This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: 24mLH+yISTgLoqUleqLlfpR0L7QStIWy2P+27Wrolko= Subject key identifier: 55:ED:13:76:47:DB:9C:EA:45:8E:1E:BB:28:D4:CF:BB:22:20:0F:56 Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 9A36ECA4787AA23958538CF8084DECD31DFAB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 0477 Signing time: Mon 01 Dec 2025 15:00:46 +0000 Manifest this update: Mon 01 Dec 2025 14:55:46 +0000 Manifest next update: Fri 05 Dec 2025 00:23:46 +0000 Files and hashes: 1: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: D5BixYr4AJU/MS7TZCW/5jRqwcOMx/QjB3M/Uu6XanU=) 2: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: VMKFOqL1qK+Nes8nFNi9RdO6h+wUNxp0xvTke2vv7dg=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: iey0oG1qHYOzJhbqWTH39EDQ0pZ3GLohA4EPTGiKvsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9a:36:ec:a4:78:7a:a2:39:58:53:8c:f8:08:4d:ec:d3:1d:fa:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Dec 1 14:55:46 2025 GMT Not After : Dec 5 00:23:46 2025 GMT Subject: CN=55ED137647DB9CEA458E1EBB28D4CFBB22200F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:41:82:7e:78:0c:f1:9c:e8:77:e5:a5:9b: d4:09:16:a2:ea:ad:b5:3c:e7:93:fa:31:79:21:fa: 2f:ee:31:de:58:30:24:4b:2e:ee:fd:1c:75:59:00: f8:e5:29:37:d7:c7:a3:10:f4:10:0d:ea:99:55:ce: 07:99:83:18:33:f2:75:40:25:26:4f:8a:a4:99:a9: f9:3b:98:84:d5:1c:90:09:cc:e5:60:90:ae:bd:8a: 1c:30:4c:12:ec:e4:14:6e:15:96:96:de:d1:0c:fa: 93:c7:92:4c:11:02:eb:8f:fd:76:9c:6a:62:0f:f4: 32:1a:82:19:ce:ad:2e:e5:d3:71:ef:37:c0:d4:ee: 1e:8a:f2:20:5a:4b:b1:e1:15:8f:bd:fa:d9:27:d1: df:51:63:4d:21:f3:c7:fe:34:44:75:fa:d4:3d:d8: 4d:04:0a:8b:e4:6c:1d:a7:bd:46:b3:6a:c4:61:e4: 26:a3:b2:66:d4:14:f8:98:d8:6f:99:da:aa:aa:e6: 77:cb:29:56:60:68:d4:01:14:e7:ba:f4:4a:43:26: b6:48:31:2a:11:fd:60:52:72:6c:b8:88:e0:f8:4a: 0f:4f:aa:40:33:df:89:c7:ad:43:5f:4c:69:8b:ab: 0a:2c:1c:0f:7f:f9:97:3c:34:6c:c7:67:2e:e7:ef: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:ED:13:76:47:DB:9C:EA:45:8E:1E:BB:28:D4:CF:BB:22:20:0F:56 X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d7:6e:3a:e4:bd:9e:1b:46:4f:c3:3d:c1:9a:28:5a:f7:b5: 53:e3:1e:5a:9a:e8:52:30:3d:bb:5e:e2:bf:81:97:0f:5a:81: 3f:d3:ee:14:d8:8e:d2:00:cb:a1:59:ed:d9:1e:e8:cc:b4:b1: af:b6:c4:2d:d1:ff:3a:71:7c:cf:6c:e6:cc:cb:2e:7c:ee:08: 57:70:01:df:1a:d9:ea:d8:6d:13:4a:f9:f3:ed:36:16:2f:03: 76:1b:78:f9:41:2a:5a:4a:71:11:af:72:ce:2c:02:2e:bd:15: 2d:18:3c:7f:c0:94:f5:da:ac:90:b1:b0:31:5a:d3:bd:d6:82: e0:83:ee:15:a9:ef:55:a0:e1:3a:1f:a3:f3:56:d0:72:7a:c6: fd:6b:e8:05:a4:6d:f2:ac:b9:a8:09:bf:5a:e6:34:12:ef:1b: c2:32:c6:f8:9d:7a:b4:05:76:6a:52:06:13:92:6e:09:91:e6: 1d:af:5b:f7:98:65:bd:1f:82:9a:a3:cb:d8:24:5d:14:dc:bc: 5b:a1:a0:fc:24:a7:90:20:07:3f:ca:65:86:1e:3e:6a:c1:e4: 06:9c:13:8d:26:2f:c6:6f:31:52:b9:a2:38:7d:03:ae:82:a4: 3e:89:47:6b:a1:48:d2:f0:39:b4:0b:b5:05:65:8c:4c:e7:e7: 95:8f:a4:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJo27KR4eqI5WFOM+AhN7NMd+rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNTEyMDExNDU1NDZaFw0yNTEyMDUwMDIzNDZaMDMxMTAvBgNV BAMTKDU1RUQxMzc2NDdEQjlDRUE0NThFMUVCQjI4RDRDRkJCMjIyMDBGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjUGCfngM8Zzod+Wlm9QJFqLq rbU855P6MXkh+i/uMd5YMCRLLu79HHVZAPjlKTfXx6MQ9BAN6plVzgeZgxgz8nVA JSZPiqSZqfk7mITVHJAJzOVgkK69ihwwTBLs5BRuFZaW3tEM+pPHkkwRAuuP/Xac amIP9DIaghnOrS7l03HvN8DU7h6K8iBaS7HhFY+9+tkn0d9RY00h88f+NER1+tQ9 2E0ECovkbB2nvUazasRh5CajsmbUFPiY2G+Z2qqq5nfLKVZgaNQBFOe69EpDJrZI MSoR/WBScmy4iOD4Sg9PqkAz34nHrUNfTGmLqwosHA9/+Zc8NGzHZy7n727tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVe0TdkfbnOpFjh67KNTPuyIgD1YwHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfXbjrkvZ4bRk/DPcGaKFr3tVPjHlqa6FIw Pbte4r+Blw9agT/T7hTYjtIAy6FZ7dke6My0sa+2xC3R/zpxfM9s5szLLnzuCFdw Ad8a2erYbRNK+fPtNhYvA3YbePlBKlpKcRGvcs4sAi69FS0YPH/AlPXarJCxsDFa 073WguCD7hWp71Wg4Tofo/NW0HJ6xv1r6AWkbfKsuagJv1rmNBLvG8IyxviderQF dmpSBhOSbgmR5h2vW/eYZb0fgpqjy9gkXRTcvFuhoPwkp5AgBz/KZYYePmrB5Aac E40mL8ZvMVK5ojh9A66CpD6JR2uhSNLwObQLtQVljEzn55WPpGo= -----END CERTIFICATE-----Generated at Wed Dec 3 15:29:17 2025 by rpki-client