This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: MH6Lrzqhvh7mkcgI64ThrrOmUrh57HWRt6BkuxfOrjk= Subject key identifier: 60:1C:F9:F0:9E:A2:8B:AF:48:16:02:EF:AC:69:55:DC:F2:82:68:F0 Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 2319A5EA2B96D59D1C2D6217B9C98319DAAFE1F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: D0 Signing time: Sun 07 Dec 2025 15:11:25 +0000 Manifest this update: Sun 07 Dec 2025 15:06:25 +0000 Manifest next update: Wed 10 Dec 2025 22:42:25 +0000 Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) 2: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: fmIU+oJdTnjz5mge/rgS2kjo8cOq6U5oKIzL8+cEwk0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:19:a5:ea:2b:96:d5:9d:1c:2d:62:17:b9:c9:83:19:da:af:e1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Dec 7 15:06:25 2025 GMT Not After : Dec 10 22:42:25 2025 GMT Subject: CN=601CF9F09EA28BAF481602EFAC6955DCF28268F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:03:f2:7d:fd:39:2c:a5:c3:44:68:0a:c2: cf:71:55:35:49:5c:36:68:b4:ba:4d:d0:b8:83:4e: 6b:64:a6:50:2a:a9:71:06:be:c5:b7:73:86:10:c8: ef:8a:c3:cd:04:00:43:45:1f:8f:75:d6:30:08:43: 24:bd:86:74:3f:5d:d5:17:f0:9d:25:67:6d:72:36: 5f:04:e1:3f:48:31:5b:80:c5:c5:c4:d2:bf:69:71: 82:51:e7:ac:6d:3d:b5:c7:de:b1:f0:20:cb:57:f9: f9:c5:21:c1:45:2b:1f:31:83:16:4b:c9:0e:79:2b: 83:ce:df:4b:2a:ae:27:18:03:1f:7b:8a:d9:9b:d5: 6d:bc:54:cd:13:16:17:7d:2e:6f:95:09:af:35:60: dc:2e:8c:2c:03:12:6e:51:66:da:17:46:b2:ca:31: bd:81:35:f1:95:5a:84:3f:ab:01:9d:30:cf:55:f9: e4:2a:9c:d3:07:24:fc:a8:5f:5d:30:c1:51:32:09: b3:18:ee:a6:a7:88:a6:2f:f0:47:57:92:ad:95:96: 07:86:5c:6b:a5:2f:b6:c8:12:51:a9:bc:50:af:c0: 11:f2:5d:e8:6c:03:95:1b:00:3e:3e:4d:e7:db:0b: ed:5f:a5:7a:db:67:c6:ae:42:d5:8f:fe:bc:9d:22: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1C:F9:F0:9E:A2:8B:AF:48:16:02:EF:AC:69:55:DC:F2:82:68:F0 X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5b:6f:bc:43:20:f9:36:a5:f9:b8:84:90:ee:e6:b7:8d:87: be:68:c6:c4:e1:52:b2:d2:29:9d:53:43:a0:88:cb:30:bd:b1: 67:16:8a:d7:33:e4:14:e3:3a:f2:f9:e9:98:d1:3d:ff:03:7c: 21:bc:21:a6:39:a2:3d:4c:e1:f1:b7:76:6d:56:6e:33:bf:de: 18:87:62:fd:f2:4b:7f:54:50:bc:4b:c0:d7:c2:a4:12:98:a2: 23:1e:5e:37:69:eb:40:44:75:a6:f2:4d:6d:02:fb:bf:de:a9: b0:c4:d1:11:c8:68:6d:aa:66:10:a2:84:dc:9d:07:54:b3:d3: 38:e4:ee:f0:4e:eb:0b:0a:72:6d:ca:f9:2c:6b:dc:a8:c1:25: 48:e5:dc:b0:25:84:0e:81:1f:c9:73:ae:37:a8:75:95:42:6e: b6:87:d9:79:1d:ff:e8:d0:82:3b:75:b1:39:8d:bc:fd:cf:23: 29:49:b0:22:e8:b6:ba:54:cc:99:8e:2e:45:36:5a:85:de:6a: d7:17:c3:23:1c:c3:ef:02:48:1a:3f:aa:7a:61:20:92:06:94: c7:83:1c:ac:ad:b9:8f:d8:ee:7e:89:09:65:fe:1a:c6:79:fc: d3:78:6a:d0:47:8e:ad:4b:ce:9e:45:0b:e5:ce:15:8d:38:56: 21:49:c1:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxml6iuW1Z0cLWIXucmDGdqv4fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTEyMDcxNTA2MjVaFw0yNTEyMTAyMjQyMjVaMDMxMTAvBgNV BAMTKDYwMUNGOUYwOUVBMjhCQUY0ODE2MDJFRkFDNjk1NURDRjI4MjY4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZOQPyff05LKXDRGgKws9xVTVJ XDZotLpN0LiDTmtkplAqqXEGvsW3c4YQyO+Kw80EAENFH4911jAIQyS9hnQ/XdUX 8J0lZ21yNl8E4T9IMVuAxcXE0r9pcYJR56xtPbXH3rHwIMtX+fnFIcFFKx8xgxZL yQ55K4PO30sqricYAx97itmb1W28VM0TFhd9Lm+VCa81YNwujCwDEm5RZtoXRrLK Mb2BNfGVWoQ/qwGdMM9V+eQqnNMHJPyoX10wwVEyCbMY7qaniKYv8EdXkq2VlgeG XGulL7bIElGpvFCvwBHyXehsA5UbAD4+TefbC+1fpXrbZ8auQtWP/rydIsUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYBz58J6ii69IFgLvrGlV3PKCaPAwHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRbb7xDIPk2pfm4hJDu5reNh75oxsThUrLS KZ1TQ6CIyzC9sWcWitcz5BTjOvL56ZjRPf8DfCG8IaY5oj1M4fG3dm1WbjO/3hiH Yv3yS39UULxLwNfCpBKYoiMeXjdp60BEdabyTW0C+7/eqbDE0RHIaG2qZhCihNyd B1Sz0zjk7vBO6wsKcm3K+Sxr3KjBJUjl3LAlhA6BH8lzrjeodZVCbraH2Xkd/+jQ gjt1sTmNvP3PIylJsCLotrpUzJmOLkU2WoXeatcXwyMcw+8CSBo/qnphIJIGlMeD HKytuY/Y7n6JCWX+GsZ5/NN4atBHjq1Lzp5FC+XOFY04ViFJwTc= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:46 2025 by rpki-client