This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: 5DclwbCTCo2yw5P3/aUKHH+mzCZGMnsNKUl7BGgoq94= Subject key identifier: 02:A2:EF:B8:50:AC:B0:6E:62:58:B6:5A:62:7D:86:38:12:29:4D:65 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 337844BFBA1474CD58EF6052B78FB627AD600230 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 0217 Signing time: Mon 15 Dec 2025 12:11:58 +0000 Manifest this update: Mon 15 Dec 2025 12:06:58 +0000 Manifest next update: Thu 18 Dec 2025 12:43:58 +0000 Files and hashes: 1: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: cM8y+UFYQd7C34QJ0R69JN4wnHd0GFDvRg6vz5tn/Hw=) 2: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: HLjZFq4/Jnmag82Gv7W9QKBRIGp+gW90e9wOgTOi2PE=) 3: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: s3cZDsm3eCD/zirL0oonykymWlAaugzxDIFPlg5sAUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 12:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:78:44:bf:ba:14:74:cd:58:ef:60:52:b7:8f:b6:27:ad:60:02:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Dec 15 12:06:58 2025 GMT Not After : Dec 18 12:43:58 2025 GMT Subject: CN=02A2EFB850ACB06E6258B65A627D863812294D65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:26:cb:33:7b:a4:a5:f1:52:11:9e:3a:4c: c2:d4:3d:e8:3c:65:3e:3d:c1:97:fe:65:e8:7c:5b: 09:ee:df:6a:cc:db:20:26:07:ba:40:1c:b5:e2:c4: 1a:e2:29:55:38:ef:5b:32:86:a1:61:9a:ca:43:6f: c7:e8:4a:b7:41:42:04:cc:15:99:4c:1f:88:67:ec: fd:c5:39:9d:98:55:72:64:8c:5f:ce:ce:ce:18:5c: 6d:3f:f4:62:7a:5d:d9:37:70:75:1c:34:f1:b0:0f: f3:a3:47:46:1d:f3:13:08:40:f1:17:fc:ee:bd:e6: 9e:29:da:f6:4a:b8:67:df:b0:69:a8:a0:d1:74:94: a5:28:26:bb:f8:81:63:23:ca:eb:52:55:a5:43:70: 7d:8a:dd:00:41:44:0a:66:d0:be:7c:e7:74:de:3c: 3e:02:e9:e3:90:fa:83:4b:29:92:21:10:08:e3:a1: 41:50:11:06:dd:8a:83:e9:09:76:16:8a:03:e3:8d: 3e:53:fc:2f:94:e6:8c:e5:42:11:89:54:d5:26:90: c0:54:82:2b:b2:f6:87:bc:a0:1f:6e:4c:02:2e:19: 0f:42:26:53:3b:2c:af:11:a7:de:e9:d8:65:7d:89: 6e:cb:c8:83:fa:8e:7c:37:1b:0a:aa:ee:60:31:88: 91:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A2:EF:B8:50:AC:B0:6E:62:58:B6:5A:62:7D:86:38:12:29:4D:65 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7b:ee:14:21:96:32:67:c0:59:99:5e:f7:53:99:75:45:ca: 80:d7:a4:45:28:d3:6b:82:d3:b6:c7:b6:fe:2a:14:c7:08:15: 30:8a:c5:7e:60:29:a2:3c:58:66:38:57:5f:b8:a7:d4:78:bb: 55:94:eb:c1:83:57:a9:12:83:2d:4f:09:01:79:87:bf:e8:11: 93:22:3e:37:e5:ea:67:3b:5e:d8:dd:a7:bc:b0:af:45:be:61: 8a:28:87:aa:9c:03:4d:91:c3:97:43:74:af:42:3d:b8:d2:e7: 96:13:98:f6:ad:36:e5:85:cb:6e:81:ff:bf:0f:13:e1:3e:0c: 8a:bf:e8:27:6c:f7:b4:e6:ed:a2:a9:01:b3:ef:ac:5c:99:13: 32:73:71:a0:24:90:16:e6:20:92:ec:b3:33:43:ce:85:c6:54: 09:2c:aa:d7:97:4b:76:d4:0b:36:82:2b:3d:ca:68:a6:8a:c7: 9e:f2:a5:60:39:98:7a:72:11:03:9d:1a:b4:fd:32:dc:70:a6: 21:af:4b:ec:34:49:b1:3a:ee:4a:a9:0f:05:d4:78:d3:69:78: 14:a7:a0:eb:b9:ef:13:38:c3:a7:71:31:4b:bd:a9:f9:74:0f: 5a:14:08:4f:3d:e1:78:d2:63:69:30:06:0d:be:50:ec:08:db: a4:10:fe:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3hEv7oUdM1Y72BSt4+2J61gAjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNTEyMTUxMjA2NThaFw0yNTEyMTgxMjQzNThaMDMxMTAvBgNV BAMTKDAyQTJFRkI4NTBBQ0IwNkU2MjU4QjY1QTYyN0Q4NjM4MTIyOTRENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiybLM3ukpfFSEZ46TMLUPeg8 ZT49wZf+Zeh8Wwnu32rM2yAmB7pAHLXixBriKVU471syhqFhmspDb8foSrdBQgTM FZlMH4hn7P3FOZ2YVXJkjF/Ozs4YXG0/9GJ6Xdk3cHUcNPGwD/OjR0Yd8xMIQPEX /O695p4p2vZKuGffsGmooNF0lKUoJrv4gWMjyutSVaVDcH2K3QBBRApm0L5853Te PD4C6eOQ+oNLKZIhEAjjoUFQEQbdioPpCXYWigPjjT5T/C+U5ozlQhGJVNUmkMBU giuy9oe8oB9uTAIuGQ9CJlM7LK8Rp97p2GV9iW7LyIP6jnw3Gwqq7mAxiJGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAqLvuFCssG5iWLZaYn2GOBIpTWUwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAl77hQhljJnwFmZXvdTmXVFyoDXpEUo02uC 07bHtv4qFMcIFTCKxX5gKaI8WGY4V1+4p9R4u1WU68GDV6kSgy1PCQF5h7/oEZMi Pjfl6mc7Xtjdp7ywr0W+YYooh6qcA02Rw5dDdK9CPbjS55YTmPatNuWFy26B/78P E+E+DIq/6Cds97Tm7aKpAbPvrFyZEzJzcaAkkBbmIJLsszNDzoXGVAksqteXS3bU CzaCKz3KaKaKx57ypWA5mHpyEQOdGrT9MtxwpiGvS+w0SbE67kqpDwXUeNNpeBSn oOu57xM4w6dxMUu9qfl0D1oUCE894XjSY2kwBg2+UOwI26QQ/ow= -----END CERTIFICATE-----Generated at Tue Dec 16 07:21:03 2025 by rpki-client