This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json) Hash identifier: YeweUVqWKpkRb6vXBT5rljYPf2vGecjtXPvJ8XwVtNk= Subject key identifier: C3:E5:49:34:8E:B9:4E:CE:B2:D6:85:B9:C2:D6:49:0C:87:03:5A:5E Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Certificate serial: 5A85BD1CD5B4F9FFC3D17F7FB3797DC55772AB51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft Manifest number: 0536 Signing time: Fri 26 Dec 2025 23:32:29 +0000 Manifest this update: Fri 26 Dec 2025 23:27:29 +0000 Manifest next update: Tue 30 Dec 2025 00:59:29 +0000 Files and hashes: 1: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: +uorGat+qb7Zvwdm7c8ZSbAuNba9xt+fg7h3Q9c4bRs=) 2: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: 4Nmw1fLmOShLUzPpmEzdZOQ+qEZBBauKqV3+7mgcSNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:85:bd:1c:d5:b4:f9:ff:c3:d1:7f:7f:b3:79:7d:c5:57:72:ab:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Validity Not Before: Dec 26 23:27:29 2025 GMT Not After : Dec 30 00:59:29 2025 GMT Subject: CN=C3E549348EB94ECEB2D685B9C2D6490C87035A5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:04:fc:3e:da:2c:54:76:ba:1e:9d:48:33: b3:2f:1e:22:68:e8:e0:54:e8:40:31:2b:f6:28:e5: 70:d9:b4:c2:6b:ce:85:96:76:ee:48:ac:44:a8:b9: 44:f8:79:a7:04:d1:41:e8:3c:b3:45:6c:65:46:17: b7:45:4b:cf:c8:4b:d8:d3:11:3f:2e:4f:ab:3b:4c: 79:b9:64:fd:4b:e8:bc:5a:f3:f7:7a:96:5f:7b:f6: 52:ae:16:dc:91:f2:dd:95:35:c9:de:53:a9:89:84: fa:46:13:02:11:ce:75:bb:c5:d4:e2:fd:67:3c:fd: 9b:df:8f:3f:e5:97:64:f4:6e:17:f5:62:10:73:7e: f6:60:2d:54:68:d7:91:27:a8:08:74:29:65:b2:61: 5c:94:1c:fe:b5:c3:bf:3f:9d:b5:a8:ba:43:14:5e: a3:24:8d:e4:6d:85:ba:08:e2:66:60:91:45:03:e7: fd:10:01:6c:ba:b9:36:06:ef:30:b7:10:fd:25:b2: 25:17:33:6e:fa:05:c1:1f:aa:cd:bf:c9:ac:2c:57: b6:15:1a:d4:e8:46:dd:2a:1d:0c:e6:47:d5:fb:dc: d9:9b:c8:7c:37:af:f1:4d:58:86:df:33:38:cb:b2: 52:74:a5:06:9e:2f:d3:a0:4e:cc:95:4b:96:4b:89: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E5:49:34:8E:B9:4E:CE:B2:D6:85:B9:C2:D6:49:0C:87:03:5A:5E X509v3 Authority Key Identifier: keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:27:82:6a:95:12:1a:b5:06:5e:bd:8c:89:a9:4b:80:c9:90: d6:7b:20:b1:11:a8:3f:62:22:c2:30:09:b2:33:19:28:46:4c: 6f:d2:77:e4:11:09:0e:63:8e:bf:19:6d:e3:b7:59:4c:ee:18: e8:d4:4f:f8:bc:32:19:11:e7:33:e1:cf:03:9f:93:8b:eb:91: 39:9e:c3:99:08:71:0f:98:48:6e:ac:44:25:9d:de:a6:2a:5d: 61:e9:d6:d2:f7:40:59:84:5f:8c:e6:21:0a:b1:1c:f6:df:f5: 2a:dd:98:da:eb:40:4d:8c:10:15:1f:1c:65:bb:3d:d7:17:cf: 43:3a:5e:49:49:d9:71:22:34:a7:05:77:0f:b9:6f:cf:a9:af: b8:22:db:d7:ea:cc:cf:60:a6:59:f5:af:df:35:08:42:32:f5: 3f:a0:e7:2a:e1:10:43:08:fe:28:5d:c2:2c:f6:8b:9e:46:43: fc:e8:bf:38:82:29:70:35:c4:a7:6c:b2:b8:c4:f6:7b:94:70: bb:46:98:d7:a2:8b:10:0e:c1:95:d8:a7:8e:80:c7:be:8a:fc: 7b:74:20:bc:99:0d:72:9d:26:1f:80:95:15:c0:3c:38:e4:97: ed:ac:08:64:89:b0:d9:4b:68:2b:66:23:5f:3e:63:28:a1:22: 9c:d1:ee:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWoW9HNW0+f/D0X9/s3l9xVdyq1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAy QTA5NjYyMDAeFw0yNTEyMjYyMzI3MjlaFw0yNTEyMzAwMDU5MjlaMDMxMTAvBgNV BAMTKEMzRTU0OTM0OEVCOTRFQ0VCMkQ2ODVCOUMyRDY0OTBDODcwMzVBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJwT8PtosVHa6Hp1IM7MvHiJo 6OBU6EAxK/Yo5XDZtMJrzoWWdu5IrESouUT4eacE0UHoPLNFbGVGF7dFS8/IS9jT ET8uT6s7THm5ZP1L6Lxa8/d6ll979lKuFtyR8t2VNcneU6mJhPpGEwIRznW7xdTi /Wc8/Zvfjz/ll2T0bhf1YhBzfvZgLVRo15EnqAh0KWWyYVyUHP61w78/nbWoukMU XqMkjeRthboI4mZgkUUD5/0QAWy6uTYG7zC3EP0lsiUXM276BcEfqs2/yawsV7YV GtToRt0qHQzmR9X73NmbyHw3r/FNWIbfMzjLslJ0pQaeL9OgTsyVS5ZLiXy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+VJNI65Ts6y1oW5wtZJDIcDWl4wHwYDVR0j BBgwFoAUQav3ktFBIqqmfkK9Quu44CoJZiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTQ1ZWJhYi1lYzE2LTQ1ODktYTlhNi04YTM2NjFkNDNlM2UvMC80MUFCRjc5MkQx NDEyMkFBQTY3RTQyQkQ0MkVCQjhFMDJBMDk2NjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAyQTA5 NjYyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5 YTYtOGEzNjYxZDQzZTNlLzAvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4 RTAyQTA5NjYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcngmqVEhq1Bl69jImpS4DJkNZ7ILERqD9i IsIwCbIzGShGTG/Sd+QRCQ5jjr8ZbeO3WUzuGOjUT/i8MhkR5zPhzwOfk4vrkTme w5kIcQ+YSG6sRCWd3qYqXWHp1tL3QFmEX4zmIQqxHPbf9SrdmNrrQE2MEBUfHGW7 PdcXz0M6XklJ2XEiNKcFdw+5b8+pr7gi29fqzM9gpln1r981CEIy9T+g5yrhEEMI /ihdwiz2i55GQ/zovziCKXA1xKdssrjE9nuUcLtGmNeiixAOwZXYp46Ax76K/Ht0 ILyZDXKdJh+AlRXAPDjkl+2sCGSJsNlLaCtmI18+YyihIpzR7jc= -----END CERTIFICATE-----Generated at Sat Dec 27 05:38:12 2025 by rpki-client