This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft File: 1E40BE2B668DAE3E7271E835148386D785E3724C.mft (raw, json) Hash identifier: U8Wl9vERkTY4F6rPPN7G3VjHj9UAToQ704PUqZJM1eQ= Subject key identifier: 56:F0:F9:6F:37:58:03:CA:BE:DF:4E:B1:BD:64:07:67:C5:95:C5:8C Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C Certificate issuer: /CN=1E40BE2B668DAE3E7271E835148386D785E3724C Certificate serial: 58DD741CDFED979C5C3EE406BF0DEDBDDD3B0264 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft Manifest number: EF Signing time: Sat 06 Dec 2025 15:22:13 +0000 Manifest this update: Sat 06 Dec 2025 15:17:13 +0000 Manifest next update: Wed 10 Dec 2025 01:20:13 +0000 Files and hashes: 1: 1E40BE2B668DAE3E7271E835148386D785E3724C.crl (hash: dCdD8h8nB41iknN5elHjxUiRdMQ797WcR+5ItKMEf1g=) 2: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: 6NYs/G1xdGsUC1/WqjKklC2SAb8XsfqjqDKSyuRji20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:dd:74:1c:df:ed:97:9c:5c:3e:e4:06:bf:0d:ed:bd:dd:3b:02:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C Validity Not Before: Dec 6 15:17:13 2025 GMT Not After : Dec 10 01:20:13 2025 GMT Subject: CN=56F0F96F375803CABEDF4EB1BD640767C595C58C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:6a:6a:dc:f6:83:b4:ac:32:d2:7a:f2:5b: 7d:24:2a:6c:59:c1:e6:4a:b2:0c:19:34:6e:a1:28: df:57:02:bf:36:8c:2a:bf:8c:4e:ce:9a:2e:2b:3d: f7:20:ad:65:35:5f:d0:23:41:32:3a:71:aa:20:f6: 7d:3b:85:ba:e8:10:e0:a6:9c:98:3a:27:d1:ff:57: ac:83:23:1e:8a:e1:0b:eb:e3:9b:de:11:7e:b4:57: e1:2f:c8:c9:7a:96:bd:6c:ad:41:ef:5f:38:b3:0c: 60:4d:44:10:fd:73:05:ed:1d:93:30:34:97:01:22: 21:20:34:c2:2e:09:3f:bb:9a:bc:02:2f:24:fc:dd: ba:dc:2b:1d:58:b3:4f:d8:01:8c:b7:a4:4c:94:ae: fd:d1:52:20:bb:a9:a9:19:32:62:46:48:9b:e3:1d: e3:df:09:11:85:94:49:91:89:56:b4:76:bb:62:d6: 76:8c:8a:ce:4b:32:51:9c:06:8b:5e:a3:b2:6a:f2: 7d:53:be:9d:b4:4a:38:ec:20:b9:e4:76:06:3c:60: 45:79:52:3d:60:6a:3e:f7:fc:fd:ba:2e:fd:b9:33: 65:f1:bb:fc:95:c5:b3:b3:3b:f8:90:bb:5a:3e:74: 90:81:01:03:9d:15:66:8c:7a:3d:b8:79:a7:41:69: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F0:F9:6F:37:58:03:CA:BE:DF:4E:B1:BD:64:07:67:C5:95:C5:8C X509v3 Authority Key Identifier: keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:cb:3a:78:29:56:ac:8c:41:3e:92:73:83:67:9d:67:9c:ac: 73:90:31:cb:2f:75:06:f4:f6:a6:b6:05:48:1e:02:ec:fa:3c: 3f:cf:f6:30:de:2a:68:85:30:d5:ef:7e:0b:79:d2:b1:e5:dc: 27:aa:09:8f:ac:c3:78:66:06:ca:dc:20:97:94:6c:01:4c:93: df:1c:f3:47:a5:13:c1:03:00:f5:ec:12:f8:96:33:d2:76:58: fd:f1:a2:e8:2f:34:51:7a:2c:d4:c2:f2:3e:c0:87:52:84:91: 12:25:91:40:ab:30:fb:09:3c:ef:1f:08:39:75:4c:3e:0d:f0: f3:f8:ad:19:47:7c:b1:1c:08:59:86:98:5e:f6:9e:49:bd:13: ab:dd:c8:83:ca:bf:97:34:d2:1a:43:d5:0c:6e:e4:85:73:72: ed:58:d1:9b:75:63:6a:bf:81:1b:3e:f6:74:8d:0b:5e:34:9f: 32:88:ec:6e:aa:c5:17:92:ce:48:77:01:44:ad:94:ba:0b:fd: 19:ce:b5:14:c8:0e:b9:10:90:be:59:6d:67:25:dc:96:98:f3: 21:1d:36:24:bd:55:68:6d:d4:6f:08:75:7c:e1:15:9e:f7:a1: 61:a3:d9:4c:44:15:be:54:22:ec:88:b0:f7:a8:92:33:91:a7: 0a:fc:63:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWN10HN/tl5xcPuQGvw3tvd07AmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4 NUUzNzI0QzAeFw0yNTEyMDYxNTE3MTNaFw0yNTEyMTAwMTIwMTNaMDMxMTAvBgNV BAMTKDU2RjBGOTZGMzc1ODAzQ0FCRURGNEVCMUJENjQwNzY3QzU5NUM1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1q2pq3PaDtKwy0nryW30kKmxZ weZKsgwZNG6hKN9XAr82jCq/jE7Omi4rPfcgrWU1X9AjQTI6caog9n07hbroEOCm nJg6J9H/V6yDIx6K4Qvr45veEX60V+EvyMl6lr1srUHvXzizDGBNRBD9cwXtHZMw NJcBIiEgNMIuCT+7mrwCLyT83brcKx1Ys0/YAYy3pEyUrv3RUiC7qakZMmJGSJvj HePfCRGFlEmRiVa0drti1naMis5LMlGcBoteo7Jq8n1Tvp20SjjsILnkdgY8YEV5 Uj1gaj73/P26Lv25M2Xxu/yVxbOzO/iQu1o+dJCBAQOdFWaMej24eadBafwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVvD5bzdYA8q+306xvWQHZ8WVxYwwHwYDVR0j BBgwFoAUHkC+K2aNrj5yceg1FIOG14XjckwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMC8xRTQwQkUyQjY2 OERBRTNFNzI3MUU4MzUxNDgzODZENzg1RTM3MjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4NUUz NzI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzAvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2 RDc4NUUzNzI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTLOngpVqyMQT6Sc4NnnWecrHOQMcsvdQb0 9qa2BUgeAuz6PD/P9jDeKmiFMNXvfgt50rHl3CeqCY+sw3hmBsrcIJeUbAFMk98c 80elE8EDAPXsEviWM9J2WP3xougvNFF6LNTC8j7Ah1KEkRIlkUCrMPsJPO8fCDl1 TD4N8PP4rRlHfLEcCFmGmF72nkm9E6vdyIPKv5c00hpD1Qxu5IVzcu1Y0Zt1Y2q/ gRs+9nSNC140nzKI7G6qxReSzkh3AUStlLoL/RnOtRTIDrkQkL5ZbWcl3JaY8yEd NiS9VWht1G8IdXzhFZ73oWGj2UxEFb5UIuyIsPeokjORpwr8Y6c= -----END CERTIFICATE-----Generated at Sun Dec 7 17:52:35 2025 by rpki-client