This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft File: 4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json) Hash identifier: 55sDM1MAZt/QzQG9gJiEPmG7l6/FRWfqRcNBB8UhvOM= Subject key identifier: EB:C9:01:69:E6:EB:6F:4A:C9:A3:65:9A:5D:E9:67:9C:BD:B6:00:40 Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1 Certificate serial: 6AFF7C299DF30273C7DB1EC1B42C64E430AB32C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft Manifest number: 0225 Signing time: Tue 02 Dec 2025 05:31:13 +0000 Manifest this update: Tue 02 Dec 2025 05:26:13 +0000 Manifest next update: Fri 05 Dec 2025 06:24:13 +0000 Files and hashes: 1: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: BMnB7wo8Sj/O0JprKjHpnlJFZSN7p9MW8nd9cuSb6MU=) 2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: ibNTSX4YXpvUj4AJgfecXLMI8i0TnCNMvaVKKjw+4v8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ff:7c:29:9d:f3:02:73:c7:db:1e:c1:b4:2c:64:e4:30:ab:32:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1 Validity Not Before: Dec 2 05:26:13 2025 GMT Not After : Dec 5 06:24:13 2025 GMT Subject: CN=EBC90169E6EB6F4AC9A3659A5DE9679CBDB60040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:16:46:c2:ff:19:a4:2f:b2:87:fe:30:97: 2f:bc:de:cb:ef:a8:5b:67:6c:98:fa:a6:a2:3e:3b: 5e:4d:cb:11:2f:64:e2:71:68:bf:e2:cf:df:26:80: 67:0b:fc:47:9c:2d:50:e4:1b:ae:da:8e:d9:17:3c: 94:10:50:0e:bc:b4:4f:c8:18:bd:71:9f:e7:59:87: 48:b4:0d:9d:50:11:77:d3:1d:76:97:4a:4f:69:a9: a7:d3:5d:5a:41:29:fe:54:c4:bf:a4:f4:97:65:88: 54:7a:62:1e:4b:04:e1:3a:63:c3:ef:1a:12:b9:12: 95:d9:46:41:8a:de:b0:1d:ec:f0:32:e2:eb:23:45: bb:7d:7d:39:23:cd:02:fe:81:22:2f:66:f5:bd:09: d7:9d:ef:a5:0b:34:47:76:fe:f5:2c:eb:7e:ad:68: be:c6:bd:7b:90:83:46:a9:27:6d:4a:f8:6d:28:7a: bb:12:9a:43:84:7c:4e:38:a4:65:c2:ef:63:0b:08: ad:60:e2:83:1a:7d:96:20:9c:21:af:c2:d1:10:28: 4a:2b:3c:b8:f1:c9:2e:44:27:5b:0b:b3:4c:05:c8: 8d:8f:9b:2b:a8:b1:a7:af:87:5d:a7:10:90:6a:87: b5:7f:ae:97:84:59:11:a5:14:67:70:ec:82:39:8b: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C9:01:69:E6:EB:6F:4A:C9:A3:65:9A:5D:E9:67:9C:BD:B6:00:40 X509v3 Authority Key Identifier: keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:10:09:da:c0:d6:ab:77:32:bf:d1:5b:cd:c3:dc:32:b9:48: b9:c6:a6:ff:e6:e5:f8:fd:3c:c3:0f:ef:09:a2:de:60:ee:f3: 30:3f:39:29:5b:a8:b0:00:01:6d:a7:84:9e:6c:4d:83:70:70: 10:01:c7:9f:f9:5a:51:15:98:83:9c:39:9c:f0:4c:ae:a2:c2: 21:be:33:1f:98:ac:0e:ab:6c:ec:e1:f7:db:c5:43:de:62:0a: fb:92:5f:8a:63:e1:71:85:d0:4b:91:e3:f8:b6:94:62:08:bb: 30:b7:e6:5d:81:31:ad:d7:0e:1e:82:b7:ac:0f:57:9b:02:e8: 0e:19:9b:6b:68:53:ab:6d:4e:fc:e1:39:6d:b3:69:fc:a2:fd: c6:ba:d6:6f:31:68:cb:c9:27:97:f5:f8:7f:ef:a5:f4:ba:e9: ba:98:d8:ea:0f:88:c5:75:00:f2:39:e0:ed:41:e0:2b:98:48: 0b:03:5d:e3:cb:1d:4d:ce:94:e3:83:3e:24:2e:eb:a2:95:62: 33:87:21:be:ee:8e:6f:5d:c1:df:86:97:78:21:24:82:99:c7: 83:32:97:15:d0:b8:7f:d8:27:15:e0:1a:6e:57:a0:5e:ce:2c: 5d:ad:02:dd:db:58:6f:58:9e:ad:b4:ba:f5:c0:60:83:7b:15: bb:e0:23:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUav98KZ3zAnPH2x7BtCxk5DCrMsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4 MkY4ODFFMTAeFw0yNTEyMDIwNTI2MTNaFw0yNTEyMDUwNjI0MTNaMDMxMTAvBgNV BAMTKEVCQzkwMTY5RTZFQjZGNEFDOUEzNjU5QTVERTk2NzlDQkRCNjAwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0BZGwv8ZpC+yh/4wly+83svv qFtnbJj6pqI+O15NyxEvZOJxaL/iz98mgGcL/EecLVDkG67ajtkXPJQQUA68tE/I GL1xn+dZh0i0DZ1QEXfTHXaXSk9pqafTXVpBKf5UxL+k9JdliFR6Yh5LBOE6Y8Pv GhK5EpXZRkGK3rAd7PAy4usjRbt9fTkjzQL+gSIvZvW9Cded76ULNEd2/vUs636t aL7GvXuQg0apJ21K+G0oersSmkOEfE44pGXC72MLCK1g4oMafZYgnCGvwtEQKEor PLjxyS5EJ1sLs0wFyI2Pmyuosaevh12nEJBqh7V/rpeEWRGlFGdw7II5i/xJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU68kBaebrb0rJo2WaXelnnL22AEAwHwYDVR0j BBgwFoAUT2eaIH0liLcJyCzasABzYYL4geEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5M2E5My01ODg5LTRlMDItOWU5NS03NjljYjg5ZTAwMzUvMC80RjY3OUEyMDdE MjU4OEI3MDlDODJDREFCMDAwNzM2MTgyRjg4MUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4MkY4 ODFFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDcz NjE4MkY4ODFFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgQCdrA1qt3Mr/RW83D3DK5SLnGpv/m5fj9 PMMP7wmi3mDu8zA/OSlbqLAAAW2nhJ5sTYNwcBABx5/5WlEVmIOcOZzwTK6iwiG+ Mx+YrA6rbOzh99vFQ95iCvuSX4pj4XGF0EuR4/i2lGIIuzC35l2BMa3XDh6Ct6wP V5sC6A4Zm2toU6ttTvzhOW2zafyi/ca61m8xaMvJJ5f1+H/vpfS66bqY2OoPiMV1 API54O1B4CuYSAsDXePLHU3OlOODPiQu66KVYjOHIb7ujm9dwd+Gl3ghJIKZx4My lxXQuH/YJxXgGm5XoF7OLF2tAt3bWG9Ynq20uvXAYIN7FbvgI/4= -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:07 2025 by rpki-client