This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: 3sEIVC4QaVRVGEaqswtwKIjNjW/J5va8rQQ9Bl79ZAw= Subject key identifier: 9B:A4:61:42:F0:8C:27:0A:F0:99:CC:D1:A6:AC:F6:F4:5B:AC:93:88 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 46510BE6D697739ECA696A513CD3AD23C9792BE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 03D1 Signing time: Tue 02 Dec 2025 05:10:01 +0000 Manifest this update: Tue 02 Dec 2025 05:05:01 +0000 Manifest next update: Fri 05 Dec 2025 11:44:01 +0000 Files and hashes: 1: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) 2: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) 3: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 4: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: xuwBmusKJj3cCjUIa/x1o+fRc+EDx2kZWHdb213arGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:51:0b:e6:d6:97:73:9e:ca:69:6a:51:3c:d3:ad:23:c9:79:2b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Dec 2 05:05:01 2025 GMT Not After : Dec 5 11:44:01 2025 GMT Subject: CN=9BA46142F08C270AF099CCD1A6ACF6F45BAC9388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:aa:96:d6:55:15:10:d7:d0:c7:71:92:72:b5: 5f:4c:14:23:49:48:72:f9:d1:56:bb:63:c7:a7:5c: 01:ec:cc:e6:4e:e8:c9:c8:2e:3b:a6:80:e2:ea:40: 0f:20:fc:d1:23:fb:26:76:d6:1b:2d:c5:ae:57:96: d8:df:b3:97:d8:e7:82:37:5d:fa:06:cf:06:33:ae: a7:f0:8e:2d:9c:52:c5:9f:e0:85:c2:fc:04:d0:da: 16:a7:43:41:0c:cc:7f:d1:2e:2e:8b:71:d5:09:6b: 4b:1f:50:f3:97:b6:88:15:07:19:3b:c8:47:2f:a2: a6:5c:78:2a:c4:1a:e0:91:57:f4:83:d3:e2:54:d7: 24:6c:be:e3:9b:61:26:76:d0:b3:20:a7:1a:93:4b: 66:06:58:d4:99:37:cb:d2:e5:00:99:a8:ba:06:2c: 6e:b8:f1:a8:d0:9f:c9:23:51:f8:be:a3:10:22:4a: 0a:0b:0a:0d:16:37:fd:e9:8c:f2:67:a8:49:ae:51: 7f:38:05:01:30:0c:d5:6b:77:d4:29:eb:ec:47:61: 2d:3b:e9:98:57:2b:48:2a:74:66:cc:b2:82:28:32: 86:39:2f:d2:51:c0:fa:ce:9a:28:69:42:76:07:6b: df:0b:68:71:ad:f5:e2:43:1f:b3:f3:18:45:f3:ea: ac:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A4:61:42:F0:8C:27:0A:F0:99:CC:D1:A6:AC:F6:F4:5B:AC:93:88 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:30:c1:5c:b0:63:1a:64:89:b8:b8:f5:ef:52:06:1f:ae:cf: 6e:55:b6:6f:01:d1:d7:35:e7:08:98:e7:f2:0c:77:c9:28:a0: 1a:a3:f4:73:e2:26:64:0c:80:dc:fe:1a:b5:67:2c:1e:39:b3: f0:e1:a5:33:02:b3:9d:f8:57:fc:29:ab:8a:ce:5a:2e:4f:7d: fd:50:d6:0f:6b:02:da:66:90:c4:ba:8c:a9:d8:0b:db:0d:55: 64:2c:f9:d2:ff:f3:4c:63:d4:d0:25:e4:71:d4:48:c7:98:67: ab:e1:e9:12:4a:b2:10:a1:56:03:e1:a4:e2:c9:3e:bd:03:31: 55:a9:97:37:3d:33:0b:b8:d9:02:a0:48:8f:9f:e6:17:de:8b: 7e:39:47:81:d6:25:a0:bb:bf:de:b8:b5:28:5a:eb:f6:41:ca: d5:51:2a:ea:18:ca:9d:1b:b2:66:2b:75:11:c0:a5:74:70:59: 83:b5:d5:76:25:df:dc:b7:06:12:ed:cb:42:53:1a:d6:1b:a3: 86:1f:9d:54:bc:38:93:a7:87:9e:6c:3d:b4:fb:c7:25:d6:92: 24:b1:8e:d3:41:5f:e9:e2:89:86:4e:a1:52:c5:d6:ba:c3:aa: 69:f6:9e:78:16:13:75:15:fc:0f:56:39:21:3b:7d:00:13:2d: ee:1a:3e:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlEL5taXc57KaWpRPNOtI8l5K+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTEyMDIwNTA1MDFaFw0yNTEyMDUxMTQ0MDFaMDMxMTAvBgNV BAMTKDlCQTQ2MTQyRjA4QzI3MEFGMDk5Q0NEMUE2QUNGNkY0NUJBQzkzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqpbWVRUQ19DHcZJytV9MFCNJ SHL50Va7Y8enXAHszOZO6MnILjumgOLqQA8g/NEj+yZ21hstxa5Xltjfs5fY54I3 XfoGzwYzrqfwji2cUsWf4IXC/ATQ2hanQ0EMzH/RLi6LcdUJa0sfUPOXtogVBxk7 yEcvoqZceCrEGuCRV/SD0+JU1yRsvuObYSZ20LMgpxqTS2YGWNSZN8vS5QCZqLoG LG648ajQn8kjUfi+oxAiSgoLCg0WN/3pjPJnqEmuUX84BQEwDNVrd9Qp6+xHYS07 6ZhXK0gqdGbMsoIoMoY5L9JRwPrOmihpQnYHa98LaHGt9eJDH7PzGEXz6qxzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6RhQvCMJwrwmczRpqz29Fusk4gwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUwwVywYxpkibi49e9SBh+uz25Vtm8B0dc1 5wiY5/IMd8kooBqj9HPiJmQMgNz+GrVnLB45s/DhpTMCs534V/wpq4rOWi5Pff1Q 1g9rAtpmkMS6jKnYC9sNVWQs+dL/80xj1NAl5HHUSMeYZ6vh6RJKshChVgPhpOLJ Pr0DMVWplzc9Mwu42QKgSI+f5hfei345R4HWJaC7v964tSha6/ZBytVRKuoYyp0b smYrdRHApXRwWYO11XYl39y3BhLty0JTGtYbo4YfnVS8OJOnh55sPbT7xyXWkiSx jtNBX+niiYZOoVLF1rrDqmn2nngWE3UV/A9WOSE7fQATLe4aPuk= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:05 2025 by rpki-client