJQWR9UXOd6D/HhRgrSP7hxsKPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTEyMTkwNTA3MzZaFw0yNTEyMjIwOTM2MzZaMDMxMTAvBgNV BAMTKEJFOUExODk0Nzk3OUFFQTA5NEE3Q0M1Q0JFMERCNEY1NzkyRTRFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4xkM2Q00LpTM4CfNyakhRlaU XFIkivH6qJvH9jRZw47PR24CaDQNGbG/EkU4y4iRJwvPulIvCXjMV4UA2LNlGTYW 3NP5KF+6UzLV55PqN16MiQ7RECbROfg92kHKgGyaVMAphjz3zSaFJWqUPGz0AtSo edSSXzU/4eaX7B9DVH7mWCJaXS8I64mQyMAapzf+T4Mff5CYK4SHwUIadkgipEz4 0UVbm7Wq242tU90GYDR0rl7NcgS45HAQXug1w8rFxWhHE6a2qZ46qRsQ8ICP5STc rBzcl9lhZy0avvuyzSjQxfARrvIU0kYXPxAJVRgEArh2onOd2Mg1IK/zLnF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvpoYlHl5rqCUp8xcvg209XkuTpIwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1Z5S7L/sng+E1qDEoyHvPYnOgJwvvrrTPd OKJE7nivjtNAZAW+uQJZcGhaQVGgsU3VALxXuFLqC4fUvx3y+FJO1ybuXV2/T3ak M+n3GWwMvLHvUcLbpnmjt1sDZvTiYqlE7rgdE3HZ1Obm2lTtfCn6//gpECypIG6g SsT3a410txoV5mfNTefymzIIubFfEVZASFDOJYIM2QTVckz1GIsHSLz3hpv8XduQ lTWV/Qvc1StBaw1ocB8ad7lqjDcnqQx9ppgRz3b1q5eiStNJdgPE4YuqRtfdnJjq 0+oTxvhqTAzZdCVyx1GzHg4Tg9zElYnGUK/VA8fujQV3sGB+2yE= -----END CERTIFICATE-----Generated at Sat Dec 20 14:02:51 2025 by rpki-client