This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: 3f+pbqURYNQ4kez7X0qOGM6wYI1+s3ccewjiENdPrEU= Subject key identifier: 3C:B4:53:22:96:5E:15:23:62:79:97:5C:F1:C3:8F:F6:D6:3D:F2:9D Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 0A553D4DF0EE198DFFEAB42E570EA349A385D056 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: 011A Signing time: Sat 06 Dec 2025 16:40:39 +0000 Manifest this update: Sat 06 Dec 2025 16:35:39 +0000 Manifest next update: Wed 10 Dec 2025 04:34:39 +0000 Files and hashes: 1: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) 2: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: 6Uurg5ADzecDBwkzJALKc6kI7+XiD1/P1bxyFpTPdz4=) 3: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) 4: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:55:3d:4d:f0:ee:19:8d:ff:ea:b4:2e:57:0e:a3:49:a3:85:d0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Dec 6 16:35:39 2025 GMT Not After : Dec 10 04:34:39 2025 GMT Subject: CN=3CB45322965E15236279975CF1C38FF6D63DF29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:69:22:8c:d9:06:ee:46:7b:aa:21:fe:66: 31:51:3e:e0:b8:ef:ac:3a:16:c8:fb:99:45:ec:98: e2:d2:3e:c0:e0:b6:d1:f6:c4:1c:68:ea:03:0f:f8: 56:99:af:ae:9a:94:57:f0:df:54:94:da:12:d8:2c: c6:82:9f:d8:91:a7:c6:3c:0c:96:cc:19:3c:4a:24: 7f:d8:cc:15:f2:d2:88:19:06:cd:72:a8:d3:4c:a9: 75:e6:73:88:9d:b1:16:2c:76:b3:b6:10:44:c3:9b: 07:7a:d8:9b:b2:33:39:0d:b4:bf:23:2e:cb:33:d0: fa:e8:ee:8f:05:e3:af:45:3d:f8:46:3d:d0:ae:31: 72:32:9b:bb:4b:ca:e5:68:d2:ab:37:2e:ec:70:b3: 0f:0f:f3:56:95:28:d3:bb:ff:96:db:0f:b6:3e:13: 64:9a:48:fc:93:30:3b:14:2b:c3:cf:54:ab:99:d9: 33:e5:5f:dd:aa:d1:6a:6c:e8:a7:2e:a3:67:a6:2b: 03:56:25:5f:36:eb:05:dd:54:ec:76:9e:a0:c3:f9: a6:27:e5:60:ae:5a:a2:57:09:a7:62:c7:8f:82:40: cd:d7:10:79:c2:20:61:4f:6f:55:14:0f:4f:29:e2: 93:02:83:d0:f2:29:c1:f8:7c:78:14:7e:0e:cf:c2: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B4:53:22:96:5E:15:23:62:79:97:5C:F1:C3:8F:F6:D6:3D:F2:9D X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:60:1c:5c:9a:7c:91:1e:f4:d9:97:e5:4c:a2:01:be:4f:e5: d3:af:38:5a:93:e3:50:ad:ae:76:7a:b6:b3:ef:01:a2:e6:ea: 4e:76:de:e5:c4:71:02:a8:f3:7b:81:8c:46:b3:03:68:d2:7b: 0a:7e:48:b7:f8:cf:99:c7:32:f3:2f:5d:ae:19:c2:5f:00:de: cb:4a:70:64:37:dc:b2:ee:a3:91:47:51:95:f6:d1:35:0c:52: 89:11:12:28:79:a8:c4:6f:1b:99:eb:89:1e:5f:60:c6:12:40: c2:6b:f5:de:a5:f3:3d:4a:d0:75:ed:7b:be:b3:68:d2:02:2f: e6:a2:67:ca:0a:21:15:1d:d5:f4:45:ac:d4:33:ff:4c:ec:4e: a5:2c:87:03:ce:18:ad:27:21:f8:8f:51:e1:29:e2:b0:9f:0d: ab:65:f2:9e:ec:5c:21:b7:dd:5f:9c:4f:49:db:8f:fa:fa:cc: f7:5f:15:a1:5f:82:92:ba:eb:8c:d3:90:6b:5a:ee:e4:29:c9: aa:e6:24:91:6d:44:31:d4:4a:ab:40:59:11:b9:4e:2d:3f:32: 70:54:85:2d:e3:48:38:80:9b:d7:1c:c7:7e:22:f1:ab:8d:ef: c4:8d:01:79:fc:b6:82:69:0e:7f:ae:9b:03:e5:0b:ca:a8:1d: 6f:d2:8e:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClU9TfDuGY3/6rQuVw6jSaOF0FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNTEyMDYxNjM1MzlaFw0yNTEyMTAwNDM0MzlaMDMxMTAvBgNV BAMTKDNDQjQ1MzIyOTY1RTE1MjM2Mjc5OTc1Q0YxQzM4RkY2RDYzREYyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKGkijNkG7kZ7qiH+ZjFRPuC4 76w6Fsj7mUXsmOLSPsDgttH2xBxo6gMP+FaZr66alFfw31SU2hLYLMaCn9iRp8Y8 DJbMGTxKJH/YzBXy0ogZBs1yqNNMqXXmc4idsRYsdrO2EETDmwd62JuyMzkNtL8j Lssz0Pro7o8F469FPfhGPdCuMXIym7tLyuVo0qs3Luxwsw8P81aVKNO7/5bbD7Y+ E2SaSPyTMDsUK8PPVKuZ2TPlX92q0Wps6Kcuo2emKwNWJV826wXdVOx2nqDD+aYn 5WCuWqJXCadix4+CQM3XEHnCIGFPb1UUD08p4pMCg9DyKcH4fHgUfg7PwpPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPLRTIpZeFSNieZdc8cOP9tY98p0wHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5gHFyafJEe9NmX5UyiAb5P5dOvOFqT41Ct rnZ6trPvAaLm6k523uXEcQKo83uBjEazA2jSewp+SLf4z5nHMvMvXa4Zwl8A3stK cGQ33LLuo5FHUZX20TUMUokREih5qMRvG5nriR5fYMYSQMJr9d6l8z1K0HXte76z aNICL+aiZ8oKIRUd1fRFrNQz/0zsTqUshwPOGK0nIfiPUeEp4rCfDatl8p7sXCG3 3V+cT0nbj/r6zPdfFaFfgpK664zTkGta7uQpyarmJJFtRDHUSqtAWRG5Ti0/MnBU hS3jSDiAm9ccx34i8auN78SNAXn8toJpDn+umwPlC8qoHW/SjlA= -----END CERTIFICATE-----Generated at Sun Dec 7 05:28:22 2025 by rpki-client