This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json) Hash identifier: LX6uzEv6Dv366Tss2fkW2fXajf+JXggXwQXhduskmvQ= Subject key identifier: 22:B8:DD:78:DD:31:65:0E:FF:2E:84:76:63:EA:68:37:5E:44:BB:6A Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Certificate serial: 71C3CBCC914023DA49F66509813F83F33B55BD87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft Manifest number: 01E6 Signing time: Wed 03 Dec 2025 07:11:35 +0000 Manifest this update: Wed 03 Dec 2025 07:06:35 +0000 Manifest next update: Sat 06 Dec 2025 07:27:35 +0000 Files and hashes: 1: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: 12t3q8UKsyUaN7ZPmQ7oKlNAYfCglRtEXGNPube8E5U=) 2: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: DgJwdkcQ+J8PTm1y59iIuUk1Nz7tQ0tx6IlEAxWVjss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c3:cb:cc:91:40:23:da:49:f6:65:09:81:3f:83:f3:3b:55:bd:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Validity Not Before: Dec 3 07:06:35 2025 GMT Not After : Dec 6 07:27:35 2025 GMT Subject: CN=22B8DD78DD31650EFF2E847663EA68375E44BB6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:00:86:11:92:e4:e3:38:fd:89:ce:1a:40: 2f:2c:b1:8e:ee:36:70:25:39:06:df:78:1a:a6:ef: 1c:4e:ef:3b:a3:c7:d9:48:0f:72:72:8b:71:bc:16: 4a:73:d0:ca:d8:1a:3a:70:21:82:5b:bf:9f:f8:4a: d1:f9:1b:eb:4a:9b:70:1e:30:ba:7f:3a:8d:c9:7e: 7e:05:bd:dc:69:dd:d6:e5:5e:68:67:b6:ff:72:f1: 82:24:a1:26:20:a3:b3:39:9a:ef:e2:49:ad:a9:44: e4:7d:89:a0:d1:01:f0:4f:d4:33:d6:69:b8:5e:9f: 3a:05:e8:5b:e6:7c:4e:d5:95:4f:6f:11:f2:54:d2: 87:89:45:d8:a2:ca:32:dd:d8:1f:46:fb:38:e4:76: c1:78:82:e5:e5:b1:34:76:93:03:96:0f:c9:20:b6: 90:d6:93:08:68:17:ba:31:d9:cb:b5:f0:78:d0:34: da:e7:ff:13:aa:f7:b6:35:fc:a5:05:52:fe:11:87: 38:af:89:23:1d:4a:4e:19:8f:0d:78:bc:1f:db:b7: 69:e3:7b:52:50:8b:ad:8d:dc:60:0e:1f:b9:8f:6e: 09:07:48:1e:fe:a2:7b:03:de:55:bf:b7:9b:a4:78: 49:32:eb:d6:e6:62:73:92:46:85:ba:66:8c:ce:08: 5a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B8:DD:78:DD:31:65:0E:FF:2E:84:76:63:EA:68:37:5E:44:BB:6A X509v3 Authority Key Identifier: keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:03:98:57:df:91:68:72:f5:f9:fc:0e:3d:81:5d:d9:29:a9: de:9e:43:3b:e0:16:db:9f:3a:14:d9:5b:d6:2e:58:6e:c6:a3: 7e:cb:22:f5:ee:e2:ec:40:c0:e0:85:0e:ef:10:b7:27:40:0e: 8e:83:6c:a4:51:bc:67:6c:70:d4:fa:11:f0:bb:fc:2c:e9:e2: 44:66:db:c5:1b:d6:f7:69:6b:85:aa:92:cd:05:12:17:55:4d: db:99:19:4d:8a:7c:cc:d8:2b:96:3e:ac:c7:e3:5f:72:fc:84: cd:c4:51:b2:d5:a3:d4:79:2c:73:55:be:03:dc:0b:b6:1a:99: ea:94:2f:55:63:fa:71:14:ae:e0:39:c0:0b:54:96:88:9e:6b: 5f:77:0f:51:37:0e:32:03:81:36:7a:a5:7e:1d:a8:73:3c:b6: cd:90:67:10:6c:21:fb:71:0b:1d:ed:3b:22:2a:b1:b1:1f:d9: b7:8c:98:38:cd:2c:90:b3:f4:e5:69:c6:b9:91:3f:be:ee:39: cc:b9:43:a0:e4:f0:ff:78:8b:9b:63:8c:a4:26:f9:86:e4:a4: f1:18:5b:d6:a4:9a:57:46:05:75:f9:d0:6d:46:4f:30:23:11: e3:cc:fa:20:61:c8:cf:7a:7c:cf:d6:5d:71:12:2b:91:c0:78: 49:74:75:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccPLzJFAI9pJ9mUJgT+D8ztVvYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF RkUwRUMyNzAeFw0yNTEyMDMwNzA2MzVaFw0yNTEyMDYwNzI3MzVaMDMxMTAvBgNV BAMTKDIyQjhERDc4REQzMTY1MEVGRjJFODQ3NjYzRUE2ODM3NUU0NEJCNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNwCGEZLk4zj9ic4aQC8ssY7u NnAlOQbfeBqm7xxO7zujx9lID3Jyi3G8Fkpz0MrYGjpwIYJbv5/4StH5G+tKm3Ae MLp/Oo3Jfn4Fvdxp3dblXmhntv9y8YIkoSYgo7M5mu/iSa2pROR9iaDRAfBP1DPW abhenzoF6FvmfE7VlU9vEfJU0oeJRdiiyjLd2B9G+zjkdsF4guXlsTR2kwOWD8kg tpDWkwhoF7ox2cu18HjQNNrn/xOq97Y1/KUFUv4RhziviSMdSk4Zjw14vB/bt2nj e1JQi62N3GAOH7mPbgkHSB7+onsD3lW/t5ukeEky69bmYnOSRoW6ZozOCFo5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIrjdeN0xZQ7/LoR2Y+poN15Eu2owHwYDVR0j BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYDmFffkWhy9fn8Dj2BXdkpqd6eQzvgFtuf OhTZW9YuWG7Go37LIvXu4uxAwOCFDu8QtydADo6DbKRRvGdscNT6EfC7/Czp4kRm 28Ub1vdpa4Wqks0FEhdVTduZGU2KfMzYK5Y+rMfjX3L8hM3EUbLVo9R5LHNVvgPc C7YameqUL1Vj+nEUruA5wAtUloiea193D1E3DjIDgTZ6pX4dqHM8ts2QZxBsIftx Cx3tOyIqsbEf2beMmDjNLJCz9OVpxrmRP77uOcy5Q6Dk8P94i5tjjKQm+YbkpPEY W9akmldGBXX50G1GTzAjEePM+iBhyM96fM/WXXESK5HAeEl0dTo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:55 2025 by rpki-client