This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft File: F39284EDA8B81E5F498D167C4DB09075943DA23C.mft (raw, json) Hash identifier: XRUoZYvUQDowldiGjXRPi4qVqJC4gVpWW4bLDNFn0xo= Subject key identifier: BF:75:90:4B:D7:27:93:18:2D:B0:93:52:EC:21:16:4C:AB:85:93:74 Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C Certificate issuer: /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Certificate serial: 5D20EDD6A972B81DA40BADD18C4900746B7F390D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft Manifest number: 01FB Signing time: Tue 16 Dec 2025 14:12:06 +0000 Manifest this update: Tue 16 Dec 2025 14:07:06 +0000 Manifest next update: Fri 19 Dec 2025 16:45:06 +0000 Files and hashes: 1: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: m+kNLMS39T1XrNLiDk6g1NJ5jtLDLBZdzAOZl+Ww9Ks=) 2: F39284EDA8B81E5F498D167C4DB09075943DA23C.crl (hash: +VqQNVZB6R1RM4lKaeMqOMZHPQt1KO1bTMhvIYbYJUo=) 3: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: 1gzxa88JIBim0N0R/uC1nAl7S+pBY42/XBrZ+VIbBR0=) 4: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: ZH95fzIk5wuuT+vd4hIsCcqQWDxd7AjWMS1Ri5F0arI=) 5: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: zkN9KM3zjX+gsUQDtCei38obRvmk7IKvdyrKuozTeis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 16:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:20:ed:d6:a9:72:b8:1d:a4:0b:ad:d1:8c:49:00:74:6b:7f:39:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C Validity Not Before: Dec 16 14:07:06 2025 GMT Not After : Dec 19 16:45:06 2025 GMT Subject: CN=BF75904BD72793182DB09352EC21164CAB859374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:98:d3:73:b6:d7:f5:92:5e:c3:36:d0:fd: e6:66:99:3c:9f:13:8f:66:bb:6b:27:18:6d:58:7b: 83:b7:16:55:32:23:87:e0:df:19:6c:ab:de:b6:a9: b0:32:1f:31:be:b8:52:61:74:f4:90:96:a9:7d:ac: 41:d0:5d:f8:5a:79:37:1f:89:c1:54:79:d3:b9:d8: 6b:b1:8e:df:ab:b7:aa:af:d0:03:d1:2c:9e:58:22: b4:71:ea:57:44:ca:9a:2c:db:7a:ee:85:af:8a:29: f7:4f:94:74:6a:66:ee:f0:28:29:e2:6e:33:81:65: b4:08:3d:00:fb:f9:20:40:5c:4d:37:5b:6c:a8:65: 5f:7d:d3:07:57:1d:39:75:f3:00:7e:6b:4a:65:e4: 81:d3:6b:1d:13:36:63:41:41:5c:7f:fb:b9:61:ed: e6:50:88:15:16:35:3b:ec:1d:5b:48:68:52:f3:3a: bd:39:8c:f9:d4:c6:e4:2e:e1:5e:ee:d8:53:57:c2: 51:d3:43:50:19:53:43:cb:19:ab:1b:05:9a:e5:fc: 65:6a:e5:72:80:f5:70:17:03:b5:97:3a:63:b3:72: 37:3b:33:94:20:4a:3b:07:ae:0f:5f:d0:2c:59:43: 8a:6e:f7:0e:65:15:82:ac:5e:00:ef:99:1f:84:19: 98:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:75:90:4B:D7:27:93:18:2D:B0:93:52:EC:21:16:4C:AB:85:93:74 X509v3 Authority Key Identifier: keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cc:21:9c:52:3a:79:02:a5:e6:b8:be:5c:da:47:c9:dd:ea: 5f:85:ac:22:18:ff:e7:e7:2d:39:5c:a9:57:2c:1e:c4:0a:73: b5:84:c9:9f:42:7f:37:cb:39:95:12:cf:72:39:15:93:c9:0e: 34:c9:81:39:13:1c:73:f4:0b:1d:63:c1:04:18:00:14:45:03: ab:de:08:9d:29:c8:0d:23:6f:55:13:01:82:96:d4:25:73:61: 5a:c2:41:44:f6:39:dc:8b:99:0c:5d:ba:81:2f:fb:4f:aa:d4: fa:54:b7:0f:16:92:c7:f5:17:d4:51:df:84:ca:4c:7e:19:28: c1:49:56:40:d3:82:74:98:b6:6c:71:b6:79:d3:3b:a3:34:42: 62:e9:08:9b:78:01:5e:71:9e:36:db:de:01:28:e5:68:e8:8c: de:d8:5c:17:67:d5:8a:11:3f:ee:59:35:d0:89:4e:2a:8c:e7: 41:2c:93:3d:6f:c8:b4:13:c4:88:f4:b8:5a:8d:94:8c:06:b9: f9:a8:17:72:52:4f:83:62:8e:14:85:58:03:96:bf:32:fc:9a: 01:43:9f:2f:6a:e4:d7:be:d6:8d:a9:13:fb:51:0c:ac:d5:6d: 10:76:66:e4:96:1c:ee:d0:31:60:55:8f:d2:fb:ad:f2:41:af: c3:7e:68:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXSDt1qlyuB2kC63RjEkAdGt/OQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5 NDNEQTIzQzAeFw0yNTEyMTYxNDA3MDZaFw0yNTEyMTkxNjQ1MDZaMDMxMTAvBgNV BAMTKEJGNzU5MDRCRDcyNzkzMTgyREIwOTM1MkVDMjExNjRDQUI4NTkzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jZjTc7bX9ZJewzbQ/eZmmTyf E49mu2snGG1Ye4O3FlUyI4fg3xlsq962qbAyHzG+uFJhdPSQlql9rEHQXfhaeTcf icFUedO52Guxjt+rt6qv0APRLJ5YIrRx6ldEypos23ruha+KKfdPlHRqZu7wKCni bjOBZbQIPQD7+SBAXE03W2yoZV990wdXHTl18wB+a0pl5IHTax0TNmNBQVx/+7lh 7eZQiBUWNTvsHVtIaFLzOr05jPnUxuQu4V7u2FNXwlHTQ1AZU0PLGasbBZrl/GVq 5XKA9XAXA7WXOmOzcjc7M5QgSjsHrg9f0CxZQ4pu9w5lFYKsXgDvmR+EGZhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3WQS9cnkxgtsJNS7CEWTKuFk3QwHwYDVR0j BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4 QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE QTIzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkw NzU5NDNEQTIzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLMIZxSOnkCpea4vlzaR8nd6l+FrCIY/+fn LTlcqVcsHsQKc7WEyZ9CfzfLOZUSz3I5FZPJDjTJgTkTHHP0Cx1jwQQYABRFA6ve CJ0pyA0jb1UTAYKW1CVzYVrCQUT2OdyLmQxduoEv+0+q1PpUtw8Wksf1F9RR34TK TH4ZKMFJVkDTgnSYtmxxtnnTO6M0QmLpCJt4AV5xnjbb3gEo5WjojN7YXBdn1YoR P+5ZNdCJTiqM50Eskz1vyLQTxIj0uFqNlIwGufmoF3JST4NijhSFWAOWvzL8mgFD ny9q5Ne+1o2pE/tRDKzVbRB2ZuSWHO7QMWBVj9L7rfJBr8N+aFA= -----END CERTIFICATE-----Generated at Thu Dec 18 17:30:11 2025 by rpki-client