This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft File: 41820333252DF92B1DBA238F558CC8D822C768EF.mft (raw, json) Hash identifier: g0J0743p+Yfhr/dM6ArRfsEg0uV56or7Sg56z/e2jtA= Subject key identifier: DF:AB:6A:3C:CF:71:F9:F6:9A:7A:74:AE:44:73:40:D1:DE:6D:E9:7C Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF Certificate issuer: /CN=41820333252DF92B1DBA238F558CC8D822C768EF Certificate serial: 366B69ED07EE2C7F9CF44617A9C2626740CE8222 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft Manifest number: 01D1 Signing time: Tue 23 Dec 2025 12:31:48 +0000 Manifest this update: Tue 23 Dec 2025 12:26:48 +0000 Manifest next update: Fri 26 Dec 2025 14:39:48 +0000 Files and hashes: 1: 41820333252DF92B1DBA238F558CC8D822C768EF.crl (hash: vAGtB4hF1dlqKVFehPBzq803R5qH5L24fKmEHNb5WS4=) 2: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: uQsxGbefiEsVtpCcyhbMnpmwezO+DzoY1mF96tzo5Pg=) 3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: RVo6qspo0NsN9BxZrHPSAeKSfxIe7qLdXa5VG0+wvkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:6b:69:ed:07:ee:2c:7f:9c:f4:46:17:a9:c2:62:67:40:ce:82:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF Validity Not Before: Dec 23 12:26:48 2025 GMT Not After : Dec 26 14:39:48 2025 GMT Subject: CN=DFAB6A3CCF71F9F69A7A74AE447340D1DE6DE97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:7e:bd:67:bc:50:52:d6:aa:e4:14:4b:61: ec:1f:27:20:00:53:03:bc:90:dd:f6:c0:8d:76:98: 03:d6:43:75:26:7e:1d:d7:33:60:b7:fd:3e:4a:ef: e6:96:46:a7:0c:47:ee:6f:bd:54:eb:c6:f9:7b:f3: c5:06:4e:6f:03:74:40:0f:ba:f8:c0:ea:2a:6a:ec: 28:89:a7:68:4c:4b:88:be:6e:61:77:2b:12:ff:ce: 96:22:1c:11:36:92:91:c9:38:42:60:af:40:f3:59: 8f:55:66:64:a0:08:51:6c:78:fe:f8:e2:ba:af:f9: e5:f9:33:0c:e9:30:56:a5:c4:02:f3:2f:e3:4a:1b: 2d:22:71:4e:a1:d4:95:43:17:89:ef:5d:ab:d6:80: 9b:12:05:b0:4a:d2:3b:13:e4:24:61:c9:19:47:e4: ab:9e:ce:11:8b:e9:1a:05:2c:ac:77:39:c8:22:3b: d2:a7:a9:e2:1f:c9:3c:43:f2:5d:67:d2:6f:1e:36: 94:cd:89:32:06:98:31:16:af:db:da:59:d4:b0:6b: c5:31:85:c8:55:ec:66:7a:c4:75:60:4a:7e:af:45: 2c:17:48:45:26:4e:fc:82:ae:37:2d:88:6a:21:45: 2d:d1:6b:23:bf:ca:ff:6c:75:b7:a1:73:73:5c:aa: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AB:6A:3C:CF:71:F9:F6:9A:7A:74:AE:44:73:40:D1:DE:6D:E9:7C X509v3 Authority Key Identifier: keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ba:98:64:c3:20:c9:7e:71:24:44:f7:d4:95:78:55:cc:b4: 1d:1e:20:6d:f6:43:39:40:b5:15:68:ed:74:9a:c3:89:32:c4: b2:76:8d:19:fa:6c:d2:ac:0f:21:b9:2a:62:3c:c4:77:8d:b8: 3e:cc:a8:47:4a:74:05:c7:9c:c6:77:60:a5:6c:0f:7b:1b:c0: e7:2c:b3:35:48:07:d1:df:e8:d8:62:89:4d:6f:c0:91:e7:9c: 6c:49:71:f5:1f:fc:a7:08:d8:50:dd:49:2c:4d:7b:57:1e:94: 57:3f:5f:42:ff:2e:2c:01:e2:58:4d:d8:c1:26:da:21:2d:f5: 34:02:ac:4f:d4:46:e0:a4:6d:e5:65:17:be:f2:26:82:af:fe: 21:f1:13:fa:b0:2f:16:b3:af:3f:37:2e:f9:7e:e1:49:b0:b7: bf:30:7e:f1:a3:46:f7:dd:24:49:6d:71:71:f5:fa:b9:01:a5: fd:81:51:57:1c:4c:e0:4c:42:d9:39:07:03:9a:19:02:1c:cb: aa:51:cd:59:c9:0f:d0:56:06:d1:9e:49:6c:0d:b2:46:7c:43: f7:c3:cc:0d:d4:c4:f3:99:47:ec:08:23:57:56:4e:83:33:5b: 68:2f:fb:a9:70:1d:2d:03:d1:be:bc:20:94:67:ab:7c:13:8a: a8:22:72:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmtp7QfuLH+c9EYXqcJiZ0DOgiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgy MkM3NjhFRjAeFw0yNTEyMjMxMjI2NDhaFw0yNTEyMjYxNDM5NDhaMDMxMTAvBgNV BAMTKERGQUI2QTNDQ0Y3MUY5RjY5QTdBNzRBRTQ0NzM0MEQxREU2REU5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28369Z7xQUtaq5BRLYewfJyAA UwO8kN32wI12mAPWQ3Umfh3XM2C3/T5K7+aWRqcMR+5vvVTrxvl788UGTm8DdEAP uvjA6ipq7CiJp2hMS4i+bmF3KxL/zpYiHBE2kpHJOEJgr0DzWY9VZmSgCFFseP74 4rqv+eX5MwzpMFalxALzL+NKGy0icU6h1JVDF4nvXavWgJsSBbBK0jsT5CRhyRlH 5KuezhGL6RoFLKx3OcgiO9KnqeIfyTxD8l1n0m8eNpTNiTIGmDEWr9vaWdSwa8Ux hchV7GZ6xHVgSn6vRSwXSEUmTvyCrjctiGohRS3RayO/yv9sdbehc3Ncqj41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU36tqPM9x+faaenSuRHNA0d5t6XwwHwYDVR0j BBgwFoAUQYIDMyUt+SsduiOPVYzI2CLHaO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NTk3MWFlOS01Y2RkLTRkNDEtYjYyYS01YzI4NGFhODA5OGUvMC80MTgyMDMzMzI1 MkRGOTJCMURCQTIzOEY1NThDQzhEODIyQzc2OEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgyMkM3 NjhFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4 RDgyMkM3NjhFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHW6mGTDIMl+cSRE99SVeFXMtB0eIG32QzlA tRVo7XSaw4kyxLJ2jRn6bNKsDyG5KmI8xHeNuD7MqEdKdAXHnMZ3YKVsD3sbwOcs szVIB9Hf6NhiiU1vwJHnnGxJcfUf/KcI2FDdSSxNe1celFc/X0L/LiwB4lhN2MEm 2iEt9TQCrE/URuCkbeVlF77yJoKv/iHxE/qwLxazrz83Lvl+4Umwt78wfvGjRvfd JEltcXH1+rkBpf2BUVccTOBMQtk5BwOaGQIcy6pRzVnJD9BWBtGeSWwNskZ8Q/fD zA3UxPOZR+wII1dWToMzW2gv+6lwHS0D0b68IJRnq3wTiqgicr4= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:47 2025 by rpki-client