This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: 3Nmj28yCDTnn5YpjB3RcWkDmpRhzt9j76RZwsxVp9IA= Subject key identifier: 25:D8:63:1D:57:FC:99:C9:74:A8:10:DB:04:2F:00:94:8C:C4:AA:49 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 3E731EEBAE73A70292AE05FA2A538917B6A6A50A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 023E Signing time: Fri 05 Dec 2025 14:22:12 +0000 Manifest this update: Fri 05 Dec 2025 14:17:12 +0000 Manifest next update: Tue 09 Dec 2025 00:17:12 +0000 Files and hashes: 1: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: TlW1suKWugHFHDgKk0x1Jh+CjY/sUWJIINanB524QOs=) 2: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) 3: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:73:1e:eb:ae:73:a7:02:92:ae:05:fa:2a:53:89:17:b6:a6:a5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Dec 5 14:17:12 2025 GMT Not After : Dec 9 00:17:12 2025 GMT Subject: CN=25D8631D57FC99C974A810DB042F00948CC4AA49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:16:4a:38:81:33:c0:02:73:01:36:59:05:2b: 9f:2b:63:14:2e:2c:7d:03:5d:94:86:07:c8:37:5e: d8:0e:1d:be:ee:b3:8f:9b:5c:19:60:31:29:4f:5f: 15:1c:40:7f:9b:a4:0a:af:de:9c:e9:d5:aa:61:89: 94:10:e9:45:2e:e4:bc:4d:cb:95:df:5e:e3:fd:91: 5c:89:01:18:e6:68:78:34:f7:83:09:33:65:0d:72: 3f:db:3b:f7:ba:b6:71:ee:77:84:6d:70:e6:4d:31: 8b:78:bd:b3:cd:88:f2:fe:5e:17:a4:04:f8:ef:bb: fa:15:b1:d5:c0:d9:00:56:db:ca:de:8f:76:f1:37: 35:dc:08:2b:e1:29:51:37:5e:51:58:79:3d:62:75: c6:83:d3:38:e5:f2:af:82:ad:62:3d:41:94:97:9e: b8:5d:45:bc:3e:3a:41:03:8c:09:12:97:d9:22:1c: c8:5f:20:da:a1:fb:aa:29:e0:d0:f9:53:32:9e:7d: 82:f1:ba:58:00:66:e2:82:ea:d5:cc:b4:b1:8c:02: bb:38:f2:68:28:b5:f7:f8:11:bd:da:db:3a:9d:2a: e1:6b:e0:05:39:0d:78:c5:1a:e9:71:6c:69:7b:3a: ef:09:51:37:f3:02:3b:33:6b:4f:70:b1:08:12:1f: 27:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D8:63:1D:57:FC:99:C9:74:A8:10:DB:04:2F:00:94:8C:C4:AA:49 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f7:37:be:42:55:67:d3:d7:72:5f:bc:5f:18:30:de:62:43: 25:16:51:2a:cc:68:d2:cc:56:76:4f:40:bb:38:36:44:8c:37: c2:6c:b0:98:e3:4b:68:0c:1a:54:5d:b6:93:19:47:35:35:8d: fd:f4:12:1c:d7:21:84:65:66:04:eb:18:36:c8:43:aa:6d:d1: 22:50:85:ff:76:19:55:d2:0e:e7:7b:b0:68:91:16:99:7e:d4: c8:e4:f8:a5:9d:1b:94:11:41:63:44:8b:75:96:ff:64:9f:9a: a7:12:88:22:f7:00:1e:f2:d3:ea:93:c2:b6:e4:4a:bc:ca:1d: 1d:a9:94:fd:4e:4d:8a:63:2a:f4:6e:f5:af:91:0f:15:ae:68: 12:90:8b:b9:06:2e:88:69:e7:34:68:b4:99:ee:15:7b:b0:ba: f1:90:05:fd:e6:e8:99:5f:e4:7a:04:2d:2a:a2:0a:2c:c5:87: 78:fd:6b:0b:d2:0e:7a:52:56:2b:ea:1a:f9:11:2c:7c:5b:8f: cc:0b:e1:2f:41:0d:6f:08:78:bd:89:0c:66:72:cf:fd:07:dd: de:e6:4e:66:61:8b:9b:1d:e9:59:26:51:07:dd:34:44:ad:cb: d7:61:22:c4:77:fe:91:4a:3e:13:3e:97:9f:cf:18:ba:a5:c3: 2a:91:24:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnMe665zpwKSrgX6KlOJF7ampQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTEyMDUxNDE3MTJaFw0yNTEyMDkwMDE3MTJaMDMxMTAvBgNV BAMTKDI1RDg2MzFENTdGQzk5Qzk3NEE4MTBEQjA0MkYwMDk0OENDNEFBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaFko4gTPAAnMBNlkFK58rYxQu LH0DXZSGB8g3XtgOHb7us4+bXBlgMSlPXxUcQH+bpAqv3pzp1aphiZQQ6UUu5LxN y5XfXuP9kVyJARjmaHg094MJM2UNcj/bO/e6tnHud4RtcOZNMYt4vbPNiPL+Xhek BPjvu/oVsdXA2QBW28rej3bxNzXcCCvhKVE3XlFYeT1idcaD0zjl8q+CrWI9QZSX nrhdRbw+OkEDjAkSl9kiHMhfINqh+6op4ND5UzKefYLxulgAZuKC6tXMtLGMArs4 8mgotff4Eb3a2zqdKuFr4AU5DXjFGulxbGl7Ou8JUTfzAjsza09wsQgSHyfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJdhjHVf8mcl0qBDbBC8AlIzEqkkwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/3N75CVWfT13JfvF8YMN5iQyUWUSrMaNLM VnZPQLs4NkSMN8JssJjjS2gMGlRdtpMZRzU1jf30EhzXIYRlZgTrGDbIQ6pt0SJQ hf92GVXSDud7sGiRFpl+1Mjk+KWdG5QRQWNEi3WW/2SfmqcSiCL3AB7y0+qTwrbk SrzKHR2plP1OTYpjKvRu9a+RDxWuaBKQi7kGLohp5zRotJnuFXuwuvGQBf3m6Jlf 5HoELSqiCizFh3j9awvSDnpSVivqGvkRLHxbj8wL4S9BDW8IeL2JDGZyz/0H3d7m TmZhi5sd6VkmUQfdNESty9dhIsR3/pFKPhM+l5/PGLqlwyqRJBY= -----END CERTIFICATE-----Generated at Sun Dec 7 08:19:23 2025 by rpki-client