This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: I9LxdEEsuP/DRrYQuSppbEA6theEQ0uq7SW/oZSAIQA= Subject key identifier: C9:AD:EF:0C:41:A1:A8:74:B6:E3:03:FB:9C:23:E1:C4:25:A7:8D:28 Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 427FD515EB87FCFB567071DEA57D50AFE186747E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 021B Signing time: Sun 14 Dec 2025 05:10:55 +0000 Manifest this update: Sun 14 Dec 2025 05:05:55 +0000 Manifest next update: Wed 17 Dec 2025 06:26:55 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) 2: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: Xnn6gqy/E9MKHGAPADLcZKSUGVrtR4v5gd6BD5UEwgk=) 3: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 4: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 06:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7f:d5:15:eb:87:fc:fb:56:70:71:de:a5:7d:50:af:e1:86:74:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Dec 14 05:05:55 2025 GMT Not After : Dec 17 06:26:55 2025 GMT Subject: CN=C9ADEF0C41A1A874B6E303FB9C23E1C425A78D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:27:9d:86:68:93:c3:3f:59:b2:31:5a:63:d0: 28:98:c9:58:24:1a:fe:d5:87:26:56:a5:0c:ee:54: 5d:45:96:ba:f6:8a:87:82:10:7a:b6:eb:f9:c7:dc: ca:73:53:5f:0f:54:34:4a:9c:04:58:fc:bc:bc:7a: 06:28:4c:88:92:53:a4:56:de:b1:c7:6f:c2:ca:8d: 12:a0:62:73:1a:d3:33:8f:e1:71:fd:ee:41:67:3e: 2e:38:8a:e5:cc:49:40:73:29:44:c2:75:dc:bf:4a: f9:38:a9:a4:ee:0d:84:0f:fa:b1:98:8d:a7:bd:86: 89:4f:8d:0d:21:42:e7:5b:8c:7b:34:24:d7:59:b9: 22:1d:37:6a:8a:0c:ca:67:c7:3c:93:f2:4f:c4:a5: 39:85:25:d0:08:13:aa:31:6c:ad:02:76:6e:d3:df: c7:d8:cc:61:41:89:39:56:85:7a:0e:cb:64:8e:64: 6d:03:cb:4e:21:0c:fb:26:9f:77:b4:78:ee:1c:48: 3f:1c:7c:9a:51:e4:13:1f:c7:81:8f:6f:e2:63:a3: ed:42:7d:d4:08:a1:9e:c0:63:fe:a5:f2:04:a2:90: e2:57:1d:81:ff:eb:39:61:96:a7:72:0b:5e:05:f5: bb:1b:87:f3:02:ba:58:a1:fd:c4:fd:92:37:44:cc: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AD:EF:0C:41:A1:A8:74:B6:E3:03:FB:9C:23:E1:C4:25:A7:8D:28 X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:87:b7:c8:c1:a0:35:4e:0d:ce:e3:79:98:71:8e:4a:23:6c: 22:c9:4e:d9:1a:0c:4e:08:27:dc:51:f9:3c:d0:39:48:85:06: 90:29:99:a9:eb:31:9d:9f:40:5d:31:4e:ce:95:0d:38:24:a3: 59:ed:51:0d:3a:e4:f8:3b:7a:9f:06:53:0d:db:e9:1d:68:4d: 0e:09:93:11:76:62:e2:89:f7:1b:79:5b:7c:2f:0a:96:93:8e: 02:ef:35:32:7c:37:6a:f0:49:f2:d5:f2:bc:f8:bd:6b:19:93: fa:ac:59:69:47:37:2d:d5:ce:b3:d6:83:3a:03:d3:59:02:26: a5:2d:f9:08:26:d4:8f:4d:78:11:e2:ac:9d:ef:c7:4f:07:ec: b3:3c:98:0b:8e:25:d4:4b:39:39:57:ab:30:42:b5:af:e6:2e: d5:16:83:25:25:73:1e:2d:a1:f8:fd:25:30:fa:84:12:c9:22: 2d:00:a1:27:15:7b:21:79:74:f4:06:a4:7a:86:12:90:21:24: 15:f1:16:d2:81:83:43:c0:35:6c:9f:b0:ef:0f:4c:3a:c4:85: 30:b1:79:86:21:9f:2a:eb:05:91:95:fc:23:8b:07:4c:89:f3: bb:79:90:38:e2:ef:db:fe:7e:7c:4c:e8:30:2b:79:a4:d4:4c: 58:2f:d5:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQn/VFeuH/PtWcHHepX1Qr+GGdH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTEyMTQwNTA1NTVaFw0yNTEyMTcwNjI2NTVaMDMxMTAvBgNV BAMTKEM5QURFRjBDNDFBMUE4NzRCNkUzMDNGQjlDMjNFMUM0MjVBNzhEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzJ52GaJPDP1myMVpj0CiYyVgk Gv7VhyZWpQzuVF1Flrr2ioeCEHq26/nH3MpzU18PVDRKnARY/Ly8egYoTIiSU6RW 3rHHb8LKjRKgYnMa0zOP4XH97kFnPi44iuXMSUBzKUTCddy/Svk4qaTuDYQP+rGY jae9holPjQ0hQudbjHs0JNdZuSIdN2qKDMpnxzyT8k/EpTmFJdAIE6oxbK0Cdm7T 38fYzGFBiTlWhXoOy2SOZG0Dy04hDPsmn3e0eO4cSD8cfJpR5BMfx4GPb+Jjo+1C fdQIoZ7AY/6l8gSikOJXHYH/6zlhlqdyC14F9bsbh/MCulih/cT9kjdEzMIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUya3vDEGhqHS24wP7nCPhxCWnjSgwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6Ht8jBoDVODc7jeZhxjkojbCLJTtkaDE4I J9xR+TzQOUiFBpApmanrMZ2fQF0xTs6VDTgko1ntUQ065Pg7ep8GUw3b6R1oTQ4J kxF2YuKJ9xt5W3wvCpaTjgLvNTJ8N2rwSfLV8rz4vWsZk/qsWWlHNy3VzrPWgzoD 01kCJqUt+Qgm1I9NeBHirJ3vx08H7LM8mAuOJdRLOTlXqzBCta/mLtUWgyUlcx4t ofj9JTD6hBLJIi0AoScVeyF5dPQGpHqGEpAhJBXxFtKBg0PANWyfsO8PTDrEhTCx eYYhnyrrBZGV/COLB0yJ87t5kDji79v+fnxM6DAreaTUTFgv1fw= -----END CERTIFICATE-----Generated at Mon Dec 15 22:16:02 2025 by rpki-client