This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json)
Hash identifier: rjWI0zRTevAui2a7o/OP82yhhtoscNF05fyq/iMNA8M=
Subject key identifier: CB:AA:F0:BB:89:35:3D:22:36:3A:20:0D:3C:3D:A8:9C:C1:03:46:C8
Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D
Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D
Certificate serial: 4BA6600E043D90D130F94E0D784124E75137AF88
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
Manifest number: DD
Signing time: Fri 19 Dec 2025 13:41:15 +0000
Manifest this update: Fri 19 Dec 2025 13:36:15 +0000
Manifest next update: Tue 23 Dec 2025 00:48:15 +0000
Files and hashes: 1: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: jF9/a6Jp1M+je5Rsp2up/n4DNy0dv/N5PQgKJQwfemc=)
2: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: kOv4Z3nuJAKtqDsZP9NIrpn53rHwxrTc8JHBwo5v8e8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl
rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 00:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a6:60:0e:04:3d:90:d1:30:f9:4e:0d:78:41:24:e7:51:37:af:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D
Validity
Not Before: Dec 19 13:36:15 2025 GMT
Not After : Dec 23 00:48:15 2025 GMT
Subject: CN=CBAAF0BB89353D22363A200D3C3DA89CC10346C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:c8:47:29:e1:43:84:52:e4:6f:96:06:5d:
8e:0e:e4:76:84:7d:9c:46:17:c0:64:53:1a:a6:72:
86:10:aa:10:f6:7f:4e:f8:f5:69:62:41:02:a3:02:
2d:6d:72:4d:6c:4e:ee:8c:b6:32:2a:d9:f3:16:9e:
92:2b:f8:0a:ab:e1:2d:d7:48:d2:fd:8e:30:61:76:
e2:8c:b6:e8:87:5d:a9:a4:c6:e5:cf:c0:f3:9e:b6:
37:7f:b5:51:3a:bf:0d:3b:c8:a0:00:c2:be:d0:e9:
ff:a2:ad:26:2b:5a:32:a4:e0:95:f8:de:10:c0:48:
05:f6:e9:6e:b2:e6:7d:94:56:a2:60:80:bb:5e:72:
ff:85:a0:27:78:42:25:25:73:9a:0e:c7:6d:c4:1d:
9f:c0:d9:a3:37:53:b0:cf:14:4c:bc:57:bc:51:a2:
b6:9a:d9:f6:a5:27:c9:3c:87:92:49:33:f5:07:03:
2a:4c:4b:ab:0f:d9:57:62:4a:3e:6b:26:d1:f9:ea:
0a:1b:1a:23:41:f5:45:cd:59:45:a9:aa:3f:9e:f2:
03:98:1e:98:43:35:83:31:90:6b:5e:2f:98:e5:21:
a6:03:63:38:1c:a8:b6:1d:cf:6a:ee:17:da:10:47:
f1:8b:3c:60:0e:2a:64:77:10:20:24:ce:31:d5:e6:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AA:F0:BB:89:35:3D:22:36:3A:20:0D:3C:3D:A8:9C:C1:03:46:C8
X509v3 Authority Key Identifier:
keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:97:b3:3f:90:11:e0:17:70:7d:89:18:2d:de:b5:cd:c5:6a:
7c:73:ae:70:b5:05:e8:60:2e:f7:19:b7:db:65:ab:08:13:d5:
e3:83:dc:e2:d9:c4:0c:9e:d8:45:26:90:e7:9f:e5:4a:7a:7e:
63:9f:f9:89:b2:1f:75:ff:33:d8:c3:4f:4b:77:34:fe:25:07:
e6:2d:8b:8f:0e:ce:1e:42:ac:30:a4:0b:1b:25:eb:68:63:a7:
42:64:ba:8a:74:92:5e:7a:34:b0:82:1a:7f:30:3d:d9:84:4a:
c2:e0:4d:fe:80:b2:f8:fb:5a:2d:82:7f:21:0d:24:9b:62:22:
f3:0e:60:bd:04:45:c9:e7:28:be:94:03:42:fb:4c:22:67:1d:
3a:92:e4:e1:0c:72:c0:25:6d:69:b6:30:fc:0d:79:e7:b9:89:
f6:d6:60:74:04:60:58:93:8a:d2:33:ab:c4:6f:a2:48:0f:b5:
ed:30:c5:02:c6:5d:23:b4:38:57:5c:26:2c:45:b4:bd:eb:b1:
ee:42:36:92:e8:9f:06:7c:9e:c8:70:75:55:92:8c:ff:7c:70:
5a:2c:a9:26:45:90:82:2d:0e:d1:90:d5:30:82:13:97:60:0e:
4c:df:62:be:4f:d7:bb:ac:52:15:04:5a:e7:2b:8a:c7:b5:11:
f9:25:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:48:08 2025 by rpki-client