This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: 1klia3TYTBPJAwoXembpYI8G+ypJNBAmk1lJMYfZtPY= Subject key identifier: CB:AE:47:4B:1F:69:AB:22:A9:2C:6E:68:BC:AA:73:36:DC:FF:FB:F2 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 48ECE73BE429856430D59D100BB32BE754896413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 02B4 Signing time: Sun 21 Dec 2025 01:00:51 +0000 Manifest this update: Sun 21 Dec 2025 00:55:51 +0000 Manifest next update: Wed 24 Dec 2025 01:09:51 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: 4iZIxR50ia6m0ZFibM+r20tc8A3hMvKUKAuN6CQYgRM=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 01:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ec:e7:3b:e4:29:85:64:30:d5:9d:10:0b:b3:2b:e7:54:89:64:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Dec 21 00:55:51 2025 GMT Not After : Dec 24 01:09:51 2025 GMT Subject: CN=CBAE474B1F69AB22A92C6E68BCAA7336DCFFFBF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:31:84:44:90:76:31:b9:6e:20:0a:9d:f1:6d: 6d:24:28:6d:e5:aa:1f:ab:c4:6d:40:41:b3:4c:09: 54:ed:dd:f8:0e:0f:27:fe:f3:b0:2b:d9:7c:54:b3: 14:1b:63:51:e5:5d:88:b3:d4:be:9f:86:41:ce:6d: 88:71:e8:9b:eb:44:87:99:fc:62:c6:54:7e:70:e4: 03:e8:d4:08:96:84:e2:5d:bc:3f:bf:6f:5c:ab:b5: fe:57:da:80:6e:f8:78:bf:df:b1:b3:84:27:1a:71: a7:54:a5:72:75:44:3a:47:1d:8c:e4:f7:f6:4b:d3: 13:5e:86:72:88:ac:a4:f5:94:c1:6e:e2:a4:c2:24: 83:90:66:6a:46:27:64:6e:0c:50:e0:b0:b0:58:4b: 71:bc:8b:81:08:d3:01:eb:7b:fa:78:64:cd:fa:ac: 59:47:e8:1b:65:a6:4b:d5:2d:73:81:9e:5d:24:2b: 72:20:43:a3:69:16:71:60:86:9f:ab:76:9b:cc:e0: e8:0f:65:a1:17:e9:15:aa:d6:da:21:a7:68:ae:41: b8:40:f9:b9:4b:da:b9:51:c6:2d:5e:63:84:e9:49: 63:e1:f9:2b:72:73:61:53:48:33:c8:ec:2c:05:0d: 22:0b:3f:ff:96:d9:7f:91:5b:5f:b3:64:d2:91:2d: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AE:47:4B:1F:69:AB:22:A9:2C:6E:68:BC:AA:73:36:DC:FF:FB:F2 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:56:7f:e3:00:77:a0:f5:6d:81:66:5d:ed:66:a7:ed:a5:b7: 7d:04:f6:89:7c:3e:df:15:90:e2:07:22:f8:5f:b5:9d:7e:36: 20:38:c7:77:b5:45:f2:34:33:32:8c:fb:a0:35:eb:61:7a:c6: 27:c3:5e:9d:f9:29:cf:24:02:dc:6c:d6:9d:97:97:e7:2c:a3: df:f2:b1:c1:af:56:f0:10:bf:8f:53:f5:26:46:fb:7e:4d:d6: 61:9e:13:20:78:44:22:14:d1:23:05:3c:0e:a7:84:a7:7e:71: dc:68:dd:10:d5:71:73:d7:c7:f9:80:ca:dc:fd:8d:d4:63:63: 7e:3c:72:f9:72:f7:6d:86:ba:64:d0:95:8b:4a:6f:ef:c9:cf: 79:15:7d:61:72:69:ca:98:3a:fe:0e:8c:4a:9a:41:3f:83:8b: c9:b0:7e:e4:f9:e9:9d:16:8c:cd:d4:47:7a:48:13:69:ea:e6: ba:3b:37:5f:2d:67:67:20:1a:e1:a2:14:ec:e5:ef:a4:2b:89: 14:20:33:48:d9:fe:ba:90:51:c9:f0:a2:f7:06:70:fb:6b:c1: 43:df:01:29:7a:69:36:94:96:2c:ca:4e:c5:c4:c3:92:69:8f: 15:c9:b7:be:8f:a7:7c:90:82:84:1b:eb:a5:51:40:38:4f:a7: ee:17:06:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOznO+QphWQw1Z0QC7Mr51SJZBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNTEyMjEwMDU1NTFaFw0yNTEyMjQwMTA5NTFaMDMxMTAvBgNV BAMTKENCQUU0NzRCMUY2OUFCMjJBOTJDNkU2OEJDQUE3MzM2RENGRkZCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgMYREkHYxuW4gCp3xbW0kKG3l qh+rxG1AQbNMCVTt3fgODyf+87Ar2XxUsxQbY1HlXYiz1L6fhkHObYhx6JvrRIeZ /GLGVH5w5APo1AiWhOJdvD+/b1yrtf5X2oBu+Hi/37GzhCcacadUpXJ1RDpHHYzk 9/ZL0xNehnKIrKT1lMFu4qTCJIOQZmpGJ2RuDFDgsLBYS3G8i4EI0wHre/p4ZM36 rFlH6BtlpkvVLXOBnl0kK3IgQ6NpFnFghp+rdpvM4OgPZaEX6RWq1tohp2iuQbhA +blL2rlRxi1eY4TpSWPh+Styc2FTSDPI7CwFDSILP/+W2X+RW1+zZNKRLeQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy65HSx9pqyKpLG5ovKpzNtz/+/IwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1Wf+MAd6D1bYFmXe1mp+2lt30E9ol8Pt8V kOIHIvhftZ1+NiA4x3e1RfI0MzKM+6A162F6xifDXp35Kc8kAtxs1p2Xl+cso9/y scGvVvAQv49T9SZG+35N1mGeEyB4RCIU0SMFPA6nhKd+cdxo3RDVcXPXx/mAytz9 jdRjY348cvly922GumTQlYtKb+/Jz3kVfWFyacqYOv4OjEqaQT+Di8mwfuT56Z0W jM3UR3pIE2nq5ro7N18tZ2cgGuGiFOzl76QriRQgM0jZ/rqQUcnwovcGcPtrwUPf ASl6aTaUlizKTsXEw5JpjxXJt76Pp3yQgoQb66VRQDhPp+4XBjs= -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:16 2025 by rpki-client