This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft File: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json) Hash identifier: oUak+pa+qpK1TYb9SEPfsZEBu1OAqO5rF9GrRx72c1U= Subject key identifier: C0:BB:21:14:20:C2:89:7E:84:9B:A6:4B:1C:5E:19:63:7D:36:F1:C7 Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 6EA38C950DD96C9B1AE705474D17605C1A266DE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft Manifest number: 0381 Signing time: Mon 01 Dec 2025 23:32:02 +0000 Manifest this update: Mon 01 Dec 2025 23:27:02 +0000 Manifest next update: Fri 05 Dec 2025 07:33:02 +0000 Files and hashes: 1: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: tGztSZAQJ35/hLuECvtTcpELlM1IpNOZ8zjyOffPPVE=) 2: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 8CMqMpoCs6b6HNia3ifuD/WpzvcJj1kVCsO8zPSQ7wc=) 3: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: WLK6N6lYU6j7qmPlWLYHBoNW0CsjIHOLp3K/3Jfw78k=) 4: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: /o78+h+/flFDIf35ewlLzeVnXzafdZ89kkL/MxKB8Og=) 5: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: nikRTC901Bllan4GreFOs5fithEDsAsxTQDrjRSiako=) 6: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: nSNHUbZiqo6P3F9SIZ9EN5nCLPpwycyYrfB+M+PV3zw=) 7: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: p6w84x+sTkId9KJBAsf0out+ASQwEBO6MAkMqXPQJmY=) 8: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: FgWk4lEb+N8VyrkhQkA7AsDgO4pzlnxAR+so0eMn0MM=) 9: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=) 10: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=) 11: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: 3mPJMmSU87HxOCz1kx2GnX89IU0Xnf2eTb3lccTca1k=) 12: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: KiKi/4BGJg0K48DdjCfOcOBa77JCOo4OxuIg38BvrXI=) 13: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6Gn2L5Gc0xaArWW6fS4YuSQAyW4Nw2vh1NIUwUVsqyA=) 14: 3230322e39312e33312e302f32342d3234203d3e20313532303639.roa (hash: S7MlEVaiyvjAdB83EWitfmwmyo4wzjPWQGuZFYtjp34=) 15: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: aOzMI9PHIaU1+JYfqj3PgTWOSMZrS1G3wjVf+KJcQuA=) 16: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: f+5HOc/sgnjP7t42vcbumcmwD5c7eyke5qlw/e0UPsk=) 17: 3230322e39312e33302e302f32342d3234203d3e20313532303639.roa (hash: v4GScNp+JRLvaXyvj8xalK2YN2m8f7pYE4HXkH+LiDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a3:8c:95:0d:d9:6c:9b:1a:e7:05:47:4d:17:60:5c:1a:26:6d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: Dec 1 23:27:02 2025 GMT Not After : Dec 5 07:33:02 2025 GMT Subject: CN=C0BB211420C2897E849BA64B1C5E19637D36F1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:87:a6:23:b2:5b:dc:2e:2e:9a:53:a3:0d: 24:a3:62:a2:73:13:0b:f9:03:57:0b:5d:d5:c0:35: 6d:07:f2:f5:2c:43:4f:93:50:65:44:e1:e1:15:bb: 8f:91:c5:b9:11:81:b5:4e:eb:4c:7f:eb:6e:58:6c: c1:1c:4b:da:ae:be:e5:34:0a:fa:a6:ff:ca:46:c4: f7:90:13:39:21:e8:94:cd:b0:c3:b3:96:39:e0:6e: 6d:59:2a:62:39:fe:a7:f9:d2:ec:d5:07:02:30:a1: 5f:89:01:67:9d:19:88:53:20:13:f9:04:c7:2a:15: 33:4f:19:c0:9d:09:3b:70:ae:47:dc:4a:1a:f9:fe: 80:cc:89:50:07:e6:f1:d4:96:63:62:c5:ba:03:53: cd:5a:f7:41:c1:3d:17:a1:02:34:08:00:cd:9a:82: c6:20:38:b9:69:69:5d:1b:32:1e:1f:ac:ae:7c:67: 67:dd:de:13:aa:b4:03:44:bd:6e:5b:20:5f:4e:56: 2b:5c:b4:4d:bb:d7:9d:7d:74:4d:ef:8c:dc:36:5e: 2e:64:43:92:a3:20:a1:c7:ec:58:c9:be:d1:a9:f4: ab:b4:95:0d:d0:29:78:1e:84:9d:4c:59:48:b7:b1: b2:ac:28:5b:14:72:1b:b2:23:bc:f9:7b:1a:3a:2b: 1b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BB:21:14:20:C2:89:7E:84:9B:A6:4B:1C:5E:19:63:7D:36:F1:C7 X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b7:4b:7d:ab:a8:4f:7c:fc:4c:02:4b:c2:e4:0b:58:cb:dd: 18:bd:1e:fe:1b:a3:b4:e5:88:ea:66:35:05:4c:ee:61:1c:06: e2:66:78:7e:80:62:75:21:46:f0:92:8d:86:bf:4e:aa:27:1d: 8d:31:36:fc:52:4d:95:28:0e:f3:b0:e3:f1:51:c0:02:e8:20: 39:0c:52:94:7c:10:64:6b:9f:9e:34:15:58:a6:c8:2b:b9:47: 4c:8e:26:35:a5:61:c0:cd:00:af:3a:c0:81:03:d7:7e:a9:ae: 22:96:bb:e0:be:be:75:5b:43:fb:86:f0:90:49:1f:d3:b8:ab: cf:33:c5:18:1e:d5:aa:08:00:c2:4f:99:15:39:ed:01:40:e5: 95:ac:43:41:09:cb:1f:51:fe:d3:1e:b0:a7:5b:ff:04:f7:4b: 95:3e:52:9b:25:5c:bf:14:98:fe:91:f9:27:67:81:eb:f1:d3: 05:8a:99:cb:dc:f4:d4:ee:ca:3f:37:09:a4:b2:8e:04:f0:f5: 0a:69:75:57:b9:0c:66:d2:48:06:37:54:ff:7c:73:bc:f6:b5: 5c:24:29:fa:8f:16:56:c8:66:00:87:da:2e:da:95:8c:02:66: 8f:06:86:29:ca:4a:4c:18:51:02:a0:94:32:e3:ab:98:03:9d: 8f:4c:78:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqOMlQ3ZbJsa5wVHTRdgXBombeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNTEyMDEyMzI3MDJaFw0yNTEyMDUwNzMzMDJaMDMxMTAvBgNV BAMTKEMwQkIyMTE0MjBDMjg5N0U4NDlCQTY0QjFDNUUxOTYzN0QzNkYxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXboemI7Jb3C4umlOjDSSjYqJz Ewv5A1cLXdXANW0H8vUsQ0+TUGVE4eEVu4+RxbkRgbVO60x/625YbMEcS9quvuU0 Cvqm/8pGxPeQEzkh6JTNsMOzljngbm1ZKmI5/qf50uzVBwIwoV+JAWedGYhTIBP5 BMcqFTNPGcCdCTtwrkfcShr5/oDMiVAH5vHUlmNixboDU81a90HBPRehAjQIAM2a gsYgOLlpaV0bMh4frK58Z2fd3hOqtANEvW5bIF9OVitctE271519dE3vjNw2Xi5k Q5KjIKHH7FjJvtGp9Ku0lQ3QKXgehJ1MWUi3sbKsKFsUchuyI7z5exo6KxsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwLshFCDCiX6Em6ZLHF4ZY3028ccwHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlhYjYwYjEtYTI0NC00YTc4LWIz MWItZmVjYTNkMTRlZDlmLzAvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3 OTZERDNDNjcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKq3S32rqE98/EwCS8LkC1jL3Ri9Hv4bo7Tl iOpmNQVM7mEcBuJmeH6AYnUhRvCSjYa/TqonHY0xNvxSTZUoDvOw4/FRwALoIDkM UpR8EGRrn540FVimyCu5R0yOJjWlYcDNAK86wIED136priKWu+C+vnVbQ/uG8JBJ H9O4q88zxRge1aoIAMJPmRU57QFA5ZWsQ0EJyx9R/tMesKdb/wT3S5U+UpslXL8U mP6R+Sdngevx0wWKmcvc9NTuyj83CaSyjgTw9QppdVe5DGbSSAY3VP98c7z2tVwk KfqPFlbIZgCH2i7alYwCZo8GhinKSkwYUQKglDLjq5gDnY9MeFQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:58 2025 by rpki-client