This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft File: 157748842D6BEE36DEE3B1999F10079808FF41C0.mft (raw, json) Hash identifier: 61KY15D+w+itkwaMYzIkk3V199SujBrFIb8BOkiP5qs= Subject key identifier: E0:72:8E:E9:53:6E:D7:E5:19:49:26:5A:3C:DE:BF:21:F1:9A:53:17 Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 0119B3369B2A7D59E58070547FA6A149136331EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft Manifest number: 0497 Signing time: Tue 02 Dec 2025 00:00:47 +0000 Manifest this update: Mon 01 Dec 2025 23:55:47 +0000 Manifest next update: Fri 05 Dec 2025 04:37:47 +0000 Files and hashes: 1: 157748842D6BEE36DEE3B1999F10079808FF41C0.crl (hash: R0YeqXWu/8yAMc5SPLc/QZj8+TOxwbmv94YvP7tpR9k=) 2: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: CxideEppeSjpo62C99uXU/oA6ba7hNbNjMc3zZT0ZTs=) 3: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:19:b3:36:9b:2a:7d:59:e5:80:70:54:7f:a6:a1:49:13:63:31:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Dec 1 23:55:47 2025 GMT Not After : Dec 5 04:37:47 2025 GMT Subject: CN=E0728EE9536ED7E51949265A3CDEBF21F19A5317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:3c:52:a8:88:3d:c2:52:d3:b9:56:69:fe: 5e:14:4d:41:ed:3e:fc:ae:91:fa:8d:09:a4:48:d8: a0:11:ea:4b:03:b5:48:c7:e9:f7:5e:6b:5f:e8:95: f8:20:af:63:63:0b:f7:77:85:e8:41:c9:f9:c6:c1: b0:13:27:b1:b2:4d:78:9c:16:6e:2f:46:79:29:bb: 0d:58:46:ef:5c:43:a0:4f:18:0f:17:47:df:ba:62: 03:5a:b4:46:96:2f:cb:fb:15:f4:57:bc:51:6c:42: af:90:73:83:cf:d3:59:9c:27:da:fa:4f:cf:d6:09: 72:ee:d0:e6:9d:f4:51:dc:23:09:35:34:aa:6b:94: ee:2c:c9:72:9b:61:cf:1d:2c:ba:9a:33:43:a0:7d: ec:53:04:7b:f4:b1:27:f3:27:49:81:aa:5b:b1:c8: bd:ca:ec:c5:f7:2c:9d:dc:e4:db:9a:92:50:93:b1: 1a:e5:d4:e6:79:c8:8f:49:bd:3d:59:a1:d1:bc:75: 5e:24:11:80:06:0f:e7:06:11:af:55:b2:11:49:86: 2f:bf:77:61:64:4e:cd:31:08:83:89:f0:87:94:c3: 9a:da:01:83:55:9f:89:f5:72:bc:d2:c6:e3:56:3f: ac:21:35:c9:e6:31:88:5a:90:d6:e1:c9:cc:2e:57: 49:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:72:8E:E9:53:6E:D7:E5:19:49:26:5A:3C:DE:BF:21:F1:9A:53:17 X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:1f:42:e5:c4:a1:74:8a:bf:5c:a7:b2:75:3c:c5:f4:c4:7e: bd:83:42:84:a4:38:29:be:4a:ae:17:49:b1:b3:b5:6d:70:23: c2:83:dc:cd:33:2d:5a:dd:8b:33:90:1d:98:02:cd:dc:5d:36: 4e:ad:51:43:9b:4d:f3:b0:f0:42:69:8e:ca:cb:d5:fd:a7:74: d8:d4:93:af:e8:e7:4f:07:57:41:98:6c:e2:2c:dc:ff:f6:f1: 6f:93:30:01:b3:41:5d:90:fd:57:43:13:dc:b0:b7:cd:0a:eb: a8:90:af:ce:42:78:b5:fb:6a:67:78:60:dc:44:37:6f:0c:21: 52:3e:8f:6b:16:8f:c0:08:0d:04:49:d5:c3:49:e4:e2:b9:5b: 7d:07:e2:53:8a:27:b2:f7:8e:93:d3:54:df:d7:d3:a5:df:7f: 93:53:6b:9c:97:4d:25:97:a8:97:8e:2c:48:02:e9:16:62:9c: 98:e3:c4:11:98:ab:bd:1a:41:e8:77:e5:d8:29:cc:26:19:63: e5:c4:d2:14:e7:9a:88:9b:b1:bb:29:ef:9c:c7:63:23:95:22: 2f:92:93:e5:36:3e:56:8a:80:be:17:d6:9b:3a:3d:37:b5:10: 4b:05:7d:b1:3c:9c:08:5c:3b:dd:42:58:e7:88:5e:b3:4d:50: 07:7e:8f:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARmzNpsqfVnlgHBUf6ahSRNjMe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNTEyMDEyMzU1NDdaFw0yNTEyMDUwNDM3NDdaMDMxMTAvBgNV BAMTKEUwNzI4RUU5NTM2RUQ3RTUxOTQ5MjY1QTNDREVCRjIxRjE5QTUzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rDxSqIg9wlLTuVZp/l4UTUHt PvyukfqNCaRI2KAR6ksDtUjH6fdea1/olfggr2NjC/d3hehByfnGwbATJ7GyTXic Fm4vRnkpuw1YRu9cQ6BPGA8XR9+6YgNatEaWL8v7FfRXvFFsQq+Qc4PP01mcJ9r6 T8/WCXLu0Oad9FHcIwk1NKprlO4syXKbYc8dLLqaM0OgfexTBHv0sSfzJ0mBqlux yL3K7MX3LJ3c5NuaklCTsRrl1OZ5yI9JvT1ZodG8dV4kEYAGD+cGEa9VshFJhi+/ d2FkTs0xCIOJ8IeUw5raAYNVn4n1crzSxuNWP6whNcnmMYhakNbhycwuV0lJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4HKO6VNu1+UZSSZaPN6/IfGaUxcwHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3 OTgwOEZGNDFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAfQuXEoXSKv1ynsnU8xfTEfr2DQoSkOCm+ Sq4XSbGztW1wI8KD3M0zLVrdizOQHZgCzdxdNk6tUUObTfOw8EJpjsrL1f2ndNjU k6/o508HV0GYbOIs3P/28W+TMAGzQV2Q/VdDE9ywt80K66iQr85CeLX7amd4YNxE N28MIVI+j2sWj8AIDQRJ1cNJ5OK5W30H4lOKJ7L3jpPTVN/X06Xff5NTa5yXTSWX qJeOLEgC6RZinJjjxBGYq70aQeh35dgpzCYZY+XE0hTnmoibsbsp75zHYyOVIi+S k+U2PlaKgL4X1ps6PTe1EEsFfbE8nAhcO91CWOeIXrNNUAd+j3w= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:01 2025 by rpki-client