This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft File: 407919FF69A512DDAE7CCD48BE288F17073A5512.mft (raw, json) Hash identifier: q6SwjmyrIGW6K7llEXdQ6VDagefiSDXLqU1Wa/E0554= Subject key identifier: A3:97:46:EE:42:FA:BB:37:BE:32:6E:24:D9:9D:DD:CF:55:09:A4:69 Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Certificate serial: 0F49065478554546DFD11290EF4FD11A4355922B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft Manifest number: DD Signing time: Fri 19 Dec 2025 20:22:25 +0000 Manifest this update: Fri 19 Dec 2025 20:17:25 +0000 Manifest next update: Tue 23 Dec 2025 04:19:25 +0000 Files and hashes: 1: 407919FF69A512DDAE7CCD48BE288F17073A5512.crl (hash: j83W+BQE/YJ9J0gSo2O3mhtWGxnQK52d5BRB0ABvBFU=) 2: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: rgW49bD9jOG05sHGGVXJ7K4U0Fs52fl5W3GSqo/JMxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:49:06:54:78:55:45:46:df:d1:12:90:ef:4f:d1:1a:43:55:92:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Validity Not Before: Dec 19 20:17:25 2025 GMT Not After : Dec 23 04:19:25 2025 GMT Subject: CN=A39746EE42FABB37BE326E24D99DDDCF5509A469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:c3:31:59:e0:17:3d:de:ee:f1:5f:33:e6: f3:15:41:d0:5d:c7:26:26:79:c4:f8:e2:9c:34:2b: ab:95:41:30:a7:3a:72:10:24:62:66:df:62:23:72: 95:6e:8c:3b:4f:92:5d:64:03:ef:8f:84:d6:2c:c5: 2c:fd:57:7f:d1:81:97:e3:64:64:66:74:83:5d:9a: 29:41:b1:bb:56:22:91:ad:8c:78:32:19:1b:d7:af: 8e:75:a2:fb:37:d1:98:8f:b0:7e:30:e9:be:02:fd: 48:7b:dd:26:5b:f1:b6:8c:3f:f7:0b:b0:20:45:39: 04:74:39:3e:76:ef:5d:80:ca:ab:ef:8e:75:07:93: 2b:16:fe:b5:89:8c:c9:39:32:ab:ca:76:68:6c:d7: 66:0a:2b:23:51:17:18:89:c4:c3:37:ef:0f:c5:e0: 8c:e4:39:f7:27:62:80:10:44:10:5b:99:03:be:be: 13:d9:23:71:f9:c7:2b:fa:b1:19:87:d9:e5:4b:2a: 2b:e7:1d:47:61:1d:64:e8:bc:9d:6e:99:1f:0a:33: cd:6b:64:83:e4:2e:bc:e4:89:ed:3e:99:ce:f0:50: 2e:ba:2f:14:cc:26:16:be:65:ee:93:a8:97:07:77: ba:ff:5d:67:30:96:23:6c:cb:fc:c2:b8:a3:14:6c: 1a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:97:46:EE:42:FA:BB:37:BE:32:6E:24:D9:9D:DD:CF:55:09:A4:69 X509v3 Authority Key Identifier: keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f9:db:f3:7f:31:39:cc:cb:a6:6e:10:e1:f3:2d:0c:05:9b: be:3e:24:08:be:bd:f3:55:f6:39:d8:2e:a8:53:11:c9:1b:b9: ac:68:66:32:b6:02:aa:00:81:5e:ca:81:32:62:39:17:e6:b7: 27:db:c3:46:7d:8a:05:13:2b:ff:af:bc:69:a9:6b:1a:e3:64: 51:13:97:f8:a8:2c:c2:fc:f7:67:7a:1e:48:8f:3e:17:31:f0: 5c:93:89:07:6b:34:d8:47:d4:c7:f4:b9:0f:f7:e3:43:a9:52: 1a:44:d7:97:39:50:16:51:fa:64:c3:69:93:08:57:88:4c:02: c7:b6:b9:ce:9e:b1:f3:87:f1:fd:b4:e0:98:6b:92:db:0a:f9: 57:da:ac:86:58:cf:c1:3c:55:3f:ff:fe:5e:f8:de:cb:52:5d: 9a:d2:1a:4d:4c:49:67:d9:40:dd:5f:fe:ff:75:9f:6f:9e:56: ff:ea:1b:bd:f6:81:2e:ba:c0:cf:19:45:fa:42:e6:c2:ab:5f: e4:f2:5f:8f:0f:a4:22:4e:7b:a9:51:99:2e:bb:c9:14:45:01: cd:36:90:30:4e:d0:70:d9:c9:45:3b:59:b1:b0:e5:59:cb:91: 84:2b:9b:a0:e6:f6:6f:1b:1a:d9:0e:24:d4:fd:57:dd:d6:61: ba:d5:51:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0kGVHhVRUbf0RKQ70/RGkNVkiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw NzNBNTUxMjAeFw0yNTEyMTkyMDE3MjVaFw0yNTEyMjMwNDE5MjVaMDMxMTAvBgNV BAMTKEEzOTc0NkVFNDJGQUJCMzdCRTMyNkUyNEQ5OURERENGNTUwOUE0NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWMMxWeAXPd7u8V8z5vMVQdBd xyYmecT44pw0K6uVQTCnOnIQJGJm32IjcpVujDtPkl1kA++PhNYsxSz9V3/RgZfj ZGRmdINdmilBsbtWIpGtjHgyGRvXr451ovs30ZiPsH4w6b4C/Uh73SZb8baMP/cL sCBFOQR0OT52712AyqvvjnUHkysW/rWJjMk5MqvKdmhs12YKKyNRFxiJxMM37w/F 4IzkOfcnYoAQRBBbmQO+vhPZI3H5xyv6sRmH2eVLKivnHUdhHWTovJ1umR8KM81r ZIPkLrzkie0+mc7wUC66LxTMJha+Ze6TqJcHd7r/XWcwliNsy/zCuKMUbBpjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo5dG7kL6uze+Mm4k2Z3dz1UJpGkwHwYDVR0j BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5 QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB NTUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw MjYtYTIzOGZmNDQ4MDcwLzAvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhG MTcwNzNBNTUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADj52/N/MTnMy6ZuEOHzLQwFm74+JAi+vfNV 9jnYLqhTEckbuaxoZjK2AqoAgV7KgTJiORfmtyfbw0Z9igUTK/+vvGmpaxrjZFET l/ioLML892d6HkiPPhcx8FyTiQdrNNhH1Mf0uQ/340OpUhpE15c5UBZR+mTDaZMI V4hMAse2uc6esfOH8f204JhrktsK+VfarIZYz8E8VT///l743stSXZrSGk1MSWfZ QN1f/v91n2+eVv/qG732gS66wM8ZRfpC5sKrX+TyX48PpCJOe6lRmS67yRRFAc02 kDBO0HDZyUU7WbGw5VnLkYQrm6Dm9m8bGtkOJNT9V93WYbrVUVA= -----END CERTIFICATE-----Generated at Sat Dec 20 07:33:02 2025 by rpki-client