This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: 4rKFvKZdkIc9ft99ve45Pbocy455kyryz3uu+uaVCZs= Subject key identifier: 1F:80:CC:91:B2:30:A1:28:8A:9E:93:E1:6B:21:75:31:8E:55:70:AF Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 3FD13CA7171F033D0DC98410B48E78442CFEB0F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 021E Signing time: Sun 21 Dec 2025 05:00:56 +0000 Manifest this update: Sun 21 Dec 2025 04:55:56 +0000 Manifest next update: Wed 24 Dec 2025 11:23:56 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) 2: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 3: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: tICv0hwOfxpt+hWC5iYOFBx2hNYqC3eslgtcq8l137M=) 4: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d1:3c:a7:17:1f:03:3d:0d:c9:84:10:b4:8e:78:44:2c:fe:b0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Dec 21 04:55:56 2025 GMT Not After : Dec 24 11:23:56 2025 GMT Subject: CN=1F80CC91B230A1288A9E93E16B2175318E5570AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:61:41:55:64:42:3a:bc:6d:0f:12:45:1b: 5b:89:ff:56:27:30:de:92:bc:28:e8:4a:84:18:b2: 6d:77:7b:86:29:c0:9e:ce:3a:5f:f8:23:f9:3d:8f: 7f:f7:58:d7:c9:9f:9a:6c:28:b4:8e:88:ac:ed:9a: 7c:56:1c:42:fe:9b:8e:a4:d9:81:cf:87:1a:b9:25: d1:4d:da:96:8a:5c:34:d4:0e:b0:70:c5:c9:7c:e1: af:9f:b2:22:71:f0:f7:25:45:8f:e4:1b:16:b8:b8: 6c:4c:61:31:1b:26:67:b3:a9:f8:b0:31:7d:35:39: 5f:f3:2b:7d:68:17:87:7f:5c:bb:f8:c5:26:ae:ac: 85:f3:8d:3c:c7:76:47:66:77:fa:ce:33:48:72:88: 24:d9:a9:94:cb:db:74:1c:83:4a:43:7f:64:6a:de: 14:e9:57:6d:52:9c:62:e8:43:db:2c:b5:64:9f:02: 99:6f:70:48:b8:8a:37:a4:15:e3:9d:b4:87:ba:35: d0:8e:7b:31:32:21:7d:0f:ef:e0:30:e3:db:1f:95: 8f:0a:48:75:df:51:05:77:43:54:15:bc:dc:e8:07: 58:13:ea:2d:91:36:58:4c:9e:37:96:8f:80:d5:1d: a1:44:6f:59:90:8b:c5:6f:5e:44:de:7a:de:7b:96: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:80:CC:91:B2:30:A1:28:8A:9E:93:E1:6B:21:75:31:8E:55:70:AF X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:13:b5:4f:52:f2:09:cc:4c:1e:00:75:f8:60:30:87:c6:db: 34:93:bd:18:a9:2a:a5:cb:13:85:7c:ff:13:55:52:8a:56:f1: 45:01:f8:3b:b4:b7:91:f4:8d:25:1a:40:fc:fb:59:d1:ba:41: 8e:bf:65:0f:d2:6a:d5:26:23:d4:93:c1:d1:1e:70:b8:92:69: 39:15:82:3e:90:52:63:5f:48:d3:e3:db:c4:83:c5:18:ec:da: b8:87:c3:ad:0f:f7:04:fb:be:08:01:2f:7f:69:13:02:2a:88: f5:33:57:7c:59:32:f8:ef:f9:27:48:73:29:ec:1a:87:7a:b7: 32:26:d7:7e:d5:ca:c0:a9:9f:9d:46:b2:8f:4a:27:c0:25:21: d5:54:44:ec:bf:31:d7:a9:1f:d7:c5:be:1d:2b:ed:09:10:78: c2:a9:37:c8:33:87:ea:db:e7:47:ca:9f:c7:f2:f1:c9:e2:76: 4b:0e:84:50:84:af:c3:8f:ea:df:3a:12:2d:00:9b:46:e8:1d: 8a:11:bb:af:a3:8f:27:84:eb:d3:4f:ce:e6:15:12:0a:b5:c6: 3e:d1:35:cf:7f:51:40:d1:5c:a5:ad:35:fd:41:49:b7:14:96: 51:65:88:e8:49:94:e2:2b:7b:19:bc:1f:a8:45:26:d0:23:3b: f4:28:53:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9E8pxcfAz0NyYQQtI54RCz+sPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTEyMjEwNDU1NTZaFw0yNTEyMjQxMTIzNTZaMDMxMTAvBgNV BAMTKDFGODBDQzkxQjIzMEExMjg4QTlFOTNFMTZCMjE3NTMxOEU1NTcwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0GFBVWRCOrxtDxJFG1uJ/1Yn MN6SvCjoSoQYsm13e4YpwJ7OOl/4I/k9j3/3WNfJn5psKLSOiKztmnxWHEL+m46k 2YHPhxq5JdFN2paKXDTUDrBwxcl84a+fsiJx8PclRY/kGxa4uGxMYTEbJmezqfiw MX01OV/zK31oF4d/XLv4xSaurIXzjTzHdkdmd/rOM0hyiCTZqZTL23Qcg0pDf2Rq 3hTpV21SnGLoQ9sstWSfAplvcEi4ijekFeOdtIe6NdCOezEyIX0P7+Aw49sflY8K SHXfUQV3Q1QVvNzoB1gT6i2RNlhMnjeWj4DVHaFEb1mQi8VvXkTeet57lritAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4DMkbIwoSiKnpPhayF1MY5VcK8wHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO4TtU9S8gnMTB4AdfhgMIfG2zSTvRipKqXL E4V8/xNVUopW8UUB+Du0t5H0jSUaQPz7WdG6QY6/ZQ/SatUmI9STwdEecLiSaTkV gj6QUmNfSNPj28SDxRjs2riHw60P9wT7vggBL39pEwIqiPUzV3xZMvjv+SdIcyns God6tzIm137VysCpn51Gso9KJ8AlIdVUROy/MdepH9fFvh0r7QkQeMKpN8gzh+rb 50fKn8fy8cnidksOhFCEr8OP6t86Ei0Am0boHYoRu6+jjyeE69NPzuYVEgq1xj7R Nc9/UUDRXKWtNf1BSbcUllFliOhJlOIrexm8H6hFJtAjO/QoU8Q= -----END CERTIFICATE-----Generated at Sun Dec 21 12:11:05 2025 by rpki-client