This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft File: F39BE26D48730B565C23C6A842B313B08B39B1C6.mft (raw, json) Hash identifier: QHbqNkE3Vn1iaIOxRkxIFbmi4WZoASuThzNqnHUIvWQ= Subject key identifier: A8:48:A0:86:86:7B:D2:31:DF:C7:C1:51:F2:FA:7D:B5:AB:D9:39:E1 Authority key identifier: F3:9B:E2:6D:48:73:0B:56:5C:23:C6:A8:42:B3:13:B0:8B:39:B1:C6 Certificate issuer: /CN=F39BE26D48730B565C23C6A842B313B08B39B1C6 Certificate serial: 392731E403A786D2BA64FFB0F260BD9B64C086A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft Manifest number: 0343 Signing time: Sat 20 Dec 2025 15:50:39 +0000 Manifest this update: Sat 20 Dec 2025 15:45:39 +0000 Manifest next update: Tue 23 Dec 2025 18:56:39 +0000 Files and hashes: 1: F39BE26D48730B565C23C6A842B313B08B39B1C6.crl (hash: j4LzvgaxDllqqTMF+6ryrnLYPek4j4vPq0M9TKc6bjM=) 2: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: NsTk3LwG0u5kc3QUM4C41dpciSHuC8BHPLSvS5qOqNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.crl rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 18:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:27:31:e4:03:a7:86:d2:ba:64:ff:b0:f2:60:bd:9b:64:c0:86:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39BE26D48730B565C23C6A842B313B08B39B1C6 Validity Not Before: Dec 20 15:45:39 2025 GMT Not After : Dec 23 18:56:39 2025 GMT Subject: CN=A848A086867BD231DFC7C151F2FA7DB5ABD939E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d0:cc:ae:cc:10:20:50:6e:97:6d:c3:90:cd: 6d:ab:b0:c2:22:47:00:3f:e7:85:d8:87:68:ff:84: da:b0:98:24:b0:cb:6a:1f:c8:cb:5b:22:ec:c3:c7: 01:39:03:4c:79:16:ca:e9:03:d3:b4:9b:85:56:10: 83:95:16:93:00:d7:87:42:43:25:21:be:78:77:d1: 1a:1e:8b:fb:e6:6c:3c:45:e5:2e:25:b1:f3:89:2c: e3:5a:53:54:d7:1f:bb:67:94:ae:b5:9c:9a:c6:e5: ce:3b:19:a2:31:b2:39:97:38:d9:af:90:e6:b4:a8: a3:ee:d8:8d:41:e1:f7:ba:6f:90:e8:4c:ef:3a:51: df:89:47:3a:e7:ed:ac:18:0a:3c:13:22:50:33:dc: 36:43:0e:82:54:0e:64:2d:a4:6c:d6:e1:e8:d2:c7: 3e:92:ee:ab:e7:54:cf:c2:66:6a:76:f9:fa:0a:6e: 40:03:55:ef:1d:1d:34:03:3a:c6:69:54:7d:fc:cf: 2a:6b:ad:0d:6b:4f:a7:1b:ad:9a:41:5a:c9:e9:2b: 59:63:89:26:ac:18:cb:af:fe:e2:09:96:98:bd:3f: e5:de:5d:b7:11:66:59:4a:13:b6:17:63:7a:aa:6b: 57:19:1f:9a:5b:45:c9:4f:e2:d9:f0:17:03:cc:06: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:48:A0:86:86:7B:D2:31:DF:C7:C1:51:F2:FA:7D:B5:AB:D9:39:E1 X509v3 Authority Key Identifier: keyid:F3:9B:E2:6D:48:73:0B:56:5C:23:C6:A8:42:B3:13:B0:8B:39:B1:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:88:76:1a:55:f0:bc:f5:ed:bf:08:79:be:a2:ab:76:71:fb: fc:dc:b2:9e:39:3e:ef:3d:d3:40:e9:9d:90:e4:ca:ff:5a:fe: d0:c0:b8:47:b6:f2:4a:0f:42:84:72:72:fc:15:7e:66:a7:0a: 55:c5:e5:74:47:a6:db:7f:d7:69:f0:16:46:22:48:fd:51:2b: 0c:34:4a:9d:2c:f1:ae:c3:03:f0:50:65:61:80:9f:e2:2e:25: 29:43:9c:16:d0:81:f3:57:42:14:54:ef:f0:0c:92:d0:dd:6c: 1e:ff:d3:26:8a:db:fa:d9:ad:77:61:f5:c1:44:33:51:88:17: ac:74:a5:d2:58:28:c0:b6:eb:99:f9:f5:43:0e:9c:1a:13:e2: 42:f3:9b:99:a9:a2:69:13:42:dd:bc:43:38:8d:fd:ff:ee:b4: 13:d6:56:eb:ac:48:f4:87:1c:35:3c:1f:38:79:30:10:24:12: f8:d5:c0:c7:b3:01:f2:ba:ed:c1:f4:f7:3b:6e:84:89:5e:de: ac:fa:52:ef:7d:c8:c4:9f:ae:22:5d:e9:22:39:45:f5:97:66: 41:ff:8f:2f:3f:80:a4:24:74:77:d4:ad:7d:c8:07:7d:50:b4: c6:fa:96:a8:9f:e0:b0:7b:dd:7c:02:37:41:ed:f6:8f:fc:ca: be:f8:d6:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOScx5AOnhtK6ZP+w8mC9m2TAhqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEzQjA4 QjM5QjFDNjAeFw0yNTEyMjAxNTQ1MzlaFw0yNTEyMjMxODU2MzlaMDMxMTAvBgNV BAMTKEE4NDhBMDg2ODY3QkQyMzFERkM3QzE1MUYyRkE3REI1QUJEOTM5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0MyuzBAgUG6XbcOQzW2rsMIi RwA/54XYh2j/hNqwmCSwy2ofyMtbIuzDxwE5A0x5FsrpA9O0m4VWEIOVFpMA14dC QyUhvnh30Roei/vmbDxF5S4lsfOJLONaU1TXH7tnlK61nJrG5c47GaIxsjmXONmv kOa0qKPu2I1B4fe6b5DoTO86Ud+JRzrn7awYCjwTIlAz3DZDDoJUDmQtpGzW4ejS xz6S7qvnVM/CZmp2+foKbkADVe8dHTQDOsZpVH38zyprrQ1rT6cbrZpBWsnpK1lj iSasGMuv/uIJlpi9P+XeXbcRZllKE7YXY3qqa1cZH5pbRclP4tnwFwPMBo2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqEighoZ70jHfx8FR8vp9tavZOeEwHwYDVR0j BBgwFoAU85vibUhzC1ZcI8aoQrMTsIs5scYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzAyNGQyNC05ZmFhLTRhYjAtOGZhNC0wY2U2MDhjNmQwYTMvMC9GMzlCRTI2RDQ4 NzMwQjU2NUMyM0M2QTg0MkIzMTNCMDhCMzlCMUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEzQjA4QjM5 QjFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEz QjA4QjM5QjFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuIdhpV8Lz17b8Ieb6iq3Zx+/zcsp45Pu89 00DpnZDkyv9a/tDAuEe28koPQoRycvwVfmanClXF5XRHptt/12nwFkYiSP1RKww0 Sp0s8a7DA/BQZWGAn+IuJSlDnBbQgfNXQhRU7/AMktDdbB7/0yaK2/rZrXdh9cFE M1GIF6x0pdJYKMC265n59UMOnBoT4kLzm5mpomkTQt28QziN/f/utBPWVuusSPSH HDU8Hzh5MBAkEvjVwMezAfK67cH09ztuhIle3qz6Uu99yMSfriJd6SI5RfWXZkH/ jy8/gKQkdHfUrX3IB31QtMb6lqif4LB73XwCN0Ht9o/8yr741lE= -----END CERTIFICATE-----Generated at Sun Dec 21 15:43:28 2025 by rpki-client