This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft File: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json) Hash identifier: mc5DQ9XoyFlD+cSUXaQOFlplH5f6auS0ljpCDwZs7sU= Subject key identifier: BA:F8:DC:1D:7E:50:FB:5F:C0:F1:79:51:2F:35:2A:C6:97:4B:DE:4A Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 21345CBABB2DD2BB92A872E44528B750B0986AF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft Manifest number: 053F Signing time: Sun 14 Dec 2025 17:01:10 +0000 Manifest this update: Sun 14 Dec 2025 16:56:10 +0000 Manifest next update: Thu 18 Dec 2025 03:29:10 +0000 Files and hashes: 1: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=) 2: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=) 3: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=) 4: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: HhAj5FXKG+WPBMJHSmfCQ5YyDXmhJH0Hqke8PTIqGvE=) 5: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=) 6: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=) 7: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=) 8: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=) 9: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: Xpfgj58n1/GUSuJy9a8Mxor8eyZmIfAUHgNtPpyZ3hM=) 10: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=) 11: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=) 12: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=) 13: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: YHfOb3XSEMDVEIcVfiAIW6kLWlhlW9/hxOsVCiJWMDg=) 14: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=) 15: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: 9ttsEv8xyQdIj2ysOYcOeKd2yqYa6sGhfUajffTzKd4=) 16: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=) 17: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: AZYO50pcht7zbgRleVLHSfxxSeX3cLrYkpQk4y4IB8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 08:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:34:5c:ba:bb:2d:d2:bb:92:a8:72:e4:45:28:b7:50:b0:98:6a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Dec 14 16:56:10 2025 GMT Not After : Dec 18 03:29:10 2025 GMT Subject: CN=BAF8DC1D7E50FB5FC0F179512F352AC6974BDE4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:66:ce:7c:04:36:82:a8:2f:5f:e3:33:57: 6b:0c:94:9b:6a:85:3a:d3:50:b7:3f:6d:06:d9:db: 17:c3:99:d9:08:24:2e:c0:ef:df:17:54:9e:9b:c1: a0:c8:a2:22:e1:b7:32:48:78:05:f5:3e:7f:a2:70: 1a:c0:42:a9:e3:ac:6b:c8:ef:2d:4c:12:71:a9:1d: 13:b4:7c:e5:85:ba:b7:35:c5:88:46:70:d2:b6:2d: b2:d6:0f:99:28:bf:09:0f:0f:0f:7c:7a:6c:e5:a2: 86:a3:a2:ce:cf:e1:93:f7:65:7f:49:e0:f4:a5:40: 86:08:2e:4c:ee:4b:1a:2b:fc:22:39:3e:54:52:fa: 2a:bd:e8:0b:3d:9e:56:a3:50:f5:e1:b1:57:77:e1: 0b:42:e2:c4:46:1b:15:76:eb:93:29:6c:81:6f:01: d5:3b:6e:2a:0e:e5:2a:c6:d9:2a:6d:aa:24:08:95: a1:58:4e:f0:f5:ff:4a:f6:3e:ff:78:89:0a:f3:e9: 36:12:66:2f:a6:cb:2f:76:68:37:e8:41:f6:67:9f: a4:e8:da:53:f3:7d:cc:7f:0e:af:bb:78:e4:c0:d9: ab:87:51:2d:65:b9:25:fa:ac:c9:80:66:4a:59:91: 11:b4:df:60:bb:50:ff:11:eb:e3:e0:57:55:22:02: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F8:DC:1D:7E:50:FB:5F:C0:F1:79:51:2F:35:2A:C6:97:4B:DE:4A X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:50:ab:5c:9f:ac:f5:a7:57:05:ca:2c:83:bd:9e:fa:53:03: 21:8b:8d:87:fe:29:6b:fd:f6:a8:c1:2d:e4:16:3d:f8:6d:34: bc:8e:a4:55:20:f7:f9:40:f0:a4:31:b2:14:dc:61:fa:b2:eb: 02:64:a9:1a:8a:f0:a5:76:9e:2a:54:6c:af:cf:c0:3c:3d:00: 3e:a9:30:93:78:8a:fc:54:a7:f0:3c:4c:5f:61:42:50:ca:49: f1:01:8c:02:ae:9b:24:50:bc:28:de:50:a3:35:d3:04:7e:02: ba:57:d8:40:b8:84:5e:06:cd:82:97:c2:e7:b2:18:39:ab:6b: 08:57:13:b3:fe:4c:b0:0c:09:04:ec:23:c5:96:ce:9e:b3:44: 7c:41:75:a6:68:2b:6b:87:20:9a:a4:e8:72:0f:f6:49:52:8a: 30:98:87:91:3b:b5:bf:a9:e4:b9:5c:8c:d2:fa:c5:11:d8:42: 58:8e:2e:77:a9:fc:0d:7b:68:84:b5:97:2b:8a:37:84:44:a8: c0:8d:4f:6c:67:41:ee:5e:ee:83:39:02:d0:0f:11:b9:b9:f1: 18:c9:47:3c:17:d7:cd:ff:30:e6:bd:9a:40:8e:e7:f2:b6:11: fb:07:99:dd:47:a1:63:85:be:64:61:26:f1:87:34:ca:14:8d: 3e:66:64:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUITRcurst0ruSqHLkRSi3ULCYavgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTEyMTQxNjU2MTBaFw0yNTEyMTgwMzI5MTBaMDMxMTAvBgNV BAMTKEJBRjhEQzFEN0U1MEZCNUZDMEYxNzk1MTJGMzUyQUM2OTc0QkRFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FGbOfAQ2gqgvX+MzV2sMlJtq hTrTULc/bQbZ2xfDmdkIJC7A798XVJ6bwaDIoiLhtzJIeAX1Pn+icBrAQqnjrGvI 7y1MEnGpHRO0fOWFurc1xYhGcNK2LbLWD5kovwkPDw98emzlooajos7P4ZP3ZX9J 4PSlQIYILkzuSxor/CI5PlRS+iq96As9nlajUPXhsVd34QtC4sRGGxV265MpbIFv AdU7bioO5SrG2SptqiQIlaFYTvD1/0r2Pv94iQrz6TYSZi+myy92aDfoQfZnn6To 2lPzfcx/Dq+7eOTA2auHUS1luSX6rMmAZkpZkRG032C7UP8R6+PgV1UiAvGhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuvjcHX5Q+1/A8XlRLzUqxpdL3kowHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0 MzU4NDkwM0UxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRQq1yfrPWnVwXKLIO9nvpTAyGLjYf+KWv9 9qjBLeQWPfhtNLyOpFUg9/lA8KQxshTcYfqy6wJkqRqK8KV2nipUbK/PwDw9AD6p MJN4ivxUp/A8TF9hQlDKSfEBjAKumyRQvCjeUKM10wR+ArpX2EC4hF4GzYKXwuey GDmrawhXE7P+TLAMCQTsI8WWzp6zRHxBdaZoK2uHIJqk6HIP9klSijCYh5E7tb+p 5LlcjNL6xRHYQliOLnep/A17aIS1lyuKN4REqMCNT2xnQe5e7oM5AtAPEbm58RjJ RzwX183/MOa9mkCO5/K2EfsHmd1HoWOFvmRhJvGHNMoUjT5mZGA= -----END CERTIFICATE-----Generated at Sun Dec 14 21:16:46 2025 by rpki-client