This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft File: 41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json) Hash identifier: ViH0F/728RZoS06664qtHKJJEyzh3NZXlUKz3vsp4Xk= Subject key identifier: C4:4B:65:08:0F:01:24:F9:B9:60:80:5A:EE:B6:C7:73:BC:28:70:DE Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 Certificate issuer: /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Certificate serial: 5D9E46A1DF63B77CEE9A152E65E75EAC136A4640 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft Manifest number: 0223 Signing time: Wed 03 Dec 2025 15:04:07 +0000 Manifest this update: Wed 03 Dec 2025 14:59:07 +0000 Manifest next update: Sat 06 Dec 2025 17:37:07 +0000 Files and hashes: 1: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: RaalasKgsd+EM4Eow159aazDGq2Po02XNQN7WPPVzwk=) 2: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: S3FgE0+gcaLyx6nH2zsRG+Hi0BgVRkLf/ndGC4F7z/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 17:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9e:46:a1:df:63:b7:7c:ee:9a:15:2e:65:e7:5e:ac:13:6a:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Validity Not Before: Dec 3 14:59:07 2025 GMT Not After : Dec 6 17:37:07 2025 GMT Subject: CN=C44B65080F0124F9B960805AEEB6C773BC2870DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:b8:50:d1:de:4c:12:a8:ce:c9:2e:58:a4: b6:48:86:0d:9d:c4:b8:1b:5e:1f:1e:34:29:10:be: a1:58:e5:dc:25:9e:e8:cc:bd:64:54:1c:d1:74:3b: 3c:f6:14:87:08:84:14:0a:d8:54:fa:62:50:92:77: 15:19:81:87:df:b3:ce:39:6b:60:45:57:90:2d:a4: 9c:db:49:5b:9c:7b:90:86:6b:0f:a4:67:b9:16:b2: c1:99:3f:02:5c:05:3a:84:0b:ac:1d:d2:c1:39:c3: bd:b8:54:82:89:7c:34:0f:b1:99:83:8a:a7:dc:fe: c6:73:79:76:77:a9:4e:10:46:1e:8d:69:2a:7e:69: cd:1d:d5:43:7e:78:63:99:e7:8e:d3:e5:fd:4f:cb: 82:77:b7:67:5d:f8:e6:39:a9:03:1d:9c:f5:8f:af: b6:fb:79:dc:ea:ce:4e:ad:69:a2:14:b9:f6:d6:6e: cb:3c:70:90:b2:a5:85:fa:2c:b3:42:dd:c0:cf:e6: 5a:a1:8f:6a:8d:b9:a5:77:b2:f9:15:f2:31:e5:33: c6:02:49:0b:a2:4d:7c:dc:34:25:39:d2:fc:90:99: a7:b0:39:13:d5:42:2d:b3:03:3e:7a:12:7c:42:2d: d8:4a:62:b1:a2:7e:b9:57:32:b4:6a:bc:2d:68:2d: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:65:08:0F:01:24:F9:B9:60:80:5A:EE:B6:C7:73:BC:28:70:DE X509v3 Authority Key Identifier: keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8c:da:b7:a9:aa:10:8b:e5:f6:5c:e7:23:6b:27:d6:48:45: 32:cc:09:fe:6c:32:e3:f9:b2:74:89:69:c7:97:0c:46:8d:f2: a4:ca:cb:69:e6:8c:e1:50:7d:7e:2c:c7:22:a9:bd:f2:07:52: ca:9c:4f:ce:d2:51:b0:7f:1a:f8:df:72:3d:c9:74:e3:61:fe: d4:61:44:c4:31:ac:8f:8c:d2:e8:10:5b:5c:d2:51:6e:8d:cd: f9:66:00:cb:1c:ec:d6:ac:d8:e0:e1:d4:d4:9b:f0:22:b2:06: c6:9f:54:fa:2d:6d:91:3e:ce:50:f9:86:e2:0e:b9:11:59:2b: 81:d3:a7:ee:85:a6:61:94:4d:8c:f7:e2:c3:9f:d2:1f:57:11: f4:77:75:1f:e2:30:16:9e:64:be:4c:a3:fc:ff:a5:3f:08:92: 7d:35:e9:51:d6:5a:44:0c:4c:ab:f1:3a:5e:5e:ee:f7:d3:f3: cd:d6:4e:42:52:32:ea:04:23:91:b6:4a:17:69:54:2f:01:9c: b9:b4:d5:8c:79:34:de:c5:7a:b8:b2:fa:09:7c:e6:7d:21:bd: c4:ff:58:21:3c:1f:87:61:95:cb:01:00:8b:85:b7:d0:c0:92: c4:74:6a:db:93:81:0b:71:8d:8d:19:f6:2e:62:d8:2d:6b:c1: 65:6f:72:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZ5God9jt3zumhUuZederBNqRkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRC NEI0RTc4NjAeFw0yNTEyMDMxNDU5MDdaFw0yNTEyMDYxNzM3MDdaMDMxMTAvBgNV BAMTKEM0NEI2NTA4MEYwMTI0RjlCOTYwODA1QUVFQjZDNzczQkMyODcwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhrhQ0d5MEqjOyS5YpLZIhg2d xLgbXh8eNCkQvqFY5dwlnujMvWRUHNF0Ozz2FIcIhBQK2FT6YlCSdxUZgYffs845 a2BFV5AtpJzbSVuce5CGaw+kZ7kWssGZPwJcBTqEC6wd0sE5w724VIKJfDQPsZmD iqfc/sZzeXZ3qU4QRh6NaSp+ac0d1UN+eGOZ547T5f1Py4J3t2dd+OY5qQMdnPWP r7b7edzqzk6taaIUufbWbss8cJCypYX6LLNC3cDP5lqhj2qNuaV3svkV8jHlM8YC SQuiTXzcNCU50vyQmaewORPVQi2zAz56EnxCLdhKYrGifrlXMrRqvC1oLS2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxEtlCA8BJPm5YIBa7rbHc7wocN4wHwYDVR0j BBgwFoAUQQcarwwOa9hId2gDNLT2BLS054YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTI3YjNlMS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMC80MTA3MUFBRjBD MEU2QkQ4NDg3NzY4MDMzNEI0RjYwNEI0QjRFNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRCNEI0 RTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UyN2IzZTEtZjYxMS00YWZlLTlh NDktNWZhNGZkNTU3NjUzLzAvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2 MDRCNEI0RTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2M2repqhCL5fZc5yNrJ9ZIRTLMCf5sMuP5 snSJaceXDEaN8qTKy2nmjOFQfX4sxyKpvfIHUsqcT87SUbB/Gvjfcj3JdONh/tRh RMQxrI+M0ugQW1zSUW6NzflmAMsc7Nas2ODh1NSb8CKyBsafVPotbZE+zlD5huIO uRFZK4HTp+6FpmGUTYz34sOf0h9XEfR3dR/iMBaeZL5Mo/z/pT8Ikn016VHWWkQM TKvxOl5e7vfT883WTkJSMuoEI5G2ShdpVC8BnLm01Yx5NN7Feriy+gl85n0hvcT/ WCE8H4dhlcsBAIuFt9DAksR0atuTgQtxjY0Z9i5i2C1rwWVvcpo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:52 2025 by rpki-client