This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: hI/8nlJYy3LL92LQ/HVfXrnBEygTSzd/o1cTGE87qyQ= Subject key identifier: BF:80:7B:9C:0A:7E:D2:74:9A:32:55:29:39:B8:3E:F6:10:F2:63:27 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 22B176797BFD1AD3E1580E168984ADAD441B0C4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 0218 Signing time: Wed 17 Dec 2025 12:51:57 +0000 Manifest this update: Wed 17 Dec 2025 12:46:57 +0000 Manifest next update: Sat 20 Dec 2025 22:30:57 +0000 Files and hashes: 1: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: s3cZDsm3eCD/zirL0oonykymWlAaugzxDIFPlg5sAUQ=) 2: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: TQXHqvbOhIPwmWiLohvm+b1LScDoCVAHGdZiZaztWRc=) 3: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: HLjZFq4/Jnmag82Gv7W9QKBRIGp+gW90e9wOgTOi2PE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b1:76:79:7b:fd:1a:d3:e1:58:0e:16:89:84:ad:ad:44:1b:0c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Dec 17 12:46:57 2025 GMT Not After : Dec 20 22:30:57 2025 GMT Subject: CN=BF807B9C0A7ED2749A32552939B83EF610F26327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:d2:bc:1f:9c:4e:1e:87:4c:61:e2:14:b6: 4a:fa:31:d4:27:aa:c3:cb:00:ed:dc:a8:82:a1:b8: 25:88:c6:88:dd:83:43:92:b9:a5:52:1a:2d:97:ac: 58:a9:d1:a7:0d:c3:87:a0:a0:95:db:13:4d:11:b1: c8:99:e3:4f:7e:f9:d4:f9:8e:f8:70:80:08:3b:14: 14:81:37:ff:cd:e4:e1:fc:aa:e6:f8:9d:33:8a:16: 3a:4a:9a:4c:2d:8e:e4:6f:e6:ef:a2:08:b0:43:7f: 26:8a:18:e8:7d:3d:71:11:c6:49:fc:ea:35:45:c6: da:22:3c:ed:e4:0c:6a:a3:b5:28:bb:8f:7f:69:aa: 3d:31:34:a7:24:f2:a2:c2:b9:08:a3:20:e8:88:72: 00:da:77:64:d9:ad:bb:a6:bb:79:a5:8b:37:64:49: 46:c9:e5:f4:e0:cf:97:12:7b:d1:fe:c7:a0:4c:81: 3b:dd:1f:aa:a1:1b:d4:e1:9e:d6:74:77:da:9c:b0: 4b:ac:b9:b1:2c:b9:a3:39:27:98:a7:ff:ba:2e:79: 9e:c8:7c:10:b3:c4:6a:95:02:5e:75:95:d9:72:44: 97:17:2e:a5:e3:49:1f:c8:91:07:5b:76:a8:23:03: 97:d4:98:27:e7:e0:c0:76:6a:cf:cb:42:86:76:d2: 41:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:80:7B:9C:0A:7E:D2:74:9A:32:55:29:39:B8:3E:F6:10:F2:63:27 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3e:b0:09:b1:d4:a5:8e:49:a5:a5:77:b4:b4:ee:4f:36:97: 5b:71:b8:cd:18:e5:3a:95:4a:52:6b:15:6c:96:03:ff:17:b4: 2e:b0:54:3a:cd:67:e9:5e:6d:db:1a:75:4f:5e:d8:6d:c5:bf: 0b:69:c9:2d:59:7d:7e:85:eb:c6:01:2b:8a:b4:5a:ae:d9:d6: e9:28:6f:aa:9f:6b:80:f0:bd:94:eb:8e:81:b6:5d:82:0e:4b: 6a:79:5f:97:78:d3:7e:5f:0a:04:d7:39:68:50:e0:c9:84:47: 4f:78:1f:47:de:36:28:ed:55:df:59:2b:7f:5f:dd:7d:56:41: 5d:c0:01:ca:81:c4:8e:3f:9c:3a:93:af:e6:b6:f8:6a:a5:8d: b6:26:4a:b2:ed:13:8e:c5:bf:2f:b5:0e:6d:2c:fc:03:0c:f4: af:40:4a:97:71:f3:3e:da:98:81:dc:74:12:b0:e3:eb:26:85: 96:d6:28:37:ab:ee:23:48:6e:2e:48:e2:17:88:a1:bb:40:81: d0:55:40:19:6d:be:c6:3a:ca:3a:5c:68:ee:4f:b7:5e:07:62: ff:ca:30:1c:7a:88:84:23:d4:65:4e:3d:9d:f0:0d:ee:98:a3: 8d:4d:fd:af:00:51:a1:c1:50:b3:94:62:3c:cb:0e:0c:27:d8: da:db:69:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrF2eXv9GtPhWA4WiYStrUQbDE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNTEyMTcxMjQ2NTdaFw0yNTEyMjAyMjMwNTdaMDMxMTAvBgNV BAMTKEJGODA3QjlDMEE3RUQyNzQ5QTMyNTUyOTM5QjgzRUY2MTBGMjYzMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkdK8H5xOHodMYeIUtkr6MdQn qsPLAO3cqIKhuCWIxojdg0OSuaVSGi2XrFip0acNw4egoJXbE00RsciZ409++dT5 jvhwgAg7FBSBN//N5OH8qub4nTOKFjpKmkwtjuRv5u+iCLBDfyaKGOh9PXERxkn8 6jVFxtoiPO3kDGqjtSi7j39pqj0xNKck8qLCuQijIOiIcgDad2TZrbumu3mlizdk SUbJ5fTgz5cSe9H+x6BMgTvdH6qhG9ThntZ0d9qcsEusubEsuaM5J5in/7oueZ7I fBCzxGqVAl51ldlyRJcXLqXjSR/IkQdbdqgjA5fUmCfn4MB2as/LQoZ20kFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv4B7nAp+0nSaMlUpObg+9hDyYycwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI+sAmx1KWOSaWld7S07k82l1txuM0Y5TqV SlJrFWyWA/8XtC6wVDrNZ+lebdsadU9e2G3FvwtpyS1ZfX6F68YBK4q0Wq7Z1uko b6qfa4DwvZTrjoG2XYIOS2p5X5d4035fCgTXOWhQ4MmER094H0feNijtVd9ZK39f 3X1WQV3AAcqBxI4/nDqTr+a2+GqljbYmSrLtE47Fvy+1Dm0s/AMM9K9ASpdx8z7a mIHcdBKw4+smhZbWKDer7iNIbi5I4heIobtAgdBVQBltvsY6yjpcaO5Pt14HYv/K MBx6iIQj1GVOPZ3wDe6Yo41N/a8AUaHBULOUYjzLDgwn2NrbaS0= -----END CERTIFICATE-----Generated at Fri Dec 19 11:36:21 2025 by rpki-client