This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: 7dAb37yClqJOnSa3lEusiz2Y8LVyxZ/Uf83ZsMPdX74= Subject key identifier: F3:2F:68:A7:72:7A:2F:83:17:63:57:52:EB:1F:7D:FA:C2:43:2A:3F Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 58C1BE86487ADCCCCFCCE3543B2F22B964EF19D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 052A Signing time: Mon 01 Dec 2025 16:31:45 +0000 Manifest this update: Mon 01 Dec 2025 16:26:45 +0000 Manifest next update: Fri 05 Dec 2025 00:34:45 +0000 Files and hashes: 1: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: ch9M/d5CpMKNuWP7NP+pm35WAAHpYu4H/G47F9ixYS8=) 2: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c1:be:86:48:7a:dc:cc:cf:cc:e3:54:3b:2f:22:b9:64:ef:19:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Dec 1 16:26:45 2025 GMT Not After : Dec 5 00:34:45 2025 GMT Subject: CN=F32F68A7727A2F8317635752EB1F7DFAC2432A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8d:a0:49:f1:62:2d:50:af:fe:f2:1c:3a:79: a3:2e:79:57:e4:1e:48:4f:c1:63:a3:f4:9e:67:aa: 66:94:f3:3c:bd:07:c5:23:3b:f8:57:a5:3f:a4:19: d8:7f:a7:63:f2:1a:c0:f2:ad:e8:83:8b:75:46:76: 23:ab:3d:38:6a:66:6a:27:b4:18:0a:e5:64:16:94: d6:48:57:48:c7:e3:d1:a3:8e:0b:5a:0c:06:e7:70: 7d:2e:40:f0:a3:5b:74:db:c2:92:d6:b8:3f:91:36: f2:f7:fd:67:ae:7c:dc:b7:a8:08:c2:aa:f5:fd:6c: 71:d5:38:82:70:ae:3d:7c:a3:f3:89:90:00:55:2b: 68:1c:ad:8e:18:81:f7:fd:fd:22:e1:01:0a:20:3f: 76:02:1f:a6:53:92:e2:d6:e8:8d:f4:1c:71:8c:3d: 25:a1:f6:23:29:40:de:1b:97:ef:08:f4:6f:35:a1: 8a:95:c1:6f:d8:56:f3:af:21:3e:ba:1a:66:e6:8f: 9f:ef:66:e4:a3:7f:5d:88:54:30:db:4b:57:79:5a: f4:e4:2f:73:98:b9:ed:c1:2e:dd:81:9b:33:d3:cf: 49:ee:d2:8f:80:fc:b4:c5:28:df:35:87:7a:61:85: 5d:68:59:4d:a2:42:5b:fe:c6:78:84:0e:3e:9c:96: 95:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2F:68:A7:72:7A:2F:83:17:63:57:52:EB:1F:7D:FA:C2:43:2A:3F X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:68:0d:e5:99:8c:de:b4:fa:0c:98:d7:4a:9c:de:6d:75:17: 71:00:3a:70:00:33:d9:37:19:eb:0d:46:ec:b1:a1:cf:e9:14: 18:59:29:d0:41:83:aa:71:3e:78:44:ef:84:bc:b6:e9:b7:8c: f1:6d:1b:02:0f:ae:8b:05:5e:a6:02:75:2a:83:ed:72:f1:d3: 3d:ba:d1:47:b2:0e:46:8e:c9:46:39:fd:e4:fc:3a:8f:f5:e7: dd:4e:74:c9:da:d6:b7:6b:af:25:77:db:f2:23:b4:06:ac:d0: 59:94:42:46:91:59:9c:04:e4:4b:5a:cb:a3:52:f0:d4:03:2d: 7f:a9:8e:9b:5d:e0:06:1d:53:8a:f4:92:4d:84:c2:97:72:76: 02:3d:18:93:1a:92:b6:b1:76:c7:07:89:e4:72:02:ab:18:b5: ba:a9:ae:14:2c:81:0c:a2:ab:f6:14:61:c3:9a:27:03:d0:a3: 28:e5:67:55:f1:39:58:14:70:2b:57:24:64:e8:ed:8d:b9:d4: d3:53:df:d0:5c:23:63:ee:11:f7:7c:50:9b:01:35:8c:b8:b7: e2:09:67:ac:3d:36:be:7a:fd:20:1f:44:f1:93:c9:d4:da:f0: 5f:16:38:a6:5a:60:c9:0e:6a:24:24:1f:ea:f2:d9:df:34:70: b1:12:f1:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWMG+hkh63MzPzONUOy8iuWTvGdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNTEyMDExNjI2NDVaFw0yNTEyMDUwMDM0NDVaMDMxMTAvBgNV BAMTKEYzMkY2OEE3NzI3QTJGODMxNzYzNTc1MkVCMUY3REZBQzI0MzJBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVjaBJ8WItUK/+8hw6eaMueVfk HkhPwWOj9J5nqmaU8zy9B8UjO/hXpT+kGdh/p2PyGsDyreiDi3VGdiOrPThqZmon tBgK5WQWlNZIV0jH49GjjgtaDAbncH0uQPCjW3TbwpLWuD+RNvL3/WeufNy3qAjC qvX9bHHVOIJwrj18o/OJkABVK2gcrY4Ygff9/SLhAQogP3YCH6ZTkuLW6I30HHGM PSWh9iMpQN4bl+8I9G81oYqVwW/YVvOvIT66Gmbmj5/vZuSjf12IVDDbS1d5WvTk L3OYue3BLt2BmzPTz0nu0o+A/LTFKN81h3phhV1oWU2iQlv+xniEDj6clpWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8y9op3J6L4MXY1dS6x99+sJDKj8wHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdoDeWZjN60+gyY10qc3m11F3EAOnAAM9k3 GesNRuyxoc/pFBhZKdBBg6pxPnhE74S8tum3jPFtGwIProsFXqYCdSqD7XLx0z26 0UeyDkaOyUY5/eT8Oo/1591OdMna1rdrryV32/IjtAas0FmUQkaRWZwE5Etay6NS 8NQDLX+pjptd4AYdU4r0kk2EwpdydgI9GJMakraxdscHieRyAqsYtbqprhQsgQyi q/YUYcOaJwPQoyjlZ1XxOVgUcCtXJGTo7Y251NNT39BcI2PuEfd8UJsBNYy4t+IJ Z6w9Nr56/SAfRPGTydTa8F8WOKZaYMkOaiQkH+ry2d80cLES8Ss= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:40 2025 by rpki-client