This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft File: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json) Hash identifier: RA2Y0LJv+aC+0uLC9txz2EevFdBIdjqMgDvIgvyZGJ0= Subject key identifier: 58:1C:E0:E6:85:B0:53:7B:F9:96:49:02:AB:47:57:18:55:A5:10:0A Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Certificate serial: 586EBDB6D8A71516C992093570F7EA1B02EF44C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft Manifest number: 052E Signing time: Tue 02 Dec 2025 09:32:19 +0000 Manifest this update: Tue 02 Dec 2025 09:27:19 +0000 Manifest next update: Fri 05 Dec 2025 21:11:19 +0000 Files and hashes: 1: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: 1OI5D/GWYXU8Q8NVrb3r5KXk7hpMXgpuWqyzA2KgLYw=) 2: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: lX37Ym1HtH8/+BNNZ7vVVvmLTRPAVgTV6qXoJU01xNo=) 3: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: TuOuwC+HTY3+zsq30NoK3C4u4uR9Kt6tuzw+MAyTb4o=) 4: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: LfUE4rPNFz/aR5lxsCZpCHmmGGAgXk5P43w+IeyGgRE=) 5: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: ShEOWvu/KCYTTrKo5vrKeCwlexfHyDbC4uTV8yZtzEM=) 6: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: nLub1P+aFMPWReFe8FfiX+yqIND5D1X2l5ebLcrAixg=) 7: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: wlegEJoNWqrWT2tySFrwLRqLsXDXFl0OFT0Nuvvp7LI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6e:bd:b6:d8:a7:15:16:c9:92:09:35:70:f7:ea:1b:02:ef:44:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Validity Not Before: Dec 2 09:27:19 2025 GMT Not After : Dec 5 21:11:19 2025 GMT Subject: CN=581CE0E685B0537BF9964902AB47571855A5100A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:31:0a:ed:75:88:b6:3b:be:ff:d4:82:4d: c7:7b:78:d8:f5:30:41:73:a1:ae:90:9b:d2:84:05: 47:ab:9c:af:5d:29:93:4d:d3:73:41:5f:4d:1b:a5: 89:32:8b:e1:e2:a0:df:35:8e:a4:48:b7:49:59:c2: 2e:59:b6:74:a9:d5:d6:d3:97:1a:4d:48:f6:c9:af: 10:e7:ea:fd:ab:67:55:9c:93:01:07:88:1a:c2:0c: 91:ad:ad:ff:fa:57:f9:fb:a3:4d:a8:d9:d8:e3:ec: f8:e1:e1:75:73:dd:48:81:97:25:32:26:b8:5e:1c: ab:39:53:66:7d:04:3f:f5:0f:91:3e:a5:0e:90:33: c0:06:e6:c9:cb:bf:9f:8d:6f:02:71:c7:8f:06:2d: 62:6b:75:96:ed:25:58:41:aa:0e:9c:74:0f:b9:e7: be:ab:6f:56:06:3b:73:58:2e:a5:a7:81:11:50:cc: 0b:ce:34:fa:a2:73:92:65:72:e6:43:c0:7c:b7:0b: cb:7d:c8:e2:90:92:88:18:bb:8c:4b:93:60:d2:4e: 75:af:14:b8:19:f4:5e:32:83:bc:49:5a:23:c5:dd: 82:20:a9:4c:e7:f5:6d:5d:b6:f3:00:db:ca:db:d8: bc:25:0b:50:83:6b:7c:79:96:88:19:d4:e4:6b:05: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1C:E0:E6:85:B0:53:7B:F9:96:49:02:AB:47:57:18:55:A5:10:0A X509v3 Authority Key Identifier: keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:57:60:4f:f3:5f:78:19:cb:67:f8:53:d7:fc:ab:b1:51:8f: 3b:5b:2e:ba:85:76:a8:ac:d5:57:ee:dd:71:de:ea:c8:b0:1f: 3c:69:27:23:54:9f:e4:b9:65:a7:37:61:e5:21:e8:5f:14:03: cb:35:38:92:07:ff:39:fe:e2:40:d4:f0:58:80:e6:6e:4a:53: c5:3b:83:b7:61:40:41:a6:38:07:07:db:38:5f:8e:76:b4:8c: ba:1c:fe:2b:4c:73:ae:12:7a:d9:10:01:35:b0:a6:46:7e:d3: 0b:c4:55:33:58:18:00:95:7a:9a:90:53:06:41:77:07:2e:21: 53:ec:c7:5d:b0:2f:7e:21:72:47:6f:ab:d1:ee:8b:88:7a:e8: f9:7a:5c:64:84:89:ca:56:95:30:71:cc:5b:ca:ac:4b:df:fe: c0:e7:75:7d:97:63:ef:36:c6:5b:90:67:4e:4f:95:bc:9a:ba: f3:01:78:df:3c:ac:5d:1b:f6:72:0a:6e:35:e3:01:bc:fc:a5: 06:2c:37:a7:88:6c:5d:5b:29:a7:9f:4b:f5:6f:b4:db:8d:c0: 69:f4:bb:6c:4e:58:fe:38:d6:75:30:43:0c:33:19:7b:48:a9: 32:db:b6:5c:bf:e9:1a:3c:26:b4:85:c6:a5:ae:c8:da:c1:bf: 28:15:33:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWG69ttinFRbJkgk1cPfqGwLvRMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw MTI1MkE1QzAeFw0yNTEyMDIwOTI3MTlaFw0yNTEyMDUyMTExMTlaMDMxMTAvBgNV BAMTKDU4MUNFMEU2ODVCMDUzN0JGOTk2NDkwMkFCNDc1NzE4NTVBNTEwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR0DEK7XWItju+/9SCTcd7eNj1 MEFzoa6Qm9KEBUernK9dKZNN03NBX00bpYkyi+HioN81jqRIt0lZwi5ZtnSp1dbT lxpNSPbJrxDn6v2rZ1WckwEHiBrCDJGtrf/6V/n7o02o2djj7Pjh4XVz3UiBlyUy JrheHKs5U2Z9BD/1D5E+pQ6QM8AG5snLv5+NbwJxx48GLWJrdZbtJVhBqg6cdA+5 576rb1YGO3NYLqWngRFQzAvONPqic5JlcuZDwHy3C8t9yOKQkogYu4xLk2DSTnWv FLgZ9F4yg7xJWiPF3YIgqUzn9W1dtvMA28rb2LwlC1CDa3x5logZ1ORrBeChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWBzg5oWwU3v5lkkCq0dXGFWlEAowHwYDVR0j BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1 MkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3 OTQwMTI1MkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANXYE/zX3gZy2f4U9f8q7FRjztbLrqFdqis 1Vfu3XHe6siwHzxpJyNUn+S5Zac3YeUh6F8UA8s1OJIH/zn+4kDU8FiA5m5KU8U7 g7dhQEGmOAcH2zhfjna0jLoc/itMc64SetkQATWwpkZ+0wvEVTNYGACVepqQUwZB dwcuIVPsx12wL34hckdvq9Hui4h66Pl6XGSEicpWlTBxzFvKrEvf/sDndX2XY+82 xluQZ05PlbyauvMBeN88rF0b9nIKbjXjAbz8pQYsN6eIbF1bKaefS/VvtNuNwGn0 u2xOWP441nUwQwwzGXtIqTLbtly/6Ro8JrSFxqWuyNrBvygVMzY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:47 2025 by rpki-client