This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: WGkG/p9dgM0S/nj2Z620fyoQkiWC7x9FozLihIVBU/E= Subject key identifier: E4:A6:51:9E:B6:12:27:19:57:D7:D9:A1:1E:E7:17:EA:25:89:98:40 Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 3B82FB8D7112E18904835F9290A012D1FBC0221A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 027F Signing time: Wed 03 Dec 2025 13:21:45 +0000 Manifest this update: Wed 03 Dec 2025 13:16:45 +0000 Manifest next update: Sat 06 Dec 2025 15:06:45 +0000 Files and hashes: 1: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: U7YsSdjIu9ziDISFwgAcqphv8+DENw+4q2jMrs+qsYI=) 2: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: sCYWRL7NfwNer5aCHfI6ENS759QdNaShp3p44D+zbuc=) 3: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WCPD3rvs/h3EKH86SX2zTuUBCPJyhF6J/Q+pVbsSNFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 15:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:82:fb:8d:71:12:e1:89:04:83:5f:92:90:a0:12:d1:fb:c0:22:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Dec 3 13:16:45 2025 GMT Not After : Dec 6 15:06:45 2025 GMT Subject: CN=E4A6519EB612271957D7D9A11EE717EA25899840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f1:40:a0:79:29:99:ed:f4:34:1d:c9:8d:a6: bf:2f:9f:d5:83:4a:82:9b:1e:62:24:3d:f1:c6:8a: d5:bd:33:15:6f:c2:11:b4:dd:55:99:11:e2:28:c0: 75:2c:d1:51:ff:c3:b1:ef:f0:2d:8a:8c:a4:2f:f3: b5:a2:f2:1e:07:2f:39:22:57:54:cf:52:30:21:8a: 74:e9:2e:6f:2a:10:d5:36:52:5c:e7:9b:21:1f:81: 11:35:5d:77:98:64:b7:12:b4:78:4d:fb:06:ef:6c: 43:cb:0c:35:69:74:a8:a3:57:3e:e8:f5:9d:be:b6: b1:a6:2d:83:4f:93:02:b7:07:dd:3c:2a:be:96:25: 01:8d:e1:ad:a3:e0:cd:22:03:71:0d:59:c7:36:e6: 0f:89:f2:b0:97:38:40:93:9a:28:61:e4:8c:8a:0e: 0f:ae:c7:26:30:35:a3:18:43:48:0c:31:46:c6:f5: 54:08:bd:7d:d6:6f:d6:59:0f:3e:b9:9e:93:0d:2b: b3:01:27:65:82:f0:f3:b7:40:00:d8:8c:9d:a4:8e: c2:47:30:28:2e:e2:c3:28:f2:0f:58:2b:f5:33:97: 67:14:9e:73:66:0d:a2:c8:b8:57:91:d2:4b:08:8b: 9f:d6:67:09:b0:ca:88:58:f8:a2:f3:40:32:32:72: 2b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A6:51:9E:B6:12:27:19:57:D7:D9:A1:1E:E7:17:EA:25:89:98:40 X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7c:c0:08:0d:2c:72:59:93:94:22:fb:b8:cc:fa:6e:25:6f: b7:a7:0a:d9:5e:29:1d:10:0f:fb:f5:c1:70:94:fc:c2:35:ce: 2e:8e:09:1b:0f:ee:a9:30:8e:77:3a:48:e6:a8:e7:80:6b:c2: db:87:17:b5:0b:aa:11:83:8f:cb:cb:8b:99:15:37:3b:2d:f8: 2c:dd:6a:d7:a9:9f:7b:76:f3:e7:b2:90:36:b0:2d:62:e4:d1: b3:8c:a5:6d:fb:77:26:40:80:2c:54:98:e8:e2:dd:fd:f7:4e: ba:45:9f:2d:89:d0:dc:26:02:96:af:a2:70:ee:43:a4:f8:24: c9:10:9d:f5:a7:2c:59:05:c1:eb:28:15:9d:ae:ce:bc:dc:97: 95:01:b3:fb:37:b8:fd:4b:f8:b6:d3:37:5e:a6:92:09:46:ff: 55:7c:31:76:71:b5:87:05:89:61:df:72:45:b5:56:ef:e8:70: 40:93:9a:c7:59:a3:83:e1:21:26:49:b3:08:a9:5e:5b:0f:ea: 00:61:5e:0e:8a:3f:06:e8:68:21:85:b1:6f:53:24:52:02:8b: 49:44:18:df:0b:4c:4d:c5:9a:d8:7c:65:61:cd:d4:5f:71:ff: 5c:b8:77:99:5b:5c:c2:c1:24:b7:e0:8b:e5:e4:52:4a:5c:ab: 80:a3:5a:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4L7jXES4YkEg1+SkKAS0fvAIhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNTEyMDMxMzE2NDVaFw0yNTEyMDYxNTA2NDVaMDMxMTAvBgNV BAMTKEU0QTY1MTlFQjYxMjI3MTk1N0Q3RDlBMTFFRTcxN0VBMjU4OTk4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb8UCgeSmZ7fQ0HcmNpr8vn9WD SoKbHmIkPfHGitW9MxVvwhG03VWZEeIowHUs0VH/w7Hv8C2KjKQv87Wi8h4HLzki V1TPUjAhinTpLm8qENU2UlznmyEfgRE1XXeYZLcStHhN+wbvbEPLDDVpdKijVz7o 9Z2+trGmLYNPkwK3B908Kr6WJQGN4a2j4M0iA3ENWcc25g+J8rCXOECTmihh5IyK Dg+uxyYwNaMYQ0gMMUbG9VQIvX3Wb9ZZDz65npMNK7MBJ2WC8PO3QADYjJ2kjsJH MCgu4sMo8g9YK/Uzl2cUnnNmDaLIuFeR0ksIi5/WZwmwyohY+KLzQDIycivtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5KZRnrYSJxlX19mhHucX6iWJmEAwHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKx8wAgNLHJZk5Qi+7jM+m4lb7enCtleKR0Q D/v1wXCU/MI1zi6OCRsP7qkwjnc6SOao54BrwtuHF7ULqhGDj8vLi5kVNzst+Czd atepn3t28+eykDawLWLk0bOMpW37dyZAgCxUmOji3f33TrpFny2J0NwmApavonDu Q6T4JMkQnfWnLFkFwesoFZ2uzrzcl5UBs/s3uP1L+LbTN16mkglG/1V8MXZxtYcF iWHfckW1Vu/ocECTmsdZo4PhISZJswipXlsP6gBhXg6KPwboaCGFsW9TJFICi0lE GN8LTE3Fmth8ZWHN1F9x/1y4d5lbXMLBJLfgi+XkUkpcq4CjWss= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:20 2025 by rpki-client