This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: HRQEZs6wLL3SFsUfPN3W4juGhjcllbsWeyNOejNAFZc= Subject key identifier: D2:94:30:02:3E:5E:67:0E:09:57:CD:E0:E9:93:C6:EA:ED:BC:AC:25 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 1F06E666A093C0E86B9976A507B06EC346A1B948 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 053B Signing time: Sat 20 Dec 2025 17:31:21 +0000 Manifest this update: Sat 20 Dec 2025 17:26:21 +0000 Manifest next update: Wed 24 Dec 2025 05:01:21 +0000 Files and hashes: 1: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: FyAvBZY6W2L1HwVaWtdBn1JjIwyZj/UZUwMR3y/jc5Q=) 2: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 3: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 4: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: 7YhXBCVpT/hmPF7YfTk/VVt/jg0VE6rflfItLcxbWKo=) 5: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 6: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) 7: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: +Ohb8AmL80BPgaiVvFCd/BXY6tohGQvqr2SFVpjVHPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:06:e6:66:a0:93:c0:e8:6b:99:76:a5:07:b0:6e:c3:46:a1:b9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Dec 20 17:26:21 2025 GMT Not After : Dec 24 05:01:21 2025 GMT Subject: CN=D29430023E5E670E0957CDE0E993C6EAEDBCAC25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e0:a3:38:95:9a:8c:5c:bf:cd:82:24:38:3c: 03:c8:c9:70:ae:17:6a:93:4c:91:ae:7b:2a:75:7f: 10:02:91:6e:5e:50:aa:e3:f7:fd:83:c6:a8:51:6f: c7:66:c5:5a:20:5f:e1:21:1f:ce:9e:ff:e7:25:94: cb:06:52:e4:e7:ab:2d:9b:ed:3a:05:18:dd:56:77: 9c:fc:6d:3a:0f:5a:1e:97:dd:9b:1c:e1:1f:55:46: d0:ee:3f:db:b0:93:95:47:7b:25:17:d0:c7:4c:d1: 35:c2:12:83:88:11:c0:de:05:8c:38:de:0e:08:78: e1:9a:50:3d:3d:7e:e2:de:b8:2c:c3:2b:12:92:00: 5f:fd:2a:a4:ce:63:c8:6f:72:0f:25:85:74:41:35: f9:a2:2e:39:13:91:ba:11:cf:10:43:68:4d:24:04: fe:7f:a2:e3:83:45:66:41:67:8a:3e:b9:47:8b:f3: f0:c5:ec:2e:15:ca:db:ca:25:09:c6:dc:8a:fb:f8: bc:a3:e0:22:ec:a8:7e:7a:ad:5f:7c:19:d6:2c:db: ec:e0:ec:60:07:22:19:7c:52:46:b2:48:92:c1:cf: 77:7b:24:8a:fe:49:0a:61:2d:fc:b8:41:bd:b8:2d: 99:9e:db:12:06:08:29:8d:0a:d8:45:08:24:00:fc: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:30:02:3E:5E:67:0E:09:57:CD:E0:E9:93:C6:EA:ED:BC:AC:25 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:94:6c:31:1b:8d:53:9b:b5:57:6a:fd:72:1b:7f:6e:8c:72: e8:20:8d:19:d1:0c:b1:4b:9d:37:af:32:48:21:9a:cb:0d:5d: 56:de:e8:de:cb:80:05:14:8c:4c:17:c0:b8:c2:0e:90:b7:fc: 46:b7:6e:9d:2a:be:93:a5:0f:52:50:48:15:af:79:17:20:04: 27:08:ec:72:bd:d7:e4:10:73:99:ad:19:ff:b1:dd:fc:5b:3f: b7:33:db:30:dd:7f:ef:35:3b:08:b4:f1:4b:6e:6b:f6:d8:72: 97:11:62:e7:77:79:52:48:61:a0:53:bb:fe:ba:3d:da:9e:f5: 42:be:73:66:52:af:2f:35:9e:6f:da:3d:90:0a:19:75:ce:3f: 5b:86:66:52:b2:ed:84:69:1f:7a:77:e7:49:58:16:74:b9:50: 96:47:88:8d:d8:2f:d8:3d:54:85:d9:26:63:d7:0c:f4:a3:e3: dd:98:5f:5b:38:75:33:6e:b7:31:2d:76:a0:d0:15:db:c6:5e: a7:57:d9:2e:ae:61:79:cd:e0:77:32:f6:e4:78:8a:1a:c9:58: e3:52:0d:5b:24:5d:3b:0f:54:c4:cd:b6:e7:b7:b7:a8:7e:a8: f4:8a:ed:34:d1:5e:aa:b9:50:e9:80:fa:b3:9c:69:b7:02:f6: 3e:1b:e7:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHwbmZqCTwOhrmXalB7Buw0ahuUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTEyMjAxNzI2MjFaFw0yNTEyMjQwNTAxMjFaMDMxMTAvBgNV BAMTKEQyOTQzMDAyM0U1RTY3MEUwOTU3Q0RFMEU5OTNDNkVBRURCQ0FDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf4KM4lZqMXL/NgiQ4PAPIyXCu F2qTTJGueyp1fxACkW5eUKrj9/2DxqhRb8dmxVogX+EhH86e/+cllMsGUuTnqy2b 7ToFGN1Wd5z8bToPWh6X3Zsc4R9VRtDuP9uwk5VHeyUX0MdM0TXCEoOIEcDeBYw4 3g4IeOGaUD09fuLeuCzDKxKSAF/9KqTOY8hvcg8lhXRBNfmiLjkTkboRzxBDaE0k BP5/ouODRWZBZ4o+uUeL8/DF7C4VytvKJQnG3Ir7+Lyj4CLsqH56rV98GdYs2+zg 7GAHIhl8UkaySJLBz3d7JIr+SQphLfy4Qb24LZme2xIGCCmNCthFCCQA/HvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0pQwAj5eZw4JV83g6ZPG6u28rCUwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiUbDEbjVObtVdq/XIbf26McuggjRnRDLFL nTevMkghmssNXVbe6N7LgAUUjEwXwLjCDpC3/Ea3bp0qvpOlD1JQSBWveRcgBCcI 7HK91+QQc5mtGf+x3fxbP7cz2zDdf+81Owi08Utua/bYcpcRYud3eVJIYaBTu/66 Pdqe9UK+c2ZSry81nm/aPZAKGXXOP1uGZlKy7YRpH3p350lYFnS5UJZHiI3YL9g9 VIXZJmPXDPSj492YX1s4dTNutzEtdqDQFdvGXqdX2S6uYXnN4Hcy9uR4ihrJWONS DVskXTsPVMTNtue3t6h+qPSK7TTRXqq5UOmA+rOcabcC9j4b520= -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:02 2025 by rpki-client