This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: JxE+gDdmzh4rVkKlfNJwpQDP2Iv98a/ufRIT9UTRyec= Subject key identifier: 9A:85:7B:64:66:53:CE:AE:01:06:6A:85:D3:1A:D9:BB:35:C7:80:16 Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 4CECC102567A3906E393BD17C8CA6815C613CCEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: FD Signing time: Thu 18 Dec 2025 11:02:09 +0000 Manifest this update: Thu 18 Dec 2025 10:57:09 +0000 Manifest next update: Sun 21 Dec 2025 19:23:09 +0000 Files and hashes: 1: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: ASlkqjVKFozW85UVfysI52aAIGYvc3rL5ZhyRN7+iT4=) 2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: VPuK+1+6ePV1CKusC5qXhYaOQr6/W2sAl7gu8K+R3ug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ec:c1:02:56:7a:39:06:e3:93:bd:17:c8:ca:68:15:c6:13:cc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Dec 18 10:57:09 2025 GMT Not After : Dec 21 19:23:09 2025 GMT Subject: CN=9A857B646653CEAE01066A85D31AD9BB35C78016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:2c:82:05:ab:e0:20:01:ff:8b:ec:e5:81: ce:0d:c2:77:d1:ec:fe:1f:7c:10:3f:95:15:88:55: 11:7e:63:64:ce:6a:67:89:b2:9a:aa:3e:c1:9c:61: 0f:f4:b8:89:ec:4c:b0:83:4b:61:e8:b8:a0:77:64: b2:21:bc:f3:01:71:de:76:1c:f8:77:3a:bd:5f:b3: 4c:da:fc:8b:67:23:a7:58:5b:fd:0a:4c:fc:33:36: 39:42:87:65:0a:1e:f9:a5:2e:9b:1f:b9:90:65:78: 35:c6:59:57:21:00:e9:17:4f:2f:df:e8:14:4f:fc: 0e:16:2f:3a:24:24:5e:2b:ec:6a:fe:99:dd:a6:11: 4d:aa:6a:93:0c:d7:03:54:05:b3:b8:58:ab:f0:34: a2:1d:35:1f:da:7b:4d:d0:98:4b:21:ff:45:b6:2b: ec:04:c0:5e:fe:3f:46:83:ae:24:7c:c8:92:0b:da: a0:c8:8c:77:ca:c8:c3:9a:c4:66:db:ef:7c:a6:e0: 3a:ed:66:cd:25:e2:23:da:a5:65:27:50:d8:9f:b4: 95:8d:69:5e:13:86:58:39:ae:39:60:2f:49:f8:29: 7c:ef:b7:db:79:21:d4:ca:b0:59:d1:8b:ae:21:49: fd:f7:c7:80:67:20:19:e8:ef:f1:4c:83:88:ea:82: ea:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:85:7B:64:66:53:CE:AE:01:06:6A:85:D3:1A:D9:BB:35:C7:80:16 X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1b:f2:a6:4c:d3:55:13:67:40:9f:97:e0:16:6c:5e:93:8e: 1b:98:da:cd:70:55:bc:1a:46:91:c5:ad:69:fa:e1:3f:99:bd: 58:fb:b4:b0:56:19:e1:fa:f3:dc:2f:56:e2:fb:fa:26:05:d5: 3e:28:a0:17:41:c5:1b:57:0f:72:6f:8f:d4:16:33:60:f4:6d: 47:7a:82:46:e0:df:51:df:9f:04:8b:49:9e:a9:bc:6e:bb:36: 10:f4:bf:60:14:29:11:ae:5f:7f:8f:17:34:b5:43:ed:93:9c: 0f:de:92:31:6f:e4:cb:10:53:49:ee:39:54:39:db:6c:7d:80: b4:a1:23:5e:8a:75:d0:d7:88:0c:c0:20:1e:04:c3:98:9f:2e: b3:5a:0b:7f:39:3a:89:22:88:14:df:f2:fc:ba:80:e7:a1:12: 96:f3:9a:e9:42:4d:53:3f:d9:94:c1:96:35:8d:ab:f3:9c:21: 8f:f9:d7:3c:ba:b3:15:c5:c7:c9:db:39:c6:f5:a3:cb:9a:65: 74:4e:44:25:97:b4:25:9e:d0:2d:80:2d:df:d7:b6:7d:98:74: 34:2a:46:cc:eb:7f:cb:e9:82:a4:ac:a0:14:17:1f:e0:b8:56: e9:01:b1:e0:89:48:42:3b:d7:13:72:e5:b3:8c:6e:c0:2b:84: 8f:71:5a:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTOzBAlZ6OQbjk70XyMpoFcYTzOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNTEyMTgxMDU3MDlaFw0yNTEyMjExOTIzMDlaMDMxMTAvBgNV BAMTKDlBODU3QjY0NjY1M0NFQUUwMTA2NkE4NUQzMUFEOUJCMzVDNzgwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgdSyCBavgIAH/i+zlgc4NwnfR 7P4ffBA/lRWIVRF+Y2TOameJspqqPsGcYQ/0uInsTLCDS2HouKB3ZLIhvPMBcd52 HPh3Or1fs0za/ItnI6dYW/0KTPwzNjlCh2UKHvmlLpsfuZBleDXGWVchAOkXTy/f 6BRP/A4WLzokJF4r7Gr+md2mEU2qapMM1wNUBbO4WKvwNKIdNR/ae03QmEsh/0W2 K+wEwF7+P0aDriR8yJIL2qDIjHfKyMOaxGbb73ym4DrtZs0l4iPapWUnUNiftJWN aV4Thlg5rjlgL0n4KXzvt9t5IdTKsFnRi64hSf33x4BnIBno7/FMg4jqgurrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmoV7ZGZTzq4BBmqF0xrZuzXHgBYwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsb8qZM01UTZ0Cfl+AWbF6TjhuY2s1wVbwa RpHFrWn64T+ZvVj7tLBWGeH689wvVuL7+iYF1T4ooBdBxRtXD3Jvj9QWM2D0bUd6 gkbg31HfnwSLSZ6pvG67NhD0v2AUKRGuX3+PFzS1Q+2TnA/ekjFv5MsQU0nuOVQ5 22x9gLShI16KddDXiAzAIB4Ew5ifLrNaC385OokiiBTf8vy6gOehEpbzmulCTVM/ 2ZTBljWNq/OcIY/51zy6sxXFx8nbOcb1o8uaZXRORCWXtCWe0C2ALd/Xtn2YdDQq Rszrf8vpgqSsoBQXH+C4VukBseCJSEI71xNy5bOMbsArhI9xWls= -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:08 2025 by rpki-client