This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: 1+Q2tsn2hrxuO8Mx84Z1iSGhG8YnQo7EH9wOU2Tll6U= Subject key identifier: 62:4C:59:AA:91:3C:6E:03:8F:FF:5F:12:EC:E6:46:91:B1:90:EA:32 Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 1CA8E73BFC8B91C0E744BE938B7949C82FDDCD25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 039F Signing time: Fri 19 Dec 2025 12:20:01 +0000 Manifest this update: Fri 19 Dec 2025 12:15:01 +0000 Manifest next update: Mon 22 Dec 2025 23:50:01 +0000 Files and hashes: 1: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js=) 2: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=) 3: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: 1nGZWQL1PNIfbAvZtEj8FPZ3F16g6rOzHutMClSGDks=) 4: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: uQ2lNYFZctQjtseGT/wzHT4giq7wlDo/uVXWwYPTnAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 23:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a8:e7:3b:fc:8b:91:c0:e7:44:be:93:8b:79:49:c8:2f:dd:cd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Dec 19 12:15:01 2025 GMT Not After : Dec 22 23:50:01 2025 GMT Subject: CN=624C59AA913C6E038FFF5F12ECE64691B190EA32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:bd:98:2f:36:36:a9:58:94:81:ac:e7:09: b7:62:7b:21:f2:8d:e8:8c:6f:26:7c:c7:42:aa:aa: 92:96:b5:bd:00:98:aa:04:3e:2e:93:71:b5:14:c5: 4f:0e:a7:fd:80:63:76:bf:27:30:b1:13:6e:8b:40: d5:93:07:b7:7e:6a:d4:f7:ce:e8:de:14:70:1a:fa: d4:c6:f8:4d:6b:00:44:a7:df:7d:36:73:e6:e2:16: 10:fa:b9:c1:55:c4:51:45:b6:1f:08:17:e0:f4:56: 1e:3e:5e:ca:18:0e:ae:b0:eb:73:95:e6:ec:47:21: 5b:be:22:c6:eb:5f:82:0c:1b:5c:b6:41:86:81:e0: b4:1a:83:91:d2:8e:5b:02:d8:ab:94:60:b3:07:50: 8b:55:43:5e:a2:03:46:7f:61:17:59:7d:48:69:7f: 16:7f:5d:4e:e8:e0:25:2e:18:e4:92:0d:f3:44:a8: e9:31:d0:ce:10:cf:fb:ee:b4:84:e1:73:3c:52:c8: 48:6a:b2:35:0b:03:d0:b9:7c:a0:ab:33:b1:b5:6c: ab:6e:4d:16:b9:f7:2d:4e:cd:23:37:26:62:3a:af: c8:6a:57:ea:98:10:5a:ba:60:81:46:85:2d:68:53: d0:44:74:89:f7:06:ee:a0:ca:20:d8:ef:3c:4c:31: e1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4C:59:AA:91:3C:6E:03:8F:FF:5F:12:EC:E6:46:91:B1:90:EA:32 X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:65:f6:fa:90:94:1b:fb:47:ff:dc:92:6d:d0:3f:84:a4:78: ec:04:ac:5c:c6:fa:12:f4:2f:c7:82:5f:fb:ef:04:f3:16:ab: 47:66:85:55:95:eb:2d:b4:18:e6:34:a9:3f:7d:25:cf:36:2d: 53:23:16:37:74:bf:c9:71:63:34:83:94:34:d7:d6:a0:61:c8: f2:42:be:80:c9:da:76:fe:fa:f7:ca:3d:bf:d3:3a:38:93:40: 6e:88:07:bf:21:80:f0:45:3f:b7:3f:3c:df:3d:94:7a:62:4f: 71:6c:c4:94:ea:0d:8d:90:47:fc:0e:3b:6f:76:8d:32:d6:f6: be:85:ad:91:1d:9a:4a:ed:bf:c9:77:e7:fc:82:6b:a6:4e:57: ad:f7:cb:5e:77:6c:80:d5:14:55:58:90:ab:ac:ef:d4:02:39: be:e7:70:a0:88:96:86:a2:9f:c3:55:5a:8f:f3:c0:6d:20:0b: 95:23:7a:37:1a:38:a9:dd:7e:77:ee:02:c2:92:74:c1:8a:58: 4c:bf:ee:95:2b:eb:9a:77:3e:a2:13:93:8a:c2:78:d1:26:9b: e9:a8:eb:71:e0:77:a2:65:08:1b:2a:31:74:8b:82:e6:d9:eb: 2b:df:c8:e2:1e:50:ae:26:0d:9d:82:e2:30:e9:53:3a:38:36: 64:df:e4:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHKjnO/yLkcDnRL6Ti3lJyC/dzSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNTEyMTkxMjE1MDFaFw0yNTEyMjIyMzUwMDFaMDMxMTAvBgNV BAMTKDYyNEM1OUFBOTEzQzZFMDM4RkZGNUYxMkVDRTY0NjkxQjE5MEVBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClV72YLzY2qViUgaznCbdieyHy jeiMbyZ8x0KqqpKWtb0AmKoEPi6TcbUUxU8Op/2AY3a/JzCxE26LQNWTB7d+atT3 zujeFHAa+tTG+E1rAESn3302c+biFhD6ucFVxFFFth8IF+D0Vh4+XsoYDq6w63OV 5uxHIVu+IsbrX4IMG1y2QYaB4LQag5HSjlsC2KuUYLMHUItVQ16iA0Z/YRdZfUhp fxZ/XU7o4CUuGOSSDfNEqOkx0M4Qz/vutIThczxSyEhqsjULA9C5fKCrM7G1bKtu TRa59y1OzSM3JmI6r8hqV+qYEFq6YIFGhS1oU9BEdIn3Bu6gyiDY7zxMMeGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYkxZqpE8bgOP/18S7OZGkbGQ6jIwHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJl9vqQlBv7R//ckm3QP4SkeOwErFzG+hL0 L8eCX/vvBPMWq0dmhVWV6y20GOY0qT99Jc82LVMjFjd0v8lxYzSDlDTX1qBhyPJC voDJ2nb++vfKPb/TOjiTQG6IB78hgPBFP7c/PN89lHpiT3FsxJTqDY2QR/wOO292 jTLW9r6FrZEdmkrtv8l35/yCa6ZOV633y153bIDVFFVYkKus79QCOb7ncKCIloai n8NVWo/zwG0gC5UjejcaOKndfnfuAsKSdMGKWEy/7pUr65p3PqITk4rCeNEmm+mo 63Hgd6JlCBsqMXSLgubZ6yvfyOIeUK4mDZ2C4jDpUzo4NmTf5IE= -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:42 2025 by rpki-client