This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: 5cj6PTuvpa+Jq5/bEHMXz4NnaGMLEu/KG9ZovMQ4zhg= Subject key identifier: AB:88:09:7E:04:3E:2E:E6:83:85:ED:F0:75:A2:9E:09:3D:0E:C1:F0 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 56F7BF4F1956E2490A27C8BCDACA780A59322167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 03D3 Signing time: Sat 06 Dec 2025 18:00:01 +0000 Manifest this update: Sat 06 Dec 2025 17:55:01 +0000 Manifest next update: Wed 10 Dec 2025 00:50:01 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 2: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) 3: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) 4: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: MOZlcIvI7Ee5aqKZUvlzw0llXPQfW3P635QdhN1338U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f7:bf:4f:19:56:e2:49:0a:27:c8:bc:da:ca:78:0a:59:32:21:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Dec 6 17:55:01 2025 GMT Not After : Dec 10 00:50:01 2025 GMT Subject: CN=AB88097E043E2EE68385EDF075A29E093D0EC1F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:7b:fc:47:7a:e2:70:1b:ec:6b:12:81:70: 17:6b:13:7b:07:b2:cc:f7:55:27:1c:09:f3:22:bc: 0e:af:ac:95:06:08:6c:76:b6:26:b7:6f:3b:ee:89: fe:ba:d3:7e:8e:ee:bd:90:cb:1a:00:56:2e:bd:71: 92:b4:f0:5e:7f:bc:7d:82:a1:72:ed:b6:25:60:f6: 86:f5:79:d2:26:0b:e6:39:c1:9a:c8:7c:58:3f:e8: f8:d6:75:c0:5c:d2:d2:cf:f5:97:c8:0a:08:2e:59: ae:d1:20:a0:0f:d8:36:e6:b7:1c:09:9c:eb:81:21: 41:b5:db:3b:3e:23:36:e4:fb:41:62:a5:10:d9:58: 05:90:19:98:37:71:d0:ed:fd:55:88:02:f8:01:d0: 40:52:40:a8:50:4e:75:18:2f:ec:3e:6b:9c:bc:fc: 3d:26:cb:38:e7:a5:91:3a:e7:d6:db:4a:4b:42:fa: da:08:9d:8d:d5:9d:79:69:a5:82:11:86:91:07:f7: 20:bd:11:07:00:41:31:c2:84:d2:9c:56:3a:83:87: a8:26:94:22:b3:c0:91:dc:7f:41:b7:d9:20:24:30: 7c:24:65:6a:dc:fa:9b:bf:92:e2:5c:42:8f:4c:de: 84:7e:28:67:cd:3b:f8:10:81:e7:7e:9f:4d:4b:9d: 25:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:88:09:7E:04:3E:2E:E6:83:85:ED:F0:75:A2:9E:09:3D:0E:C1:F0 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:64:f8:85:99:ba:14:27:5a:a8:e5:ad:bd:c9:4e:20:79:86: fd:8f:7e:c1:ac:5d:9f:5c:89:4a:d3:d0:d5:0c:5c:c0:24:38: aa:42:79:11:41:9e:3d:7d:92:3a:7e:75:17:3e:8e:22:06:62: c8:5b:e3:3c:d8:e8:84:00:f5:36:6e:b4:52:8f:5b:bb:2a:7b: ff:17:4d:35:e0:38:dc:88:2a:4d:a1:6f:c1:74:3c:68:8a:f8: 9d:0b:83:0e:b6:a4:a7:59:8a:60:9c:cc:65:6e:86:ad:bf:8d: f6:cd:d9:eb:b1:4f:aa:3a:0c:54:7e:21:1c:41:a6:32:fb:de: f3:71:60:36:bb:c7:67:d2:13:81:89:76:57:aa:e2:c1:bf:a1: 26:aa:9b:b6:62:90:f7:a9:7e:42:cf:28:c4:55:6a:e1:5b:97: 52:db:0c:da:7d:27:c4:ec:22:26:45:5c:bc:26:9f:76:67:d8: 73:15:85:69:61:0d:5f:3e:71:76:d4:2f:0f:cc:cf:11:25:99: 15:b3:c4:59:a7:bb:2b:d5:6e:8e:26:25:18:ef:65:42:0f:89: f7:7a:a7:ee:87:6b:83:67:12:62:66:6f:88:a1:83:89:f1:5d: 09:38:fe:c4:5c:29:e3:1b:46:fc:9e:18:24:8a:5b:c7:e3:7c: 8c:da:a3:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVve/TxlW4kkKJ8i82sp4ClkyIWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTEyMDYxNzU1MDFaFw0yNTEyMTAwMDUwMDFaMDMxMTAvBgNV BAMTKEFCODgwOTdFMDQzRTJFRTY4Mzg1RURGMDc1QTI5RTA5M0QwRUMxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19nv8R3ricBvsaxKBcBdrE3sH ssz3VSccCfMivA6vrJUGCGx2tia3bzvuif66036O7r2QyxoAVi69cZK08F5/vH2C oXLttiVg9ob1edImC+Y5wZrIfFg/6PjWdcBc0tLP9ZfICgguWa7RIKAP2DbmtxwJ nOuBIUG12zs+Izbk+0FipRDZWAWQGZg3cdDt/VWIAvgB0EBSQKhQTnUYL+w+a5y8 /D0myzjnpZE659bbSktC+toInY3VnXlppYIRhpEH9yC9EQcAQTHChNKcVjqDh6gm lCKzwJHcf0G32SAkMHwkZWrc+pu/kuJcQo9M3oR+KGfNO/gQged+n01LnSVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq4gJfgQ+LuaDhe3wdaKeCT0OwfAwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpk+IWZuhQnWqjlrb3JTiB5hv2PfsGsXZ9c iUrT0NUMXMAkOKpCeRFBnj19kjp+dRc+jiIGYshb4zzY6IQA9TZutFKPW7sqe/8X TTXgONyIKk2hb8F0PGiK+J0Lgw62pKdZimCczGVuhq2/jfbN2euxT6o6DFR+IRxB pjL73vNxYDa7x2fSE4GJdleq4sG/oSaqm7ZikPepfkLPKMRVauFbl1LbDNp9J8Ts IiZFXLwmn3Zn2HMVhWlhDV8+cXbULw/MzxElmRWzxFmnuyvVbo4mJRjvZUIPifd6 p+6Ha4NnEmJmb4ihg4nxXQk4/sRcKeMbRvyeGCSKW8fjfIzao+E= -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:29 2025 by rpki-client