This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: VTbZPihJ8vTsYsmXORUzV87/qs83Zaf6TAUIbFxYLKE= Subject key identifier: 6B:AD:27:BF:6B:95:51:2D:E2:6A:4D:B5:D2:8B:28:8B:7C:E5:B5:44 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 7EA5A05771234058DC18E175D804CA5FB92ACA2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 0242 Signing time: Sun 14 Dec 2025 19:32:13 +0000 Manifest this update: Sun 14 Dec 2025 19:27:13 +0000 Manifest next update: Wed 17 Dec 2025 22:25:13 +0000 Files and hashes: 1: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: lKdyde+FbF+p11hSPq2dL7g7UI4o/TCSuGq3d5D/fKE=) 2: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) 3: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 22:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a5:a0:57:71:23:40:58:dc:18:e1:75:d8:04:ca:5f:b9:2a:ca:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Dec 14 19:27:13 2025 GMT Not After : Dec 17 22:25:13 2025 GMT Subject: CN=6BAD27BF6B95512DE26A4DB5D28B288B7CE5B544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:d1:d5:4e:77:a7:05:4b:be:9f:e0:82:c3: ac:b1:37:63:83:83:3f:53:20:21:a6:cc:0d:99:b0: ff:fb:c8:d4:7e:66:2d:c2:38:a3:c6:c2:66:e8:0f: 15:ed:e6:6a:f3:b8:98:5d:6a:2b:2d:05:b7:d3:79: b9:e7:ec:21:7e:c4:7f:ac:e6:67:c6:01:41:5f:d3: 3a:55:d7:0b:13:13:e0:56:14:63:72:47:ee:4d:ec: 03:f5:1c:f7:42:36:9a:5d:e0:10:4a:b7:18:3b:1b: e0:01:61:b9:9a:f3:83:f1:d2:81:b4:8f:c3:60:c0: e4:85:08:ba:f4:61:1f:30:e1:d3:9b:8b:1f:cc:0a: b6:69:98:f6:2b:47:32:d0:6b:61:bc:86:b7:10:ee: 4c:dd:da:95:62:a1:b3:e8:c9:2b:0c:6f:d8:ed:60: c1:1c:fb:5d:b9:d6:fb:4c:78:11:dc:37:e6:35:b0: 42:94:1d:49:f3:0a:b7:10:a6:48:09:fd:e3:f6:d7: 49:1d:10:ce:b5:47:2a:39:ba:44:80:08:bb:f2:db: c5:c0:4c:e9:a4:8d:fc:db:4d:97:26:d5:ae:63:99: 8b:e9:1a:7b:a4:fd:6d:ec:f0:19:07:a8:35:4e:1f: 34:ad:fa:71:1d:4d:69:84:2c:41:f6:a5:7a:26:a5: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AD:27:BF:6B:95:51:2D:E2:6A:4D:B5:D2:8B:28:8B:7C:E5:B5:44 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:54:da:01:4b:12:50:6b:3e:50:42:0a:ad:b8:2d:4f:7e:60: 6c:54:4b:c5:84:9c:a7:69:47:87:7e:f9:19:3f:90:a2:b5:53: d8:06:85:aa:b1:ff:8d:4d:b4:55:89:ae:e6:c4:1d:54:26:b6: 0d:f1:7e:9a:5e:80:7f:df:5a:1a:76:40:09:d4:6e:a4:35:fd: 38:6d:aa:84:a1:9b:b9:a8:c5:24:0e:db:d6:8c:62:94:77:de: 80:57:8a:d4:52:c9:cf:19:dd:c2:b8:2f:34:4e:d6:06:a4:b6: f4:23:66:06:16:45:de:d1:3f:b7:b7:cf:71:a6:f3:8f:ad:78: 24:6c:51:dd:2f:7c:94:bc:7b:70:4e:9b:b9:6b:88:a9:a8:4b: 6f:cb:c0:05:a7:cf:f3:ef:89:a8:85:fb:53:ad:1f:21:18:21: a4:7d:88:b4:41:88:6a:77:22:8b:58:c1:77:80:8a:b6:48:30: 69:4c:e6:33:4a:04:03:a9:18:51:55:35:d7:13:e2:cb:5b:62: 42:d3:c1:a6:74:27:bd:12:74:81:f4:78:34:5a:aa:be:6a:5a: 76:f1:9a:e4:8c:56:89:0d:da:fe:97:1a:71:5e:93:41:b1:17: bf:b4:06:52:93:ef:9f:c9:4e:ea:9c:6d:31:6c:ef:da:06:e4: 13:a5:32:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqWgV3EjQFjcGOF12ATKX7kqyiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTEyMTQxOTI3MTNaFw0yNTEyMTcyMjI1MTNaMDMxMTAvBgNV BAMTKDZCQUQyN0JGNkI5NTUxMkRFMjZBNERCNUQyOEIyODhCN0NFNUI1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9NHVTnenBUu+n+CCw6yxN2OD gz9TICGmzA2ZsP/7yNR+Zi3COKPGwmboDxXt5mrzuJhdaistBbfTebnn7CF+xH+s 5mfGAUFf0zpV1wsTE+BWFGNyR+5N7AP1HPdCNppd4BBKtxg7G+ABYbma84Px0oG0 j8NgwOSFCLr0YR8w4dObix/MCrZpmPYrRzLQa2G8hrcQ7kzd2pViobPoySsMb9jt YMEc+1251vtMeBHcN+Y1sEKUHUnzCrcQpkgJ/eP210kdEM61Ryo5ukSACLvy28XA TOmkjfzbTZcm1a5jmYvpGnuk/W3s8BkHqDVOHzSt+nEdTWmELEH2pXompV/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa60nv2uVUS3iak210osoi3zltUQwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdU2gFLElBrPlBCCq24LU9+YGxUS8WEnKdp R4d++Rk/kKK1U9gGhaqx/41NtFWJrubEHVQmtg3xfppegH/fWhp2QAnUbqQ1/Tht qoShm7moxSQO29aMYpR33oBXitRSyc8Z3cK4LzRO1gaktvQjZgYWRd7RP7e3z3Gm 84+teCRsUd0vfJS8e3BOm7lriKmoS2/LwAWnz/PviaiF+1OtHyEYIaR9iLRBiGp3 IotYwXeAirZIMGlM5jNKBAOpGFFVNdcT4stbYkLTwaZ0J70SdIH0eDRaqr5qWnbx muSMVokN2v6XGnFek0GxF7+0BlKT75/JTuqcbTFs79oG5BOlMrQ= -----END CERTIFICATE-----Generated at Tue Dec 16 14:24:39 2025 by rpki-client