This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: DpglbYj7SSFXWccyLWCq3UFF+vBrKOQfCbw/hSn1zWg= Subject key identifier: 98:E2:27:57:01:73:D7:77:0E:8F:C6:A1:66:3F:21:10:E9:8D:9D:9D Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 42825F9AA13FC8052DA9E438C783A0449C209053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 053A Signing time: Thu 18 Dec 2025 12:21:07 +0000 Manifest this update: Thu 18 Dec 2025 12:16:07 +0000 Manifest next update: Sun 21 Dec 2025 17:27:07 +0000 Files and hashes: 1: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: SD/KyAxDWQJmW/qve7nQwzmlQVOhM0zB9M9HMRZWY98=) 2: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 3: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: FyAvBZY6W2L1HwVaWtdBn1JjIwyZj/UZUwMR3y/jc5Q=) 4: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: +Ohb8AmL80BPgaiVvFCd/BXY6tohGQvqr2SFVpjVHPk=) 5: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 6: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 7: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:82:5f:9a:a1:3f:c8:05:2d:a9:e4:38:c7:83:a0:44:9c:20:90:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Dec 18 12:16:07 2025 GMT Not After : Dec 21 17:27:07 2025 GMT Subject: CN=98E227570173D7770E8FC6A1663F2110E98D9D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:7a:15:78:1f:bd:04:2c:2d:7c:63:ea:83: 6e:b1:b6:ff:88:c4:4e:c8:f3:e1:9b:39:07:57:08: 0d:68:c6:53:05:27:9d:e8:05:84:53:07:f8:cc:53: 5e:e7:f0:bc:5f:4c:9b:7f:97:95:19:13:b7:75:75: 8a:51:87:28:03:27:23:e1:a0:79:f5:a5:a8:a9:55: 19:c8:20:b1:57:4d:32:a0:4e:d2:b6:a4:66:86:c5: e2:b1:aa:61:7e:da:bd:8f:c6:62:ee:c0:37:81:1a: 1b:50:a6:8d:5f:3f:e0:b9:2b:b1:7f:3a:77:7c:19: 8c:60:e6:ea:51:2a:36:c0:ae:89:6b:fa:b1:20:5b: 18:aa:9e:b8:08:85:af:aa:b7:aa:40:12:b1:e2:ce: 35:12:53:c9:8a:ae:de:36:ce:24:fd:80:60:db:18: 26:ad:07:13:68:70:bb:34:f1:ce:bf:b2:d1:7e:c5: c8:c1:85:ce:fc:c2:82:56:03:bb:76:6a:3a:a7:4a: 75:2c:00:5c:1e:4a:80:85:83:61:71:cf:31:29:55: 9e:b8:0f:10:ae:05:c0:f5:1b:2c:86:ad:ec:9f:e6: c9:56:47:17:73:ee:9b:b2:1e:b3:0b:56:bb:44:c4: ad:ec:9f:33:c6:9e:ff:d2:59:90:68:1a:68:9f:df: fa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E2:27:57:01:73:D7:77:0E:8F:C6:A1:66:3F:21:10:E9:8D:9D:9D X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:6c:d1:44:2a:38:06:0b:29:0b:94:ae:92:92:ba:05:37:b8: 05:6a:15:7f:18:7b:ed:89:47:17:13:c3:e2:b4:5b:68:4e:f3: 5f:f9:f9:bb:ba:a8:4b:07:0a:52:32:cc:6f:d9:ac:e4:0c:f3: c8:87:99:1e:17:4b:3e:8e:b7:2c:d2:db:62:a5:28:30:39:c5: f0:9b:40:fb:57:20:e6:9c:96:a1:3d:ed:21:86:30:bb:3d:53: 4f:19:37:63:0e:6e:05:d9:b4:3c:56:15:c2:81:44:1b:dc:a3: e1:2a:5b:31:cd:40:61:6c:85:4a:6a:54:46:03:ed:16:10:7c: 92:36:c6:e7:72:a8:5d:40:d5:6e:25:56:d9:f8:3b:0a:d6:62: cc:7d:b7:4e:c9:13:47:d7:45:90:80:f7:8d:9e:0d:0c:de:5a: 53:2e:2b:d3:62:dd:b0:3b:c9:a5:7a:04:e3:e8:43:9f:43:1d: e4:61:df:4c:2d:c6:59:ba:64:31:8b:2e:4f:6e:46:f8:b1:78: 9d:a7:f5:b3:fb:94:5c:01:3a:83:fe:63:31:4e:06:96:c7:8b: 6e:90:36:19:8e:e8:dd:c7:f8:a6:ef:ec:7d:03:98:5d:ee:60: 82:fb:83:e3:bb:5e:5b:6b:21:89:99:f4:78:4c:83:81:e3:95: 8d:57:ad:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQoJfmqE/yAUtqeQ4x4OgRJwgkFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTEyMTgxMjE2MDdaFw0yNTEyMjExNzI3MDdaMDMxMTAvBgNV BAMTKDk4RTIyNzU3MDE3M0Q3NzcwRThGQzZBMTY2M0YyMTEwRTk4RDlEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4d3oVeB+9BCwtfGPqg26xtv+I xE7I8+GbOQdXCA1oxlMFJ53oBYRTB/jMU17n8LxfTJt/l5UZE7d1dYpRhygDJyPh oHn1paipVRnIILFXTTKgTtK2pGaGxeKxqmF+2r2PxmLuwDeBGhtQpo1fP+C5K7F/ Ond8GYxg5upRKjbArolr+rEgWxiqnrgIha+qt6pAErHizjUSU8mKrt42ziT9gGDb GCatBxNocLs08c6/stF+xcjBhc78woJWA7t2ajqnSnUsAFweSoCFg2FxzzEpVZ64 DxCuBcD1GyyGreyf5slWRxdz7puyHrMLVrtExK3snzPGnv/SWZBoGmif3/rtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmOInVwFz13cOj8ahZj8hEOmNnZ0wHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKls0UQqOAYLKQuUrpKSugU3uAVqFX8Ye+2J RxcTw+K0W2hO81/5+bu6qEsHClIyzG/ZrOQM88iHmR4XSz6OtyzS22KlKDA5xfCb QPtXIOaclqE97SGGMLs9U08ZN2MObgXZtDxWFcKBRBvco+EqWzHNQGFshUpqVEYD 7RYQfJI2xudyqF1A1W4lVtn4OwrWYsx9t07JE0fXRZCA942eDQzeWlMuK9Ni3bA7 yaV6BOPoQ59DHeRh30wtxlm6ZDGLLk9uRvixeJ2n9bP7lFwBOoP+YzFOBpbHi26Q NhmO6N3H+Kbv7H0DmF3uYIL7g+O7XltrIYmZ9HhMg4HjlY1XrfQ= -----END CERTIFICATE-----Generated at Fri Dec 19 08:08:50 2025 by rpki-client