This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: wG3rMuWVDflVYquhEkbh1hmlTkAjF68bC3/DZ4JIQ+Q= Subject key identifier: 67:F0:20:D8:37:85:71:48:62:04:DA:A2:06:82:AD:4B:D8:9A:DE:51 Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 4BDF24C95FB41637C03229D93D981C94F8273B5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 053C Signing time: Mon 01 Dec 2025 17:21:07 +0000 Manifest this update: Mon 01 Dec 2025 17:16:07 +0000 Manifest next update: Thu 04 Dec 2025 18:05:07 +0000 Files and hashes: 1: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: ArGX3GK83LFApxV4uLSs4kfPXNu12xplyTp4FBzO9Nw=) 2: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: tHhLDdHHbsCkG+UHT3p88TUY2+W5e4f+3agioxt0A6g=) 3: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: 1h7fo52sVm4cJACJ1QTb5QR43dKEDAqoDnfictr7I+U=) 4: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: h5AhkqiAVXPvujk8uDFTFbNm/Y465fjhlDhW56+0hZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:df:24:c9:5f:b4:16:37:c0:32:29:d9:3d:98:1c:94:f8:27:3b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: Dec 1 17:16:07 2025 GMT Not After : Dec 4 18:05:07 2025 GMT Subject: CN=67F020D8378571486204DAA20682AD4BD89ADE51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:19:83:e0:a5:24:7e:8a:b3:62:a0:b7:b1: 6b:dd:46:a2:02:d5:7d:27:4b:32:cd:46:7a:90:4d: f3:2c:4c:dd:e8:2a:79:eb:36:12:94:58:fc:1f:f7: 2f:cf:b0:8f:66:40:44:77:93:aa:f9:d9:ae:8f:33: fb:af:82:25:b5:61:14:8e:dc:a2:8b:23:b9:cc:89: a3:06:16:27:89:f5:d3:8a:cf:77:cd:b6:ee:2e:ee: 30:3d:18:21:68:9f:24:e6:09:12:de:17:67:c7:34: 13:87:2b:5e:3a:8f:e9:1e:c2:44:f5:19:91:44:30: 78:aa:87:a4:a1:b2:2f:e5:26:4f:88:74:20:a8:ec: de:27:0b:b4:2c:fa:bf:98:7f:1e:ea:c5:dd:19:ad: 0e:b5:8a:64:b6:ca:a2:8a:51:7a:9e:02:a1:33:2b: 14:9b:33:38:a1:e3:7b:7d:40:15:79:17:46:04:72: 84:4c:b8:96:9d:53:bd:30:3e:bb:0a:23:9d:9f:76: 9b:af:ff:7d:85:ba:b1:b0:41:b6:38:25:61:3e:69: 38:1d:98:08:8f:23:91:68:03:24:09:a6:f0:42:9b: ec:13:d4:5a:36:31:b4:ae:c3:d3:40:8d:e8:6b:f0: aa:f1:a4:9d:da:6c:cf:89:42:27:f1:ba:5c:fe:78: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F0:20:D8:37:85:71:48:62:04:DA:A2:06:82:AD:4B:D8:9A:DE:51 X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b1:6c:48:38:81:85:93:d1:c9:81:9d:ba:d3:b1:26:5c:be: ef:84:03:8f:82:7d:26:f3:cb:a5:ce:54:9d:63:16:97:35:b8: 51:7f:d8:e2:3f:39:6d:db:2c:7c:a1:d2:45:10:5f:b1:50:45: 6e:86:04:49:81:9b:db:5a:0a:6b:e5:c2:7b:81:29:90:06:56: a2:82:b6:69:2f:6f:f1:e9:26:87:7d:63:59:e9:d8:d9:30:c4: 77:d0:1c:cb:ee:7f:0f:65:c7:84:21:e8:4e:15:f6:f4:af:2d: d8:f1:f9:bd:63:05:f1:7e:80:35:3c:dc:c4:8e:53:e2:af:b8: bc:49:27:65:90:08:24:2f:bb:06:c8:46:33:9b:4a:60:9f:4f: 38:3d:ca:b9:a4:5c:f5:32:2a:04:ed:dc:29:29:53:f1:fb:f7: 7d:6c:02:91:bb:39:78:d2:14:51:2b:5e:48:d5:97:62:c2:7f: c3:65:46:4a:fe:ef:2f:4b:57:35:13:de:36:4c:95:be:b2:21: 22:c8:36:72:4f:df:3d:10:96:63:cf:06:79:dd:2b:e2:a4:4b: 40:76:1d:68:9d:c4:f8:a1:3c:fd:ee:5c:17:c8:87:bc:21:cc: a2:ab:ea:93:25:64:60:b5:fb:a4:35:86:51:df:cc:78:e5:4c: 59:fe:96:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS98kyV+0FjfAMinZPZgclPgnO18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNTEyMDExNzE2MDdaFw0yNTEyMDQxODA1MDdaMDMxMTAvBgNV BAMTKDY3RjAyMEQ4Mzc4NTcxNDg2MjA0REFBMjA2ODJBRDRCRDg5QURFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUhmD4KUkfoqzYqC3sWvdRqIC 1X0nSzLNRnqQTfMsTN3oKnnrNhKUWPwf9y/PsI9mQER3k6r52a6PM/uvgiW1YRSO 3KKLI7nMiaMGFieJ9dOKz3fNtu4u7jA9GCFonyTmCRLeF2fHNBOHK146j+kewkT1 GZFEMHiqh6Shsi/lJk+IdCCo7N4nC7Qs+r+Yfx7qxd0ZrQ61imS2yqKKUXqeAqEz KxSbMzih43t9QBV5F0YEcoRMuJadU70wPrsKI52fdpuv/32FurGwQbY4JWE+aTgd mAiPI5FoAyQJpvBCm+wT1Fo2MbSuw9NAjehr8KrxpJ3abM+JQifxulz+eMoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ/Ag2DeFcUhiBNqiBoKtS9ia3lEwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyxbEg4gYWT0cmBnbrTsSZcvu+EA4+CfSbz y6XOVJ1jFpc1uFF/2OI/OW3bLHyh0kUQX7FQRW6GBEmBm9taCmvlwnuBKZAGVqKC tmkvb/HpJod9Y1np2NkwxHfQHMvufw9lx4Qh6E4V9vSvLdjx+b1jBfF+gDU83MSO U+KvuLxJJ2WQCCQvuwbIRjObSmCfTzg9yrmkXPUyKgTt3CkpU/H7931sApG7OXjS FFErXkjVl2LCf8NlRkr+7y9LVzUT3jZMlb6yISLINnJP3z0QlmPPBnndK+KkS0B2 HWidxPihPP3uXBfIh7whzKKr6pMlZGC1+6Q1hlHfzHjlTFn+lss= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:20 2025 by rpki-client