This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: F+SCrD3Eid560GLCSw14W646iPmI3WXNQJXaYeYFyVg= Subject key identifier: 7A:D0:4C:7E:1E:2C:F0:2C:4E:D1:58:1A:12:F3:A9:4B:DD:CA:3B:FB Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 12FC9338563257642052F6F74459872DBB4B1167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 01F1 Signing time: Mon 15 Dec 2025 18:20:56 +0000 Manifest this update: Mon 15 Dec 2025 18:15:56 +0000 Manifest next update: Thu 18 Dec 2025 22:47:56 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 2: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=) 3: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 4: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: OxjDIgz/2IY/KiEe/h59ufpw6vhsc5/uWyft9PWabbU=) 5: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=) 6: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 22:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fc:93:38:56:32:57:64:20:52:f6:f7:44:59:87:2d:bb:4b:11:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Dec 15 18:15:56 2025 GMT Not After : Dec 18 22:47:56 2025 GMT Subject: CN=7AD04C7E1E2CF02C4ED1581A12F3A94BDDCA3BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:f2:8f:fe:57:c4:ff:84:bd:80:76:3d:36: f5:31:b7:47:d5:6a:06:6f:88:5d:41:c7:df:00:46: 30:b4:54:ad:05:17:6a:35:6b:53:00:13:31:9c:a7: 26:52:65:01:53:41:00:1e:de:73:6a:4f:b9:2c:15: b8:1b:16:88:74:a0:45:08:e4:2b:1f:23:22:cb:b5: 19:f3:f2:d9:42:1c:7a:e1:8a:b9:8f:0d:af:04:0b: 80:c4:98:bd:83:11:4b:d7:63:36:79:8a:d0:57:3e: 95:58:64:bb:17:ee:a5:d7:0d:c1:30:78:42:ae:de: e6:8c:a9:27:d0:2e:4b:99:34:b4:e5:86:1d:ab:a1: fc:85:93:f6:5a:fc:90:37:81:d2:b4:56:35:e4:f4: 2c:bd:81:d3:17:89:3b:5c:ae:21:8a:82:4c:05:e2: bf:2b:31:31:40:c4:53:92:3c:66:37:b6:2e:1f:f0: 44:df:5f:4b:f5:07:98:cf:ef:6c:32:8d:88:f7:68: 4b:2d:90:af:4b:1e:f4:b7:4a:96:c3:cb:9d:1d:20: c5:ff:15:99:8e:0f:ea:9a:b7:89:4b:5f:75:cf:47: af:00:7d:a3:77:e2:a2:69:76:d3:9e:0f:0f:a3:8b: 0a:f7:85:50:f2:87:54:97:be:cd:6e:9c:86:e2:65: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D0:4C:7E:1E:2C:F0:2C:4E:D1:58:1A:12:F3:A9:4B:DD:CA:3B:FB X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7f:8a:b9:8d:69:8f:c2:55:f9:57:87:40:25:9a:2d:ad:4a: ec:7b:61:55:11:08:eb:eb:48:88:35:32:4f:5b:e6:84:f5:fd: c4:2d:09:11:25:a8:56:f4:e9:8b:f7:71:1f:25:97:a2:91:d7: 7a:da:cb:84:43:07:ab:50:af:88:a8:2a:8b:84:fa:3b:77:95: 34:63:d3:48:da:9f:83:fb:a2:5c:8e:d6:af:b9:97:2e:7c:05: 93:31:e5:57:7d:36:04:67:91:b0:78:d0:e9:9a:44:d5:67:d8: f8:e2:1f:75:ce:b7:8b:9a:81:86:84:09:92:fe:c7:0c:1c:c5: 99:d9:d9:1c:4f:8b:23:7c:48:e8:45:68:26:3b:e2:28:00:ba: b3:c5:c9:81:f9:31:c9:be:47:69:8d:29:49:64:dd:d1:22:2c: 27:9b:23:20:04:f5:d4:3f:78:8d:7c:22:86:96:8f:9e:a8:bb: 4b:58:8b:54:05:68:1b:6d:1f:87:ae:64:3e:ff:1c:4c:68:d1: bd:be:d5:73:89:d0:38:18:cd:09:5b:1c:77:73:bf:49:84:47: 7a:e3:63:bc:72:5b:4c:08:23:f6:b7:3c:84:99:16:9e:eb:f0: 08:9c:1c:c2:2b:d1:47:12:1f:de:66:b7:11:e3:e5:d5:2b:2d: fc:fe:44:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEvyTOFYyV2QgUvb3RFmHLbtLEWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTEyMTUxODE1NTZaFw0yNTEyMTgyMjQ3NTZaMDMxMTAvBgNV BAMTKDdBRDA0QzdFMUUyQ0YwMkM0RUQxNTgxQTEyRjNBOTRCRERDQTNCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37vKP/lfE/4S9gHY9NvUxt0fV agZviF1Bx98ARjC0VK0FF2o1a1MAEzGcpyZSZQFTQQAe3nNqT7ksFbgbFoh0oEUI 5CsfIyLLtRnz8tlCHHrhirmPDa8EC4DEmL2DEUvXYzZ5itBXPpVYZLsX7qXXDcEw eEKu3uaMqSfQLkuZNLTlhh2rofyFk/Za/JA3gdK0VjXk9Cy9gdMXiTtcriGKgkwF 4r8rMTFAxFOSPGY3ti4f8ETfX0v1B5jP72wyjYj3aEstkK9LHvS3SpbDy50dIMX/ FZmOD+qat4lLX3XPR68AfaN34qJpdtOeDw+jiwr3hVDyh1SXvs1unIbiZSwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUetBMfh4s8CxO0VgaEvOpS93KO/swHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAh/irmNaY/CVflXh0Almi2tSux7YVURCOvr SIg1Mk9b5oT1/cQtCRElqFb06Yv3cR8ll6KR13ray4RDB6tQr4ioKouE+jt3lTRj 00jan4P7olyO1q+5ly58BZMx5Vd9NgRnkbB40OmaRNVn2PjiH3XOt4uagYaECZL+ xwwcxZnZ2RxPiyN8SOhFaCY74igAurPFyYH5Mcm+R2mNKUlk3dEiLCebIyAE9dQ/ eI18IoaWj56ou0tYi1QFaBttH4euZD7/HExo0b2+1XOJ0DgYzQlbHHdzv0mER3rj Y7xyW0wII/a3PISZFp7r8AicHMIr0UcSH95mtxHj5dUrLfz+RPA= -----END CERTIFICATE-----Generated at Tue Dec 16 07:22:52 2025 by rpki-client