This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: Dw+sGd/G2FsVqhNNZ8UJygaJEG+OWzZx9QUah4hOjUg= Subject key identifier: D2:53:A5:94:44:11:07:DF:E0:B9:AD:82:1A:71:24:53:62:0A:CE:43 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 39D2DA7140434A0BE9F93C2E6E6B51B7E7995CC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 0262 Signing time: Wed 03 Dec 2025 00:41:18 +0000 Manifest this update: Wed 03 Dec 2025 00:36:18 +0000 Manifest next update: Sat 06 Dec 2025 12:21:18 +0000 Files and hashes: 1: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: P5qy6MSQkzBzIpWfwlqRGgttfjrknKyQRFiwh+AluKw=) 2: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=) 3: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: V41dsoCGv/A1SNxCT74tNpzG0O4+YBlV/SgqxtUPiBI=) 4: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: nboIz3jrBgP6JOmA3BVAd2UeOfnp74QAUC5BcPTJ2ug=) 5: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: bPwazauU6oFQoJ1DuLU7i6xKKeKA8WoW3QIS6RgBbiU=) 6: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: VFHHlL/fG0xnRMHoMgqrHUpXEdzrJEYbY3L4Yb6Ynkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d2:da:71:40:43:4a:0b:e9:f9:3c:2e:6e:6b:51:b7:e7:99:5c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Dec 3 00:36:18 2025 GMT Not After : Dec 6 12:21:18 2025 GMT Subject: CN=D253A594441107DFE0B9AD821A712453620ACE43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:93:50:fb:6a:7d:7c:48:8b:db:a0:ad:71: 67:c3:d0:14:eb:bd:e0:1c:c8:a9:ca:be:80:bd:ef: b6:3f:74:d8:43:8f:fc:84:66:aa:3a:25:5b:ba:db: c9:75:62:48:e5:0a:9f:36:18:ae:55:2c:10:8e:a5: f3:2f:27:ef:89:5c:95:0d:85:b3:a3:96:c6:9c:87: 91:a2:57:6f:e6:30:6e:87:74:24:2d:db:ba:a6:3c: b4:a8:bb:ca:48:e0:c3:d3:ac:9f:45:6a:c2:bb:b5: de:b0:91:b3:c0:5d:e9:27:c5:0c:44:88:86:73:05: d7:24:47:a2:d6:80:6f:64:f3:3a:0d:29:82:f5:d8: 11:2d:bb:58:5c:80:dd:cf:94:e6:0e:bd:b9:61:72: 4d:c0:97:ba:0b:f7:12:5c:7f:c1:5f:c1:43:20:41: 68:0b:fd:62:f3:bb:fd:fd:cd:6d:35:4d:79:35:5a: c0:d9:e8:f1:6c:02:36:60:54:68:e3:3f:ee:0f:16: 4e:b1:29:aa:78:3e:79:94:65:38:6b:df:a4:e9:81: 9a:86:5e:09:c7:a7:86:28:d9:7d:10:6d:48:97:8f: 3f:36:d7:bf:59:93:a3:ff:16:bb:38:83:c0:eb:7c: 19:d5:5f:4e:5d:5c:3c:80:1d:59:3a:df:df:8d:90: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:53:A5:94:44:11:07:DF:E0:B9:AD:82:1A:71:24:53:62:0A:CE:43 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:da:75:45:32:59:f6:6f:e7:e6:ef:0c:4b:65:72:80:ed:81: 84:13:94:1e:ea:0e:ce:b1:d2:a8:ae:26:eb:97:c3:97:35:3d: ae:98:34:a9:c8:6b:e9:24:cd:db:61:54:09:67:da:6f:5e:7f: bd:34:bc:be:c9:06:9d:14:76:30:ca:e5:40:63:4f:b1:82:ff: 8f:32:e9:52:cd:4b:8a:42:20:a0:ed:bc:63:7b:6c:0c:33:c7: b4:d3:05:1c:f9:26:42:25:ce:ac:e2:83:14:d8:91:4f:ea:50: e6:73:87:de:26:55:c2:81:20:a0:59:27:0d:98:e6:6e:b5:8f: be:a8:be:5a:20:2e:5a:10:57:a3:17:b5:68:54:87:5a:28:d0: 8d:e7:cd:1d:69:4a:53:24:22:15:17:5a:4c:97:b8:0e:e5:70: e6:15:0f:83:7c:4e:87:7d:2d:cf:55:dd:8b:b5:d8:3f:0f:f9: 94:8f:e1:5f:3b:34:84:88:93:c9:c3:2b:5f:06:62:0a:d3:77: a2:37:1d:a0:83:ae:bf:8d:20:b1:5c:9e:f9:3d:14:e0:a3:a7: 80:bc:53:e8:f6:87:92:df:60:52:1d:ca:71:2b:90:15:13:39: 0f:be:6e:12:94:bd:5f:df:86:c7:0f:4d:16:53:81:81:f9:0f: 6e:a4:a3:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOdLacUBDSgvp+TwubmtRt+eZXMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNTEyMDMwMDM2MThaFw0yNTEyMDYxMjIxMThaMDMxMTAvBgNV BAMTKEQyNTNBNTk0NDQxMTA3REZFMEI5QUQ4MjFBNzEyNDUzNjIwQUNFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEH5NQ+2p9fEiL26CtcWfD0BTr veAcyKnKvoC977Y/dNhDj/yEZqo6JVu628l1YkjlCp82GK5VLBCOpfMvJ++JXJUN hbOjlsach5GiV2/mMG6HdCQt27qmPLSou8pI4MPTrJ9FasK7td6wkbPAXeknxQxE iIZzBdckR6LWgG9k8zoNKYL12BEtu1hcgN3PlOYOvblhck3Al7oL9xJcf8FfwUMg QWgL/WLzu/39zW01TXk1WsDZ6PFsAjZgVGjjP+4PFk6xKap4PnmUZThr36TpgZqG XgnHp4Yo2X0QbUiXjz82179Zk6P/Frs4g8DrfBnVX05dXDyAHVk639+NkMaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0lOllEQRB9/gua2CGnEkU2IKzkMwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjadUUyWfZv5+bvDEtlcoDtgYQTlB7qDs6x 0qiuJuuXw5c1Pa6YNKnIa+kkzdthVAln2m9ef700vL7JBp0UdjDK5UBjT7GC/48y 6VLNS4pCIKDtvGN7bAwzx7TTBRz5JkIlzqzigxTYkU/qUOZzh94mVcKBIKBZJw2Y 5m61j76ovlogLloQV6MXtWhUh1oo0I3nzR1pSlMkIhUXWkyXuA7lcOYVD4N8Tod9 Lc9V3Yu12D8P+ZSP4V87NISIk8nDK18GYgrTd6I3HaCDrr+NILFcnvk9FOCjp4C8 U+j2h5LfYFIdynErkBUTOQ++bhKUvV/fhscPTRZTgYH5D26ko20= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:25 2025 by rpki-client