This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: ywk9sX5Xse3bG11Zu8U/iiDJGEYX564yc9qWaa+GaPk= Subject key identifier: 90:C9:FF:C9:B7:27:05:E7:44:F7:B0:61:4D:E1:84:67:EA:1A:BA:64 Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 74699E3C12A0955F62780D003E0C28A588DFA586 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: 0118 Signing time: Mon 01 Dec 2025 21:50:41 +0000 Manifest this update: Mon 01 Dec 2025 21:45:41 +0000 Manifest next update: Fri 05 Dec 2025 04:57:41 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) 2: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: qETlcjBn4to7gBphGjQejgtZPJvwxusmdLCwinEnYL8=) 3: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) 4: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:69:9e:3c:12:a0:95:5f:62:78:0d:00:3e:0c:28:a5:88:df:a5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Dec 1 21:45:41 2025 GMT Not After : Dec 5 04:57:41 2025 GMT Subject: CN=90C9FFC9B72705E744F7B0614DE18467EA1ABA64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:49:89:c1:b3:34:2d:2d:05:71:01:15:07: 6c:5a:e3:88:0a:c7:83:0a:2e:3a:bd:e6:e2:10:00: 45:33:e1:13:24:8c:ea:b4:dd:46:9a:99:ad:c3:17: 1d:be:89:3a:08:4c:23:f9:66:61:77:c8:e2:ad:92: 48:8f:b0:69:50:16:a3:2f:27:f5:ab:00:af:6f:26: 55:23:23:6f:23:22:78:01:17:70:6c:b0:77:1a:a1: ce:bb:9a:e5:2e:27:66:cc:23:ac:31:45:ac:4d:c0: 35:cd:84:e6:5a:94:a9:3b:b9:b2:3a:ab:20:46:b1: 7a:87:d1:ac:4d:f9:b8:26:e8:18:93:3a:9f:36:bc: cc:99:2a:4a:cb:6f:ea:f4:1c:07:39:c3:91:c1:13: 01:f8:66:b2:0b:4c:f3:a9:15:4c:d1:81:4a:c5:87: 92:46:8e:55:b7:cb:d1:ef:bd:ee:4b:51:ae:9c:2c: b4:5d:da:20:98:07:fb:b4:10:82:8c:51:7e:fb:f3: f0:1f:ba:b8:cb:c4:50:c9:57:a9:59:37:c9:39:ae: 8b:36:6d:84:d8:4e:d4:8f:f6:d1:c3:46:69:74:ee: 43:df:0b:bc:2e:d0:61:5a:cb:50:17:fe:8d:f9:0b: 78:d1:90:45:41:97:f4:08:10:d5:79:40:53:d8:97: d1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C9:FF:C9:B7:27:05:E7:44:F7:B0:61:4D:E1:84:67:EA:1A:BA:64 X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ff:42:56:d7:1e:fe:a5:d8:f2:dd:16:95:a8:78:bc:e0:fa: 4d:b1:41:17:7c:2f:6d:84:ae:f2:6a:4b:d6:6f:fb:dd:5e:ed: 45:82:42:5d:cd:71:28:5f:c4:c7:38:b5:ae:56:41:b0:5c:25: 0b:15:31:41:b3:47:81:ed:5e:52:ff:73:8e:32:59:c4:d5:db: 2a:04:c7:1d:60:f0:b4:98:03:97:ea:f5:df:55:88:bc:d1:a9: 4a:e8:9b:6e:89:6e:ce:87:72:e7:1a:4f:02:d5:8d:f3:5b:24: 03:97:2f:ca:76:dc:06:83:46:c7:fe:15:6d:d1:da:64:0c:a7: cf:e2:59:19:61:3d:4a:ba:c7:6c:0f:79:45:dd:bf:51:ab:6a: e2:ba:44:fa:5c:e9:3a:7d:56:20:78:37:e7:b6:d4:77:5a:4d: da:b4:6d:0a:44:b6:56:d5:e2:e2:ef:07:09:f0:bc:c9:81:54: a8:d4:14:7f:5d:84:1d:bf:9e:47:06:55:13:c9:d9:1c:9c:eb: eb:40:d7:91:3d:d8:83:2a:26:1f:77:f6:aa:c6:a5:d4:44:08: 3f:0e:f8:50:3b:a0:e3:2f:3b:93:45:21:a1:0e:53:98:1b:6f: 07:a7:bc:f3:aa:40:04:0d:88:db:7d:5f:73:f1:13:9b:1d:bd: d9:f9:a4:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGmePBKglV9ieA0APgwopYjfpYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNTEyMDEyMTQ1NDFaFw0yNTEyMDUwNDU3NDFaMDMxMTAvBgNV BAMTKDkwQzlGRkM5QjcyNzA1RTc0NEY3QjA2MTRERTE4NDY3RUExQUJBNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj8EmJwbM0LS0FcQEVB2xa44gK x4MKLjq95uIQAEUz4RMkjOq03Uaama3DFx2+iToITCP5ZmF3yOKtkkiPsGlQFqMv J/WrAK9vJlUjI28jIngBF3BssHcaoc67muUuJ2bMI6wxRaxNwDXNhOZalKk7ubI6 qyBGsXqH0axN+bgm6BiTOp82vMyZKkrLb+r0HAc5w5HBEwH4ZrILTPOpFUzRgUrF h5JGjlW3y9Hvve5LUa6cLLRd2iCYB/u0EIKMUX778/AfurjLxFDJV6lZN8k5ros2 bYTYTtSP9tHDRml07kPfC7wu0GFay1AX/o35C3jRkEVBl/QIENV5QFPYl9FvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkMn/ybcnBedE97BhTeGEZ+oaumQwHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj/QlbXHv6l2PLdFpWoeLzg+k2xQRd8L22E rvJqS9Zv+91e7UWCQl3NcShfxMc4ta5WQbBcJQsVMUGzR4HtXlL/c44yWcTV2yoE xx1g8LSYA5fq9d9ViLzRqUrom26Jbs6HcucaTwLVjfNbJAOXL8p23AaDRsf+FW3R 2mQMp8/iWRlhPUq6x2wPeUXdv1GrauK6RPpc6Tp9ViB4N+e21HdaTdq0bQpEtlbV 4uLvBwnwvMmBVKjUFH9dhB2/nkcGVRPJ2Ryc6+tA15E92IMqJh939qrGpdRECD8O +FA7oOMvO5NFIaEOU5gbbwenvPOqQAQNiNt9X3PxE5sdvdn5pDU= -----END CERTIFICATE-----Generated at Wed Dec 3 17:28:59 2025 by rpki-client