This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json) Hash identifier: DYVZPdzXFrMRyWiEYC05GEOGbXBuJq03KcZh3JkzxRQ= Subject key identifier: 0A:A3:6C:B3:9C:A8:FA:37:DB:34:70:C5:32:23:9F:4D:FF:F0:DB:34 Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D Certificate serial: 48E55DA4E4E01BD25EE63FA0E857F259EC1A42FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft Manifest number: DC Signing time: Wed 17 Dec 2025 08:41:12 +0000 Manifest this update: Wed 17 Dec 2025 08:36:12 +0000 Manifest next update: Sat 20 Dec 2025 13:38:12 +0000 Files and hashes: 1: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: jF9/a6Jp1M+je5Rsp2up/n4DNy0dv/N5PQgKJQwfemc=) 2: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: NGj5oA3WLRmVcrXemWPhcXuCGsDOPsZqCfSTiw9YDzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e5:5d:a4:e4:e0:1b:d2:5e:e6:3f:a0:e8:57:f2:59:ec:1a:42:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Validity Not Before: Dec 17 08:36:12 2025 GMT Not After : Dec 20 13:38:12 2025 GMT Subject: CN=0AA36CB39CA8FA37DB3470C532239F4DFFF0DB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:71:e0:b6:2b:ae:4c:08:88:ee:d3:85:73: 7e:a5:ee:b4:1b:79:9a:2f:88:3e:11:c2:79:07:07: be:43:c6:77:20:19:d0:68:1d:db:5b:a3:f5:a7:7c: 4e:bb:18:86:3e:90:12:d5:19:c7:0d:79:e5:00:17: aa:37:f7:f4:43:e6:64:44:20:6a:87:98:6f:ca:af: 60:9f:d7:2d:81:ae:12:e7:b3:90:de:e1:d7:65:f0: 1f:37:2b:63:56:50:47:b5:2c:17:0a:6a:20:9b:a4: 8f:c6:1f:f7:bd:fc:2b:cc:4d:7a:f0:31:f0:84:4e: bf:da:11:ef:8c:b4:cd:c4:e5:91:9c:c3:35:6b:24: f0:e6:f3:31:b8:57:33:97:86:4c:0d:f5:8a:09:f0: ca:8a:fc:d3:23:87:db:b2:29:79:83:8c:26:0e:ba: 47:86:fb:cf:9e:b8:2c:77:b4:93:7c:8d:e2:b3:81: 5b:1f:eb:4c:a0:2a:0c:56:e8:5d:f2:2f:ee:fc:39: f9:e8:01:8f:92:6e:8f:dd:f6:57:33:82:40:e8:41: f5:23:dd:02:ef:44:82:f7:4e:91:d9:70:87:9c:d7: a8:4a:47:68:d1:24:d9:a2:ba:9b:4d:46:f8:28:44: 55:2f:32:c7:2a:fa:e0:98:80:20:c8:f5:db:58:13: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A3:6C:B3:9C:A8:FA:37:DB:34:70:C5:32:23:9F:4D:FF:F0:DB:34 X509v3 Authority Key Identifier: keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4b:36:53:54:01:9d:23:42:a3:2d:4c:7e:93:ef:1c:3b:16: 2a:c0:a0:63:85:40:ae:83:0b:0e:b5:59:24:5b:7e:4e:c3:aa: a4:55:1c:82:63:2e:25:fc:73:14:a9:32:5c:d6:9c:49:e9:e4: 40:24:8f:2a:f0:6c:c7:fa:47:44:95:0a:bf:9f:ad:61:57:30: 71:ba:1a:c0:ca:68:9c:88:b6:57:97:ba:98:64:3a:cf:c3:13: 3e:73:35:d3:6c:dc:2a:10:f8:42:6b:7b:31:6a:7c:c5:c8:f5: aa:42:80:93:7b:0d:54:dd:a1:c9:c2:9b:1c:29:1c:6b:3f:db: 51:3c:58:5b:fe:e6:6d:d5:6b:26:46:a8:be:4a:41:7f:25:16: e7:58:82:94:5d:4c:e4:25:1c:60:b1:12:0f:f5:3b:c8:51:21: 8d:95:88:73:b7:63:cf:62:53:fd:4c:44:ad:97:17:35:20:7b: 4f:f4:44:37:a5:58:ce:09:25:e4:ca:f6:61:c5:90:fb:ae:60: 2a:d6:54:bc:12:7d:a6:17:d7:99:a6:16:19:85:f7:12:db:b2: ea:22:e6:30:0c:1d:6b:7e:61:76:35:49:c9:e2:de:f9:ed:cf: 23:ab:40:53:a7:28:e0:69:6c:b1:d9:20:d4:ac:bb:2d:35:68: 3c:80:11:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOVdpOTgG9Je5j+g6FfyWewaQv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE NUQyNEY1RDAeFw0yNTEyMTcwODM2MTJaFw0yNTEyMjAxMzM4MTJaMDMxMTAvBgNV BAMTKDBBQTM2Q0IzOUNBOEZBMzdEQjM0NzBDNTMyMjM5RjRERkZGMERCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KHHgtiuuTAiI7tOFc36l7rQb eZoviD4RwnkHB75DxncgGdBoHdtbo/WnfE67GIY+kBLVGccNeeUAF6o39/RD5mRE IGqHmG/Kr2Cf1y2BrhLns5De4ddl8B83K2NWUEe1LBcKaiCbpI/GH/e9/CvMTXrw MfCETr/aEe+MtM3E5ZGcwzVrJPDm8zG4VzOXhkwN9YoJ8MqK/NMjh9uyKXmDjCYO ukeG+8+euCx3tJN8jeKzgVsf60ygKgxW6F3yL+78OfnoAY+Sbo/d9lczgkDoQfUj 3QLvRIL3TpHZcIec16hKR2jRJNmiuptNRvgoRFUvMscq+uCYgCDI9dtYE5NBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCqNss5yo+jfbNHDFMiOfTf/w2zQwHwYDVR0j BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5 NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtLNlNUAZ0jQqMtTH6T7xw7FirAoGOFQK6D Cw61WSRbfk7DqqRVHIJjLiX8cxSpMlzWnEnp5EAkjyrwbMf6R0SVCr+frWFXMHG6 GsDKaJyItleXuphkOs/DEz5zNdNs3CoQ+EJrezFqfMXI9apCgJN7DVTdocnCmxwp HGs/21E8WFv+5m3VayZGqL5KQX8lFudYgpRdTOQlHGCxEg/1O8hRIY2ViHO3Y89i U/1MRK2XFzUge0/0RDelWM4JJeTK9mHFkPuuYCrWVLwSfaYX15mmFhmF9xLbsuoi 5jAMHWt+YXY1Scni3vntzyOrQFOnKOBpbLHZINSsuy01aDyAEQ8= -----END CERTIFICATE-----Generated at Wed Dec 17 21:54:46 2025 by rpki-client