This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft (raw, json) Hash identifier: jRvAODNU7CCTSOG5ZiWdq20+DaMKAISxrhxCJVtgk4g= Subject key identifier: B0:B4:B5:CE:A5:AF:D3:8C:48:CB:FC:13:63:A2:DF:97:51:31:55:E6 Authority key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Certificate issuer: /CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Certificate serial: 228BDB74D7C3F9F16B5A72E8681FF912A1B17C74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft Manifest number: 021C Signing time: Wed 03 Dec 2025 02:01:28 +0000 Manifest this update: Wed 03 Dec 2025 01:56:28 +0000 Manifest next update: Sat 06 Dec 2025 13:08:28 +0000 Files and hashes: 1: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl (hash: z0hU+sxNGo9fLHF7DZfVZ5X5y0yLWZ1iwVt9btyz360=) 2: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: hy+/jpVeqW5ZdBPpsEQxih0c4zQVAJjPaRw4KAPp/Ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8b:db:74:d7:c3:f9:f1:6b:5a:72:e8:68:1f:f9:12:a1:b1:7c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Validity Not Before: Dec 3 01:56:28 2025 GMT Not After : Dec 6 13:08:28 2025 GMT Subject: CN=B0B4B5CEA5AFD38C48CBFC1363A2DF97513155E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:2c:64:7c:d4:7e:71:77:2e:ad:44:4e:10: 57:53:60:ac:7c:34:61:d2:53:d3:f2:c5:cd:d8:02: 47:2b:a2:c6:7b:91:9d:7a:09:b8:1d:25:97:a2:39: 3a:4d:e3:aa:42:e6:af:72:d3:16:b7:89:0c:c1:2d: d8:86:c6:95:0d:26:d1:35:a0:3d:f7:ed:33:2d:31: 1a:c7:ec:44:35:1f:c6:2f:07:49:45:40:b5:cc:f8: 36:1a:de:06:ec:c2:ab:6e:6c:f1:87:ed:93:a6:1a: 67:90:04:64:3a:c3:bd:66:77:34:74:4f:4b:99:64: a8:2f:f6:69:b1:d9:78:fe:b1:0a:8a:e5:39:d4:49: 6c:d6:4f:40:53:04:ee:82:3b:d9:db:63:fd:5b:fa: fe:f6:ec:96:73:8c:0f:d8:80:a4:bb:76:0d:ec:52: 85:f9:0d:ae:f2:7d:78:6c:6f:bf:d4:76:b3:9a:14: 36:5d:00:58:c9:5c:1e:62:b4:d1:14:ef:0c:6b:f9: 93:da:56:72:aa:1b:8f:5e:54:7d:77:e1:c1:72:19: 2a:cb:4d:f5:1b:54:89:90:4d:15:bd:2a:00:6b:b7: b8:66:24:b6:f1:f1:06:82:d8:eb:3b:6a:0e:c6:ef: 10:be:25:76:45:87:6e:3f:30:56:05:60:58:6c:9f: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B4:B5:CE:A5:AF:D3:8C:48:CB:FC:13:63:A2:DF:97:51:31:55:E6 X509v3 Authority Key Identifier: keyid:40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:91:63:1f:72:0b:0e:ea:80:8c:1e:fe:06:97:aa:5b:39:64: 32:89:d7:d6:9f:a4:85:d8:78:02:b2:cd:36:e7:67:88:25:f6: 69:d6:50:0d:5e:bb:91:b2:24:4b:77:4b:fd:60:b5:43:92:7f: 1e:ca:75:eb:31:af:f9:db:44:00:5b:be:30:2d:fe:3d:25:4a: 73:c7:d1:a5:4a:92:61:17:92:80:15:b8:c3:aa:bd:9f:51:4e: c3:74:34:53:18:27:d2:82:34:2a:f8:99:f6:1d:2b:6a:c7:b6: 85:44:80:36:c2:98:ca:80:c6:0a:d8:db:dd:a8:bd:f7:ec:8a: 78:dd:0c:d2:5d:78:33:cc:ca:f9:56:09:a0:3e:1f:c5:89:f4: fd:39:b0:db:91:6e:de:b1:0f:79:08:e2:22:f3:7d:54:f4:b7: 41:cc:21:84:d6:22:92:d8:72:19:68:06:0a:50:2c:c6:a7:71: 9e:28:29:7b:11:76:51:a8:e5:4f:d5:96:56:11:6d:1e:15:4a: 6a:78:b1:ef:f4:8d:44:58:94:d9:93:a7:74:8d:9c:48:ce:87: fe:6a:1e:2d:a0:5e:7b:6c:0c:a7:11:32:c9:41:16:4a:83:44: 4c:56:cf:18:6d:ba:43:26:bb:75:a8:e2:17:32:e9:d1:6e:d4: 43:b0:c0:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIovbdNfD+fFrWnLoaB/5EqGxfHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5 MTVBQzc2RDAeFw0yNTEyMDMwMTU2MjhaFw0yNTEyMDYxMzA4MjhaMDMxMTAvBgNV BAMTKEIwQjRCNUNFQTVBRkQzOEM0OENCRkMxMzYzQTJERjk3NTEzMTU1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjyixkfNR+cXcurUROEFdTYKx8 NGHSU9Pyxc3YAkcrosZ7kZ16CbgdJZeiOTpN46pC5q9y0xa3iQzBLdiGxpUNJtE1 oD337TMtMRrH7EQ1H8YvB0lFQLXM+DYa3gbswqtubPGH7ZOmGmeQBGQ6w71mdzR0 T0uZZKgv9mmx2Xj+sQqK5TnUSWzWT0BTBO6CO9nbY/1b+v727JZzjA/YgKS7dg3s UoX5Da7yfXhsb7/UdrOaFDZdAFjJXB5itNEU7wxr+ZPaVnKqG49eVH134cFyGSrL TfUbVImQTRW9KgBrt7hmJLbx8QaC2Os7ag7G7xC+JXZFh24/MFYFYFhsn+AVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsLS1zqWv04xIy/wTY6Lfl1ExVeYwHwYDVR0j BBgwFoAUQHBqXM+olsjuDB+aW23NoZFax20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMC80MDcwNkE1Q0NG QTg5NkM4RUUwQzFGOUE1QjZEQ0RBMTkxNUFDNzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5MTVB Qzc2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENE QTE5MTVBQzc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKRYx9yCw7qgIwe/gaXqls5ZDKJ19afpIXY eAKyzTbnZ4gl9mnWUA1eu5GyJEt3S/1gtUOSfx7Kdesxr/nbRABbvjAt/j0lSnPH 0aVKkmEXkoAVuMOqvZ9RTsN0NFMYJ9KCNCr4mfYdK2rHtoVEgDbCmMqAxgrY292o vffsinjdDNJdeDPMyvlWCaA+H8WJ9P05sNuRbt6xD3kI4iLzfVT0t0HMIYTWIpLY chloBgpQLMancZ4oKXsRdlGo5U/VllYRbR4VSmp4se/0jURYlNmTp3SNnEjOh/5q Hi2gXntsDKcRMslBFkqDRExWzxhtukMmu3Wo4hcy6dFu1EOwwGc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:28 2025 by rpki-client