This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: Lxr/JjzDy35wiwVWTU1ErueAdba6kzVw12MFfrievio= Subject key identifier: EA:C1:8C:64:2F:B4:F2:68:43:7E:25:EA:8C:A5:BB:22:58:88:4F:E2 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 67FB6A693E98659C454BA7582774349705CBD6E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 026B Signing time: Tue 23 Dec 2025 19:42:47 +0000 Manifest this update: Tue 23 Dec 2025 19:37:47 +0000 Manifest next update: Sat 27 Dec 2025 02:51:47 +0000 Files and hashes: 1: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=) 2: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: VFHHlL/fG0xnRMHoMgqrHUpXEdzrJEYbY3L4Yb6Ynkg=) 3: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: V41dsoCGv/A1SNxCT74tNpzG0O4+YBlV/SgqxtUPiBI=) 4: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: nboIz3jrBgP6JOmA3BVAd2UeOfnp74QAUC5BcPTJ2ug=) 5: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: P5qy6MSQkzBzIpWfwlqRGgttfjrknKyQRFiwh+AluKw=) 6: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: +MQm31NaRUHoSGWlfReRqQcdqvpxY3yAEwBMoG1sdvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fb:6a:69:3e:98:65:9c:45:4b:a7:58:27:74:34:97:05:cb:d6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Dec 23 19:37:47 2025 GMT Not After : Dec 27 02:51:47 2025 GMT Subject: CN=EAC18C642FB4F268437E25EA8CA5BB2258884FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:f0:45:dd:c1:02:35:63:c3:2e:48:27:a8: 37:72:aa:60:f0:e5:f3:74:72:85:d7:a0:9e:45:e9: 2f:93:64:8b:44:8e:0c:5f:f3:06:7b:f4:16:69:86: 5e:35:bc:22:5b:44:bb:9b:a5:24:57:d3:ca:f3:5d: 32:99:1d:67:06:ab:ad:12:ae:87:f5:87:a0:ba:51: f9:c4:83:72:fc:55:64:29:30:2a:de:d0:c6:43:5f: f6:7d:50:ab:10:53:9a:fd:da:99:24:df:28:3d:33: 87:35:ce:04:ab:c3:ff:79:78:45:d8:0a:d0:d9:38: cb:10:e8:0b:57:ad:62:a5:07:6b:b9:25:97:8a:a1: 32:b0:67:7b:9d:1e:2f:3d:b2:c7:4f:ad:39:74:8d: f7:ac:14:1f:13:92:b8:a7:6d:c9:b9:b2:d8:50:53: 75:be:bf:57:74:ba:8b:9d:72:9a:01:c7:60:44:0b: 85:4d:f0:64:a1:9f:34:8e:d6:e2:1d:e9:05:58:ce: 27:69:13:a9:6a:37:55:2a:8e:a3:21:c5:e2:44:9e: bf:0a:4d:3a:80:f0:f2:61:f9:29:5e:8c:4f:3c:87: 3b:84:55:48:01:bd:7a:eb:bc:da:3b:b0:1a:13:46: 45:ad:fa:76:94:a9:5b:b6:67:0d:9f:64:7d:b3:2f: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C1:8C:64:2F:B4:F2:68:43:7E:25:EA:8C:A5:BB:22:58:88:4F:E2 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:9f:a1:ff:fc:f1:71:54:2c:5d:86:79:8a:73:1e:25:0b:8f: a9:be:ee:fb:7f:42:17:75:02:e0:6b:c9:6e:1c:11:68:30:79: d4:3a:fe:76:2d:2c:60:28:12:66:63:de:67:de:f2:25:86:c4: c1:43:c6:55:77:a2:00:77:3f:95:ff:18:e4:2f:91:9b:25:27: 60:5c:79:4c:69:e9:53:b1:65:36:20:f4:10:3d:db:58:9f:e2: 97:db:8e:b9:a3:29:8d:14:2b:6c:2d:f5:7e:a9:41:c6:41:c0: 35:9d:b1:51:eb:5d:bb:4c:b7:c7:81:4d:0d:a1:d3:de:25:ce: f1:5f:63:34:ca:c3:ce:e1:73:0e:92:1d:ee:fe:f7:ea:35:04: a0:65:11:db:3d:50:ad:36:e6:4d:8f:34:6f:d6:7d:b2:5c:22: a7:34:72:1d:62:f6:ac:ab:b5:42:8e:99:05:a5:34:9a:31:e8: 73:f3:c0:51:ca:6e:0d:ee:02:19:0d:15:cf:98:72:2a:96:f1: ca:7f:2c:e9:2e:47:eb:67:dc:1c:8c:28:bb:14:a4:7a:7b:c4: 8d:10:cc:a8:d5:b5:c1:1f:f4:fc:55:02:19:42:a5:4a:02:c5: 7d:8e:66:56:3b:ec:0f:dc:48:0e:7b:2e:7c:23:3f:2e:bf:0e: 42:97:bd:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/tqaT6YZZxFS6dYJ3Q0lwXL1uEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNTEyMjMxOTM3NDdaFw0yNTEyMjcwMjUxNDdaMDMxMTAvBgNV BAMTKEVBQzE4QzY0MkZCNEYyNjg0MzdFMjVFQThDQTVCQjIyNTg4ODRGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2PBF3cECNWPDLkgnqDdyqmDw 5fN0coXXoJ5F6S+TZItEjgxf8wZ79BZphl41vCJbRLubpSRX08rzXTKZHWcGq60S rof1h6C6UfnEg3L8VWQpMCre0MZDX/Z9UKsQU5r92pkk3yg9M4c1zgSrw/95eEXY CtDZOMsQ6AtXrWKlB2u5JZeKoTKwZ3udHi89ssdPrTl0jfesFB8Tkrinbcm5sthQ U3W+v1d0uoudcpoBx2BEC4VN8GShnzSO1uId6QVYzidpE6lqN1UqjqMhxeJEnr8K TTqA8PJh+SlejE88hzuEVUgBvXrrvNo7sBoTRkWt+naUqVu2Zw2fZH2zL6ApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6sGMZC+08mhDfiXqjKW7IliIT+IwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCfof/88XFULF2GeYpzHiULj6m+7vt/Qhd1 AuBryW4cEWgwedQ6/nYtLGAoEmZj3mfe8iWGxMFDxlV3ogB3P5X/GOQvkZslJ2Bc eUxp6VOxZTYg9BA921if4pfbjrmjKY0UK2wt9X6pQcZBwDWdsVHrXbtMt8eBTQ2h 094lzvFfYzTKw87hcw6SHe7+9+o1BKBlEds9UK025k2PNG/WfbJcIqc0ch1i9qyr tUKOmQWlNJox6HPzwFHKbg3uAhkNFc+YciqW8cp/LOkuR+tn3ByMKLsUpHp7xI0Q zKjVtcEf9PxVAhlCpUoCxX2OZlY77A/cSA57LnwjPy6/DkKXvR0= -----END CERTIFICATE-----Generated at Wed Dec 24 23:55:18 2025 by rpki-client