This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json) Hash identifier: Upu4M/27uqfC6jZcghyvleoYh9yY3ragi3iumPrRYmU= Subject key identifier: 35:0E:4C:1E:C0:67:C2:B0:21:05:52:59:FE:9F:72:15:A1:AA:70:EE Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Certificate serial: 201E8894D26C2689FFF02180A8BF391DFA57375B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft Manifest number: DA Signing time: Fri 12 Dec 2025 21:50:44 +0000 Manifest this update: Fri 12 Dec 2025 21:45:44 +0000 Manifest next update: Tue 16 Dec 2025 09:48:44 +0000 Files and hashes: 1: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: Wr2tPYT/aEoGXLTEnqAsxY9W+r42ZmZMLqCt8drOAyE=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 09:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1e:88:94:d2:6c:26:89:ff:f0:21:80:a8:bf:39:1d:fa:57:37:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Validity Not Before: Dec 12 21:45:44 2025 GMT Not After : Dec 16 09:48:44 2025 GMT Subject: CN=350E4C1EC067C2B021055259FE9F7215A1AA70EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:91:9e:df:c4:21:9e:c5:d9:51:2c:bb:28:1d: fd:6e:17:a8:8b:c7:39:63:61:d1:1a:4f:bf:73:2e: 2c:e8:04:e3:9f:0d:75:75:4f:62:5a:b6:62:40:c2: e2:d5:35:2f:62:bc:58:9f:b5:6f:36:5e:2b:64:a6: 72:cd:0d:c6:a9:2d:1a:91:0c:ba:1b:38:99:38:ac: dd:14:6b:0f:79:47:22:9c:95:14:86:e3:0f:7f:5a: 0e:a1:eb:93:c9:1c:56:c9:e0:28:d5:5e:d5:a8:d5: 0e:17:02:7d:96:2b:69:82:17:4a:b7:12:a9:32:b4: ed:60:3e:c4:d1:5a:cf:bc:fe:e6:10:4c:cd:90:57: d6:fc:ba:d5:ef:f2:29:74:85:34:33:3a:19:90:00: 87:13:17:09:1e:d6:09:8c:76:6c:97:9c:54:44:a2: 27:63:79:d5:08:33:75:1c:57:99:eb:b0:db:04:5b: 1d:1d:8d:17:b2:42:6d:b3:c0:62:da:0c:f2:66:a3: 27:f9:2c:c4:09:58:a6:47:6b:2e:3e:6f:13:aa:90: 93:72:61:ee:47:34:7f:0d:0d:70:db:37:6e:34:2c: 60:8a:97:0a:17:ee:26:3d:99:16:dc:55:82:aa:6b: f4:33:7f:82:75:b8:75:ae:28:a0:49:7e:93:be:d3: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0E:4C:1E:C0:67:C2:B0:21:05:52:59:FE:9F:72:15:A1:AA:70:EE X509v3 Authority Key Identifier: keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:93:cd:c3:7b:e4:61:73:60:04:de:b1:57:53:59:80:49:ba: f3:73:dc:e7:fd:6d:6c:8a:78:7d:d5:12:9f:c3:46:06:be:aa: 57:5e:49:bf:e9:85:c8:23:c7:38:92:d1:f3:d1:8e:0a:97:92: 7b:04:71:3c:c8:81:97:61:0f:96:43:48:0a:1a:0f:6a:f0:10: 5f:1e:77:01:22:25:c2:a5:4a:c0:af:6b:da:d2:01:07:81:dd: c2:5f:1d:bc:98:2f:d9:f0:9d:1a:38:d2:f6:e1:8d:6d:96:06: 5b:1e:e0:f0:85:d6:8c:8e:4b:0b:a2:e0:95:56:57:0c:43:cf: fe:d7:60:04:b5:87:46:39:65:2e:33:68:07:a0:91:77:c7:58: 14:8f:57:1e:ce:20:30:45:f3:b0:1d:80:5f:e7:c5:01:f7:47: 36:2b:6d:e7:22:c3:71:d5:b9:2b:f2:dc:2a:97:53:f7:c1:9b: 0b:64:a2:f2:56:f6:a5:b8:a6:71:bf:1e:e7:3c:f6:74:af:ac: e0:eb:94:b7:c6:b9:17:7f:aa:68:5d:84:e3:6c:b7:45:e8:95: c5:8b:f9:c4:dc:0b:dc:e8:40:73:e8:90:2a:5b:76:10:17:a9: 81:05:14:b8:f2:5f:29:79:cc:8b:32:85:11:89:64:41:09:cf: f8:15:74:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIB6IlNJsJon/8CGAqL85HfpXN1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy REMxRTg3NjAeFw0yNTEyMTIyMTQ1NDRaFw0yNTEyMTYwOTQ4NDRaMDMxMTAvBgNV BAMTKDM1MEU0QzFFQzA2N0MyQjAyMTA1NTI1OUZFOUY3MjE1QTFBQTcwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnkZ7fxCGexdlRLLsoHf1uF6iL xzljYdEaT79zLizoBOOfDXV1T2JatmJAwuLVNS9ivFiftW82XitkpnLNDcapLRqR DLobOJk4rN0Uaw95RyKclRSG4w9/Wg6h65PJHFbJ4CjVXtWo1Q4XAn2WK2mCF0q3 EqkytO1gPsTRWs+8/uYQTM2QV9b8utXv8il0hTQzOhmQAIcTFwke1gmMdmyXnFRE oidjedUIM3UcV5nrsNsEWx0djReyQm2zwGLaDPJmoyf5LMQJWKZHay4+bxOqkJNy Ye5HNH8NDXDbN240LGCKlwoX7iY9mRbcVYKqa/Qzf4J1uHWuKKBJfpO+087VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQ5MHsBnwrAhBVJZ/p9yFaGqcO4wHwYDVR0j BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5 MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGTzcN75GFzYATesVdTWYBJuvNz3Of9bWyK eH3VEp/DRga+qldeSb/phcgjxziS0fPRjgqXknsEcTzIgZdhD5ZDSAoaD2rwEF8e dwEiJcKlSsCva9rSAQeB3cJfHbyYL9nwnRo40vbhjW2WBlse4PCF1oyOSwui4JVW VwxDz/7XYAS1h0Y5ZS4zaAegkXfHWBSPVx7OIDBF87AdgF/nxQH3RzYrbeciw3HV uSvy3CqXU/fBmwtkovJW9qW4pnG/Huc89nSvrODrlLfGuRd/qmhdhONst0XolcWL +cTcC9zoQHPokCpbdhAXqYEFFLjyXyl5zIsyhRGJZEEJz/gVdJE= -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:40 2025 by rpki-client