This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: U1KgcyAESCPiNIIoD55NIwcu7lqK3H7No3phXYh8kaU= Subject key identifier: 48:66:56:A5:13:CF:25:1B:68:AC:A3:52:EA:90:33:C1:4D:93:3C:0A Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 4C4244D48C50EB1D755674CF706D5294F7213664 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 04BF Signing time: Tue 16 Dec 2025 19:42:50 +0000 Manifest this update: Tue 16 Dec 2025 19:37:50 +0000 Manifest next update: Sat 20 Dec 2025 05:18:50 +0000 Files and hashes: 1: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: 3UIDW+2f2Uaszy6oXQNgBZV+TNbULjyqHBqAmsxzehw=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: KCTbEne5sAEJgzltW4gEKsISpQ0m8wEifogPI/+bnQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:42:44:d4:8c:50:eb:1d:75:56:74:cf:70:6d:52:94:f7:21:36:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Dec 16 19:37:50 2025 GMT Not After : Dec 20 05:18:50 2025 GMT Subject: CN=486656A513CF251B68ACA352EA9033C14D933C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3e:f7:b7:da:29:75:99:61:3c:df:e4:f0:7d: 8d:e8:8e:89:96:0d:4a:65:32:3d:35:5e:04:b8:6f: 05:c7:6f:15:3f:09:8b:b2:18:a6:87:5a:b5:c0:6c: bd:b9:95:48:6c:ef:20:33:7f:03:54:41:40:7b:95: 36:7b:ec:b2:e7:21:ba:8e:16:ac:54:92:03:c3:65: 63:54:cd:cb:ac:20:ed:48:90:a8:48:c0:ad:f5:80: 96:df:76:72:68:36:07:02:e4:41:48:30:ef:19:e2: d7:b2:3f:cd:fa:c0:77:1b:9a:29:68:46:0e:d5:e2: 1a:68:7f:fb:e0:94:69:7c:ad:2a:af:37:88:49:2c: b7:2c:cf:b9:df:8e:25:6b:d4:ea:f3:d9:1c:cb:ff: a6:b1:16:ce:7e:c1:80:91:90:d0:dd:a1:81:d7:b3: f3:fc:73:4c:37:ff:ed:8d:85:26:1e:1e:7a:11:9e: 18:19:b9:ff:f3:ee:d8:a9:91:93:56:e3:c9:68:2b: 52:f7:18:9a:2d:ae:10:ef:cd:37:9c:49:72:7c:d0: 70:0e:1b:b1:44:77:0e:d2:eb:f0:d1:6c:58:89:5b: 10:38:ca:0a:84:dc:26:43:12:b9:3d:f9:fa:3f:17: 8f:8b:74:04:00:9e:d9:eb:12:2d:f1:ba:c4:1e:65: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:66:56:A5:13:CF:25:1B:68:AC:A3:52:EA:90:33:C1:4D:93:3C:0A X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e4:3d:4d:66:f5:e2:fd:bc:06:56:47:44:4b:b4:97:55:0b: ba:f0:92:7d:3b:a8:55:e9:09:aa:95:d4:0f:62:67:99:fc:12: 2b:f8:59:07:08:30:a7:bf:fc:cf:17:ca:9e:53:1d:c8:0e:f9: 8d:da:d3:27:68:32:ec:51:fb:57:b5:3d:d5:38:4a:59:a4:93: 23:c0:0c:36:fe:aa:8a:95:f7:78:59:da:82:d9:e1:5a:72:95: 8b:a2:64:e2:17:b2:28:6a:f2:c3:2b:5c:b3:5c:d0:20:16:83: 46:1a:54:9f:fa:6a:72:fc:84:7d:29:69:cd:f4:5a:be:07:77: eb:e8:ab:cf:00:c0:fe:0b:0f:63:39:39:b3:39:c5:02:d7:a5: 1f:ff:ca:22:48:ef:ab:2a:38:0f:30:47:1f:88:3b:e7:18:0f: 12:a9:3f:53:41:5a:62:03:fb:3d:86:f5:a9:8d:c3:85:40:1b: 66:77:ec:8c:ab:97:b4:74:97:ee:c8:62:df:54:c7:1c:52:5e: e0:b0:71:a6:22:c4:50:e8:b7:6b:ea:13:67:89:99:e7:f3:82: 20:a7:ca:78:26:2c:74:4b:cd:17:24:e7:42:b2:44:04:3e:4c: ce:bf:61:3d:6e:f0:75:40:09:58:e5:c5:bd:8a:4f:aa:a7:74: ad:d9:dc:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEJE1IxQ6x11VnTPcG1SlPchNmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNTEyMTYxOTM3NTBaFw0yNTEyMjAwNTE4NTBaMDMxMTAvBgNV BAMTKDQ4NjY1NkE1MTNDRjI1MUI2OEFDQTM1MkVBOTAzM0MxNEQ5MzNDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfPve32il1mWE83+TwfY3ojomW DUplMj01XgS4bwXHbxU/CYuyGKaHWrXAbL25lUhs7yAzfwNUQUB7lTZ77LLnIbqO FqxUkgPDZWNUzcusIO1IkKhIwK31gJbfdnJoNgcC5EFIMO8Z4teyP836wHcbmilo Rg7V4hpof/vglGl8rSqvN4hJLLcsz7nfjiVr1Orz2RzL/6axFs5+wYCRkNDdoYHX s/P8c0w3/+2NhSYeHnoRnhgZuf/z7tipkZNW48loK1L3GJotrhDvzTecSXJ80HAO G7FEdw7S6/DRbFiJWxA4ygqE3CZDErk9+fo/F4+LdAQAntnrEi3xusQeZdN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSGZWpRPPJRtorKNS6pAzwU2TPAowHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTkPU1m9eL9vAZWR0RLtJdVC7rwkn07qFXp CaqV1A9iZ5n8Eiv4WQcIMKe//M8Xyp5THcgO+Y3a0ydoMuxR+1e1PdU4SlmkkyPA DDb+qoqV93hZ2oLZ4VpylYuiZOIXsihq8sMrXLNc0CAWg0YaVJ/6anL8hH0pac30 Wr4Hd+voq88AwP4LD2M5ObM5xQLXpR//yiJI76sqOA8wRx+IO+cYDxKpP1NBWmID +z2G9amNw4VAG2Z37Iyrl7R0l+7IYt9UxxxSXuCwcaYixFDot2vqE2eJmefzgiCn yngmLHRLzRck50KyRAQ+TM6/YT1u8HVACVjlxb2KT6qndK3Z3I8= -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:36 2025 by rpki-client