This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: O/6kil7DXw+LVDrjXlnh8TqTe+jGYf/HUXRH4uz5N60= Subject key identifier: E0:82:5C:D0:5C:E6:7F:CC:D5:7F:E6:C2:30:D7:E6:4B:47:04:A1:20 Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 7AF480DC0E3237AFC24F8A7398F3DBD693045D22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 0335 Signing time: Mon 22 Dec 2025 22:50:55 +0000 Manifest this update: Mon 22 Dec 2025 22:45:55 +0000 Manifest next update: Fri 26 Dec 2025 09:56:55 +0000 Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=) 2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: onB9WO0ZUZNJ3ClGYHUigaQhvVzwZ07jhmMH/G6JX8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 09:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f4:80:dc:0e:32:37:af:c2:4f:8a:73:98:f3:db:d6:93:04:5d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Dec 22 22:45:55 2025 GMT Not After : Dec 26 09:56:55 2025 GMT Subject: CN=E0825CD05CE67FCCD57FE6C230D7E64B4704A120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:4a:c7:4d:70:ab:a9:f8:48:72:81:08:dd: 89:08:d3:95:0b:ed:c0:32:96:ba:dd:f6:13:71:d3: e1:e7:30:b0:74:07:01:ba:3d:cf:71:5d:93:1e:7b: d0:a3:b4:17:f6:93:10:4e:42:0c:8a:17:85:3b:0d: 56:c5:0f:f8:fa:54:26:53:80:b1:e4:e3:88:60:6e: 05:7a:52:ba:4e:dc:30:75:a1:9c:fc:67:5a:20:3c: a4:f4:99:2f:e6:78:7d:ec:b1:ae:d4:41:a3:0f:2b: 84:6f:01:f1:bc:2d:82:e8:aa:f7:33:cf:6c:56:7b: 2a:25:51:e3:ca:34:c4:0d:0c:5c:b4:a7:2b:c6:d8: f9:a3:40:39:b6:9e:9d:82:17:47:9c:7f:86:9e:46: ab:44:1c:a7:0d:9d:c7:80:81:4c:63:51:8e:0a:c1: 1f:0d:37:44:47:78:65:ce:ec:cb:23:5f:82:77:64: cb:7f:67:66:b6:dd:8b:81:35:79:3e:a7:a7:59:b5: f9:b5:6a:a1:44:3f:ea:ff:7a:c4:d0:d2:ef:f2:16: 22:9e:ef:a2:5f:fc:88:23:bc:5f:75:1c:9d:f6:9e: 9c:5a:bb:77:b4:5d:31:78:39:af:77:62:48:c6:3d: e9:83:8f:6d:1e:08:95:3c:01:5a:4e:bf:71:5e:63: 2f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:82:5C:D0:5C:E6:7F:CC:D5:7F:E6:C2:30:D7:E6:4B:47:04:A1:20 X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:93:28:cf:0a:9a:9f:51:3e:cc:c7:19:94:22:9a:31:e5:ad: af:73:a3:3b:cc:8d:bf:e4:e6:a0:7e:e5:33:e8:74:01:8e:82: 82:88:4a:69:75:1b:61:23:ab:f8:b0:9a:a4:1f:29:3d:a3:ac: e4:b8:78:22:1c:e3:51:19:f8:9d:1e:0e:f7:d4:ad:29:89:ee: c4:dd:04:36:c4:f9:eb:79:58:b8:8a:59:be:07:0e:5e:15:c1: 04:4f:20:e4:86:0e:28:39:da:92:9b:55:a0:a6:aa:c1:b3:1c: 2e:2a:ce:ef:8d:2d:d5:cd:93:d2:1f:e8:33:58:b6:2a:7d:51: ce:d3:6c:f6:e0:18:fc:9f:a2:e0:61:bb:20:f4:08:95:87:f8: 6c:7e:66:03:2d:9b:58:06:b6:24:f8:20:1a:cb:e3:25:56:1f: dc:c5:e3:ec:64:3e:0f:30:d0:b1:5e:b6:5b:2b:31:04:94:05: ad:db:2a:92:82:17:98:b3:22:c1:9a:cf:7d:f1:51:a2:f5:23: dd:c8:2a:53:39:f5:41:e1:84:d6:cc:bd:90:64:c2:64:d3:36: 85:d2:e7:d5:af:c4:33:d9:e4:7a:e9:11:26:e0:4a:35:a6:6a: 6d:4b:2d:3a:ea:c8:50:4a:4b:4d:e3:90:7c:5e:64:5e:fd:f9: a7:e6:ad:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevSA3A4yN6/CT4pzmPPb1pMEXSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNTEyMjIyMjQ1NTVaFw0yNTEyMjYwOTU2NTVaMDMxMTAvBgNV BAMTKEUwODI1Q0QwNUNFNjdGQ0NENTdGRTZDMjMwRDdFNjRCNDcwNEExMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIkrHTXCrqfhIcoEI3YkI05UL 7cAylrrd9hNx0+HnMLB0BwG6Pc9xXZMee9CjtBf2kxBOQgyKF4U7DVbFD/j6VCZT gLHk44hgbgV6UrpO3DB1oZz8Z1ogPKT0mS/meH3ssa7UQaMPK4RvAfG8LYLoqvcz z2xWeyolUePKNMQNDFy0pyvG2PmjQDm2np2CF0ecf4aeRqtEHKcNnceAgUxjUY4K wR8NN0RHeGXO7MsjX4J3ZMt/Z2a23YuBNXk+p6dZtfm1aqFEP+r/esTQ0u/yFiKe 76Jf/IgjvF91HJ32npxau3e0XTF4Oa93YkjGPemDj20eCJU8AVpOv3FeYy9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4IJc0Fzmf8zVf+bCMNfmS0cEoSAwHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSTKM8Kmp9RPszHGZQimjHlra9zozvMjb/k 5qB+5TPodAGOgoKISml1G2Ejq/iwmqQfKT2jrOS4eCIc41EZ+J0eDvfUrSmJ7sTd BDbE+et5WLiKWb4HDl4VwQRPIOSGDig52pKbVaCmqsGzHC4qzu+NLdXNk9If6DNY tip9Uc7TbPbgGPyfouBhuyD0CJWH+Gx+ZgMtm1gGtiT4IBrL4yVWH9zF4+xkPg8w 0LFetlsrMQSUBa3bKpKCF5izIsGaz33xUaL1I93IKlM59UHhhNbMvZBkwmTTNoXS 59WvxDPZ5HrpESbgSjWmam1LLTrqyFBKS03jkHxeZF79+afmrY4= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:59 2025 by rpki-client