This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: RtZEz/zhvhbXrtxCln9dqLNA04KkN6j7/8HSf72lS0M= Subject key identifier: 15:94:43:2B:F8:9A:22:65:A2:AA:D3:91:AD:9E:DC:6A:82:37:A7:07 Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 3113F35E8AD8EBA49402F74EDE8890BA5688A071 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 030A Signing time: Mon 01 Dec 2025 20:41:48 +0000 Manifest this update: Mon 01 Dec 2025 20:36:48 +0000 Manifest next update: Fri 05 Dec 2025 00:58:48 +0000 Files and hashes: 1: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: U7daKiZHJNz5euXJHLgQiJHoysE+qnshN/tkrpEJatM=) 2: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: eQ2W59Sl25b9+tbhRBYK+eiWkdxaKDr4YfWFXlk9jXI=) 3: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: aQ3bZ8U/53lOgq6IbJ4jaeEks7cypqeVb0bEi+y+Pus=) 4: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: eGEsrGBto/hQncn3YcGePX27GH/UT48OX+sETIcZ17o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:13:f3:5e:8a:d8:eb:a4:94:02:f7:4e:de:88:90:ba:56:88:a0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Dec 1 20:36:48 2025 GMT Not After : Dec 5 00:58:48 2025 GMT Subject: CN=1594432BF89A2265A2AAD391AD9EDC6A8237A707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d7:e7:06:50:a1:a1:7e:44:58:b1:97:61:6b: b4:5d:1c:1f:c9:60:6d:51:00:cf:69:2f:8f:27:5c: cd:c8:c7:a6:8e:14:9e:26:a8:88:59:92:d7:27:07: 49:0f:2a:15:05:96:8b:23:dc:39:38:86:2e:ca:37: 3f:82:58:6e:03:f6:17:ce:f0:5a:df:b8:9b:0c:de: e6:76:52:af:a6:9b:0e:bd:d6:56:a4:0d:44:48:2e: 69:a7:bf:6b:8b:3e:73:b9:2f:0b:3a:42:81:f6:87: c2:67:64:2b:97:0c:78:cd:9f:f9:e7:08:17:86:14: 6e:2c:f0:09:03:33:e5:b6:aa:fb:6f:8b:35:cc:e8: 17:0d:5d:63:42:4d:f7:73:02:0e:c9:94:e2:17:d6: 46:ec:ab:04:c3:30:13:44:ad:16:5d:fa:87:8a:6f: 47:7e:c5:25:af:df:3f:ee:dc:15:d2:87:81:6a:3e: 8a:86:58:a6:c2:0e:ab:82:95:5f:50:b9:fd:6e:f3: 1d:0a:71:a7:b8:11:ef:ec:42:04:ef:68:84:58:2c: 2d:d1:2c:9a:7e:1d:82:3c:49:a9:3a:61:a1:0b:d7: 7f:f5:f1:f9:7c:f2:1d:52:3d:21:e9:7e:48:3d:bd: ef:da:31:e3:49:3c:c8:78:a3:70:78:c4:c8:a4:53: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:94:43:2B:F8:9A:22:65:A2:AA:D3:91:AD:9E:DC:6A:82:37:A7:07 X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:01:c0:10:3e:92:1a:7e:ff:e9:29:d9:bb:f1:6e:9f:d3:62: 2a:b6:39:1f:77:4b:e0:31:b6:b6:62:f0:64:e9:af:9a:eb:e5: 12:e5:42:04:b5:ff:29:26:7f:1e:d0:50:34:30:1b:05:9e:46: 79:13:1a:5d:ca:72:db:c8:87:4a:c5:c2:02:94:9d:ae:32:14: 2f:30:1f:7f:45:b0:7c:df:b2:91:2c:6f:39:4c:11:57:31:59: 6b:69:44:a1:7d:db:57:31:22:17:92:89:84:91:45:51:9c:d9: 5c:58:89:c3:16:32:09:90:76:e7:77:8e:2e:76:5a:2e:24:8b: f9:e8:f1:67:53:96:6e:1f:d5:6c:75:1e:3e:66:48:36:49:03: 30:08:34:fa:c3:1a:e8:1f:a1:42:b8:16:02:3e:ea:b7:2e:b7: a8:0a:40:e1:fd:8e:87:33:f0:f8:56:bf:2c:3d:9f:5b:65:8b: 8d:6c:9d:9b:05:f1:b5:fd:63:d1:3f:d9:c0:f8:9d:78:26:05: b1:1b:3c:40:87:75:9a:fb:f4:8b:d5:7a:d9:e5:4a:47:41:75: 86:82:48:2f:be:88:6b:43:c1:a0:1d:dd:3d:e3:f0:b9:04:87: d6:8b:a9:a6:29:48:56:db:4a:62:8d:b0:0d:2a:a5:18:c7:1e: c1:0c:20:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRPzXorY66SUAvdO3oiQulaIoHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNTEyMDEyMDM2NDhaFw0yNTEyMDUwMDU4NDhaMDMxMTAvBgNV BAMTKDE1OTQ0MzJCRjg5QTIyNjVBMkFBRDM5MUFEOUVEQzZBODIzN0E3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1+cGUKGhfkRYsZdha7RdHB/J YG1RAM9pL48nXM3Ix6aOFJ4mqIhZktcnB0kPKhUFlosj3Dk4hi7KNz+CWG4D9hfO 8FrfuJsM3uZ2Uq+mmw691lakDURILmmnv2uLPnO5Lws6QoH2h8JnZCuXDHjNn/nn CBeGFG4s8AkDM+W2qvtvizXM6BcNXWNCTfdzAg7JlOIX1kbsqwTDMBNErRZd+oeK b0d+xSWv3z/u3BXSh4FqPoqGWKbCDquClV9Quf1u8x0Kcae4Ee/sQgTvaIRYLC3R LJp+HYI8Sak6YaEL13/18fl88h1SPSHpfkg9ve/aMeNJPMh4o3B4xMikU1DNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFZRDK/iaImWiqtORrZ7caoI3pwcwHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFABwBA+khp+/+kp2bvxbp/TYiq2OR93S+Ax trZi8GTpr5rr5RLlQgS1/ykmfx7QUDQwGwWeRnkTGl3KctvIh0rFwgKUna4yFC8w H39FsHzfspEsbzlMEVcxWWtpRKF921cxIheSiYSRRVGc2VxYicMWMgmQdud3ji52 Wi4ki/no8WdTlm4f1Wx1Hj5mSDZJAzAINPrDGugfoUK4FgI+6rcut6gKQOH9jocz 8PhWvyw9n1tli41snZsF8bX9Y9E/2cD4nXgmBbEbPECHdZr79IvVetnlSkdBdYaC SC++iGtDwaAd3T3j8LkEh9aLqaYpSFbbSmKNsA0qpRjHHsEMIJE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:11:58 2025 by rpki-client