This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: WWHEyhYeIsmCjV3QBnUJf1iIJs84Psu2TSs2E9PMPZI= Subject key identifier: A9:9C:5E:F5:40:03:02:DA:21:FC:80:42:F5:28:93:D8:7D:D2:3D:A6 Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 7F2A704B726D72537BB782B4EFD490AB58668AFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 0532 Signing time: Thu 18 Dec 2025 15:01:53 +0000 Manifest this update: Thu 18 Dec 2025 14:56:53 +0000 Manifest next update: Mon 22 Dec 2025 00:49:53 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: qAyOn79LpyHuGzsM/MVMJ8cDoeA8NlDsA1e9+ZUA/aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2a:70:4b:72:6d:72:53:7b:b7:82:b4:ef:d4:90:ab:58:66:8a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Dec 18 14:56:53 2025 GMT Not After : Dec 22 00:49:53 2025 GMT Subject: CN=A99C5EF5400302DA21FC8042F52893D87DD23DA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d0:28:d1:16:58:77:9f:80:56:cc:f0:65:43: 3e:4c:8a:57:77:0a:15:76:d2:18:d6:50:07:b1:70: bb:58:c6:47:99:c5:c1:ff:30:3b:ea:c6:a4:d7:a8: be:d3:e6:cd:b0:f7:03:bb:50:43:41:69:d4:12:34: 8f:86:cd:bd:0b:8b:27:04:9d:c2:3c:8c:ba:86:59: ea:6d:06:b6:0d:31:b7:c7:0e:30:0c:87:55:3d:17: 35:c6:2f:98:6b:55:ae:d4:f4:98:bb:6f:d1:fb:35: a6:9e:c1:ad:d9:7d:d0:86:72:76:fd:51:bc:3c:63: 4a:ab:fd:4e:6c:0d:13:37:83:bc:64:95:27:7b:62: a3:63:30:37:3b:35:e4:5a:17:f2:30:f0:0f:3c:c0: 9a:52:7f:f3:8a:e7:f9:45:a9:32:d1:16:e6:9b:6d: 11:dc:e4:2d:df:6f:03:45:9f:dd:3d:bc:6a:93:80: e9:84:e5:5d:f9:b4:9c:11:e6:ea:27:95:89:e4:bb: 50:4f:e7:b4:db:c8:d9:5c:9e:78:41:99:d6:8f:c5: dd:98:44:fa:45:48:8f:68:b2:4c:a7:03:27:7e:3d: 8e:01:b7:20:86:a1:a4:de:c3:bf:9d:ac:b1:4a:ad: bf:02:c7:0f:fb:3b:6f:a4:1e:59:cc:86:53:da:3a: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9C:5E:F5:40:03:02:DA:21:FC:80:42:F5:28:93:D8:7D:D2:3D:A6 X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ae:e9:8a:9c:29:da:41:64:92:a7:cd:43:3f:4d:06:75:cf: dc:98:81:b9:6a:2b:5c:98:cf:0f:78:ab:9a:8b:24:4e:c9:ac: d0:6a:bc:8b:bb:01:db:c6:63:af:2e:dd:e8:96:23:4f:f8:ac: 95:8a:e2:9b:85:b5:18:b6:65:7e:96:95:26:4b:22:0b:93:56: 02:ab:ce:c3:59:60:26:76:26:82:57:62:57:6e:1e:1e:95:f7: e0:54:28:f7:16:21:1b:26:8b:18:4e:61:f9:9b:8c:dc:28:27: 6f:a6:5c:13:9b:47:e1:32:34:17:f5:30:6b:a7:e2:52:a1:75: a6:2b:50:a1:fd:78:4b:38:fc:e4:78:76:35:2d:1d:be:a1:5c: e6:a1:a3:58:40:05:f0:8b:31:8a:c5:69:46:52:0f:01:24:db: bb:7f:d4:e7:b0:db:aa:de:62:23:de:51:06:c4:10:c6:a6:9a: f9:b8:96:63:a6:5d:51:20:76:fe:55:dc:ff:66:f1:51:10:15: dd:5e:77:2e:bb:85:d3:f7:31:c3:f0:bd:37:9d:f0:ca:c0:f5: c2:6b:87:e1:f4:d6:b8:44:f7:d0:be:c5:13:89:96:12:54:46: ae:02:0e:33:fc:ac:7a:44:22:81:98:1a:6d:d2:ac:c1:84:30: b9:ee:f1:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfypwS3JtclN7t4K079SQq1hmiv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNTEyMTgxNDU2NTNaFw0yNTEyMjIwMDQ5NTNaMDMxMTAvBgNV BAMTKEE5OUM1RUY1NDAwMzAyREEyMUZDODA0MkY1Mjg5M0Q4N0REMjNEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0CjRFlh3n4BWzPBlQz5Mild3 ChV20hjWUAexcLtYxkeZxcH/MDvqxqTXqL7T5s2w9wO7UENBadQSNI+Gzb0LiycE ncI8jLqGWeptBrYNMbfHDjAMh1U9FzXGL5hrVa7U9Ji7b9H7Naaewa3ZfdCGcnb9 Ubw8Y0qr/U5sDRM3g7xklSd7YqNjMDc7NeRaF/Iw8A88wJpSf/OK5/lFqTLRFuab bRHc5C3fbwNFn909vGqTgOmE5V35tJwR5uonlYnku1BP57TbyNlcnnhBmdaPxd2Y RPpFSI9oskynAyd+PY4BtyCGoaTew7+drLFKrb8Cxw/7O2+kHlnMhlPaOh09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqZxe9UADAtoh/IBC9SiT2H3SPaYwHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+u6YqcKdpBZJKnzUM/TQZ1z9yYgblqK1yY zw94q5qLJE7JrNBqvIu7AdvGY68u3eiWI0/4rJWK4puFtRi2ZX6WlSZLIguTVgKr zsNZYCZ2JoJXYlduHh6V9+BUKPcWIRsmixhOYfmbjNwoJ2+mXBObR+EyNBf1MGun 4lKhdaYrUKH9eEs4/OR4djUtHb6hXOaho1hABfCLMYrFaUZSDwEk27t/1Oew26re YiPeUQbEEMammvm4lmOmXVEgdv5V3P9m8VEQFd1edy67hdP3McPwvTed8MrA9cJr h+H01rhE99C+xROJlhJURq4CDjP8rHpEIoGYGm3SrMGEMLnu8WM= -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:16 2025 by rpki-client