This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: 3Gzs6z402zHQ2FEJdiqvbyqghgmhPJRTw+UH8FUSwjs= Subject key identifier: 13:01:9D:5C:F7:42:70:5A:03:3F:EA:59:00:84:91:E1:8F:06:A6:85 Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 2A294606761B1F722A7D005F4BF909F834E63026 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 0397 Signing time: Mon 01 Dec 2025 18:40:01 +0000 Manifest this update: Mon 01 Dec 2025 18:35:01 +0000 Manifest next update: Thu 04 Dec 2025 21:47:01 +0000 Files and hashes: 1: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=) 2: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: L5xP+PZs8BuHarJGrF3NwN9o2zEpjwrVH7BqO9oXPu0=) 3: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: uQ2lNYFZctQjtseGT/wzHT4giq7wlDo/uVXWwYPTnAY=) 4: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:29:46:06:76:1b:1f:72:2a:7d:00:5f:4b:f9:09:f8:34:e6:30:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Dec 1 18:35:01 2025 GMT Not After : Dec 4 21:47:01 2025 GMT Subject: CN=13019D5CF742705A033FEA59008491E18F06A685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:b0:ba:d4:b3:1c:74:10:56:8e:91:14:78: a3:b0:08:6c:5d:1f:10:40:62:5d:a9:fa:92:db:49: ee:d6:7d:5a:78:bf:ac:69:c7:40:d0:36:5b:4a:24: c6:2c:00:f7:58:92:88:55:76:75:59:ed:33:cb:db: 9e:63:78:8d:0b:f9:a5:b2:a3:0c:e7:8a:38:c2:b8: ef:fa:20:c2:78:0c:85:d6:c3:2c:ce:fd:d3:a9:3a: 98:ab:33:f4:f7:2c:2a:c6:bd:06:13:0d:f0:86:4f: 48:32:16:f3:9d:dd:c6:69:b7:b3:fd:06:4f:88:36: 98:44:a0:06:4c:74:2f:5e:d4:e4:5b:7c:8a:b3:63: c3:ad:79:0b:66:93:d6:f4:c3:3d:12:9c:ad:d8:27: 6b:4c:53:49:30:f9:0b:a7:c3:4c:c6:ec:b1:a3:57: 8b:1f:bc:39:d6:fc:de:da:13:12:f8:3a:b4:6c:91: 19:41:a2:8b:5c:7b:8c:01:6e:ff:68:cc:c7:68:91: e4:a6:09:e3:0f:20:95:08:91:b0:95:3e:2e:5c:c0: 40:42:f9:e2:33:bb:dd:13:b8:80:42:10:37:21:e7: 0b:c9:41:1f:95:5a:2f:ab:94:9d:fb:79:d8:93:ce: de:ab:8a:80:de:f7:b7:1b:af:46:b9:ed:23:0f:f0: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:01:9D:5C:F7:42:70:5A:03:3F:EA:59:00:84:91:E1:8F:06:A6:85 X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ef:29:e9:ca:a2:bf:19:18:fd:88:11:13:d9:75:db:5d:95: 73:36:7d:6e:2d:53:8b:fe:9b:4b:49:ee:ab:45:e0:23:cb:3d: bc:48:f5:30:94:66:69:6c:90:90:60:d8:a3:ab:47:fc:43:1b: 43:a3:88:07:0d:9b:ad:0d:93:13:16:aa:c8:25:c8:60:2a:ed: b5:b7:79:8f:d2:8d:c6:24:ac:94:70:51:5f:34:84:65:8e:e5: cb:e6:ab:a0:05:11:f2:99:95:44:91:a7:4b:f3:5e:10:90:43: 76:a2:4c:65:41:ac:89:c4:6f:38:9a:e2:ce:c4:2a:35:0b:26: 18:2d:0d:92:dd:e0:4e:42:f1:73:2d:0c:5d:ae:79:5c:2f:83: 13:e2:b1:f9:5b:be:6a:61:9a:cf:13:8f:3e:8a:02:b3:65:bf: 23:f2:f2:ce:4e:42:b2:13:b5:e2:61:e9:8b:9c:a0:32:b2:13: 67:55:87:65:1d:aa:90:3f:1e:94:56:b2:f2:dd:ed:1b:72:01: eb:56:7e:e6:e3:49:fe:7c:79:f2:1e:1b:b0:6a:79:79:27:68: 53:5f:75:0c:a2:1d:1b:e3:be:dd:69:87:29:57:4d:4a:e0:cc: 76:d2:e9:68:2d:00:4a:bc:ce:1b:11:e9:42:2e:e6:17:88:88: 2e:61:a2:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKilGBnYbH3IqfQBfS/kJ+DTmMCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNTEyMDExODM1MDFaFw0yNTEyMDQyMTQ3MDFaMDMxMTAvBgNV BAMTKDEzMDE5RDVDRjc0MjcwNUEwMzNGRUE1OTAwODQ5MUUxOEYwNkE2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCahbC61LMcdBBWjpEUeKOwCGxd HxBAYl2p+pLbSe7WfVp4v6xpx0DQNltKJMYsAPdYkohVdnVZ7TPL255jeI0L+aWy owznijjCuO/6IMJ4DIXWwyzO/dOpOpirM/T3LCrGvQYTDfCGT0gyFvOd3cZpt7P9 Bk+INphEoAZMdC9e1ORbfIqzY8OteQtmk9b0wz0SnK3YJ2tMU0kw+Qunw0zG7LGj V4sfvDnW/N7aExL4OrRskRlBootce4wBbv9ozMdokeSmCeMPIJUIkbCVPi5cwEBC +eIzu90TuIBCEDch5wvJQR+VWi+rlJ37ediTzt6rioDe97cbr0a57SMP8CWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEwGdXPdCcFoDP+pZAISR4Y8GpoUwHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnvKenKor8ZGP2IERPZddtdlXM2fW4tU4v+ m0tJ7qtF4CPLPbxI9TCUZmlskJBg2KOrR/xDG0OjiAcNm60NkxMWqsglyGAq7bW3 eY/SjcYkrJRwUV80hGWO5cvmq6AFEfKZlUSRp0vzXhCQQ3aiTGVBrInEbzia4s7E KjULJhgtDZLd4E5C8XMtDF2ueVwvgxPisflbvmphms8Tjz6KArNlvyPy8s5OQrIT teJh6YucoDKyE2dVh2UdqpA/HpRWsvLd7RtyAetWfubjSf58efIeG7BqeXknaFNf dQyiHRvjvt1phylXTUrgzHbS6WgtAEq8zhsR6UIu5heIiC5hoiY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:30 2025 by rpki-client