This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft File: 41820333252DF92B1DBA238F558CC8D822C768EF.mft (raw, json) Hash identifier: wu7mAQNv8oAY+Pu5wjC6dmNt9YAcvW/bYHKwTUwXwOU= Subject key identifier: 33:0B:CA:4A:CA:89:3B:B9:F6:BA:54:C3:40:48:C4:66:3C:E3:59:7A Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF Certificate issuer: /CN=41820333252DF92B1DBA238F558CC8D822C768EF Certificate serial: 183FF9F3B681B0A0EE7BF7C52B34524B1676E452 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft Manifest number: 01C8 Signing time: Tue 02 Dec 2025 17:31:14 +0000 Manifest this update: Tue 02 Dec 2025 17:26:14 +0000 Manifest next update: Sat 06 Dec 2025 04:04:14 +0000 Files and hashes: 1: 41820333252DF92B1DBA238F558CC8D822C768EF.crl (hash: 7bvK1jDIM+k60EKnblRSsc1V4ry1/wya0AVUJBqZ35g=) 2: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: RVo6qspo0NsN9BxZrHPSAeKSfxIe7qLdXa5VG0+wvkA=) 3: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: uQsxGbefiEsVtpCcyhbMnpmwezO+DzoY1mF96tzo5Pg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3f:f9:f3:b6:81:b0:a0:ee:7b:f7:c5:2b:34:52:4b:16:76:e4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF Validity Not Before: Dec 2 17:26:14 2025 GMT Not After : Dec 6 04:04:14 2025 GMT Subject: CN=330BCA4ACA893BB9F6BA54C34048C4663CE3597A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:34:de:8a:65:90:4b:36:38:65:7f:97:57:1b: 63:cd:ec:8c:3f:c3:f3:08:59:96:5a:25:d9:96:fc: c3:35:6f:00:09:6a:6a:a3:5e:d1:e7:4a:f9:d8:d3: ed:85:db:a5:34:48:74:93:85:17:1c:e7:bd:8b:1c: bb:2f:15:92:f9:4f:b7:77:22:c1:c2:24:95:29:74: 15:a7:3e:2a:27:16:80:88:80:db:97:eb:b8:ad:19: f6:ee:fb:4d:27:87:e6:7c:80:27:13:62:83:8b:ba: 86:ce:6f:ed:2f:22:d8:51:fc:23:6c:ed:77:be:d1: 6f:b5:4d:6e:fe:de:2e:61:3a:25:8f:a4:3b:cd:2f: fb:8d:51:b5:79:d4:ed:1d:9d:3d:8d:1d:10:cc:08: 3e:1a:32:d4:ca:f0:a2:44:cc:1c:63:7d:7a:9d:b6: 38:8f:63:ea:e1:b0:aa:8f:0c:7f:1c:05:1a:27:a5: a4:b4:d6:d2:4e:b2:11:94:8b:3f:3c:d1:20:fd:ba: e6:6e:40:aa:86:ef:3a:f3:cb:a0:21:30:7c:f8:2d: 14:ae:5c:c6:ba:36:06:48:37:a0:63:c1:fd:7d:ae: 23:8d:21:e4:be:b8:ba:9d:16:3d:61:71:cd:14:2d: bc:92:e2:21:81:4b:19:e3:1b:01:e0:f8:99:33:7f: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0B:CA:4A:CA:89:3B:B9:F6:BA:54:C3:40:48:C4:66:3C:E3:59:7A X509v3 Authority Key Identifier: keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:6d:6a:59:8c:83:ab:f6:2a:41:ea:9f:43:e3:50:63:88:55: 9d:50:36:bb:a2:b6:00:29:b9:14:67:22:1d:e2:45:54:71:21: ff:2b:6c:86:a3:7c:b5:66:89:19:79:ee:1c:d6:5a:63:04:8a: 9e:38:3c:cb:06:76:68:f9:d4:31:42:8d:0d:cc:7c:6a:24:4b: 96:7f:ef:a9:96:02:89:cf:2a:4f:7a:31:ff:bd:18:ba:74:70: 56:f0:00:d4:d9:dd:12:45:5e:bc:bc:fe:17:2b:81:80:f3:bc: b6:df:f9:76:c8:00:0a:39:fb:18:2c:6e:34:e8:9f:34:cc:43: 48:b4:d0:b6:a5:3e:b6:13:1d:ad:f5:c1:b2:ab:e3:e8:d3:6a: 82:ad:98:44:bf:eb:f3:3a:af:fe:1a:4e:52:a3:78:f8:2b:92: 79:d4:7a:c1:6f:44:ba:48:06:a9:9a:51:47:31:46:57:84:7d: e5:76:91:bb:91:ad:a8:50:62:d8:4e:a1:38:b3:87:19:ed:80: 83:c8:3b:e7:2e:66:0e:47:5c:67:35:3e:e5:42:28:b5:cd:de: f6:da:29:fa:cc:24:d5:d9:1b:b4:e0:53:77:44:6f:c6:bf:07: b9:0f:5c:37:a6:ea:63:0b:e8:a5:56:1d:f7:bd:b2:8b:96:0b: ef:e1:f8:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGD/587aBsKDue/fFKzRSSxZ25FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgy MkM3NjhFRjAeFw0yNTEyMDIxNzI2MTRaFw0yNTEyMDYwNDA0MTRaMDMxMTAvBgNV BAMTKDMzMEJDQTRBQ0E4OTNCQjlGNkJBNTRDMzQwNDhDNDY2M0NFMzU5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6NN6KZZBLNjhlf5dXG2PN7Iw/ w/MIWZZaJdmW/MM1bwAJamqjXtHnSvnY0+2F26U0SHSThRcc572LHLsvFZL5T7d3 IsHCJJUpdBWnPionFoCIgNuX67itGfbu+00nh+Z8gCcTYoOLuobOb+0vIthR/CNs 7Xe+0W+1TW7+3i5hOiWPpDvNL/uNUbV51O0dnT2NHRDMCD4aMtTK8KJEzBxjfXqd tjiPY+rhsKqPDH8cBRonpaS01tJOshGUiz880SD9uuZuQKqG7zrzy6AhMHz4LRSu XMa6NgZIN6Bjwf19riONIeS+uLqdFj1hcc0ULbyS4iGBSxnjGwHg+Jkzf2Z1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMwvKSsqJO7n2ulTDQEjEZjzjWXowHwYDVR0j BBgwFoAUQYIDMyUt+SsduiOPVYzI2CLHaO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NTk3MWFlOS01Y2RkLTRkNDEtYjYyYS01YzI4NGFhODA5OGUvMC80MTgyMDMzMzI1 MkRGOTJCMURCQTIzOEY1NThDQzhEODIyQzc2OEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgyMkM3 NjhFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4 RDgyMkM3NjhFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRtalmMg6v2KkHqn0PjUGOIVZ1QNruitgAp uRRnIh3iRVRxIf8rbIajfLVmiRl57hzWWmMEip44PMsGdmj51DFCjQ3MfGokS5Z/ 76mWAonPKk96Mf+9GLp0cFbwANTZ3RJFXry8/hcrgYDzvLbf+XbIAAo5+xgsbjTo nzTMQ0i00LalPrYTHa31wbKr4+jTaoKtmES/6/M6r/4aTlKjePgrknnUesFvRLpI BqmaUUcxRleEfeV2kbuRrahQYthOoTizhxntgIPIO+cuZg5HXGc1PuVCKLXN3vba KfrMJNXZG7TgU3dEb8a/B7kPXDem6mML6KVWHfe9souWC+/h+C8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:30 2025 by rpki-client