This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft File: F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft (raw, json) Hash identifier: N7WFvfA5fdokfPYIb6Upb13gWmeRrAqoIaXVQlkxChw= Subject key identifier: E7:A7:6E:4B:71:88:70:45:E1:F9:A6:C1:F8:31:31:77:E9:95:E9:5C Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Certificate serial: 3D46ACD5094194F5EDB98B76C3D93C8C052D6D47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft Manifest number: 029B Signing time: Tue 02 Dec 2025 07:30:02 +0000 Manifest this update: Tue 02 Dec 2025 07:25:02 +0000 Manifest next update: Fri 05 Dec 2025 19:20:02 +0000 Files and hashes: 1: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: R48/rgbNCjjp4lN8u0WLGy1+WSaMSCFGbeTToOjbzmw=) 2: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: LrqOLogV2pqJm1JD+jgGDFnoqudanN5BU7ote6ngSrk=) 3: F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl (hash: owUu956TwA+FqYEBxfvs6tm49+sdoru4k69NbuYE8Dk=) 4: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: yBAmYPcX6Hw9g9sbt5o4PVcLnMdm+J2PfCuUjXQ0T5g=) 5: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: XeC/h72IOu7dA+NCUWie+KTWNqBhpQyXbuk3uFJs7XQ=) 6: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: oOGj5tlcgCuOuQ6ORsdrfX31aFz0B3FN8fvqd8j5T/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:46:ac:d5:09:41:94:f5:ed:b9:8b:76:c3:d9:3c:8c:05:2d:6d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Validity Not Before: Dec 2 07:25:02 2025 GMT Not After : Dec 5 19:20:02 2025 GMT Subject: CN=E7A76E4B71887045E1F9A6C1F8313177E995E95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e6:0b:37:42:58:f9:e0:f5:2a:71:61:15:b0: 97:3a:c2:18:91:07:d1:30:7b:b6:88:fb:1c:6d:b6: ed:98:e6:d2:a2:cc:bb:7a:ac:d3:1e:13:4d:3c:3a: 78:05:06:06:b3:d3:63:b5:67:69:11:5f:cf:40:55: 1f:df:2d:48:bc:1e:3b:a0:5e:d0:3f:6e:3c:8c:c0: a0:77:9a:89:77:e4:89:cb:25:f7:bb:23:0a:ab:28: 00:0e:d3:10:c3:f8:c1:b1:32:b1:b4:02:0b:15:61: c8:aa:a0:8e:1f:67:07:09:33:d5:70:11:bc:38:ff: 44:6f:e6:c6:90:06:c7:1c:44:2b:ce:df:25:19:e7: 6c:4b:8c:56:52:c3:59:95:aa:ee:d3:78:b9:ba:12: bf:9d:38:51:52:20:bb:77:e4:23:1e:7f:aa:a4:12: 99:b7:69:3a:70:fa:7e:02:6e:36:87:b8:93:6d:a1: 7c:c2:16:3e:73:ed:a6:38:13:4f:58:05:5e:70:1c: ec:7a:54:b8:22:c3:de:b5:ce:64:10:5f:62:63:b4: 01:60:80:97:d8:fd:9f:1d:aa:70:44:16:bc:16:5a: 00:f4:a5:c5:a8:b3:25:d4:e8:ed:cc:9f:89:a4:ae: b5:88:7b:ed:5d:33:3d:23:4e:e6:cf:00:e7:45:02: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A7:6E:4B:71:88:70:45:E1:F9:A6:C1:F8:31:31:77:E9:95:E9:5C X509v3 Authority Key Identifier: keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:bd:29:39:2d:0a:90:36:ee:63:b6:4b:65:44:44:8d:52:40: 0c:b6:4c:66:4f:bd:b8:80:43:59:b9:18:3d:b6:f7:90:e7:99: 19:b1:c1:9d:ff:ca:35:bf:9a:49:22:f2:43:ca:c3:a8:cc:cd: 56:9e:d1:59:26:8b:47:1f:a8:97:36:aa:65:68:b2:9c:fc:3f: 90:7d:1c:70:c6:c2:ab:ce:e0:ed:0c:0b:17:9a:6f:84:0c:7f: 74:5c:33:e3:0d:20:95:6b:b1:85:d0:5b:83:85:12:03:06:89: 28:f3:53:f4:6f:f9:2a:75:42:eb:fe:75:86:4f:bb:1f:26:12: bb:8a:05:05:26:3f:c3:be:65:fb:c0:1a:f3:a9:28:73:53:2a: 4e:a2:d4:44:57:e4:be:ec:fc:e2:eb:07:52:df:92:96:44:a6: e6:46:c9:92:a2:98:da:07:d0:9a:20:1a:21:41:be:58:65:6c: a8:33:e8:8c:3f:91:1f:45:3b:a7:70:e2:91:1f:b3:b7:fd:aa: 79:87:40:13:20:cb:35:60:68:74:e3:22:28:9b:42:46:2a:42: 8d:e0:3a:72:5c:53:11:61:4c:47:ff:45:ee:08:01:e3:da:ca: bf:f5:fa:bb:63:cb:ad:76:3c:e5:bb:f5:23:41:75:2a:5a:f4: bb:12:96:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUas1QlBlPXtuYt2w9k8jAUtbUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkx QkJCOTJGNzAeFw0yNTEyMDIwNzI1MDJaFw0yNTEyMDUxOTIwMDJaMDMxMTAvBgNV BAMTKEU3QTc2RTRCNzE4ODcwNDVFMUY5QTZDMUY4MzEzMTc3RTk5NUU5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo5gs3Qlj54PUqcWEVsJc6whiR B9Ewe7aI+xxttu2Y5tKizLt6rNMeE008OngFBgaz02O1Z2kRX89AVR/fLUi8Hjug XtA/bjyMwKB3mol35InLJfe7IwqrKAAO0xDD+MGxMrG0AgsVYciqoI4fZwcJM9Vw Ebw4/0Rv5saQBsccRCvO3yUZ52xLjFZSw1mVqu7TeLm6Er+dOFFSILt35CMef6qk Epm3aTpw+n4CbjaHuJNtoXzCFj5z7aY4E09YBV5wHOx6VLgiw961zmQQX2JjtAFg gJfY/Z8dqnBEFrwWWgD0pcWosyXU6O3Mn4mkrrWIe+1dMz0jTubPAOdFAgkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU56duS3GIcEXh+abB+DExd+mV6VwwHwYDVR0j BBgwFoAU+N9A5Mlfnr+BRThwc2mV6Ru7kvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDAzYWYwMS1mMjM5LTRhMWYtODFjZC00MTA2YmViYjJhMjIvMC9GOERGNDBFNEM5 NUY5RUJGODE0NTM4NzA3MzY5OTVFOTFCQkI5MkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkxQkJC OTJGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1 RTkxQkJCOTJGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIm9KTktCpA27mO2S2VERI1SQAy2TGZPvbiA Q1m5GD2295DnmRmxwZ3/yjW/mkki8kPKw6jMzVae0Vkmi0cfqJc2qmVospz8P5B9 HHDGwqvO4O0MCxeab4QMf3RcM+MNIJVrsYXQW4OFEgMGiSjzU/Rv+Sp1Quv+dYZP ux8mEruKBQUmP8O+ZfvAGvOpKHNTKk6i1ERX5L7s/OLrB1LfkpZEpuZGyZKimNoH 0JogGiFBvlhlbKgz6Iw/kR9FO6dw4pEfs7f9qnmHQBMgyzVgaHTjIiibQkYqQo3g OnJcUxFhTEf/Re4IAePayr/1+rtjy612POW79SNBdSpa9LsSlr8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:33 2025 by rpki-client