This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft File: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json) Hash identifier: Gmd44+NvlC/F1QazS+TIXBGNchfm+E5jklMY6hg+ing= Subject key identifier: 9E:F4:21:A8:98:56:36:CC:6C:30:28:A8:19:6A:0C:2F:3D:ED:10:4B Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 4CD0CD9E7C875EE47C3C1DE2AF1860B1F5D7A697 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft Manifest number: 0541 Signing time: Thu 18 Dec 2025 14:22:08 +0000 Manifest this update: Thu 18 Dec 2025 14:17:08 +0000 Manifest next update: Sun 21 Dec 2025 19:46:08 +0000 Files and hashes: 1: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=) 2: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=) 3: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=) 4: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=) 5: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=) 6: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=) 7: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: Fv3PzH/PpXCb1xS63tcNe76mWTrdMYYDd+HvPixKLKI=) 8: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=) 9: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=) 10: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: mSpwe2l2qkAH/DJhne4R1o19yf+tzui6DXWmHtw2zck=) 11: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=) 12: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=) 13: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=) 14: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: AM+aiplYUdhH8KU+dJBKvmqgp4vQ5YGIVFo2krKpct4=) 15: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=) 16: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=) 17: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=) 18: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=) 19: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=) 20: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=) 21: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=) 22: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=) 23: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=) 24: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d0:cd:9e:7c:87:5e:e4:7c:3c:1d:e2:af:18:60:b1:f5:d7:a6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Dec 18 14:17:08 2025 GMT Not After : Dec 21 19:46:08 2025 GMT Subject: CN=9EF421A8985636CC6C3028A8196A0C2F3DED104B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4f:00:dd:e8:01:a2:07:5f:c8:96:c7:7c:78: 6a:89:81:90:50:ec:05:5a:f3:c1:3a:75:6a:65:65: 58:90:d8:30:ba:a6:99:3d:54:67:82:0b:04:42:57: fc:51:22:c9:cd:39:d8:7e:14:76:c1:0a:6b:5d:d0: 3a:36:51:b2:2f:48:6b:32:bd:2d:35:e4:64:5e:7e: 0a:49:c1:56:29:b9:07:15:1d:6b:9b:0f:bf:69:ea: 4c:97:48:76:94:d1:75:04:af:68:37:c4:2b:11:a7: a2:86:76:2d:56:59:46:30:54:0c:1f:c2:06:72:87: f2:5e:ab:20:2e:27:7b:5e:5d:67:99:89:fb:ac:a4: 03:cb:e3:c8:1c:d3:f8:27:ed:0b:8d:1d:1b:10:37: 70:03:56:9c:8a:0b:cf:8f:1b:0b:71:92:11:1c:23: 36:e1:55:74:a9:33:5b:cd:88:b8:8d:e7:c0:6c:cb: 22:69:25:92:90:61:aa:e9:ca:02:fa:e3:b8:ab:20: 75:e1:37:fa:33:f3:22:e5:e9:2e:fe:6f:14:ad:08: 91:0d:94:77:d4:37:de:4a:c2:a0:da:cc:b3:8c:25: f4:27:5a:b5:00:42:14:e4:4b:6e:c3:f4:79:7c:25: b6:5e:2d:c0:cb:ce:2b:08:85:89:a5:79:56:c2:83: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F4:21:A8:98:56:36:CC:6C:30:28:A8:19:6A:0C:2F:3D:ED:10:4B X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:af:b7:1e:20:11:a2:4a:4a:9b:6a:86:4b:2f:e6:8b:14:28: ef:65:38:34:c2:fb:67:0d:84:74:e2:56:6f:3d:28:76:01:33: 4e:ab:43:37:21:20:dc:1e:76:e3:58:ad:9d:6b:0f:b0:1a:c1: 12:dd:f6:82:24:5d:0c:5b:59:c1:09:00:0a:4c:8e:0e:2d:d9: e8:47:c8:cb:62:66:b0:04:ae:45:9b:40:df:94:46:7f:43:76: 92:16:de:23:f8:d2:4a:7a:6c:a1:b0:e5:ac:de:f7:42:3a:9b: ce:06:b0:12:0d:10:18:56:bf:83:ec:48:26:73:1a:98:e4:51: 28:f9:d3:d7:32:64:4b:0c:72:0c:d8:5c:ae:a6:89:27:0a:4a: 94:c1:6d:1d:3a:b6:40:82:55:0c:90:8a:ba:2a:f5:d5:41:6a: 1b:cf:d3:8d:76:04:91:49:2c:95:e5:94:be:42:80:db:fd:03: c8:68:fe:d0:9b:97:09:61:e3:3e:c6:fa:bb:55:6c:90:c4:e6: 05:23:74:ab:48:b8:b3:d4:b1:2d:35:d9:7a:29:56:44:69:dd: 41:f5:69:f9:03:a0:c2:c6:8b:c1:2d:95:e8:5f:c0:15:e5:f8: ec:a1:26:9d:c0:7e:aa:f2:ac:97:31:27:a2:63:a9:c4:ad:eb: 21:5c:03:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNDNnnyHXuR8PB3irxhgsfXXppcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTEyMTgxNDE3MDhaFw0yNTEyMjExOTQ2MDhaMDMxMTAvBgNV BAMTKDlFRjQyMUE4OTg1NjM2Q0M2QzMwMjhBODE5NkEwQzJGM0RFRDEwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkTwDd6AGiB1/Ilsd8eGqJgZBQ 7AVa88E6dWplZViQ2DC6ppk9VGeCCwRCV/xRIsnNOdh+FHbBCmtd0Do2UbIvSGsy vS015GRefgpJwVYpuQcVHWubD79p6kyXSHaU0XUEr2g3xCsRp6KGdi1WWUYwVAwf wgZyh/JeqyAuJ3teXWeZifuspAPL48gc0/gn7QuNHRsQN3ADVpyKC8+PGwtxkhEc IzbhVXSpM1vNiLiN58BsyyJpJZKQYarpygL647irIHXhN/oz8yLl6S7+bxStCJEN lHfUN95KwqDazLOMJfQnWrUAQhTkS27D9Hl8JbZeLcDLzisIhYmleVbCg1LhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnvQhqJhWNsxsMCioGWoMLz3tEEswHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2 MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWvtx4gEaJKSptqhksv5osUKO9lODTC+2cN hHTiVm89KHYBM06rQzchINweduNYrZ1rD7AawRLd9oIkXQxbWcEJAApMjg4t2ehH yMtiZrAErkWbQN+URn9DdpIW3iP40kp6bKGw5aze90I6m84GsBINEBhWv4PsSCZz GpjkUSj509cyZEsMcgzYXK6miScKSpTBbR06tkCCVQyQiroq9dVBahvP0412BJFJ LJXllL5CgNv9A8ho/tCblwlh4z7G+rtVbJDE5gUjdKtIuLPUsS012XopVkRp3UH1 afkDoMLGi8EtlehfwBXl+OyhJp3AfqryrJcxJ6JjqcSt6yFcA6c= -----END CERTIFICATE-----Generated at Fri Dec 19 09:58:31 2025 by rpki-client