This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: U2c7+LB1v/zQb8wlkbqiUgnzpm+e8N4y+b9tBur31BY= Subject key identifier: 2A:4B:6A:B6:79:19:96:56:A4:B6:E1:1B:E3:57:0A:3F:C6:D8:16:8A Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 1D9889954D9E388BF8709A1C4434C1D39A786DCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: DD Signing time: Fri 05 Dec 2025 13:52:29 +0000 Manifest this update: Fri 05 Dec 2025 13:47:29 +0000 Manifest next update: Tue 09 Dec 2025 00:06:29 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng=) 2: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) 3: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: VOVQZ6VqecGu+zxcwIPJvJNHRFz0eZkpLDDVv80FaAk=) 4: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: LnoUiVTC+YkZ5Y/4/Q1S1mXaeabC5U6lsaInD923/gY=) 5: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: gOnGfuRTcZIR+30ZYAMikHYwYT1lMfTYagdIRfIVS+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:98:89:95:4d:9e:38:8b:f8:70:9a:1c:44:34:c1:d3:9a:78:6d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Dec 5 13:47:29 2025 GMT Not After : Dec 9 00:06:29 2025 GMT Subject: CN=2A4B6AB679199656A4B6E11BE3570A3FC6D8168A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:e2:fc:b3:9f:7e:bd:df:16:6b:c2:cc:05: ed:21:a6:16:85:fa:24:b6:d3:9b:a9:5a:87:f2:54: 4c:b6:65:07:0c:23:bc:85:0f:0f:77:01:f0:1c:3e: f0:24:ac:4f:ce:c0:ad:2f:cf:60:ee:e4:cd:3e:b0: 93:ea:de:4a:d1:39:ec:99:d5:18:c0:2a:f4:10:ae: 18:78:59:87:6c:42:11:d6:0a:f8:dd:fc:d6:ba:f3: aa:47:e2:cc:96:78:a6:48:bf:5e:07:7f:db:29:8f: 8a:e1:c9:52:12:3e:a5:a0:22:57:5a:ac:dc:09:ab: 80:5b:83:0a:ff:f5:32:33:59:ed:04:97:89:10:8e: 47:5d:d5:29:eb:47:f5:3b:d2:8f:f1:31:27:17:6c: 78:59:c5:50:84:1c:8b:7b:e9:50:12:4a:a2:e6:32: 6b:69:1e:2e:e7:d1:c6:30:47:9a:f6:e6:b8:1a:8d: 66:43:ed:84:bc:6b:35:05:59:cf:cf:fb:d2:46:15: 29:48:52:cc:5f:0c:7e:ca:27:3f:ee:5e:69:2c:2a: 23:af:55:5e:cc:96:4e:2b:0f:18:59:b5:8c:23:6f: bf:ca:5d:c2:a7:e7:83:61:04:e0:8e:c1:e3:e2:61: 54:cd:33:91:53:05:0b:51:6b:2c:3d:d8:ed:8a:63: 07:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4B:6A:B6:79:19:96:56:A4:B6:E1:1B:E3:57:0A:3F:C6:D8:16:8A X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b9:78:3a:1a:5d:2b:cc:92:32:b7:ce:62:32:0c:df:4f:57: 13:fd:18:db:de:73:6f:4d:de:c6:6b:48:5a:0b:cb:83:0d:ce: e8:b3:cf:fa:02:c3:93:be:a1:0d:ca:8c:1e:c5:2b:74:af:4c: 89:41:40:79:3d:85:64:e7:55:21:9e:d4:51:22:70:84:64:9d: db:0b:77:66:7f:0c:e7:0e:48:9f:a8:b1:44:f0:17:07:95:36: 7d:ce:ba:cc:cc:fb:d3:97:3f:b6:3c:39:d0:96:99:1a:ea:87: 5d:0a:3b:4e:38:38:93:65:b4:23:76:a9:7e:60:06:2f:4d:3a: a4:ec:74:54:d0:86:b6:54:6d:52:ba:c3:53:12:88:1e:f2:b9: 83:e0:24:7c:df:c6:72:4e:34:c9:84:3d:3b:63:16:68:db:d1: c6:f7:c1:36:ad:1e:17:71:09:25:8f:95:ce:74:bd:17:56:97: ed:3c:9e:c1:96:a4:4b:7c:40:76:b2:1d:98:f8:53:36:63:02: 16:53:72:b1:e8:21:50:94:3d:21:cf:fa:dc:8d:90:53:ee:1b: 19:61:8b:f4:c9:c5:61:7d:7a:28:af:0f:e9:10:f7:58:73:84: f0:7c:fd:46:dc:49:32:3b:50:af:60:42:47:d0:04:2d:7e:19: 7c:68:50:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZiJlU2eOIv4cJocRDTB05p4bc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTEyMDUxMzQ3MjlaFw0yNTEyMDkwMDA2MjlaMDMxMTAvBgNV BAMTKDJBNEI2QUI2NzkxOTk2NTZBNEI2RTExQkUzNTcwQTNGQzZEODE2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBuL8s59+vd8Wa8LMBe0hphaF +iS205upWofyVEy2ZQcMI7yFDw93AfAcPvAkrE/OwK0vz2Du5M0+sJPq3krROeyZ 1RjAKvQQrhh4WYdsQhHWCvjd/Na686pH4syWeKZIv14Hf9spj4rhyVISPqWgIlda rNwJq4Bbgwr/9TIzWe0El4kQjkdd1SnrR/U70o/xMScXbHhZxVCEHIt76VASSqLm MmtpHi7n0cYwR5r25rgajWZD7YS8azUFWc/P+9JGFSlIUsxfDH7KJz/uXmksKiOv VV7Mlk4rDxhZtYwjb7/KXcKn54NhBOCOwePiYVTNM5FTBQtRayw92O2KYwf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKktqtnkZllaktuEb41cKP8bYFoowHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACK5eDoaXSvMkjK3zmIyDN9PVxP9GNvec29N 3sZrSFoLy4MNzuizz/oCw5O+oQ3KjB7FK3SvTIlBQHk9hWTnVSGe1FEicIRkndsL d2Z/DOcOSJ+osUTwFweVNn3OuszM+9OXP7Y8OdCWmRrqh10KO044OJNltCN2qX5g Bi9NOqTsdFTQhrZUbVK6w1MSiB7yuYPgJHzfxnJONMmEPTtjFmjb0cb3wTatHhdx CSWPlc50vRdWl+08nsGWpEt8QHayHZj4UzZjAhZTcrHoIVCUPSHP+tyNkFPuGxlh i/TJxWF9eiivD+kQ91hzhPB8/UbcSTI7UK9gQkfQBC1+GXxoUCg= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:24 2025 by rpki-client