This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: 3wYYWYoUG24Pr5EcKusbHb3qnNGzO+cpMlyu1n4NWOM= Subject key identifier: 50:95:6C:89:3D:43:20:AB:10:84:96:38:CC:D9:2A:CD:29:0D:39:87 Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 67333E04BF2BD9DECAA6CE01B168B737989E2675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 0231 Signing time: Wed 03 Dec 2025 12:40:49 +0000 Manifest this update: Wed 03 Dec 2025 12:35:49 +0000 Manifest next update: Sat 06 Dec 2025 14:32:49 +0000 Files and hashes: 1: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: EzoncGO53S23pCw2LT8gHNZqtvFJLo1A0KV1rKzMTS4=) 2: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: 38VctucVjPuOnSloXC5TfoiL9rHRKzx9uk3RVJIrnlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 14:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:33:3e:04:bf:2b:d9:de:ca:a6:ce:01:b1:68:b7:37:98:9e:26:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Dec 3 12:35:49 2025 GMT Not After : Dec 6 14:32:49 2025 GMT Subject: CN=50956C893D4320AB10849638CCD92ACD290D3987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:6b:42:e5:45:e2:5b:51:ce:b1:e6:a1:3d: e9:68:90:ac:68:b2:2f:bc:57:73:fe:63:9d:82:6a: 62:da:2c:3e:d7:6b:30:4e:aa:ca:17:d5:b8:b9:f2: 7b:d6:b1:2d:2e:a5:1a:23:82:af:f3:f9:c1:6c:b9: 1d:ef:c6:4c:81:dd:a1:34:29:ee:c0:e2:6c:f0:ca: 3f:ce:56:20:61:dd:c7:6b:39:53:04:ca:51:38:ef: 29:ae:05:bc:da:f8:6e:b7:30:81:09:00:f3:1a:9f: 4e:4a:13:92:48:56:a6:d0:82:74:ef:e4:63:01:bb: 07:1f:7e:0e:fd:ae:0c:de:a1:3d:5b:01:17:bd:53: 7c:d0:8c:d1:2c:3f:f8:4b:2a:16:79:ae:c6:85:9f: 68:20:40:76:cf:ee:5a:1e:ab:f5:43:d3:80:1e:a3: 78:6b:55:dd:31:bb:bf:a5:da:6f:29:d9:55:65:0b: d2:a4:dc:15:47:7d:f9:e4:52:75:b2:0d:81:1e:cb: 18:e4:b5:d5:57:58:09:37:67:ff:e3:19:1a:44:32: 12:77:f6:b0:27:19:6b:1e:51:f1:3d:68:40:1f:e7: 81:f6:24:99:05:cf:be:52:7d:0c:d8:e2:5f:f5:ce: 06:b8:89:5b:7d:9e:90:f8:13:87:c8:d5:c6:91:51: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:95:6C:89:3D:43:20:AB:10:84:96:38:CC:D9:2A:CD:29:0D:39:87 X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:76:58:10:31:ba:12:78:39:ea:c1:3a:ea:af:94:34:90:f2: 6a:96:a5:7e:0a:50:45:01:ef:8f:38:3a:d8:16:9c:8b:5c:3d: 3e:99:59:9e:bb:ec:17:b1:9a:15:c3:a9:4d:55:6f:67:d8:75: 83:be:23:da:86:e1:06:14:cf:d7:d8:82:89:61:19:af:ae:a6: 37:ca:84:e9:a1:d6:df:bd:fc:a9:89:4d:dd:17:27:d0:06:91: 26:49:d4:f7:b6:b3:69:aa:a7:e9:85:fc:f8:d6:c5:bd:e1:96: 09:6c:db:c4:54:13:d1:6d:81:b5:08:3b:49:99:78:65:5e:6b: b3:83:ac:3b:ff:0e:ba:5f:58:9d:6e:49:36:e8:09:e1:51:0e: 15:14:9d:7b:fa:11:4b:d4:60:73:39:ad:8b:b8:0b:b3:8f:d1: f4:b6:0f:1f:3b:86:d0:62:5d:53:33:4f:76:72:a9:32:23:47: 1a:1b:51:20:58:df:75:d5:4c:80:18:3c:64:cf:85:52:ac:9c: 99:cc:89:8b:1e:be:87:f9:81:71:c5:ae:68:c9:d1:65:62:d3: a1:0b:33:f0:f6:a8:a3:f0:f6:3f:ef:a2:72:e0:c9:79:e8:de: bf:1b:48:34:6b:91:7b:a9:ac:7c:8c:62:72:fc:a3:b5:bf:68: 37:b5:2d:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzM+BL8r2d7Kps4BsWi3N5ieJnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNTEyMDMxMjM1NDlaFw0yNTEyMDYxNDMyNDlaMDMxMTAvBgNV BAMTKDUwOTU2Qzg5M0Q0MzIwQUIxMDg0OTYzOENDRDkyQUNEMjkwRDM5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGamtC5UXiW1HOseahPelokKxo si+8V3P+Y52CamLaLD7XazBOqsoX1bi58nvWsS0upRojgq/z+cFsuR3vxkyB3aE0 Ke7A4mzwyj/OViBh3cdrOVMEylE47ymuBbza+G63MIEJAPMan05KE5JIVqbQgnTv 5GMBuwcffg79rgzeoT1bARe9U3zQjNEsP/hLKhZ5rsaFn2ggQHbP7loeq/VD04Ae o3hrVd0xu7+l2m8p2VVlC9Kk3BVHffnkUnWyDYEeyxjktdVXWAk3Z//jGRpEMhJ3 9rAnGWseUfE9aEAf54H2JJkFz75SfQzY4l/1zga4iVt9npD4E4fI1caRUbD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUJVsiT1DIKsQhJY4zNkqzSkNOYcwHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABh2WBAxuhJ4OerBOuqvlDSQ8mqWpX4KUEUB 7484OtgWnItcPT6ZWZ677BexmhXDqU1Vb2fYdYO+I9qG4QYUz9fYgolhGa+upjfK hOmh1t+9/KmJTd0XJ9AGkSZJ1Pe2s2mqp+mF/PjWxb3hlgls28RUE9FtgbUIO0mZ eGVea7ODrDv/DrpfWJ1uSTboCeFRDhUUnXv6EUvUYHM5rYu4C7OP0fS2Dx87htBi XVMzT3ZyqTIjRxobUSBY33XVTIAYPGTPhVKsnJnMiYsevof5gXHFrmjJ0WVi06EL M/D2qKPw9j/vonLgyXno3r8bSDRrkXuprHyMYnL8o7W/aDe1LaI= -----END CERTIFICATE-----Generated at Wed Dec 3 16:18:07 2025 by rpki-client