This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: f6mJnx5rn6i5m/9DVBQpf7v5LZd1TLQUBxDsuKYouzk= Subject key identifier: 00:5E:F7:B5:2F:13:44:74:8B:7D:20:BA:83:FA:AC:36:43:D6:B2:C0 Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 58BE76600F0A633A658690644EA1D2575A67C44F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 01A1 Signing time: Wed 03 Dec 2025 09:02:13 +0000 Manifest this update: Wed 03 Dec 2025 08:57:13 +0000 Manifest next update: Sat 06 Dec 2025 19:49:13 +0000 Files and hashes: 1: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: p2FSYfSstF40b0A2AngRpWLMkw9q9Fi6vbwo6S1imnY=) 2: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: pEHLezsTnYguADx1cbYPTZbHF6Ez4ndRML5zjv7PktU=) 3: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:be:76:60:0f:0a:63:3a:65:86:90:64:4e:a1:d2:57:5a:67:c4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Dec 3 08:57:13 2025 GMT Not After : Dec 6 19:49:13 2025 GMT Subject: CN=005EF7B52F1344748B7D20BA83FAAC3643D6B2C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:13:89:ea:c4:a9:2e:c6:16:05:83:62:16: fe:66:23:a9:dd:e8:34:25:8b:79:73:85:d4:30:e9: 7b:81:b7:6d:1d:d1:ce:5f:96:97:2e:af:31:12:7c: d7:01:28:f8:06:fe:c2:3c:f8:33:9e:6c:a1:f0:2b: 2c:54:ce:07:68:ca:95:c0:b7:18:c9:eb:ec:c7:be: 91:80:e8:50:28:80:4e:dd:5e:40:a6:27:99:d4:05: 8f:a4:66:f2:bd:2f:5e:3b:02:58:2d:d3:e6:37:60: e1:fc:8c:20:a7:bc:65:13:71:1a:f0:9c:85:38:50: af:bb:73:53:9f:94:04:89:9f:aa:6b:1f:86:10:45: 30:6a:6d:c4:07:19:47:fa:5e:43:ee:77:d0:cd:e7: 61:38:35:63:0c:0e:c1:61:e2:14:c6:6e:33:53:e5: a4:f1:6d:5a:69:b7:55:77:5c:09:5d:e7:fb:7c:a7: 2a:59:1b:e3:40:e9:7b:49:b3:1c:85:bd:95:e0:49: 99:91:aa:d0:65:65:69:57:fe:73:45:6f:65:07:d9: fa:53:0f:31:9e:91:26:22:73:a3:81:b9:00:72:4b: d7:8f:66:86:53:57:08:a5:ef:50:e1:3c:55:35:54: 6e:a4:57:74:08:42:5c:5c:7e:31:58:8f:a7:d1:b1: e3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5E:F7:B5:2F:13:44:74:8B:7D:20:BA:83:FA:AC:36:43:D6:B2:C0 X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:05:38:e2:f1:ef:65:38:8b:f7:a0:3d:6b:f9:b3:1f:87:4b: f9:a4:01:4a:8f:a4:ea:58:e3:51:bc:fd:5c:48:fd:93:75:bc: a4:3b:d1:0b:db:e2:8b:db:e1:a4:b0:08:6e:d0:34:b2:29:a3: b8:74:c9:b8:3b:c3:50:c2:cc:b4:f7:84:ed:cc:05:68:9c:6e: f2:e0:1d:22:6b:eb:76:bc:ee:e2:29:d2:b1:f4:cd:ec:99:fb: b1:e2:9d:1a:af:91:62:91:0b:e2:42:13:33:98:36:df:28:03: 8e:3c:76:81:92:66:51:c9:cb:eb:33:0a:05:b4:f4:57:71:21: 84:a2:93:de:05:f4:43:83:5f:d9:5a:5b:b5:a6:80:37:6e:f9: f5:64:7d:2c:71:6b:45:d2:ad:72:28:2f:1b:5e:33:d3:1a:40: 3c:0b:24:3d:12:a0:fb:d6:6d:13:96:cd:bc:68:f5:cf:37:80: 1d:7d:00:2a:5e:7d:5d:d5:1f:27:86:e9:70:8c:0b:ee:db:42: ee:de:82:dc:6c:01:4a:aa:56:d0:ae:ae:ec:06:af:89:15:2e: 0d:26:2d:86:96:9d:fa:20:c4:35:13:4a:a3:65:67:bc:d1:25: 58:42:c5:af:8f:21:b6:5c:5f:e6:67:4c:3c:6d:86:41:c4:5c: 8f:30:ba:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWL52YA8KYzplhpBkTqHSV1pnxE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNTEyMDMwODU3MTNaFw0yNTEyMDYxOTQ5MTNaMDMxMTAvBgNV BAMTKDAwNUVGN0I1MkYxMzQ0NzQ4QjdEMjBCQTgzRkFBQzM2NDNENkIyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbhOJ6sSpLsYWBYNiFv5mI6nd 6DQli3lzhdQw6XuBt20d0c5flpcurzESfNcBKPgG/sI8+DOebKHwKyxUzgdoypXA txjJ6+zHvpGA6FAogE7dXkCmJ5nUBY+kZvK9L147Algt0+Y3YOH8jCCnvGUTcRrw nIU4UK+7c1OflASJn6prH4YQRTBqbcQHGUf6XkPud9DN52E4NWMMDsFh4hTGbjNT 5aTxbVppt1V3XAld5/t8pypZG+NA6XtJsxyFvZXgSZmRqtBlZWlX/nNFb2UH2fpT DzGekSYic6OBuQByS9ePZoZTVwil71DhPFU1VG6kV3QIQlxcfjFYj6fRseMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAF73tS8TRHSLfSC6g/qsNkPWssAwHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQFOOLx72U4i/egPWv5sx+HS/mkAUqPpOpY 41G8/VxI/ZN1vKQ70Qvb4ovb4aSwCG7QNLIpo7h0ybg7w1DCzLT3hO3MBWicbvLg HSJr63a87uIp0rH0zeyZ+7HinRqvkWKRC+JCEzOYNt8oA448doGSZlHJy+szCgW0 9FdxIYSik94F9EODX9laW7WmgDdu+fVkfSxxa0XSrXIoLxteM9MaQDwLJD0SoPvW bROWzbxo9c83gB19ACpefV3VHyeG6XCMC+7bQu7egtxsAUqqVtCuruwGr4kVLg0m LYaWnfogxDUTSqNlZ7zRJVhCxa+PIbZcX+ZnTDxthkHEXI8wujM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:29 2025 by rpki-client