This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: QBhXYtK5i8mOjDhTfKFvx05FBl5Rad3ICDJi1YXvbJU= Subject key identifier: C3:E3:FB:4F:B4:46:8C:68:5F:69:4C:E5:4D:FB:FE:1A:D2:BA:10:5F Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 216490A2E1A6807E33AD50E6F92572D61922C61B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 0333 Signing time: Thu 18 Dec 2025 02:40:53 +0000 Manifest this update: Thu 18 Dec 2025 02:35:53 +0000 Manifest next update: Sun 21 Dec 2025 13:53:53 +0000 Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=) 2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: 97uMZ9quS3cs/HIbvG60SdtJ/BR4X7rmXFYerqecP4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:64:90:a2:e1:a6:80:7e:33:ad:50:e6:f9:25:72:d6:19:22:c6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Dec 18 02:35:53 2025 GMT Not After : Dec 21 13:53:53 2025 GMT Subject: CN=C3E3FB4FB4468C685F694CE54DFBFE1AD2BA105F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:65:56:d4:2b:57:43:2f:cb:15:20:0f:02: e5:ed:ec:14:4b:50:d6:96:a8:bf:79:3c:26:bb:99: 97:76:4c:f5:af:85:67:e3:f7:60:8a:83:dd:ed:82: 07:05:77:40:17:ce:15:fe:83:0f:8b:12:e9:f7:bf: 9f:34:28:fa:b5:d1:93:59:af:df:3f:a4:7d:4b:87: 2f:e6:c1:6f:be:5d:bb:ef:7f:9a:b8:4a:85:29:b3: 44:ed:df:8a:d3:7d:ca:3f:39:f1:5f:f8:f3:d6:82: b4:7a:d8:88:a5:f5:be:d9:88:fa:2c:77:f1:71:e2: e0:7c:bb:d2:c6:c5:c0:5e:30:64:c9:43:cc:29:60: 37:cf:f1:0c:7a:84:ba:67:3a:d6:c9:a3:d9:fe:3b: 5f:7d:5d:a2:c4:b6:2d:70:d7:be:24:fa:9d:e9:c5: 2b:a5:52:ee:02:05:24:41:5e:ab:e5:1b:9c:62:d4: c4:18:ed:71:0a:b2:2a:49:c4:6e:d2:28:05:54:14: 2c:5c:31:b6:d6:95:18:89:f5:c8:3d:7b:a7:77:78: c4:60:65:65:d7:cd:7d:95:9a:a7:cf:5c:98:5a:36: e4:5a:0d:21:3f:20:8e:8c:7f:6d:b8:ce:b0:8a:3d: e0:9e:80:66:27:a2:18:56:11:6d:e4:31:74:be:2b: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E3:FB:4F:B4:46:8C:68:5F:69:4C:E5:4D:FB:FE:1A:D2:BA:10:5F X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:5f:2c:d7:f3:f3:70:3e:98:9f:79:93:4e:8b:ac:70:d0:7f: 46:7c:ca:69:55:8c:27:25:4d:01:60:62:a5:b6:4d:ee:0c:4b: 2f:9a:4f:95:0b:8c:c1:9d:ff:d1:aa:4d:27:8f:3b:97:29:b0: 29:eb:af:e1:5a:36:96:10:44:82:53:20:c1:77:f3:74:02:22: 00:83:57:e7:92:f4:29:b8:f4:96:56:52:84:ae:9b:60:0b:43: 7b:22:5d:89:34:ac:6e:24:b1:e5:f3:66:ff:ca:af:8e:cc:1b: c5:c9:e4:bb:4a:3c:d0:0a:71:10:7c:1c:97:84:5b:fd:38:8e: e0:7d:17:df:d3:f5:fc:98:0a:cf:92:54:bd:95:aa:64:b7:52: e3:13:53:2e:37:58:ea:f2:0e:03:e5:b5:0e:17:52:ee:b8:29: bf:3d:54:7b:3a:e3:7b:bb:2c:58:83:7f:8e:e0:ed:61:46:f7: 30:10:48:3c:41:85:07:80:90:ea:84:3b:80:c1:d1:76:e7:63: a0:2d:63:19:b2:fe:d4:ed:8d:18:7d:e5:74:d5:27:1d:43:14: e0:93:b4:28:3d:ae:7f:df:4c:6a:1f:09:e7:f5:8f:39:e2:ab: 3c:e3:fc:44:49:1a:4f:58:7e:f9:e3:6f:5b:76:3b:ff:7b:f0: 78:6f:83:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWSQouGmgH4zrVDm+SVy1hkixhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNTEyMTgwMjM1NTNaFw0yNTEyMjExMzUzNTNaMDMxMTAvBgNV BAMTKEMzRTNGQjRGQjQ0NjhDNjg1RjY5NENFNTRERkJGRTFBRDJCQTEwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2mVW1CtXQy/LFSAPAuXt7BRL UNaWqL95PCa7mZd2TPWvhWfj92CKg93tggcFd0AXzhX+gw+LEun3v580KPq10ZNZ r98/pH1Lhy/mwW++Xbvvf5q4SoUps0Tt34rTfco/OfFf+PPWgrR62Iil9b7ZiPos d/Fx4uB8u9LGxcBeMGTJQ8wpYDfP8Qx6hLpnOtbJo9n+O199XaLEti1w174k+p3p xSulUu4CBSRBXqvlG5xi1MQY7XEKsipJxG7SKAVUFCxcMbbWlRiJ9cg9e6d3eMRg ZWXXzX2VmqfPXJhaNuRaDSE/II6Mf224zrCKPeCegGYnohhWEW3kMXS+Kw6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+P7T7RGjGhfaUzlTfv+GtK6EF8wHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRfLNfz83A+mJ95k06LrHDQf0Z8ymlVjCcl TQFgYqW2Te4MSy+aT5ULjMGd/9GqTSePO5cpsCnrr+FaNpYQRIJTIMF383QCIgCD V+eS9Cm49JZWUoSum2ALQ3siXYk0rG4kseXzZv/Kr47MG8XJ5LtKPNAKcRB8HJeE W/04juB9F9/T9fyYCs+SVL2VqmS3UuMTUy43WOryDgPltQ4XUu64Kb89VHs643u7 LFiDf47g7WFG9zAQSDxBhQeAkOqEO4DB0XbnY6AtYxmy/tTtjRh95XTVJx1DFOCT tCg9rn/fTGofCef1jzniqzzj/ERJGk9Yfvnjb1t2O/978Hhvg9E= -----END CERTIFICATE-----Generated at Thu Dec 18 09:57:23 2025 by rpki-client