This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: 6yKTF9F7/86RDSt89TUqeYpx1NywFNOMzOaka3rfQLk= Subject key identifier: F7:FF:4F:08:46:5A:A0:75:2D:E0:66:70:C0:A3:50:C5:11:F5:33:71 Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 0F2E0445F50FE78C5E100F0DEA16C92834146E98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 0537 Signing time: Thu 18 Dec 2025 14:42:14 +0000 Manifest this update: Thu 18 Dec 2025 14:37:13 +0000 Manifest next update: Sun 21 Dec 2025 20:50:13 +0000 Files and hashes: 1: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: P+iYG1CTnUpFXCiAzzQ9iz8k8UJdoEsuMY01CJrjUmw=) 2: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: cp44WBbEQPeVS1mAfPisCHMGvuQWDdPCMl7LdQCGp3k=) 3: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: oWtepmBqBvebT0Z+AytYxvJ+nwN7a/Aha+0+yrTyMss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2e:04:45:f5:0f:e7:8c:5e:10:0f:0d:ea:16:c9:28:34:14:6e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Dec 18 14:37:13 2025 GMT Not After : Dec 21 20:50:13 2025 GMT Subject: CN=F7FF4F08465AA0752DE06670C0A350C511F53371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:3e:f3:3a:48:f4:c7:b4:93:2a:f4:3f:a0: ce:43:e5:59:20:5a:a7:85:3b:75:ef:57:93:94:e1: 13:8a:b3:f2:05:9c:a3:c5:5e:2c:1e:d8:68:1f:45: 1a:c6:be:43:0c:99:38:0c:5d:33:4d:be:04:7d:59: 58:aa:b6:e0:60:08:8e:83:40:2e:30:6a:1e:ac:13: 73:79:f4:0d:df:b1:b2:47:5c:8f:cb:a4:f9:25:7e: af:26:67:d5:81:20:d2:34:a4:29:20:99:2e:da:4f: c0:46:88:a5:55:35:b2:6f:e6:92:26:ad:bd:8a:5d: ce:97:01:23:59:28:15:4d:9c:af:cb:89:8e:48:12: db:fb:e8:10:b5:2c:46:89:8c:66:a6:b9:27:14:78: 67:af:1d:ea:8e:ea:9a:0b:85:a8:fd:34:3b:45:09: 6a:e5:e2:48:99:d8:c0:92:86:2c:1e:42:76:e7:a6: 9d:e7:ef:2b:74:87:a2:76:52:4e:67:85:fd:f1:43: 3e:b9:87:32:5b:7e:11:4c:c8:3c:55:17:05:33:65: 5c:85:97:3b:d9:58:b1:4b:d0:4a:e8:cf:b1:70:6b: 68:de:e9:c4:e0:a1:51:67:77:64:43:8a:db:42:c0: 46:e3:51:b6:bc:e0:dd:2a:0e:bd:5b:fb:f9:f3:cb: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FF:4F:08:46:5A:A0:75:2D:E0:66:70:C0:A3:50:C5:11:F5:33:71 X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:31:d8:5c:b3:77:b5:3d:c2:5f:d9:dc:4e:9b:22:f4:b7:a9: 71:db:f5:9e:7d:cb:fc:ed:ee:50:af:e5:ef:2d:d7:08:a5:38: 81:73:2f:3c:61:dc:fe:87:ae:ff:36:85:c8:75:af:fd:94:c6: 49:c0:ff:6f:5c:17:76:23:1c:e4:7b:30:bc:50:d4:5e:d8:9f: 7a:7a:cc:2d:58:3e:19:c2:ad:aa:e8:34:19:99:ce:24:ca:f3: ff:78:b7:09:43:64:e8:e7:17:3d:29:f7:05:5f:58:1c:db:5e: 1b:53:e2:84:07:04:cb:82:1e:ff:75:74:b2:ab:ef:d9:4d:57: da:1e:43:dd:58:eb:0f:f4:46:b0:e4:7f:15:ba:e0:e8:64:29: 4a:84:2e:f8:84:81:1c:38:54:5e:2d:b1:8d:95:35:31:26:8f: df:f6:12:0a:d3:3a:2a:57:08:40:30:a6:60:b0:40:19:1a:06: 3b:4c:57:2f:8f:c8:ff:af:73:24:bc:4a:b4:04:ba:30:a2:7a: d6:ce:6e:5b:5a:d3:c2:8b:70:97:2f:98:31:94:ca:40:f5:b3: a8:4b:c1:c4:79:e6:24:11:26:d4:57:50:fc:2d:23:20:74:8c: c8:be:f6:1c:ac:b6:80:0d:f8:6e:d1:20:1b:d2:69:60:6e:42: 2f:3b:45:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDy4ERfUP54xeEA8N6hbJKDQUbpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNTEyMTgxNDM3MTNaFw0yNTEyMjEyMDUwMTNaMDMxMTAvBgNV BAMTKEY3RkY0RjA4NDY1QUEwNzUyREUwNjY3MEMwQTM1MEM1MTFGNTMzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTwz7zOkj0x7STKvQ/oM5D5Vkg WqeFO3XvV5OU4ROKs/IFnKPFXiwe2GgfRRrGvkMMmTgMXTNNvgR9WViqtuBgCI6D QC4wah6sE3N59A3fsbJHXI/LpPklfq8mZ9WBINI0pCkgmS7aT8BGiKVVNbJv5pIm rb2KXc6XASNZKBVNnK/LiY5IEtv76BC1LEaJjGamuScUeGevHeqO6poLhaj9NDtF CWrl4kiZ2MCShiweQnbnpp3n7yt0h6J2Uk5nhf3xQz65hzJbfhFMyDxVFwUzZVyF lzvZWLFL0Eroz7Fwa2je6cTgoVFnd2RDittCwEbjUba84N0qDr1b+/nzy8sNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9/9PCEZaoHUt4GZwwKNQxRH1M3EwHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUx2Fyzd7U9wl/Z3E6bIvS3qXHb9Z59y/zt 7lCv5e8t1wilOIFzLzxh3P6Hrv82hch1r/2UxknA/29cF3YjHOR7MLxQ1F7Yn3p6 zC1YPhnCraroNBmZziTK8/94twlDZOjnFz0p9wVfWBzbXhtT4oQHBMuCHv91dLKr 79lNV9oeQ91Y6w/0RrDkfxW64OhkKUqELviEgRw4VF4tsY2VNTEmj9/2EgrTOipX CEAwpmCwQBkaBjtMVy+PyP+vcyS8SrQEujCietbOblta08KLcJcvmDGUykD1s6hL wcR55iQRJtRXUPwtIyB0jMi+9hystoAN+G7RIBvSaWBuQi87Rfs= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:15 2025 by rpki-client