This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: RpaQXo3/QOMJvEc6Wdsnotd5/Jt0Kjuxm7f8cTeVHn0= Subject key identifier: D4:FC:2C:1B:94:DD:3B:0E:98:C4:0E:4C:F8:08:A4:6D:7A:D4:71:74 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 7BB4AEC4EC5D6F87968D0BCDE41D41207B8304BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 0263 Signing time: Fri 05 Dec 2025 12:21:22 +0000 Manifest this update: Fri 05 Dec 2025 12:16:22 +0000 Manifest next update: Mon 08 Dec 2025 17:19:22 +0000 Files and hashes: 1: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: nboIz3jrBgP6JOmA3BVAd2UeOfnp74QAUC5BcPTJ2ug=) 2: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: V41dsoCGv/A1SNxCT74tNpzG0O4+YBlV/SgqxtUPiBI=) 3: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: VFHHlL/fG0xnRMHoMgqrHUpXEdzrJEYbY3L4Yb6Ynkg=) 4: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: 0nHR9zZ9qJIeNhIF6xsn/rByAcdMMFFJmVK7W4HiUTE=) 5: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: P5qy6MSQkzBzIpWfwlqRGgttfjrknKyQRFiwh+AluKw=) 6: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b4:ae:c4:ec:5d:6f:87:96:8d:0b:cd:e4:1d:41:20:7b:83:04:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Dec 5 12:16:22 2025 GMT Not After : Dec 8 17:19:22 2025 GMT Subject: CN=D4FC2C1B94DD3B0E98C40E4CF808A46D7AD47174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:77:8c:12:94:74:01:81:25:ab:e4:4e:8b: 9c:93:d8:45:15:44:31:f4:39:75:97:10:76:d4:4b: 5a:57:51:1e:5c:85:b6:aa:c0:de:64:14:d5:28:46: 73:6e:7c:ab:cf:cb:19:51:fe:c0:98:60:19:df:d4: 1e:07:d5:df:2a:9a:33:8a:99:d6:e4:73:f5:f4:33: 64:72:7d:81:9d:4f:5d:f5:f0:45:49:13:76:65:da: 47:e2:f1:5a:d8:14:73:8c:f6:bc:31:fd:81:f0:a4: fc:72:51:48:4b:eb:6c:c7:88:19:84:15:13:f3:a3: a1:e4:0d:d3:0a:b1:98:18:e6:38:9d:db:2a:73:57: 6e:b4:7a:19:10:17:32:2e:d3:da:74:79:93:b9:8f: 80:c8:4e:4d:5a:6d:5c:1a:08:ce:de:65:49:dd:e7: 10:1d:16:76:ce:90:42:77:1d:c5:fe:e8:5f:95:31: b2:34:2d:ba:3f:1a:b4:d6:d8:4b:f3:61:5b:53:7c: 7a:b7:cc:34:5d:f2:fa:be:4e:9f:74:4f:41:e1:62: 59:0c:b6:60:3e:59:ba:8d:52:1f:f9:a5:f2:5e:d2: 93:e2:95:63:3a:b9:76:4a:9a:0b:de:8c:65:52:2a: cd:7e:83:79:d6:ec:d3:08:fb:53:ea:12:c9:12:f6: e4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FC:2C:1B:94:DD:3B:0E:98:C4:0E:4C:F8:08:A4:6D:7A:D4:71:74 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d1:8f:06:d4:cc:85:90:a8:b7:b8:12:39:07:18:c7:2d:8d: c0:1e:68:9c:22:63:27:fc:65:ab:e6:dc:45:12:4e:88:92:c8: f1:a0:ad:79:bb:13:15:84:cb:cc:b9:5b:34:f9:02:a4:07:9c: fa:a8:5b:5f:05:9b:0b:d4:5a:75:61:1b:5b:d0:99:73:95:54: cb:75:1f:c1:dc:61:51:09:32:a4:a4:3e:5c:36:2a:40:a9:b2: 9b:69:04:14:74:91:57:4d:ae:64:93:f5:d0:10:a3:ea:42:c2: 86:98:23:7c:e4:bc:07:b6:73:d0:25:cf:f2:c0:43:27:fd:e2: 3c:ed:a1:99:a5:88:77:f8:6a:44:d3:ac:ed:d8:b5:6e:06:11: d6:25:0c:50:3e:9f:33:40:9b:89:5c:15:8b:44:62:d5:1d:c8: 55:e9:0f:8f:d4:e0:de:bd:f1:5d:7b:43:33:10:16:6a:e1:be: e3:7b:d3:ae:3c:bb:5a:1d:07:f3:ad:e2:29:f7:92:ab:2b:23: 72:be:ff:1d:0d:33:39:25:38:18:d8:be:be:d6:1b:c4:35:42: 86:ae:89:7a:e6:0a:fc:50:b6:f2:86:05:fa:89:f6:99:37:55: 57:ca:c7:79:66:c3:0f:f5:53:f5:b9:81:be:6a:3c:00:57:3e: ba:16:fa:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7SuxOxdb4eWjQvN5B1BIHuDBL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNTEyMDUxMjE2MjJaFw0yNTEyMDgxNzE5MjJaMDMxMTAvBgNV BAMTKEQ0RkMyQzFCOTRERDNCMEU5OEM0MEU0Q0Y4MDhBNDZEN0FENDcxNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWHeMEpR0AYElq+ROi5yT2EUV RDH0OXWXEHbUS1pXUR5chbaqwN5kFNUoRnNufKvPyxlR/sCYYBnf1B4H1d8qmjOK mdbkc/X0M2RyfYGdT1318EVJE3Zl2kfi8VrYFHOM9rwx/YHwpPxyUUhL62zHiBmE FRPzo6HkDdMKsZgY5jid2ypzV260ehkQFzIu09p0eZO5j4DITk1abVwaCM7eZUnd 5xAdFnbOkEJ3HcX+6F+VMbI0Lbo/GrTW2EvzYVtTfHq3zDRd8vq+Tp90T0HhYlkM tmA+WbqNUh/5pfJe0pPilWM6uXZKmgvejGVSKs1+g3nW7NMI+1PqEskS9uQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1PwsG5TdOw6YxA5M+AikbXrUcXQwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPRjwbUzIWQqLe4EjkHGMctjcAeaJwiYyf8 Zavm3EUSToiSyPGgrXm7ExWEy8y5WzT5AqQHnPqoW18FmwvUWnVhG1vQmXOVVMt1 H8HcYVEJMqSkPlw2KkCpsptpBBR0kVdNrmST9dAQo+pCwoaYI3zkvAe2c9Alz/LA Qyf94jztoZmliHf4akTTrO3YtW4GEdYlDFA+nzNAm4lcFYtEYtUdyFXpD4/U4N69 8V17QzMQFmrhvuN70648u1odB/Ot4in3kqsrI3K+/x0NMzklOBjYvr7WG8Q1Qoau iXrmCvxQtvKGBfqJ9pk3VVfKx3lmww/1U/W5gb5qPABXProW+io= -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:47 2025 by rpki-client