This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: S1kLin1lhtDEOtJF/KXm1pxpvmVYsnjP+Gy+WvH00CU= Subject key identifier: ED:87:F7:74:99:39:EE:9A:33:F9:EB:E6:E9:10:78:04:DC:D1:4A:26 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 381B3D434D4D3A4AA32716B5CD300B5B0F57F1E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 0246 Signing time: Tue 23 Dec 2025 17:43:52 +0000 Manifest this update: Tue 23 Dec 2025 17:38:52 +0000 Manifest next update: Fri 26 Dec 2025 23:45:52 +0000 Files and hashes: 1: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) 2: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: 2Xr4AIsfNhgtAqbzTeKH+JCchbja/tW7YlEsKZPL3PA=) 3: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 23:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1b:3d:43:4d:4d:3a:4a:a3:27:16:b5:cd:30:0b:5b:0f:57:f1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Dec 23 17:38:52 2025 GMT Not After : Dec 26 23:45:52 2025 GMT Subject: CN=ED87F7749939EE9A33F9EBE6E9107804DCD14A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:fb:45:7f:39:d4:a1:30:05:6b:71:94:9e: aa:6b:76:cf:19:85:be:12:91:fd:5e:91:c5:1c:7c: ea:c3:86:d2:36:c7:64:f0:10:76:f0:96:1b:31:61: c4:89:1c:c3:4d:83:f5:5f:84:3a:ec:1f:21:37:7d: fb:2c:4a:2e:b3:ea:1f:c1:b8:9e:61:a5:88:94:06: 83:58:aa:8e:96:84:b7:1e:a8:4b:30:72:73:b4:8d: ce:eb:f6:5a:d6:ce:bf:3e:ed:53:5e:44:d1:f3:17: bc:45:11:3d:1f:b7:32:9f:16:44:c8:9e:21:e9:fc: 00:3e:da:e5:6a:19:0c:93:b0:3f:ff:e2:97:83:17: 3f:e9:9b:15:42:f8:89:0e:12:e8:4d:5d:e4:31:19: 40:81:3a:30:03:6b:6f:30:96:74:49:61:76:2d:bc: c3:65:9e:c6:27:df:ee:49:02:3b:3d:79:9b:aa:ef: e6:02:ab:a9:19:b8:5b:c6:9c:c9:f7:d7:33:56:da: 86:d0:e7:74:bb:72:2c:3f:e3:ad:61:6d:26:54:47: ec:7f:87:ad:f1:b3:0a:59:70:11:66:5f:62:9d:06: c3:21:df:22:96:42:11:76:eb:11:d3:c1:7d:b8:07: c0:ab:3f:5f:c0:42:ce:8d:ca:86:39:36:3a:46:6f: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:87:F7:74:99:39:EE:9A:33:F9:EB:E6:E9:10:78:04:DC:D1:4A:26 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:3f:23:86:dd:71:ee:a0:7f:e3:e9:ed:f6:b6:4e:26:76:30: 8d:27:ad:55:d8:5f:2d:4d:23:ae:71:e3:3d:fa:8f:29:08:84: b4:d1:dd:e6:11:d3:51:7b:b7:61:5c:3d:84:43:f8:ea:4f:52: 55:ce:b9:53:c4:07:70:7e:c1:22:63:dc:49:db:44:8e:10:be: 6a:f0:b3:e4:97:91:21:c8:b1:01:0f:2c:ec:09:db:0f:a5:eb: 06:7c:ed:11:b1:2c:19:bd:21:4f:46:8d:d5:1c:f3:83:31:d4: fb:f5:90:d9:6d:03:26:a6:35:78:fb:59:7c:fa:ad:f3:5b:53: 07:b5:46:37:ef:5f:c5:8a:e5:a3:6e:e0:6e:11:d8:82:7b:e8: 00:2d:ae:cf:90:33:2d:44:11:aa:fe:b5:27:bc:cb:9e:72:eb: ea:bc:f1:c9:4e:70:9e:4e:28:66:78:44:19:10:25:92:0d:3a: 7f:8b:00:89:ee:f8:82:eb:df:3f:d0:d8:df:80:60:6c:73:6b: 38:c3:41:7b:7c:0d:f7:23:1e:7b:85:24:54:93:ac:3b:6b:73: f7:4b:60:e9:4a:58:57:49:9c:59:1e:47:4d:16:d1:fc:62:12: 4b:d9:f2:7a:85:06:31:5f:b6:11:b8:b6:f7:d2:9d:09:7f:9a: 4f:e7:03:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBs9Q01NOkqjJxa1zTALWw9X8eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTEyMjMxNzM4NTJaFw0yNTEyMjYyMzQ1NTJaMDMxMTAvBgNV BAMTKEVEODdGNzc0OTkzOUVFOUEzM0Y5RUJFNkU5MTA3ODA0RENEMTRBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAftFfznUoTAFa3GUnqprds8Z hb4Skf1ekcUcfOrDhtI2x2TwEHbwlhsxYcSJHMNNg/VfhDrsHyE3ffssSi6z6h/B uJ5hpYiUBoNYqo6WhLceqEswcnO0jc7r9lrWzr8+7VNeRNHzF7xFET0ftzKfFkTI niHp/AA+2uVqGQyTsD//4peDFz/pmxVC+IkOEuhNXeQxGUCBOjADa28wlnRJYXYt vMNlnsYn3+5JAjs9eZuq7+YCq6kZuFvGnMn31zNW2obQ53S7ciw/461hbSZUR+x/ h63xswpZcBFmX2KdBsMh3yKWQhF26xHTwX24B8CrP1/AQs6NyoY5NjpGby89AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Yf3dJk57poz+evm6RB4BNzRSiYwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQ/I4bdce6gf+Pp7fa2TiZ2MI0nrVXYXy1N I65x4z36jykIhLTR3eYR01F7t2FcPYRD+OpPUlXOuVPEB3B+wSJj3EnbRI4Qvmrw s+SXkSHIsQEPLOwJ2w+l6wZ87RGxLBm9IU9GjdUc84Mx1Pv1kNltAyamNXj7WXz6 rfNbUwe1RjfvX8WK5aNu4G4R2IJ76AAtrs+QMy1EEar+tSe8y55y6+q88clOcJ5O KGZ4RBkQJZINOn+LAInu+ILr3z/Q2N+AYGxzazjDQXt8DfcjHnuFJFSTrDtrc/dL YOlKWFdJnFkeR00W0fxiEkvZ8nqFBjFfthG4tvfSnQl/mk/nAzU= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:55 2025 by rpki-client