This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft File: 41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json) Hash identifier: 3dtiXFWZODvhbipxpXGOIupiaRoGwgaji1KdG28OCq4= Subject key identifier: 2B:5E:C6:AB:21:3F:14:CC:89:78:E4:D7:17:12:53:20:C8:86:86:E6 Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 Certificate issuer: /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Certificate serial: 3EB4897F80DCE344373CBE12B8A61C2F54C0C225 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft Manifest number: 022A Signing time: Fri 19 Dec 2025 13:33:25 +0000 Manifest this update: Fri 19 Dec 2025 13:28:25 +0000 Manifest next update: Mon 22 Dec 2025 14:47:25 +0000 Files and hashes: 1: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: S3FgE0+gcaLyx6nH2zsRG+Hi0BgVRkLf/ndGC4F7z/0=) 2: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: pOp3p1RZimtp6u9tKtHKZYsjpuW++lTgMpxbp+gLg5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 14:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b4:89:7f:80:dc:e3:44:37:3c:be:12:b8:a6:1c:2f:54:c0:c2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Validity Not Before: Dec 19 13:28:25 2025 GMT Not After : Dec 22 14:47:25 2025 GMT Subject: CN=2B5EC6AB213F14CC8978E4D717125320C88686E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6d:dc:d6:e0:f6:f9:6a:e5:dd:9c:7a:d5:3a: 5b:72:15:7b:a5:3f:61:19:69:2c:44:27:69:36:7f: 84:93:70:9a:44:e0:e8:b1:0e:c6:19:70:b3:2d:f8: fe:78:bf:a5:de:50:0d:28:cf:17:b1:8a:35:bb:71: 5f:bb:15:14:31:d9:f1:f6:84:ad:1e:a1:ea:34:12: c5:a0:cb:fe:a0:60:cc:00:45:1d:a1:d3:f9:f6:69: 7f:ed:01:4a:c6:11:13:46:6c:1f:b4:a9:b1:67:f5: 42:19:38:c9:41:8d:88:61:c7:89:2b:29:0c:13:db: 2c:7a:e4:b9:d2:e5:ee:62:25:04:aa:61:95:f3:94: 38:3e:2e:14:a0:a5:59:f7:54:54:b7:43:86:86:19: 84:2f:c8:7c:65:c0:f0:4c:67:3e:cf:0f:26:f1:b1: 48:77:fd:77:d9:39:cb:9b:52:05:86:50:6f:f9:3f: 49:83:6b:ba:9b:12:b4:73:e6:f5:e1:62:5a:09:50: 8f:0b:b5:10:b6:bb:ca:e0:70:05:0b:34:30:b0:2c: a3:b4:49:86:06:b6:55:5d:f0:1f:85:cd:5c:9f:86: 33:e0:4e:31:0e:7f:c7:f8:10:ff:6f:98:2b:31:fc: a8:3f:3e:1d:d5:e2:46:9e:ec:ef:68:ae:e3:17:13: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5E:C6:AB:21:3F:14:CC:89:78:E4:D7:17:12:53:20:C8:86:86:E6 X509v3 Authority Key Identifier: keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:14:db:57:26:3b:2e:d2:8c:21:58:8f:58:6d:5f:4a:59:8c: db:90:de:36:4a:de:8d:d5:3c:e6:7b:38:c8:ab:0d:18:4d:9e: 97:06:3a:55:9f:2a:3e:c1:75:53:2c:87:d9:cb:67:fb:9e:82: f0:ce:23:76:09:d1:4a:69:4d:47:41:29:b1:5e:a0:8b:3a:c0: bf:ae:5f:9b:3d:35:fa:2f:49:ce:ba:6f:4b:73:ba:1c:41:73: 4e:61:9a:2b:99:00:f2:97:ab:c6:60:b4:ed:9b:74:49:8a:2d: fc:ce:21:26:85:65:43:53:c5:96:fd:c0:38:9e:f7:b5:f3:23: b7:7d:f9:23:77:f6:68:93:31:be:74:be:53:bb:b9:0e:4e:d1: 3e:3a:fe:2f:80:7e:30:34:2d:25:da:d5:e2:7a:5c:62:33:4f: 2e:3a:ab:78:f0:a8:ec:c4:2c:b5:69:c3:97:91:0e:84:81:46: d7:5c:5c:f5:b6:41:c5:1a:ed:ea:57:30:74:76:fc:92:58:19: 46:33:da:53:ac:86:f7:7b:29:06:0a:ef:a9:46:31:68:f0:2d: 76:0e:2a:9b:38:1a:d1:79:94:54:13:74:bd:ef:a1:67:2c:15: b7:d4:5a:98:11:9b:61:56:5c:f2:d0:46:2b:57:bf:2f:5c:bd: 42:50:a7:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPrSJf4Dc40Q3PL4SuKYcL1TAwiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRC NEI0RTc4NjAeFw0yNTEyMTkxMzI4MjVaFw0yNTEyMjIxNDQ3MjVaMDMxMTAvBgNV BAMTKDJCNUVDNkFCMjEzRjE0Q0M4OTc4RTRENzE3MTI1MzIwQzg4Njg2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpbdzW4Pb5auXdnHrVOltyFXul P2EZaSxEJ2k2f4STcJpE4OixDsYZcLMt+P54v6XeUA0ozxexijW7cV+7FRQx2fH2 hK0eoeo0EsWgy/6gYMwARR2h0/n2aX/tAUrGERNGbB+0qbFn9UIZOMlBjYhhx4kr KQwT2yx65LnS5e5iJQSqYZXzlDg+LhSgpVn3VFS3Q4aGGYQvyHxlwPBMZz7PDybx sUh3/XfZOcubUgWGUG/5P0mDa7qbErRz5vXhYloJUI8LtRC2u8rgcAULNDCwLKO0 SYYGtlVd8B+FzVyfhjPgTjEOf8f4EP9vmCsx/Kg/Ph3V4kae7O9oruMXE7TDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK17GqyE/FMyJeOTXFxJTIMiGhuYwHwYDVR0j BBgwFoAUQQcarwwOa9hId2gDNLT2BLS054YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTI3YjNlMS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMC80MTA3MUFBRjBD MEU2QkQ4NDg3NzY4MDMzNEI0RjYwNEI0QjRFNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRCNEI0 RTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UyN2IzZTEtZjYxMS00YWZlLTlh NDktNWZhNGZkNTU3NjUzLzAvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2 MDRCNEI0RTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAU21cmOy7SjCFYj1htX0pZjNuQ3jZK3o3V POZ7OMirDRhNnpcGOlWfKj7BdVMsh9nLZ/uegvDOI3YJ0UppTUdBKbFeoIs6wL+u X5s9NfovSc66b0tzuhxBc05hmiuZAPKXq8ZgtO2bdEmKLfzOISaFZUNTxZb9wDie 97XzI7d9+SN39miTMb50vlO7uQ5O0T46/i+AfjA0LSXa1eJ6XGIzTy46q3jwqOzE LLVpw5eRDoSBRtdcXPW2QcUa7epXMHR2/JJYGUYz2lOshvd7KQYK76lGMWjwLXYO Kps4GtF5lFQTdL3voWcsFbfUWpgRm2FWXPLQRitXvy9cvUJQpwE= -----END CERTIFICATE-----Generated at Sat Dec 20 09:11:22 2025 by rpki-client