This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json) Hash identifier: NiUc3qEVqqeiiwmIK4bCH8Q/OlINOhksD3zJShfTVUI= Subject key identifier: E1:29:36:72:E2:DB:7E:B5:AF:49:17:1E:5D:24:C8:2E:85:D0:D8:A2 Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Certificate serial: 475144989540A0D32A5A5EA5A8E81903CAF674A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft Manifest number: 01F5 Signing time: Tue 02 Dec 2025 12:22:08 +0000 Manifest this update: Tue 02 Dec 2025 12:17:08 +0000 Manifest next update: Fri 05 Dec 2025 22:41:08 +0000 Files and hashes: 1: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: m+kNLMS39T1XrNLiDk6g1NJ5jtLDLBZdzAOZl+Ww9Ks=) 2: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: zkN9KM3zjX+gsUQDtCei38obRvmk7IKvdyrKuozTeis=) 3: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: ZH95fzIk5wuuT+vd4hIsCcqQWDxd7AjWMS1Ri5F0arI=) 4: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: 1gzxa88JIBim0N0R/uC1nAl7S+pBY42/XBrZ+VIbBR0=) 5: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: Yr2FXKQOruE2LRme+DUiNIwTwvGdJjH5/vkzRbtRCLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:51:44:98:95:40:a0:d3:2a:5a:5e:a5:a8:e8:19:03:ca:f6:74:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Validity Not Before: Dec 2 12:17:08 2025 GMT Not After : Dec 5 22:41:08 2025 GMT Subject: CN=E1293672E2DB7EB5AF49171E5D24C82E85D0D8A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:ad:35:a9:33:e9:45:5a:a7:68:a0:6d:ac: b2:31:43:dc:dc:98:b5:db:da:bd:d9:ab:be:7b:c3: 80:d6:9d:3a:c8:a6:b2:8e:99:e3:14:5e:6a:fe:4b: 99:f1:ea:13:f5:8e:c5:0d:38:07:40:8e:96:3d:cf: 50:80:23:85:e1:3e:0c:47:94:9a:10:26:39:a9:98: ca:22:47:28:f5:c3:3d:2b:03:a5:35:14:85:a0:e1: 51:ed:3c:ec:f6:36:73:4c:cd:6e:5b:d7:29:82:ff: bf:65:b9:b5:4c:2d:33:2d:45:26:ac:f1:78:67:7f: 93:5f:71:17:93:24:3f:c6:5d:03:74:3b:94:ba:54: 6f:51:5c:97:84:69:56:5a:04:94:a1:a4:e9:1d:fe: fe:8f:d3:9c:21:1a:26:74:88:3a:b4:a4:5f:1e:ba: 45:4a:2c:b4:db:80:56:b8:12:de:b9:23:8f:c9:0e: bb:d9:44:11:e5:c4:67:da:2a:a2:4e:cf:33:fe:81: 8e:90:db:5f:ae:79:6a:0d:19:9b:39:9b:cc:e3:30: f6:38:97:13:d4:25:65:bb:71:7c:83:f9:42:6a:8d: 86:65:08:35:63:6b:35:0d:74:b5:5c:9e:69:75:e3: 30:a3:76:50:aa:88:d8:ce:75:d7:4f:b3:7d:95:dd: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:29:36:72:E2:DB:7E:B5:AF:49:17:1E:5D:24:C8:2E:85:D0:D8:A2 X509v3 Authority Key Identifier: keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:96:da:50:58:8c:ee:b0:b5:f0:3b:83:85:c9:d3:9f:b5:00: 46:00:9d:a1:64:38:15:67:19:ca:72:08:ea:f0:fd:4a:8d:f0: 73:60:2b:cd:84:78:51:8f:e2:28:93:80:80:7b:bd:26:21:67: a5:a5:b8:0d:81:a0:f2:a6:71:39:53:7c:3a:7c:bc:22:60:2b: cc:4b:95:3c:3d:4a:dd:3c:c7:fb:5d:d7:ff:a1:17:2a:0e:f4: 95:a9:35:37:13:f0:ba:57:01:01:8e:55:96:9e:0a:30:9b:0a: 42:e5:43:e4:ef:7a:70:14:4e:b9:50:bd:e0:7d:4d:36:de:60: 1f:3e:37:df:d5:44:1a:b8:48:1e:ef:f4:9a:23:89:4c:5d:af: 72:2b:55:8f:d2:33:b4:b3:82:ab:3b:55:9b:17:65:e2:27:b9: 5d:91:03:49:22:bc:50:99:74:d3:30:ba:d9:d5:91:7a:3e:32: 59:fb:c9:85:e6:a7:cf:f6:8f:a1:ae:3f:02:7e:66:97:ca:cf: 4f:ea:24:8f:22:48:e8:b9:3c:e5:c1:9b:90:4e:6f:aa:4f:94: 45:4a:e3:d8:ef:14:19:ae:a8:ac:e4:56:bd:a0:81:ce:1a:63: 60:61:5c:63:b8:d3:81:70:6d:3b:27:06:46:7e:b0:03:b3:a6: ff:33:74:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1FEmJVAoNMqWl6lqOgZA8r2dKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5 NDNEQTIzQzAeFw0yNTEyMDIxMjE3MDhaFw0yNTEyMDUyMjQxMDhaMDMxMTAvBgNV BAMTKEUxMjkzNjcyRTJEQjdFQjVBRjQ5MTcxRTVEMjRDODJFODVEMEQ4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTq01qTPpRVqnaKBtrLIxQ9zc mLXb2r3Zq757w4DWnTrIprKOmeMUXmr+S5nx6hP1jsUNOAdAjpY9z1CAI4XhPgxH lJoQJjmpmMoiRyj1wz0rA6U1FIWg4VHtPOz2NnNMzW5b1ymC/79lubVMLTMtRSas 8Xhnf5NfcReTJD/GXQN0O5S6VG9RXJeEaVZaBJShpOkd/v6P05whGiZ0iDq0pF8e ukVKLLTbgFa4Et65I4/JDrvZRBHlxGfaKqJOzzP+gY6Q21+ueWoNGZs5m8zjMPY4 lxPUJWW7cXyD+UJqjYZlCDVjazUNdLVcnml14zCjdlCqiNjOdddPs32V3VqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Sk2cuLbfrWvSRceXSTILoXQ2KIwHwYDVR0j BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4 QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqW2lBYjO6wtfA7g4XJ05+1AEYAnaFkOBVn GcpyCOrw/UqN8HNgK82EeFGP4iiTgIB7vSYhZ6WluA2BoPKmcTlTfDp8vCJgK8xL lTw9St08x/td1/+hFyoO9JWpNTcT8LpXAQGOVZaeCjCbCkLlQ+TvenAUTrlQveB9 TTbeYB8+N9/VRBq4SB7v9JojiUxdr3IrVY/SM7Szgqs7VZsXZeInuV2RA0kivFCZ dNMwutnVkXo+Mln7yYXmp8/2j6GuPwJ+ZpfKz0/qJI8iSOi5POXBm5BOb6pPlEVK 49jvFBmuqKzkVr2ggc4aY2BhXGO404FwbTsnBkZ+sAOzpv8zdIo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:35:15 2025 by rpki-client