This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: 00ZHPzuhYBxLWNUVHP4J6s/tuAluNcSL86R2zXQTKyU= Subject key identifier: 4F:D3:62:F4:AF:BD:1E:B5:75:2B:20:09:3A:D5:3D:8C:0E:AF:06:68 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 438030FAB51B74140EDF3DA4E99A4E96AF4E58B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 03D8 Signing time: Wed 17 Dec 2025 18:30:01 +0000 Manifest this update: Wed 17 Dec 2025 18:25:01 +0000 Manifest next update: Sun 21 Dec 2025 01:31:01 +0000 Files and hashes: 1: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) 2: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: JI4Y66B+3vwl8K+y1joz7X97QYPaPUOCuO0ACm/CRCk=) 3: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:80:30:fa:b5:1b:74:14:0e:df:3d:a4:e9:9a:4e:96:af:4e:58:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Dec 17 18:25:01 2025 GMT Not After : Dec 21 01:31:01 2025 GMT Subject: CN=4FD362F4AFBD1EB5752B20093AD53D8C0EAF0668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:f7:8f:3f:66:b6:eb:66:cd:54:76:c5:b8: ff:a5:76:19:9a:20:68:a2:8b:4b:d9:be:87:94:69: 2a:90:47:42:de:6e:74:3e:0a:c0:3b:e5:37:e8:d7: 17:14:12:69:f9:cd:37:71:fc:0c:79:cd:9b:55:da: 87:e5:93:e7:79:7b:7f:d5:3e:84:62:55:9d:f1:cc: 2b:fc:cb:c6:fa:c7:a8:84:63:11:2d:ea:7e:8a:1c: 4f:30:75:42:b2:50:9b:06:18:b9:96:62:47:57:c4: ed:26:6a:be:f5:42:cd:2d:cb:ce:a1:a0:7b:ea:b7: 03:d2:35:aa:55:59:1b:52:ed:ee:d1:60:5c:87:5d: f1:fd:91:cc:66:95:ae:4b:59:9c:66:7c:ba:a6:8b: 79:c9:ad:01:61:d3:1d:7c:4b:91:45:f3:b3:d8:04: 46:2f:0d:eb:9d:4f:3a:31:a0:72:d7:bd:0b:97:8e: ed:e9:18:a2:d4:08:d0:bd:e9:63:fa:4e:71:3a:a2: 13:bf:7f:21:59:bf:c7:3d:00:68:58:5d:6a:57:11: 73:65:31:36:74:7e:9b:b3:44:89:56:05:f7:ec:3a: c1:06:de:ea:bf:34:3b:bf:0b:c7:25:27:81:d2:ab: 8d:8b:63:a5:e0:3c:40:2a:e7:78:f2:d1:69:ca:4d: c4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D3:62:F4:AF:BD:1E:B5:75:2B:20:09:3A:D5:3D:8C:0E:AF:06:68 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cc:f9:57:e9:2e:a7:04:bd:1d:23:c0:80:e6:49:89:dd:c0: a9:c9:6a:35:51:ed:33:9b:d1:41:94:48:a1:80:c9:7a:b6:33: b5:33:bf:b3:97:a3:ce:a6:4c:b6:97:48:8e:f1:df:39:25:33: 98:b4:3a:90:05:43:1d:4b:52:91:cf:f7:a8:fd:1f:03:09:33: 58:9b:b9:09:a7:48:a1:01:6c:3f:3f:7e:97:57:96:b1:48:9e: ae:d0:47:dd:24:92:78:91:87:ed:3c:f9:ba:9f:e9:76:4f:d4: c5:24:76:3d:a9:97:7b:6a:77:42:38:9f:8b:11:23:d7:77:8f: 4b:92:6e:2f:1f:75:b4:4e:05:14:ba:30:4f:92:99:06:f7:4f: 2a:8d:0e:88:95:bf:d1:b7:72:cc:0f:3a:ff:14:78:14:cb:ce: 69:01:3b:ee:0b:e4:7e:77:47:fc:f7:f4:88:f2:5c:dd:e4:2d: a2:91:c3:4b:4d:e3:3f:0f:97:7f:b0:9d:07:a0:d9:74:1f:8a: c0:fc:d4:ef:8f:21:af:5c:7f:29:c2:e2:9f:96:bd:4a:3c:2b: 7b:c3:83:67:07:b6:6e:22:67:4f:47:77:94:94:e3:71:0e:38: e7:2d:1b:72:7d:ad:79:97:e7:62:e7:6c:68:5e:71:ad:22:e8: b0:14:9f:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4Aw+rUbdBQO3z2k6ZpOlq9OWLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTEyMTcxODI1MDFaFw0yNTEyMjEwMTMxMDFaMDMxMTAvBgNV BAMTKDRGRDM2MkY0QUZCRDFFQjU3NTJCMjAwOTNBRDUzRDhDMEVBRjA2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClj/ePP2a262bNVHbFuP+ldhma IGiii0vZvoeUaSqQR0LebnQ+CsA75Tfo1xcUEmn5zTdx/Ax5zZtV2oflk+d5e3/V PoRiVZ3xzCv8y8b6x6iEYxEt6n6KHE8wdUKyUJsGGLmWYkdXxO0mar71Qs0ty86h oHvqtwPSNapVWRtS7e7RYFyHXfH9kcxmla5LWZxmfLqmi3nJrQFh0x18S5FF87PY BEYvDeudTzoxoHLXvQuXju3pGKLUCNC96WP6TnE6ohO/fyFZv8c9AGhYXWpXEXNl MTZ0fpuzRIlWBffsOsEG3uq/NDu/C8clJ4HSq42LY6XgPEAq53jy0WnKTcSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9Ni9K+9HrV1KyAJOtU9jA6vBmgwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHM+VfpLqcEvR0jwIDmSYndwKnJajVR7TOb 0UGUSKGAyXq2M7Uzv7OXo86mTLaXSI7x3zklM5i0OpAFQx1LUpHP96j9HwMJM1ib uQmnSKEBbD8/fpdXlrFInq7QR90kkniRh+08+bqf6XZP1MUkdj2pl3tqd0I4n4sR I9d3j0uSbi8fdbROBRS6ME+SmQb3TyqNDoiVv9G3cswPOv8UeBTLzmkBO+4L5H53 R/z39IjyXN3kLaKRw0tN4z8Pl3+wnQeg2XQfisD81O+PIa9cfynC4p+WvUo8K3vD g2cHtm4iZ09Hd5SU43EOOOctG3J9rXmX52LnbGheca0i6LAUn9Q= -----END CERTIFICATE-----Generated at Fri Dec 19 06:59:52 2025 by rpki-client