This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft File: 411479424B4016269EB9E266CD48905F63DC9F0B.mft (raw, json) Hash identifier: sIQWMX3Hs+VjI2q3vLaONZP30uSxTa/TRWHNYbelL0k= Subject key identifier: 57:62:C2:9D:5F:CF:2A:0A:CA:55:AE:EC:61:6F:7C:E4:26:E5:B3:56 Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B Certificate issuer: /CN=411479424B4016269EB9E266CD48905F63DC9F0B Certificate serial: 6CCB567C10EF8BCEC80131FA926B900764AA7252 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft Manifest number: 02DC Signing time: Wed 24 Dec 2025 15:44:38 +0000 Manifest this update: Wed 24 Dec 2025 15:39:38 +0000 Manifest next update: Sat 27 Dec 2025 16:48:38 +0000 Files and hashes: 1: 3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa (hash: vr+BxfkmoPeng8pSy2LdmDpMjQR/gXY9KvmthDLXE0s=) 2: 411479424B4016269EB9E266CD48905F63DC9F0B.crl (hash: Bm0wnX0I3mpfI9jcVy6whYU5EFN5cklGLl8dON6luhU=) 3: 3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa (hash: bLbFLRF4nCoMUEy8txljQ1KpQ4biSpv3zVxmLsxYZs4=) 4: 3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (hash: OK/qKcmCWZLbUU0gqTVd4CzrA30sPM3AN1RD82duRis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:cb:56:7c:10:ef:8b:ce:c8:01:31:fa:92:6b:90:07:64:aa:72:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B Validity Not Before: Dec 24 15:39:38 2025 GMT Not After : Dec 27 16:48:38 2025 GMT Subject: CN=5762C29D5FCF2A0ACA55AEEC616F7CE426E5B356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:0a:42:97:9e:a9:3e:44:9d:06:02:11:01: 2f:27:f5:5d:5e:f0:29:49:4e:0a:87:9a:da:99:79: 58:8c:b6:5b:83:76:5c:d6:87:10:b3:a5:9f:3d:62: ac:c9:7c:94:ff:3b:2b:5f:5f:0f:b2:1c:0a:44:f4: e9:e5:f9:9f:6a:8f:f3:a3:d8:80:77:86:fe:15:c4: cb:d2:1f:16:ff:fa:a9:a6:67:8d:c7:dd:fe:72:74: 35:06:55:64:d5:f0:35:46:40:39:b2:c6:44:cd:99: 78:44:02:d2:28:e5:dc:3a:7d:96:ab:11:d8:79:90: 8d:36:3b:5c:88:16:a7:8d:26:57:69:63:30:cc:51: ef:b3:5e:6c:0c:36:df:f7:1e:03:12:4a:4a:8f:da: 05:16:85:0c:54:1d:84:5d:a4:5f:b4:7f:30:a9:26: c5:6d:ee:d6:d3:f8:0f:32:66:f5:60:29:58:8c:2f: 75:1f:1e:cd:ac:2b:5b:f0:51:69:d5:77:8a:9d:d9: e8:3d:9f:e1:b2:d5:b8:dd:e6:4a:20:41:ab:bf:c9: af:0c:3f:ad:91:ac:33:6d:c0:e3:6a:9d:86:1f:80: fd:b2:b3:16:90:f8:b1:a3:ef:28:21:b7:d4:be:62: 49:73:e2:26:a8:7d:e2:69:60:cc:c2:47:62:4e:ca: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:62:C2:9D:5F:CF:2A:0A:CA:55:AE:EC:61:6F:7C:E4:26:E5:B3:56 X509v3 Authority Key Identifier: keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:8f:19:a8:b7:db:8e:58:64:2b:3a:60:62:ae:e9:ad:f9:3b: fe:63:1e:39:a8:ec:29:b2:3b:6c:0f:47:b4:8f:c8:30:28:db: 58:09:87:8a:4d:3f:b1:7f:42:2c:be:05:db:4c:99:05:7a:00: 02:f2:dc:75:73:34:e8:39:67:c4:2b:84:4b:bc:16:55:cc:1a: a7:ac:53:1f:b2:cd:3b:e3:d8:39:8c:3f:eb:d9:1d:e0:59:df: 53:a3:a0:d4:3c:1f:76:4c:a3:3a:24:3e:a1:37:60:88:5d:f5: 39:01:05:b6:ec:59:f4:48:3f:20:7d:03:a7:74:c8:3b:d3:65: 8c:c1:aa:83:85:88:d9:ed:ae:ee:07:ef:2c:73:55:dc:19:b1: 8d:8c:71:62:c4:5e:d4:2f:1f:b8:e4:2f:68:52:02:7e:f2:04: 65:84:3c:e8:99:38:70:30:41:c7:4c:8b:d6:79:ac:9e:00:33: f1:53:e2:5d:b9:e5:2c:78:28:1d:a6:42:05:bf:d4:19:2f:b3: 51:16:f3:16:8f:c2:56:aa:7f:45:c3:9b:d0:72:93:12:50:9e: 42:65:15:8d:2b:ee:5d:d1:34:ba:52:44:02:d4:2c:67:0c:5d: e9:f6:e0:82:9c:c5:0d:21:58:5f:b4:8d:ea:e3:2c:19:b8:95: c4:c2:b5:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMtWfBDvi87IATH6kmuQB2SqclIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkwNUY2 M0RDOUYwQjAeFw0yNTEyMjQxNTM5MzhaFw0yNTEyMjcxNjQ4MzhaMDMxMTAvBgNV BAMTKDU3NjJDMjlENUZDRjJBMEFDQTU1QUVFQzYxNkY3Q0U0MjZFNUIzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpQpCl56pPkSdBgIRAS8n9V1e 8ClJTgqHmtqZeViMtluDdlzWhxCzpZ89YqzJfJT/OytfXw+yHApE9Onl+Z9qj/Oj 2IB3hv4VxMvSHxb/+qmmZ43H3f5ydDUGVWTV8DVGQDmyxkTNmXhEAtIo5dw6fZar Edh5kI02O1yIFqeNJldpYzDMUe+zXmwMNt/3HgMSSkqP2gUWhQxUHYRdpF+0fzCp JsVt7tbT+A8yZvVgKViML3UfHs2sK1vwUWnVd4qd2eg9n+Gy1bjd5kogQau/ya8M P62RrDNtwONqnYYfgP2ysxaQ+LGj7yght9S+Yklz4iaofeJpYMzCR2JOyrINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2LCnV/PKgrKVa7sYW985Cbls1YwHwYDVR0j BBgwFoAUQRR5QktAFiaeueJmzUiQX2PcnwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MTM3MzllMS1iNWRiLTQ3MzQtODM4YS1iMGI1ODBiZWI5ZjMvMC80MTE0Nzk0MjRC NDAxNjI2OUVCOUUyNjZDRDQ4OTA1RjYzREM5RjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkwNUY2M0RD OUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzEzNzM5ZTEtYjVkYi00NzM0LTgz OGEtYjBiNTgwYmViOWYzLzAvNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkw NUY2M0RDOUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWPGai3245YZCs6YGKu6a35O/5jHjmo7Cmy O2wPR7SPyDAo21gJh4pNP7F/Qiy+BdtMmQV6AALy3HVzNOg5Z8QrhEu8FlXMGqes Ux+yzTvj2DmMP+vZHeBZ31OjoNQ8H3ZMozokPqE3YIhd9TkBBbbsWfRIPyB9A6d0 yDvTZYzBqoOFiNntru4H7yxzVdwZsY2McWLEXtQvH7jkL2hSAn7yBGWEPOiZOHAw QcdMi9Z5rJ4AM/FT4l255Sx4KB2mQgW/1Bkvs1EW8xaPwlaqf0XDm9BykxJQnkJl FY0r7l3RNLpSRALULGcMXen24IKcxQ0hWF+0jerjLBm4lcTCtUs= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:20 2025 by rpki-client