This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft (raw, json) Hash identifier: x8mMAUtzJqRThC7Co97IcYy86617PUmheaW97TOaQfU= Subject key identifier: CA:27:41:FE:F8:0D:33:1D:92:3B:1B:A4:DD:86:06:E2:23:F3:5E:24 Authority key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Certificate issuer: /CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Certificate serial: 2CA8AFE6609523432C0358CF277D1F0DE15754E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft Manifest number: 0222 Signing time: Tue 16 Dec 2025 23:51:31 +0000 Manifest this update: Tue 16 Dec 2025 23:46:31 +0000 Manifest next update: Sat 20 Dec 2025 03:35:31 +0000 Files and hashes: 1: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: hy+/jpVeqW5ZdBPpsEQxih0c4zQVAJjPaRw4KAPp/Ro=) 2: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl (hash: oY+ixUWUuekK4xRM3KU0niBMYs57kn3tiKH9YXh+4Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a8:af:e6:60:95:23:43:2c:03:58:cf:27:7d:1f:0d:e1:57:54:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Validity Not Before: Dec 16 23:46:31 2025 GMT Not After : Dec 20 03:35:31 2025 GMT Subject: CN=CA2741FEF80D331D923B1BA4DD8606E223F35E24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:aa:1e:9c:52:25:b8:8c:b1:17:b0:7f:fd:1e: e6:e5:55:d2:6c:23:88:67:60:12:1d:0d:19:9f:7a: 41:13:78:0d:a3:17:4e:c1:c0:7d:4d:d2:1f:07:c3: cb:7c:0b:f2:4c:3d:1f:71:d9:ec:df:19:da:f1:25: c6:c8:2c:3e:58:fc:8e:e6:f4:4a:b8:30:ec:9a:e1: 72:ca:82:46:ac:ae:c7:fa:a9:36:99:23:73:20:33: 0f:e1:ed:d9:b3:b1:a2:ab:97:f7:90:55:a9:63:db: ee:ec:68:c8:54:43:d7:04:88:e9:90:fd:3c:03:6c: 28:63:af:b8:00:2d:c8:28:5d:4a:e2:5f:7d:a0:2d: df:7b:b4:32:a2:be:3b:02:d2:4d:b5:db:60:44:a6: 46:fb:8b:0c:90:e7:3b:78:f2:bd:44:25:61:77:97: ff:b8:12:f8:2e:ee:3a:5b:38:a8:33:76:c7:1d:34: fd:13:27:e9:ad:6e:e4:09:3c:78:64:73:5e:ba:04: 0e:8d:61:bf:73:e1:b7:19:66:97:ac:f7:b3:1d:99: 9d:55:06:e5:f4:62:a7:f4:5a:c9:74:7d:2e:0f:7d: d9:f6:71:31:19:bd:e8:2a:1f:0e:16:da:8e:89:a7: 25:ea:7d:d5:3c:e3:09:d8:db:ac:65:7b:cb:ce:81: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:27:41:FE:F8:0D:33:1D:92:3B:1B:A4:DD:86:06:E2:23:F3:5E:24 X509v3 Authority Key Identifier: keyid:40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:17:bf:16:4f:44:49:43:6d:5f:88:65:5b:6e:3e:ab:5a:d3: 8c:c2:4d:90:5f:a5:cd:91:a3:1d:33:21:31:10:b8:7d:ba:f9: b8:02:74:e3:f5:ff:dc:85:2c:c6:63:71:56:37:a6:a1:a3:3f: b1:1d:b3:17:ed:77:25:69:1b:50:1f:ed:7f:f6:00:f6:d7:08: f6:2e:e6:ec:5c:ac:2a:b5:36:67:17:34:44:07:cf:57:94:a6: 7b:5f:8c:8c:06:b4:df:30:c7:9a:ee:c6:47:23:6a:12:d9:39: 9f:db:aa:a6:2a:11:03:e1:35:ab:34:41:fd:d9:23:72:1e:d9: e8:db:3d:4b:37:11:95:b2:f6:8e:0a:5c:94:37:0d:8f:55:ea: e9:87:cd:2f:ce:d1:eb:d8:6b:a2:44:d1:da:9f:ac:d6:86:2c: bc:de:ba:e0:c7:ce:7e:56:ca:67:b4:ec:73:df:d9:85:11:98: fa:e7:05:9e:54:8c:61:5c:d1:d1:89:88:c2:72:ac:27:eb:e8: 8b:13:16:a8:6c:90:06:46:3d:52:6d:b8:29:d6:0b:29:0e:ee: 57:9c:c5:fe:8b:bc:16:5d:ea:0c:d4:98:82:e4:21:38:14:df: a6:8c:11:fc:8a:92:99:1a:1e:6e:08:51:2d:f7:68:c2:58:c0: de:97:d4:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKiv5mCVI0MsA1jPJ30fDeFXVOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5 MTVBQzc2RDAeFw0yNTEyMTYyMzQ2MzFaFw0yNTEyMjAwMzM1MzFaMDMxMTAvBgNV BAMTKENBMjc0MUZFRjgwRDMzMUQ5MjNCMUJBNEREODYwNkUyMjNGMzVFMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpqh6cUiW4jLEXsH/9HublVdJs I4hnYBIdDRmfekETeA2jF07BwH1N0h8Hw8t8C/JMPR9x2ezfGdrxJcbILD5Y/I7m 9Eq4MOya4XLKgkasrsf6qTaZI3MgMw/h7dmzsaKrl/eQValj2+7saMhUQ9cEiOmQ /TwDbChjr7gALcgoXUriX32gLd97tDKivjsC0k2122BEpkb7iwyQ5zt48r1EJWF3 l/+4Evgu7jpbOKgzdscdNP0TJ+mtbuQJPHhkc166BA6NYb9z4bcZZpes97MdmZ1V BuX0Yqf0Wsl0fS4Pfdn2cTEZvegqHw4W2o6JpyXqfdU84wnY26xle8vOgW9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyidB/vgNMx2SOxuk3YYG4iPzXiQwHwYDVR0j BBgwFoAUQHBqXM+olsjuDB+aW23NoZFax20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMC80MDcwNkE1Q0NG QTg5NkM4RUUwQzFGOUE1QjZEQ0RBMTkxNUFDNzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5MTVB Qzc2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENE QTE5MTVBQzc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYXvxZPRElDbV+IZVtuPqta04zCTZBfpc2R ox0zITEQuH26+bgCdOP1/9yFLMZjcVY3pqGjP7EdsxftdyVpG1Af7X/2APbXCPYu 5uxcrCq1NmcXNEQHz1eUpntfjIwGtN8wx5ruxkcjahLZOZ/bqqYqEQPhNas0Qf3Z I3Ie2ejbPUs3EZWy9o4KXJQ3DY9V6umHzS/O0evYa6JE0dqfrNaGLLzeuuDHzn5W yme07HPf2YURmPrnBZ5UjGFc0dGJiMJyrCfr6IsTFqhskAZGPVJtuCnWCykO7lec xf6LvBZd6gzUmILkITgU36aMEfyKkpkaHm4IUS33aMJYwN6X1Nw= -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:17 2025 by rpki-client