This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: yIyguRxAB686fVIXKkk+WHZcEz1uzSNCK4eYEHfcJIQ= Subject key identifier: CF:46:81:B2:E6:99:20:5A:35:39:AD:93:9B:FC:EF:DE:11:3D:9D:68 Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 0F1074421E75FBBCD7915860350E94295CCF5394 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: E2 Signing time: Wed 17 Dec 2025 05:12:29 +0000 Manifest this update: Wed 17 Dec 2025 05:07:29 +0000 Manifest next update: Sat 20 Dec 2025 07:33:29 +0000 Files and hashes: 1: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: 1EhrlCSdK+WWZDrzl3DT6MhGwhAVdC3zg5d9xeXhR7I=) 2: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) 3: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: LnoUiVTC+YkZ5Y/4/Q1S1mXaeabC5U6lsaInD923/gY=) 4: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng=) 5: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: gOnGfuRTcZIR+30ZYAMikHYwYT1lMfTYagdIRfIVS+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 07:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:10:74:42:1e:75:fb:bc:d7:91:58:60:35:0e:94:29:5c:cf:53:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Dec 17 05:07:29 2025 GMT Not After : Dec 20 07:33:29 2025 GMT Subject: CN=CF4681B2E699205A3539AD939BFCEFDE113D9D68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:3d:73:0f:15:2e:79:e7:af:e5:ad:ca:3a: 99:7c:a2:52:20:1d:5c:12:a2:7d:8c:5b:25:04:82: 88:7f:9b:5c:57:23:0f:10:50:1b:7d:1d:79:e9:c1: b4:60:8a:d5:92:13:9a:15:f0:34:5e:96:06:f9:90: f3:a1:46:4b:5e:45:06:71:d9:0c:a1:88:0e:79:a1: cd:0e:a2:7d:56:8c:22:ac:97:08:63:aa:6f:64:c8: 6f:2f:47:38:26:e0:f2:2c:19:b6:0f:c0:38:f1:3b: ad:e8:70:6e:57:72:1c:54:43:76:ff:aa:4e:e0:b7: f6:d9:75:b3:e3:01:41:45:37:b9:dd:44:a3:5e:b0: 8c:1a:af:35:6f:cf:2b:49:7b:d2:36:c8:fa:1d:37: d6:5d:0b:41:a7:8c:d4:6d:56:0d:66:06:6c:5e:ca: c6:a0:e2:68:55:cb:8a:21:ac:c1:8d:18:c7:51:a8: 3a:17:47:20:6f:19:ed:6a:41:00:e9:50:dd:ed:18: 3d:3e:b4:af:03:cb:7a:70:9a:c0:0f:c2:9d:50:53: 36:e4:35:98:ae:79:d8:81:2b:51:8c:5d:c0:dc:91: 37:b0:1f:f9:41:70:f7:02:42:9b:6e:c8:59:3f:d1: 00:e5:05:bd:99:1c:e0:d0:e6:73:00:22:99:b8:35: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:46:81:B2:E6:99:20:5A:35:39:AD:93:9B:FC:EF:DE:11:3D:9D:68 X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6d:1b:ae:5b:07:ac:55:c0:3d:03:c4:20:e5:31:b5:ae:65: b7:b6:51:c7:63:e9:d1:17:55:c0:8c:a8:e9:1e:7f:8e:b7:b8: 46:ca:37:d2:f9:46:72:42:ad:7a:ae:79:d0:e9:34:78:29:94: 70:fd:e5:b0:4c:29:d9:47:41:89:4d:ed:8c:b6:1a:6d:45:0f: de:2b:c3:53:b8:22:f7:dd:bf:15:93:57:cd:d0:5f:5a:1b:b6: ba:56:32:f7:b5:0e:38:29:ae:4d:9f:cc:ba:19:a8:a6:5b:8f: 44:25:51:74:0f:54:35:72:97:71:f6:e0:5c:db:c7:df:e3:51: 2f:3c:5d:93:49:08:53:e8:c5:94:03:43:a5:f3:a7:aa:36:f0: 1d:fa:2d:e0:17:b4:a4:f3:38:b6:69:c3:ff:32:a3:4b:6b:44: 10:07:b6:e4:9e:de:75:1d:8a:aa:22:5b:fc:a9:57:5d:54:a6: f6:fa:ea:bc:d5:29:b1:d4:62:5f:8d:7f:4b:1e:90:9b:ba:94: b2:e1:19:f8:f5:cb:19:56:de:7f:66:5b:51:d3:ae:61:a8:9a: a3:1c:25:3e:a1:f0:5c:2a:d9:8a:d9:a6:69:ce:da:bf:5b:66: ae:71:cf:85:90:36:8d:fd:5c:d1:06:f0:b3:3b:c7:6a:e1:80: e0:c9:c7:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDxB0Qh51+7zXkVhgNQ6UKVzPU5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTEyMTcwNTA3MjlaFw0yNTEyMjAwNzMzMjlaMDMxMTAvBgNV BAMTKENGNDY4MUIyRTY5OTIwNUEzNTM5QUQ5MzlCRkNFRkRFMTEzRDlENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfj1zDxUueeev5a3KOpl8olIg HVwSon2MWyUEgoh/m1xXIw8QUBt9HXnpwbRgitWSE5oV8DRelgb5kPOhRkteRQZx 2QyhiA55oc0Oon1WjCKslwhjqm9kyG8vRzgm4PIsGbYPwDjxO63ocG5XchxUQ3b/ qk7gt/bZdbPjAUFFN7ndRKNesIwarzVvzytJe9I2yPodN9ZdC0GnjNRtVg1mBmxe ysag4mhVy4ohrMGNGMdRqDoXRyBvGe1qQQDpUN3tGD0+tK8Dy3pwmsAPwp1QUzbk NZiuediBK1GMXcDckTewH/lBcPcCQptuyFk/0QDlBb2ZHODQ5nMAIpm4NZrPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz0aBsuaZIFo1Oa2Tm/zv3hE9nWgwHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZtG65bB6xVwD0DxCDlMbWuZbe2Ucdj6dEX VcCMqOkef463uEbKN9L5RnJCrXquedDpNHgplHD95bBMKdlHQYlN7Yy2Gm1FD94r w1O4IvfdvxWTV83QX1obtrpWMve1Djgprk2fzLoZqKZbj0QlUXQPVDVyl3H24Fzb x9/jUS88XZNJCFPoxZQDQ6Xzp6o28B36LeAXtKTzOLZpw/8yo0trRBAHtuSe3nUd iqoiW/ypV11Upvb66rzVKbHUYl+Nf0sekJu6lLLhGfj1yxlW3n9mW1HTrmGomqMc JT6h8Fwq2YrZpmnO2r9bZq5xz4WQNo39XNEG8LM7x2rhgODJxxo= -----END CERTIFICATE-----Generated at Fri Dec 19 00:55:21 2025 by rpki-client