This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft File: 41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json) Hash identifier: 7tIjoG+HjE5JpD3QsGXISBdXcGgR85hwVcQUvIQz+RI= Subject key identifier: 69:A4:63:7E:8D:16:BA:BD:0E:78:69:EE:A8:AE:1C:4D:C6:75:20:74 Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 Certificate issuer: /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Certificate serial: 6F93F072E321C6FD83216A24477CC810A7DA51DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft Manifest number: 022C Signing time: Tue 23 Dec 2025 20:04:04 +0000 Manifest this update: Tue 23 Dec 2025 19:59:04 +0000 Manifest next update: Sat 27 Dec 2025 02:41:04 +0000 Files and hashes: 1: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: S3FgE0+gcaLyx6nH2zsRG+Hi0BgVRkLf/ndGC4F7z/0=) 2: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: akXBEnQQE8w3x2BbSiQd/OcnNQpIYFKg+Nnxy4gyIo4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:93:f0:72:e3:21:c6:fd:83:21:6a:24:47:7c:c8:10:a7:da:51:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Validity Not Before: Dec 23 19:59:04 2025 GMT Not After : Dec 27 02:41:04 2025 GMT Subject: CN=69A4637E8D16BABD0E7869EEA8AE1C4DC6752074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:53:bf:2b:c4:0d:ca:de:20:47:d2:b1:be: de:7f:a7:5b:44:02:2c:8a:4e:f2:28:1a:a0:75:32: d1:62:ff:6c:81:08:9a:82:8b:23:44:3d:30:46:02: 39:44:6b:51:7a:59:33:43:83:9f:fc:0d:0d:73:8c: 54:5c:1b:19:f9:f3:46:b5:b0:eb:16:d7:d4:ce:7f: 89:1e:ff:79:4f:e9:6b:69:86:08:be:6e:df:cb:89: 17:71:e7:0a:23:81:d1:f9:9d:ce:6f:ad:8d:a5:44: a4:3b:e9:b1:3e:1a:2e:70:8b:1d:fc:91:ea:d8:1e: 96:71:3c:66:b6:cb:0f:55:45:b0:97:ad:e5:c7:42: 4c:09:00:17:e8:54:ab:e3:a8:f8:f8:8d:ea:80:04: 17:3c:3e:93:c1:18:e4:4b:82:cb:c3:8b:82:a2:3b: 13:c5:ea:05:4c:67:1e:b2:a1:75:e5:87:11:c8:14: 01:cf:f2:49:4c:f7:b5:17:db:23:2b:cf:91:b1:6c: a7:35:c3:fe:1e:3a:19:c0:46:f3:eb:3b:64:df:94: 9c:f5:45:b4:b5:4c:e9:3b:04:e3:b2:0d:35:9d:71: 67:73:dd:25:35:3a:32:fd:92:54:41:48:14:b8:04: 64:bd:69:db:fe:9f:39:eb:42:cb:7c:de:42:82:c3: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A4:63:7E:8D:16:BA:BD:0E:78:69:EE:A8:AE:1C:4D:C6:75:20:74 X509v3 Authority Key Identifier: keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1d:5e:2c:ef:1f:7a:3b:f6:47:dc:9f:25:50:93:41:69:6b: 84:63:da:2f:ce:e2:c4:f0:85:11:00:a3:70:c8:8b:e8:33:e9: b0:da:d1:93:1e:f9:89:d4:8f:12:1f:37:fd:19:b0:ad:b2:c0: bf:29:c5:63:76:46:04:f3:c1:5f:4e:55:c9:cd:08:ec:0e:d5: 47:f6:f7:73:1f:88:04:e6:55:93:91:75:6a:b9:f5:aa:13:f4: 8c:25:a2:7f:33:c4:8e:a7:4a:af:b4:fe:64:74:d0:fd:86:0b: d5:1a:0c:1b:61:c6:73:80:8d:83:79:83:bf:49:a7:37:bf:3d: af:13:57:67:a6:cd:f6:6d:27:f0:c3:84:72:ee:cf:ae:48:dd: 55:32:24:88:03:52:f2:6c:af:7e:76:ce:72:85:ab:23:99:1b: 4e:62:7c:b0:e0:5d:ae:c5:4a:9a:36:87:d0:ee:61:1b:ac:d5: 32:e3:2c:73:3c:af:d3:f5:2f:1a:d3:ac:58:70:47:42:25:93: 38:53:c1:a1:0e:30:81:32:21:9d:f6:26:37:2f:33:54:27:82: 61:08:a0:77:9d:3b:fb:73:6b:15:fa:c4:59:d4:34:b6:ef:91: 3f:95:dd:1f:c1:d6:c1:c2:fb:a5:33:bf:ec:d3:9d:20:c3:c2: ca:69:7b:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5PwcuMhxv2DIWokR3zIEKfaUd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRC NEI0RTc4NjAeFw0yNTEyMjMxOTU5MDRaFw0yNTEyMjcwMjQxMDRaMDMxMTAvBgNV BAMTKDY5QTQ2MzdFOEQxNkJBQkQwRTc4NjlFRUE4QUUxQzREQzY3NTIwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrp1O/K8QNyt4gR9Kxvt5/p1tE AiyKTvIoGqB1MtFi/2yBCJqCiyNEPTBGAjlEa1F6WTNDg5/8DQ1zjFRcGxn580a1 sOsW19TOf4ke/3lP6Wtphgi+bt/LiRdx5wojgdH5nc5vrY2lRKQ76bE+Gi5wix38 kerYHpZxPGa2yw9VRbCXreXHQkwJABfoVKvjqPj4jeqABBc8PpPBGORLgsvDi4Ki OxPF6gVMZx6yoXXlhxHIFAHP8klM97UX2yMrz5GxbKc1w/4eOhnARvPrO2TflJz1 RbS1TOk7BOOyDTWdcWdz3SU1OjL9klRBSBS4BGS9adv+nznrQst83kKCw72tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaaRjfo0Wur0OeGnuqK4cTcZ1IHQwHwYDVR0j BBgwFoAUQQcarwwOa9hId2gDNLT2BLS054YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTI3YjNlMS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMC80MTA3MUFBRjBD MEU2QkQ4NDg3NzY4MDMzNEI0RjYwNEI0QjRFNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRCNEI0 RTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UyN2IzZTEtZjYxMS00YWZlLTlh NDktNWZhNGZkNTU3NjUzLzAvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2 MDRCNEI0RTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8dXizvH3o79kfcnyVQk0Fpa4Rj2i/O4sTw hREAo3DIi+gz6bDa0ZMe+YnUjxIfN/0ZsK2ywL8pxWN2RgTzwV9OVcnNCOwO1Uf2 93MfiATmVZORdWq59aoT9Iwlon8zxI6nSq+0/mR00P2GC9UaDBthxnOAjYN5g79J pze/Pa8TV2emzfZtJ/DDhHLuz65I3VUyJIgDUvJsr352znKFqyOZG05ifLDgXa7F Spo2h9DuYRus1TLjLHM8r9P1LxrTrFhwR0IlkzhTwaEOMIEyIZ32JjcvM1QngmEI oHedO/tzaxX6xFnUNLbvkT+V3R/B1sHC+6Uzv+zTnSDDwsppe4s= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:13 2025 by rpki-client