This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: KDuSrDQlwWF9oQ8m7ZUp6eB8arSKkWgiAh1k1VNweQI= Subject key identifier: 68:5C:05:AC:C9:03:9D:6D:F3:FD:C5:D0:40:65:EE:11:6A:A5:EA:38 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 7015C6EB048D763034889D0559090A334A64E76E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 053B Signing time: Wed 24 Dec 2025 22:01:56 +0000 Manifest this update: Wed 24 Dec 2025 21:56:56 +0000 Manifest next update: Sat 27 Dec 2025 22:06:56 +0000 Files and hashes: 1: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: tC4yME7RM+AR0jOAT8g242E9wwbv2Cz0u7IHcusQhRc=) 2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: HELC9mdQ84lzVVvguuZaZieGiyQ03u73Eihy4Pkp6bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:15:c6:eb:04:8d:76:30:34:88:9d:05:59:09:0a:33:4a:64:e7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Dec 24 21:56:56 2025 GMT Not After : Dec 27 22:06:56 2025 GMT Subject: CN=685C05ACC9039D6DF3FDC5D04065EE116AA5EA38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:8d:b0:65:90:3b:d8:0a:c0:bb:71:02:3b: 55:71:38:f8:78:c5:d1:26:1f:06:8c:fd:b1:3a:53: 48:9f:05:ec:f1:7d:a6:2a:b8:0d:af:f7:45:73:16: 59:d3:76:5d:b6:27:02:3f:31:54:fc:b1:c0:a8:bf: a9:03:5f:84:fb:4c:b3:4c:47:6f:87:7d:a4:f5:33: 2e:eb:53:50:45:1e:cb:93:10:f9:62:3e:37:5a:9e: 58:29:ad:d0:46:f2:7c:11:b4:97:27:0f:67:92:4d: fb:54:32:6a:ae:b4:a3:4e:48:e7:05:e5:26:c9:79: ef:dc:2c:2e:42:e0:19:38:2b:f9:e9:49:c6:65:d9: 13:8b:79:8e:4d:9c:17:3c:de:58:55:db:08:c2:36: df:58:59:f7:07:27:55:0c:48:5d:d3:f3:0b:d7:d5: b6:be:e8:7e:e5:8d:70:bc:7e:bc:86:72:b5:80:d4: 3a:ea:c2:f2:f4:ca:b2:a4:05:d7:81:a6:f0:14:a9: ef:14:03:d8:11:5d:f4:41:69:a6:de:0c:9b:09:49: 8a:f7:cc:91:0c:38:3d:ad:90:b6:91:55:56:94:54: c6:e2:8f:c2:6d:1f:1b:79:17:41:0a:eb:f4:9b:42: 48:b4:e7:4b:70:1d:2c:e0:df:c0:b9:2e:7c:07:ac: 65:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5C:05:AC:C9:03:9D:6D:F3:FD:C5:D0:40:65:EE:11:6A:A5:EA:38 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b7:56:5e:9e:d2:78:28:10:7b:c3:68:dd:65:b6:b4:ab:b2: 8a:b6:8a:a4:26:93:d3:01:20:68:37:13:09:5c:a2:49:62:bf: d2:8b:8b:d7:45:6a:c5:04:64:f4:ca:48:4f:b5:af:6a:f4:60: 2b:67:7b:31:7c:24:33:89:89:4b:a8:26:33:0a:ff:5a:f0:c8: cf:aa:c6:f7:0a:ca:fc:f9:a4:9f:9d:ec:95:4c:f5:4c:1e:5f: 28:0a:fc:4e:c8:b7:63:8b:83:43:46:cf:7c:25:03:c3:1a:63: a6:51:75:4b:ac:67:6c:76:1c:59:92:28:44:f6:25:c7:e9:16: a9:3b:00:64:fe:3e:05:5b:c2:67:1e:1d:f3:d0:30:a6:02:0e: b2:a5:ab:39:84:03:3f:f1:78:d8:92:6f:45:e2:cc:76:cb:41: 14:71:2d:21:5f:8f:cc:62:f3:79:bb:43:22:c7:ed:a7:7e:22: c8:d8:0e:dc:88:b6:bb:ec:f8:d4:04:6b:c1:fc:c1:ce:db:72: 6b:b5:50:7b:0d:c2:be:37:e3:de:63:da:46:33:d7:9d:f3:a8: 4c:0f:42:7f:89:c3:be:12:05:60:e7:37:fe:2b:36:5e:ae:20: 3a:18:c8:56:9b:23:1f:cb:72:cf:db:66:70:5e:58:f1:9e:c6: db:01:f9:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBXG6wSNdjA0iJ0FWQkKM0pk524wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNTEyMjQyMTU2NTZaFw0yNTEyMjcyMjA2NTZaMDMxMTAvBgNV BAMTKDY4NUMwNUFDQzkwMzlENkRGM0ZEQzVEMDQwNjVFRTExNkFBNUVBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7z42wZZA72ArAu3ECO1VxOPh4 xdEmHwaM/bE6U0ifBezxfaYquA2v90VzFlnTdl22JwI/MVT8scCov6kDX4T7TLNM R2+HfaT1My7rU1BFHsuTEPliPjdanlgprdBG8nwRtJcnD2eSTftUMmqutKNOSOcF 5SbJee/cLC5C4Bk4K/npScZl2ROLeY5NnBc83lhV2wjCNt9YWfcHJ1UMSF3T8wvX 1ba+6H7ljXC8fryGcrWA1DrqwvL0yrKkBdeBpvAUqe8UA9gRXfRBaabeDJsJSYr3 zJEMOD2tkLaRVVaUVMbij8JtHxt5F0EK6/SbQki050twHSzg38C5LnwHrGWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaFwFrMkDnW3z/cXQQGXuEWql6jgwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu3Vl6e0ngoEHvDaN1ltrSrsoq2iqQmk9MB IGg3Ewlcokliv9KLi9dFasUEZPTKSE+1r2r0YCtnezF8JDOJiUuoJjMK/1rwyM+q xvcKyvz5pJ+d7JVM9UweXygK/E7It2OLg0NGz3wlA8MaY6ZRdUusZ2x2HFmSKET2 JcfpFqk7AGT+PgVbwmceHfPQMKYCDrKlqzmEAz/xeNiSb0XizHbLQRRxLSFfj8xi 83m7QyLH7ad+IsjYDtyItrvs+NQEa8H8wc7bcmu1UHsNwr43495j2kYz153zqEwP Qn+Jw74SBWDnN/4rNl6uIDoYyFabIx/Lcs/bZnBeWPGextsB+Qw= -----END CERTIFICATE-----Generated at Thu Dec 25 11:17:43 2025 by rpki-client