This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: JdihcyFu5A4Q+r3nijHRJ2E/Vl6J9FbP/DdNLHPobuI= Subject key identifier: C5:85:51:18:24:0C:6A:E1:C1:BD:29:61:0B:76:F5:1B:BB:99:CE:28 Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 689CA295BE0A223E13AD5594EDC6590CC01146D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: DC Signing time: Wed 03 Dec 2025 08:02:30 +0000 Manifest this update: Wed 03 Dec 2025 07:57:30 +0000 Manifest next update: Sat 06 Dec 2025 13:50:30 +0000 Files and hashes: 1: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: gOnGfuRTcZIR+30ZYAMikHYwYT1lMfTYagdIRfIVS+c=) 2: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: LnoUiVTC+YkZ5Y/4/Q1S1mXaeabC5U6lsaInD923/gY=) 3: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng=) 4: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: sMbYkM2WRtFlp3ZKFLvaUVr5XN5S/5qc+601q5suGBk=) 5: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9c:a2:95:be:0a:22:3e:13:ad:55:94:ed:c6:59:0c:c0:11:46:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Dec 3 07:57:30 2025 GMT Not After : Dec 6 13:50:30 2025 GMT Subject: CN=C5855118240C6AE1C1BD29610B76F51BBB99CE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:fa:65:a9:a9:ee:b3:31:ec:eb:6f:2c:01: 66:d7:e1:df:22:28:04:8a:b7:00:81:8a:e6:4d:5c: 85:dd:55:a7:cc:72:a6:f6:dd:c1:d9:41:2e:a9:f8: 8e:f1:67:ef:3b:08:4b:cc:09:68:ba:4d:81:5b:78: d6:7b:91:20:44:28:19:57:67:a1:47:f4:56:c6:b8: 82:a1:71:cb:20:c7:57:40:c9:15:72:6c:7d:c0:28: 9a:1c:d6:dd:5d:71:dc:bc:de:e4:01:2d:0e:25:80: 56:4e:3a:16:25:4b:07:8d:a0:49:00:93:25:4b:ff: 8c:f4:6e:e9:dd:7f:35:18:f8:d6:51:09:fd:3e:7c: 29:74:2c:21:2b:54:7a:85:5d:44:1e:8e:82:12:dc: 48:25:6e:c6:3b:81:f8:c8:80:dd:17:59:0a:2a:fc: 45:06:02:bd:7d:df:39:eb:a9:73:19:92:17:7b:7c: bb:eb:7d:9e:5e:59:5e:d0:52:50:31:74:db:47:f8: 78:59:a2:ec:6b:0c:18:23:f2:27:0c:b6:da:cd:9f: e4:18:de:04:7e:5b:93:f6:26:c5:e6:70:06:14:60: 24:ec:d6:02:52:cc:1a:22:ff:60:82:d0:f3:06:a6: 14:2c:3a:ec:6b:43:95:4d:e1:af:fd:b2:d2:2c:79: c2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:85:51:18:24:0C:6A:E1:C1:BD:29:61:0B:76:F5:1B:BB:99:CE:28 X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:86:c6:71:91:98:cc:5d:41:6b:fe:89:d1:82:8c:59:27:82: 4b:72:df:b3:1e:1f:a6:82:06:7e:8a:b5:a1:98:c6:12:83:c9: 6d:92:84:a1:4e:2a:32:b0:69:e8:51:b8:85:36:af:9b:60:54: 34:cd:64:8f:65:aa:77:b5:ca:32:e1:92:35:23:12:ad:c5:ed: 0f:66:91:bd:2e:bd:de:62:a7:ae:2b:79:61:e5:be:d2:c0:23: b0:24:6b:de:66:dd:3e:c1:42:fc:5f:4a:fb:fb:3d:42:95:11: a6:cd:bb:ed:3d:73:4b:ac:c9:94:b6:15:05:95:c3:45:4e:a5: 05:9f:72:9a:79:92:a1:39:05:a7:e8:d3:39:1b:50:18:13:b6: 30:a0:7a:f4:9f:e4:1d:ea:4f:50:95:28:df:da:4c:39:9a:bc: e0:ca:12:ff:54:6f:27:ee:74:db:03:3c:44:1e:a4:71:7b:14: 13:f5:58:da:73:03:c6:0d:52:40:c2:b7:ac:3f:b6:e8:4b:16: 6e:45:fb:5b:03:57:4c:d2:61:9c:41:48:cd:d7:20:36:17:e9: 60:b1:8b:06:d1:b3:80:f1:f9:67:5e:1a:cc:12:78:51:38:25: f0:95:68:a5:40:6e:39:23:a4:67:ee:97:be:90:56:57:6f:a8: 8b:7f:70:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJyilb4KIj4TrVWU7cZZDMARRtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTEyMDMwNzU3MzBaFw0yNTEyMDYxMzUwMzBaMDMxMTAvBgNV BAMTKEM1ODU1MTE4MjQwQzZBRTFDMUJEMjk2MTBCNzZGNTFCQkI5OUNFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIb/plqanuszHs628sAWbX4d8i KASKtwCBiuZNXIXdVafMcqb23cHZQS6p+I7xZ+87CEvMCWi6TYFbeNZ7kSBEKBlX Z6FH9FbGuIKhccsgx1dAyRVybH3AKJoc1t1dcdy83uQBLQ4lgFZOOhYlSweNoEkA kyVL/4z0bundfzUY+NZRCf0+fCl0LCErVHqFXUQejoIS3EglbsY7gfjIgN0XWQoq /EUGAr193znrqXMZkhd7fLvrfZ5eWV7QUlAxdNtH+HhZouxrDBgj8icMttrNn+QY 3gR+W5P2JsXmcAYUYCTs1gJSzBoi/2CC0PMGphQsOuxrQ5VN4a/9stIsecIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxYVRGCQMauHBvSlhC3b1G7uZzigwHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiGxnGRmMxdQWv+idGCjFkngkty37MeH6aC Bn6KtaGYxhKDyW2ShKFOKjKwaehRuIU2r5tgVDTNZI9lqne1yjLhkjUjEq3F7Q9m kb0uvd5ip64reWHlvtLAI7Aka95m3T7BQvxfSvv7PUKVEabNu+09c0usyZS2FQWV w0VOpQWfcpp5kqE5Bafo0zkbUBgTtjCgevSf5B3qT1CVKN/aTDmavODKEv9Ubyfu dNsDPEQepHF7FBP1WNpzA8YNUkDCt6w/tuhLFm5F+1sDV0zSYZxBSM3XIDYX6WCx iwbRs4Dx+WdeGswSeFE4JfCVaKVAbjkjpGful76QVldvqIt/cJA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:29 2025 by rpki-client