This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft File: 407919FF69A512DDAE7CCD48BE288F17073A5512.mft (raw, json) Hash identifier: ui7w9ufSYpkUxisECG7HE+nJBx5dGSSFpJCZ9unA35g= Subject key identifier: 62:E3:DC:5B:52:CF:D2:32:8B:CD:E7:8A:F7:66:B7:D7:70:4B:0F:40 Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Certificate serial: 036BB2CD63F3241F11AAF6BE67E880ABE8809975 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft Manifest number: D5 Signing time: Mon 01 Dec 2025 18:21:50 +0000 Manifest this update: Mon 01 Dec 2025 18:16:50 +0000 Manifest next update: Fri 05 Dec 2025 03:14:50 +0000 Files and hashes: 1: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: rgW49bD9jOG05sHGGVXJ7K4U0Fs52fl5W3GSqo/JMxg=) 2: 407919FF69A512DDAE7CCD48BE288F17073A5512.crl (hash: BA5RFsnRCtYXfRnNjle4Xrduxd20lV03sHVGZFA5KCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6b:b2:cd:63:f3:24:1f:11:aa:f6:be:67:e8:80:ab:e8:80:99:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Validity Not Before: Dec 1 18:16:50 2025 GMT Not After : Dec 5 03:14:50 2025 GMT Subject: CN=62E3DC5B52CFD2328BCDE78AF766B7D7704B0F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:6f:8a:b9:ce:2e:5d:cc:a2:1d:5b:27:d8: 68:31:d4:d9:00:ac:df:03:80:e7:75:42:65:ab:11: 4c:50:99:59:0d:69:66:71:ab:d6:aa:3c:0c:56:4d: 9c:79:9b:c2:c9:0a:75:f2:de:7a:24:d5:91:3a:f0: b0:64:20:d7:ae:b6:97:09:f9:14:81:dd:d3:e2:eb: e2:c0:95:f3:48:c6:0a:45:90:fc:0c:65:28:55:f6: e0:09:df:1b:39:92:ca:2a:0d:c7:e9:b4:b7:f2:3c: 6f:1e:ef:c5:9b:7d:0f:af:e2:e3:ba:83:17:1e:64: 17:6d:03:d8:e2:5c:2a:6a:3b:1f:fe:2f:2a:19:41: 31:3d:62:6e:72:b1:5d:f1:6f:96:be:a1:8d:57:04: c2:26:00:ee:34:a3:dc:16:d2:64:3b:11:5d:cd:64: 32:44:02:8c:12:83:70:18:45:23:d9:16:ae:fb:09: 14:16:5a:ba:77:6a:7a:84:7f:81:57:34:1f:7c:6d: 23:b0:b7:c7:8a:10:d3:40:32:f5:f8:a9:55:a4:40: a2:51:c7:c3:62:15:a1:00:22:bb:cc:5b:8a:d4:eb: 28:13:25:3f:d9:00:27:d1:0c:45:a7:6a:a2:c3:a0: 30:68:bb:66:5e:36:f0:56:3b:91:a2:d6:1e:7b:f8: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E3:DC:5B:52:CF:D2:32:8B:CD:E7:8A:F7:66:B7:D7:70:4B:0F:40 X509v3 Authority Key Identifier: keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9f:b4:f9:c1:3c:89:74:b7:e0:92:96:1b:a9:e7:4e:ce:57: a7:ab:d0:bf:30:0d:7b:80:42:ca:87:eb:f4:36:01:c2:28:2e: 6b:19:10:ba:ee:f8:c1:5c:bb:9f:ba:82:06:cc:2a:2a:93:12: a7:6f:53:a7:9b:21:83:ba:1a:2e:83:02:53:ca:f8:ad:f4:00: 66:b1:0d:7b:83:78:2b:82:0c:ed:44:76:d7:5e:f6:44:49:94: 26:c0:54:1e:38:b6:42:cc:0e:86:2f:90:82:8b:d3:21:8f:b0: 8c:26:cd:c8:fe:9a:52:a0:77:98:ee:41:29:9b:1b:ba:24:78: bd:cc:ef:e2:d1:26:a7:e8:d2:58:42:54:ef:8e:22:fc:f0:20: e5:cc:ad:23:f0:21:20:b7:3e:ed:5b:96:5a:03:a0:9e:0e:6f: 82:d6:f6:07:a4:9c:1b:1b:d0:67:ca:ca:3a:ac:5b:f9:7b:f6: 78:99:16:f6:63:67:d5:1f:0b:5e:7f:bc:55:33:e7:e0:24:71: dd:0c:99:86:7c:dd:19:79:25:2c:c1:c6:55:e9:07:99:c5:fe: d3:e1:12:4d:b2:ed:49:d7:27:96:12:5d:09:4a:ba:38:0d:2b: 37:e0:0b:52:19:7d:70:df:07:9a:01:20:97:0a:20:45:29:cd: 20:4b:c9:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2uyzWPzJB8Rqva+Z+iAq+iAmXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw NzNBNTUxMjAeFw0yNTEyMDExODE2NTBaFw0yNTEyMDUwMzE0NTBaMDMxMTAvBgNV BAMTKDYyRTNEQzVCNTJDRkQyMzI4QkNERTc4QUY3NjZCN0Q3NzA0QjBGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OW+Kuc4uXcyiHVsn2Ggx1NkA rN8DgOd1QmWrEUxQmVkNaWZxq9aqPAxWTZx5m8LJCnXy3nok1ZE68LBkINeutpcJ +RSB3dPi6+LAlfNIxgpFkPwMZShV9uAJ3xs5ksoqDcfptLfyPG8e78WbfQ+v4uO6 gxceZBdtA9jiXCpqOx/+LyoZQTE9Ym5ysV3xb5a+oY1XBMImAO40o9wW0mQ7EV3N ZDJEAowSg3AYRSPZFq77CRQWWrp3anqEf4FXNB98bSOwt8eKENNAMvX4qVWkQKJR x8NiFaEAIrvMW4rU6ygTJT/ZACfRDEWnaqLDoDBou2ZeNvBWO5Gi1h57+NLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYuPcW1LP0jKLzeeK92a313BLD0AwHwYDVR0j BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5 QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB NTUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw MjYtYTIzOGZmNDQ4MDcwLzAvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhG MTcwNzNBNTUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGftPnBPIl0t+CSlhup507OV6er0L8wDXuA QsqH6/Q2AcIoLmsZELru+MFcu5+6ggbMKiqTEqdvU6ebIYO6Gi6DAlPK+K30AGax DXuDeCuCDO1Edtde9kRJlCbAVB44tkLMDoYvkIKL0yGPsIwmzcj+mlKgd5juQSmb G7okeL3M7+LRJqfo0lhCVO+OIvzwIOXMrSPwISC3Pu1blloDoJ4Ob4LW9geknBsb 0GfKyjqsW/l79niZFvZjZ9UfC15/vFUz5+Akcd0MmYZ83Rl5JSzBxlXpB5nF/tPh Ek2y7UnXJ5YSXQlKujgNKzfgC1IZfXDfB5oBIJcKIEUpzSBLyTo= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:58 2025 by rpki-client