This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: H2rI7Og9nxVqVBjepTaCRrMqSlIyg2dafB4YiJBP/w8= Subject key identifier: 0C:7A:05:75:DF:3B:93:F1:CD:30:44:FA:D4:CA:0B:CC:B5:E7:42:40 Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 2117FE9E46A42B422C716CACE4C2827520F41792 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: F7 Signing time: Thu 04 Dec 2025 12:52:07 +0000 Manifest this update: Thu 04 Dec 2025 12:47:07 +0000 Manifest next update: Sun 07 Dec 2025 22:32:07 +0000 Files and hashes: 1: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: VPuK+1+6ePV1CKusC5qXhYaOQr6/W2sAl7gu8K+R3ug=) 2: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: cPCqhnFAvg43Fpgiqv1Jemjm1dBjrXx8xw+jcODsSRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 22:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:17:fe:9e:46:a4:2b:42:2c:71:6c:ac:e4:c2:82:75:20:f4:17:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Dec 4 12:47:07 2025 GMT Not After : Dec 7 22:32:07 2025 GMT Subject: CN=0C7A0575DF3B93F1CD3044FAD4CA0BCCB5E74240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:61:26:65:50:76:aa:19:aa:94:8c:77:7d: fa:5c:a0:42:54:b5:56:37:6c:ac:45:6f:ed:72:7c: dd:12:d2:00:c1:cc:fc:f1:da:c9:1e:ca:e4:55:bf: c3:e9:38:1e:b4:b1:be:58:a7:c2:37:09:60:f0:bb: 5a:99:b0:d6:0d:da:f8:10:e0:41:f7:f7:94:ef:46: 56:d2:5d:b4:64:6e:41:90:14:94:30:dd:97:92:2b: fa:f4:5a:d5:a1:21:ba:d8:6d:80:a6:3e:52:a9:6a: 26:86:4d:d2:32:ca:b0:78:7c:6b:8e:29:bf:ef:eb: f7:ef:9a:ab:10:10:83:ec:b2:dd:a5:12:c9:4c:c9: 9b:47:42:ba:55:95:35:f0:9e:36:79:71:c1:ae:e2: ec:e8:d2:4e:28:65:e0:fe:4f:bb:7c:22:a5:62:8d: 3b:23:6a:d9:62:fd:9f:ee:86:3d:ac:8e:8e:77:75: 89:4d:3b:4b:8d:a2:e8:65:e6:a1:2e:bd:e2:4b:82: 08:f9:de:26:36:a8:4d:15:b1:59:3e:9e:cc:76:21: 1d:92:9d:7f:b9:a1:dd:d4:70:72:e0:9e:ae:88:5b: be:9b:d2:74:32:c2:11:64:16:47:b4:f6:00:cb:16: 58:bc:63:5a:a8:01:2c:66:8b:bf:26:0f:ad:4c:b2: 65:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7A:05:75:DF:3B:93:F1:CD:30:44:FA:D4:CA:0B:CC:B5:E7:42:40 X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:15:a0:b3:71:aa:a2:4d:72:bd:0e:09:09:fe:88:4d:38:8d: e7:af:ca:c5:ac:01:c0:56:be:d6:92:cc:54:0f:fc:1f:42:07: 24:da:65:dc:19:95:7e:69:1a:16:e7:80:c3:fe:e9:d2:ca:30: e0:8e:78:72:28:8a:e8:64:32:14:c4:a7:21:cb:37:aa:44:0f: 44:05:09:b4:64:96:45:bc:f4:22:99:b5:4b:42:0d:9e:93:07: 6a:30:90:c3:b5:2f:a2:51:c3:c8:9d:e4:4e:ac:5d:a2:aa:76: e1:36:70:2a:7f:65:bb:3f:60:cd:07:e9:83:cf:91:0f:4a:fb: 3c:3e:26:e6:d4:13:91:b8:db:63:78:bb:0b:31:87:4b:db:61: b1:7b:08:4a:eb:3e:ab:4a:32:43:1e:10:8e:59:80:48:62:9d: 55:0b:31:e9:44:2a:f8:e2:d6:66:21:ea:06:78:06:e8:62:a4: 9c:91:88:35:0e:01:9e:24:f2:18:3d:49:d4:0d:5b:3b:f5:fe: e0:42:8f:7f:1f:30:70:56:96:a8:e1:46:2e:4c:9b:a1:f3:ae: 85:d9:c5:24:e0:5c:c7:07:49:ca:8a:fc:76:19:e1:a7:10:e1: f9:02:e1:eb:6a:6a:9a:1c:4d:ea:8f:f6:22:a1:ee:7c:44:df: 9e:82:01:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIRf+nkakK0IscWys5MKCdSD0F5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNTEyMDQxMjQ3MDdaFw0yNTEyMDcyMjMyMDdaMDMxMTAvBgNV BAMTKDBDN0EwNTc1REYzQjkzRjFDRDMwNDRGQUQ0Q0EwQkNDQjVFNzQyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2GEmZVB2qhmqlIx3ffpcoEJU tVY3bKxFb+1yfN0S0gDBzPzx2skeyuRVv8PpOB60sb5Yp8I3CWDwu1qZsNYN2vgQ 4EH395TvRlbSXbRkbkGQFJQw3ZeSK/r0WtWhIbrYbYCmPlKpaiaGTdIyyrB4fGuO Kb/v6/fvmqsQEIPsst2lEslMyZtHQrpVlTXwnjZ5ccGu4uzo0k4oZeD+T7t8IqVi jTsjatli/Z/uhj2sjo53dYlNO0uNouhl5qEuveJLggj53iY2qE0VsVk+nsx2IR2S nX+5od3UcHLgnq6IW76b0nQywhFkFke09gDLFli8Y1qoASxmi78mD61MsmWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHoFdd87k/HNMET61MoLzLXnQkAwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgVoLNxqqJNcr0OCQn+iE04jeevysWsAcBW vtaSzFQP/B9CByTaZdwZlX5pGhbngMP+6dLKMOCOeHIoiuhkMhTEpyHLN6pED0QF CbRklkW89CKZtUtCDZ6TB2owkMO1L6JRw8id5E6sXaKqduE2cCp/Zbs/YM0H6YPP kQ9K+zw+JubUE5G422N4uwsxh0vbYbF7CErrPqtKMkMeEI5ZgEhinVULMelEKvji 1mYh6gZ4BuhipJyRiDUOAZ4k8hg9SdQNWzv1/uBCj38fMHBWlqjhRi5Mm6HzroXZ xSTgXMcHScqK/HYZ4acQ4fkC4etqapocTeqP9iKh7nxE356CAS0= -----END CERTIFICATE-----Generated at Sat Dec 6 17:48:56 2025 by rpki-client