This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: Kmd/yp6tFcq0GjDER6rr0DzVgXds10EVu+yq3mkNmD4= Subject key identifier: 44:9C:E9:51:00:79:B6:1B:23:D3:27:06:48:8D:0B:C1:D8:07:9B:48 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 31A80F59078A712FF36F0AD873911FC8BAA02FE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 03D9 Signing time: Sat 20 Dec 2025 01:40:02 +0000 Manifest this update: Sat 20 Dec 2025 01:35:02 +0000 Manifest next update: Tue 23 Dec 2025 04:42:02 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 2: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) 3: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) 4: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: N++liIB/eW2/Mp2a7yhDpuqHv1LNsZ9bkClEWtToNEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 04:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a8:0f:59:07:8a:71:2f:f3:6f:0a:d8:73:91:1f:c8:ba:a0:2f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Dec 20 01:35:02 2025 GMT Not After : Dec 23 04:42:02 2025 GMT Subject: CN=449CE9510079B61B23D32706488D0BC1D8079B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d1:e6:88:be:1c:39:99:e2:21:5a:02:41:77: af:1d:2b:2a:3f:98:57:0e:06:aa:35:67:f1:14:50: 79:a2:f6:53:d8:62:8c:9a:85:20:e1:13:f6:73:10: bc:aa:a1:8e:c9:a9:65:ac:fd:bf:2c:b4:f4:c5:9c: e1:22:bf:ca:1a:3d:09:41:35:22:28:07:2e:af:a1: 25:d2:09:ba:0d:3d:5b:2c:30:5e:94:6f:9a:45:2a: 40:d6:ad:fd:12:21:5b:b5:e8:90:c9:09:d5:03:79: 75:2e:1e:ae:bd:c8:0a:f5:b8:3e:21:ab:e8:ea:ac: 8a:68:e2:92:30:20:59:89:fc:49:d5:26:07:33:4a: 32:18:ec:70:d4:81:f8:8b:f7:f4:ef:f7:25:b7:aa: 42:91:ae:e7:38:e3:76:b3:21:d8:5e:17:2c:a7:c4: 30:9b:a0:51:ee:3a:4a:44:88:36:1f:99:36:f1:84: da:31:b6:c1:4f:62:3d:bd:a9:16:0c:1c:1b:d5:8e: 09:0a:d0:cc:71:81:57:a5:09:c7:18:f3:65:fc:50: f4:19:f0:d5:b3:43:e6:d1:00:d7:8f:61:4b:e9:31: fa:fb:7d:fe:9d:76:0d:90:cd:97:94:52:e8:37:df: 55:26:e3:b9:2b:a2:79:ef:5c:8c:6d:de:fd:18:19: ec:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9C:E9:51:00:79:B6:1B:23:D3:27:06:48:8D:0B:C1:D8:07:9B:48 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c9:e6:5c:1a:68:1e:8b:6c:d5:7f:b6:70:4b:ba:f2:41:e9: 53:86:2e:4a:39:e9:6e:42:95:3b:42:61:6e:d0:7c:b3:b7:78: aa:83:19:7c:d8:bf:dd:83:90:24:92:e2:e9:8b:39:66:c9:8e: 8c:9f:d6:5f:aa:0c:b4:2a:a3:f3:3e:e2:94:62:5b:09:a4:d2: 3f:af:c2:0b:e0:f7:b6:ba:5c:3f:dc:91:9a:22:12:ab:a6:2a: f2:44:d9:ad:38:d4:d5:fc:7c:c4:a7:2b:9c:8e:40:47:2f:de: e6:cf:3f:78:d0:0d:ef:ae:90:23:42:4d:37:73:35:cc:c5:14: 72:1e:ac:df:1f:28:37:e9:5e:ec:81:06:b6:c9:62:22:7a:59: b6:fb:78:8a:91:fe:24:52:c7:02:bb:33:2f:f7:d3:c0:61:51: 19:7d:00:f0:c9:32:d0:75:d0:8a:6e:f5:ee:59:b2:db:c9:54: 80:50:00:49:6e:13:81:65:e3:ca:01:49:b3:49:33:c7:dc:4e: 7d:66:d6:ae:c7:2b:26:67:27:e1:2f:76:e6:df:64:56:49:54: 4e:1e:86:48:7f:d6:90:0b:18:e4:c9:0c:0a:cb:3d:cc:b5:6c: b5:ef:42:bc:61:25:37:e3:e3:ee:dd:db:10:78:75:08:20:2e: f9:d6:e8:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMagPWQeKcS/zbwrYc5EfyLqgL+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTEyMjAwMTM1MDJaFw0yNTEyMjMwNDQyMDJaMDMxMTAvBgNV BAMTKDQ0OUNFOTUxMDA3OUI2MUIyM0QzMjcwNjQ4OEQwQkMxRDgwNzlCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl0eaIvhw5meIhWgJBd68dKyo/ mFcOBqo1Z/EUUHmi9lPYYoyahSDhE/ZzELyqoY7JqWWs/b8stPTFnOEiv8oaPQlB NSIoBy6voSXSCboNPVssMF6Ub5pFKkDWrf0SIVu16JDJCdUDeXUuHq69yAr1uD4h q+jqrIpo4pIwIFmJ/EnVJgczSjIY7HDUgfiL9/Tv9yW3qkKRruc443azIdheFyyn xDCboFHuOkpEiDYfmTbxhNoxtsFPYj29qRYMHBvVjgkK0MxxgVelCccY82X8UPQZ 8NWzQ+bRANePYUvpMfr7ff6ddg2QzZeUUug331Um47kronnvXIxt3v0YGewhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURJzpUQB5thsj0ycGSI0LwdgHm0gwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXJ5lwaaB6LbNV/tnBLuvJB6VOGLko56W5C lTtCYW7QfLO3eKqDGXzYv92DkCSS4umLOWbJjoyf1l+qDLQqo/M+4pRiWwmk0j+v wgvg97a6XD/ckZoiEqumKvJE2a041NX8fMSnK5yOQEcv3ubPP3jQDe+ukCNCTTdz NczFFHIerN8fKDfpXuyBBrbJYiJ6Wbb7eIqR/iRSxwK7My/308BhURl9APDJMtB1 0Ipu9e5ZstvJVIBQAEluE4Fl48oBSbNJM8fcTn1m1q7HKyZnJ+EvdubfZFZJVE4e hkh/1pALGOTJDArLPcy1bLXvQrxhJTfj4+7d2xB4dQggLvnW6NE= -----END CERTIFICATE-----Generated at Sun Dec 21 08:20:18 2025 by rpki-client