This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: GVXrGmILX5oUSGr5JWicEnklxUz/9e4lXMNKFMWl4ZA= Subject key identifier: 5D:94:4D:11:1E:86:D6:2C:EC:41:99:7F:DD:38:00:1E:36:F0:C0:E8 Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 76D017623EBA22B0FA4B7A60E3E7FA94A9B8526F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: 0111 Signing time: Fri 05 Dec 2025 14:41:45 +0000 Manifest this update: Fri 05 Dec 2025 14:36:45 +0000 Manifest next update: Mon 08 Dec 2025 18:13:45 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: /3JxetBdPWl3sE6pY+eol1QXG+VXyst0QW888R2picY=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d0:17:62:3e:ba:22:b0:fa:4b:7a:60:e3:e7:fa:94:a9:b8:52:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Dec 5 14:36:45 2025 GMT Not After : Dec 8 18:13:45 2025 GMT Subject: CN=5D944D111E86D62CEC41997FDD38001E36F0C0E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:de:cc:ba:e8:c4:b6:ab:01:a7:f9:0e:fd: ab:1e:07:18:d8:b6:1d:39:5c:9e:b0:ae:a2:5b:29: 8c:4a:94:bc:30:d4:89:47:82:43:78:cb:de:f1:78: 3b:d9:42:90:0f:ea:8c:75:70:9d:aa:29:d4:55:48: 3b:e3:47:3c:52:30:44:f2:b8:f6:ee:33:90:f3:64: d4:86:19:4f:81:66:03:2e:46:4c:01:78:e6:ae:88: 7a:11:29:c1:a7:91:db:b9:57:da:20:b4:3a:2a:73: cf:ab:78:09:a4:da:28:bd:a9:0b:b1:9a:05:3b:66: 6f:7b:0b:81:5d:6f:c9:97:cd:0f:ee:76:07:7d:43: a9:d8:38:3e:be:c4:bc:40:1e:04:c8:8a:0f:d3:3c: a5:8c:43:42:f0:7f:6f:44:b6:10:28:b8:8e:e1:f4: 42:c2:d5:67:35:46:46:22:f9:24:83:e0:6c:cf:94: 9d:5a:9a:43:41:2d:ba:6e:95:1d:26:19:33:4d:07: 28:c6:80:3e:f8:11:00:6f:9d:bd:64:8f:af:88:67: a8:38:1c:b3:1d:9e:69:53:03:b0:8a:6a:d2:06:85: ab:6e:63:2d:da:04:3f:c5:f4:bf:ac:a4:d6:bb:86: 82:4b:7c:f4:be:85:dc:5d:d1:76:c8:d6:5e:bc:28: 8c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:94:4D:11:1E:86:D6:2C:EC:41:99:7F:DD:38:00:1E:36:F0:C0:E8 X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:3d:63:0e:a9:23:86:0b:ca:5e:13:ba:69:ae:79:fe:6b:f6: c8:c2:d3:67:b5:58:40:33:3b:5e:2e:5d:f4:8c:2e:f8:d5:2a: a3:14:26:95:ae:89:42:da:cc:85:98:19:e2:09:9a:60:86:37: f3:8f:fd:e7:a7:9b:0b:c8:33:bf:7e:c5:86:eb:bb:db:f0:a7: 3e:5b:7b:87:68:b6:82:66:3b:c8:b6:4a:4d:07:73:d4:b5:c5: e9:94:1d:47:94:c3:d3:54:af:f3:bc:02:2f:27:42:3e:bd:cd: fb:ef:19:f2:78:cf:8b:c9:9c:c6:ce:e7:be:15:15:d2:bd:df: ce:24:6c:94:c6:be:ae:2c:81:61:f4:1b:4b:9b:f3:7e:75:72: 8a:ea:86:52:a2:9d:c9:2c:81:18:e1:7c:f8:01:e1:cf:82:ad: d1:e8:8b:17:3b:65:5d:6a:85:48:2f:b1:28:fb:08:99:e1:5e: f0:05:f7:b1:b3:0d:46:66:2d:9f:e0:b9:21:55:f8:96:ec:84: 56:4e:eb:b0:15:02:e4:03:1a:5b:73:67:8a:35:47:3c:cd:98: bb:af:f7:a8:7a:d7:35:8c:ea:79:d4:4d:19:82:87:63:1c:f6: 41:99:34:dd:5c:57:2d:55:b8:d1:ee:3b:b3:c5:fc:3b:14:fa: 20:3b:14:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtAXYj66IrD6S3pg4+f6lKm4Um8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTEyMDUxNDM2NDVaFw0yNTEyMDgxODEzNDVaMDMxMTAvBgNV BAMTKDVEOTQ0RDExMUU4NkQ2MkNFQzQxOTk3RkREMzgwMDFFMzZGMEMwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClX97MuujEtqsBp/kO/aseBxjY th05XJ6wrqJbKYxKlLww1IlHgkN4y97xeDvZQpAP6ox1cJ2qKdRVSDvjRzxSMETy uPbuM5DzZNSGGU+BZgMuRkwBeOauiHoRKcGnkdu5V9ogtDoqc8+reAmk2ii9qQux mgU7Zm97C4Fdb8mXzQ/udgd9Q6nYOD6+xLxAHgTIig/TPKWMQ0Lwf29EthAouI7h 9ELC1Wc1RkYi+SSD4GzPlJ1amkNBLbpulR0mGTNNByjGgD74EQBvnb1kj6+IZ6g4 HLMdnmlTA7CKatIGhatuYy3aBD/F9L+spNa7hoJLfPS+hdxd0XbI1l68KIyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXZRNER6G1izsQZl/3TgAHjbwwOgwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANY9Yw6pI4YLyl4Tummuef5r9sjC02e1WEAz O14uXfSMLvjVKqMUJpWuiULazIWYGeIJmmCGN/OP/eenmwvIM79+xYbru9vwpz5b e4dotoJmO8i2Sk0Hc9S1xemUHUeUw9NUr/O8Ai8nQj69zfvvGfJ4z4vJnMbO574V FdK9384kbJTGvq4sgWH0G0ub8351corqhlKincksgRjhfPgB4c+CrdHoixc7ZV1q hUgvsSj7CJnhXvAF97GzDUZmLZ/guSFV+JbshFZO67AVAuQDGltzZ4o1RzzNmLuv 96h61zWM6nnUTRmCh2Mc9kGZNN1cVy1VuNHuO7PF/DsU+iA7FHo= -----END CERTIFICATE-----Generated at Sun Dec 7 18:54:31 2025 by rpki-client