This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: WXEhlq79LmJmasftsuvnA2G8c7SO0rWd8cA2qVg0gMA= Subject key identifier: 8B:87:53:38:5D:1A:7F:98:69:F2:F4:60:CE:46:4C:6C:17:90:32:12 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 5D94D3D99ED03B74A61C2E496E8ED56A4001112D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 0533 Signing time: Sat 06 Dec 2025 22:02:01 +0000 Manifest this update: Sat 06 Dec 2025 21:57:01 +0000 Manifest next update: Wed 10 Dec 2025 00:44:01 +0000 Files and hashes: 1: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: VX78F88/fYvb4ZrGOTHcJaOs8WbpL3kI5iGDAH7ulhs=) 2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: HELC9mdQ84lzVVvguuZaZieGiyQ03u73Eihy4Pkp6bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:94:d3:d9:9e:d0:3b:74:a6:1c:2e:49:6e:8e:d5:6a:40:01:11:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Dec 6 21:57:01 2025 GMT Not After : Dec 10 00:44:01 2025 GMT Subject: CN=8B8753385D1A7F9869F2F460CE464C6C17903212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f7:d1:84:b7:a3:c6:f5:30:05:00:fa:43:eb: dc:dd:6c:f8:c8:0d:ca:f6:64:e9:5b:f3:91:90:7c: 28:26:27:39:c0:e2:5a:a3:b4:2c:2d:d0:c9:92:0d: 6d:99:2c:c5:99:8e:d8:1b:b7:a9:79:3c:65:54:28: 23:45:b4:73:0b:dd:89:28:21:da:14:a5:7d:83:05: 8d:76:dc:81:40:cc:33:81:0c:0c:38:de:0d:af:c2: 36:d7:b3:d5:f5:28:86:4e:2a:d8:46:16:70:d2:c9: 0e:d5:b3:4f:32:d4:2d:38:ea:bf:8f:cf:ad:cc:1c: d1:d2:ff:2d:57:57:e4:c9:96:c5:e7:39:c3:32:9a: ed:49:ce:97:c5:b7:55:22:3e:47:4f:87:15:8e:dc: 5b:f1:3d:71:f5:d5:4c:ee:ec:72:86:12:29:f3:53: 05:b8:78:6f:08:1e:b1:75:4b:73:a3:e5:c6:27:22: f4:80:1f:dc:9b:d5:0f:a0:72:4d:07:4e:28:75:7c: 66:db:00:49:5f:f8:de:76:56:6a:52:3c:e1:fc:02: ae:a8:13:78:a0:c0:a5:a2:e6:6a:5c:be:86:f9:d7: e9:6e:3f:16:84:85:61:be:ea:fb:c7:f6:ee:d4:36: 6c:30:21:b8:68:27:b9:5c:dc:db:82:2c:7f:56:0e: 95:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:87:53:38:5D:1A:7F:98:69:F2:F4:60:CE:46:4C:6C:17:90:32:12 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1f:e7:78:dd:0a:d4:33:1c:4a:6d:32:8c:4e:c5:60:8c:3b: 40:f8:9a:40:2c:0e:03:ff:77:46:b3:76:b6:6b:93:22:4b:9e: 33:6f:5c:36:5a:10:19:65:91:8f:c7:1c:2c:68:2a:5f:ee:bc: f6:c2:71:27:73:f6:cf:23:c3:c4:7f:2a:b9:48:ea:0c:a4:e3: 59:06:9c:f7:7d:db:36:50:9b:24:49:18:06:97:af:c6:41:a4: 1e:b7:80:53:20:d0:8a:4a:d6:bd:fe:8b:c4:92:15:67:51:29: d9:8d:7f:b6:e4:86:4e:ac:30:83:93:47:16:9a:c1:30:83:d2: 99:ba:e3:85:06:1c:a9:18:60:0b:31:22:41:0e:13:78:64:60: bd:34:a2:78:31:c3:35:8a:65:24:e4:0a:b3:38:4e:42:99:d4: 53:bd:72:a3:e0:f1:11:fd:46:de:c8:f1:ce:c6:5a:fd:f4:77: c9:d6:c6:ef:75:c4:11:fa:64:7c:d7:9c:08:4d:d7:41:7b:6a: 7c:ef:8d:1a:90:1b:18:63:45:b1:a6:19:77:f4:63:80:28:58: 34:8d:81:ba:ee:09:8d:ef:75:7c:ce:b5:f3:9b:7a:93:9c:83: 7a:22:fc:6c:93:14:e2:7d:40:a2:bf:30:77:0c:f9:a6:0d:15: 32:8e:e1:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZTT2Z7QO3SmHC5Jbo7VakABES0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNTEyMDYyMTU3MDFaFw0yNTEyMTAwMDQ0MDFaMDMxMTAvBgNV BAMTKDhCODc1MzM4NUQxQTdGOTg2OUYyRjQ2MENFNDY0QzZDMTc5MDMyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd99GEt6PG9TAFAPpD69zdbPjI Dcr2ZOlb85GQfCgmJznA4lqjtCwt0MmSDW2ZLMWZjtgbt6l5PGVUKCNFtHML3Yko IdoUpX2DBY123IFAzDOBDAw43g2vwjbXs9X1KIZOKthGFnDSyQ7Vs08y1C046r+P z63MHNHS/y1XV+TJlsXnOcMymu1JzpfFt1UiPkdPhxWO3FvxPXH11Uzu7HKGEinz UwW4eG8IHrF1S3Oj5cYnIvSAH9yb1Q+gck0HTih1fGbbAElf+N52VmpSPOH8Aq6o E3igwKWi5mpcvob51+luPxaEhWG+6vvH9u7UNmwwIbhoJ7lc3NuCLH9WDpWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi4dTOF0af5hp8vRgzkZMbBeQMhIwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4f53jdCtQzHEptMoxOxWCMO0D4mkAsDgP/ d0azdrZrkyJLnjNvXDZaEBllkY/HHCxoKl/uvPbCcSdz9s8jw8R/KrlI6gyk41kG nPd92zZQmyRJGAaXr8ZBpB63gFMg0IpK1r3+i8SSFWdRKdmNf7bkhk6sMIOTRxaa wTCD0pm644UGHKkYYAsxIkEOE3hkYL00ongxwzWKZSTkCrM4TkKZ1FO9cqPg8RH9 Rt7I8c7GWv30d8nWxu91xBH6ZHzXnAhN10F7anzvjRqQGxhjRbGmGXf0Y4AoWDSN gbruCY3vdXzOtfObepOcg3oi/GyTFOJ9QKK/MHcM+aYNFTKO4eA= -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:19 2025 by rpki-client