This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: CnND2F/yTA2/jJF8DxAdimLsb3moqry7TGZztEF5MLs= Subject key identifier: E9:CF:C4:4B:7B:43:11:11:70:8A:0C:50:4E:75:D9:8F:93:77:97:DE Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 2709D88FC2A335459B4B7ADE94BC6971241E5582 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0D75 Signing time: Wed 17 Dec 2025 21:21:57 +0000 Manifest this update: Wed 17 Dec 2025 21:16:57 +0000 Manifest next update: Sat 20 Dec 2025 23:58:57 +0000 Files and hashes: 1: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=) 2: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=) 3: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=) 4: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=) 5: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=) 6: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=) 7: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=) 8: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=) 9: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: 9hl7iHwduFN0WVVUw2iAShLy6L9zprNLs8evQudyyyM=) 10: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=) 11: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=) 12: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=) 13: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=) 14: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=) 15: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=) 16: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:09:d8:8f:c2:a3:35:45:9b:4b:7a:de:94:bc:69:71:24:1e:55:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Dec 17 21:16:57 2025 GMT Not After : Dec 20 23:58:57 2025 GMT Subject: CN=E9CFC44B7B431111708A0C504E75D98F937797DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:d9:ad:f1:e4:cf:20:e6:37:5a:9b:85:9e: cc:ce:3e:0c:38:cf:f7:d7:da:4a:c2:fd:d0:cb:75: 91:da:ce:1f:46:c2:a0:80:d6:2e:77:a7:fe:d4:9d: a8:01:da:8e:dd:a1:99:0a:3c:66:2c:64:19:cf:ca: ad:b6:ae:e3:04:d3:98:59:bf:0c:37:78:aa:2d:af: 0e:7a:98:77:20:d5:ec:5e:65:c7:4f:0f:d0:6e:8b: 71:14:b9:4f:f1:31:49:57:32:a4:41:87:47:be:cd: f7:5a:25:d0:70:3b:1e:97:a1:1b:e5:40:5c:0d:95: ef:85:db:29:e2:8d:c7:35:83:d7:77:78:aa:75:bb: 57:26:87:05:77:13:6e:b8:e6:d6:b0:06:7f:83:84: 98:4b:15:72:5c:ff:81:85:c9:78:ee:55:24:ee:be: 3b:ec:7c:c6:74:f0:b9:08:08:9e:03:e0:84:3b:bb: db:32:de:5a:f8:92:bc:3a:29:52:2e:ff:d6:65:5d: c0:55:1f:b1:8a:c7:ab:8c:ea:3a:d0:15:92:de:bb: 20:9b:d1:61:db:10:6e:6d:33:f5:e8:b2:96:8f:3b: be:a4:fc:d0:d6:32:61:b8:a5:5a:dd:79:67:79:2f: b6:72:90:c2:e4:15:a7:86:f4:7e:ad:1d:f4:82:c7: 9c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CF:C4:4B:7B:43:11:11:70:8A:0C:50:4E:75:D9:8F:93:77:97:DE X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:8f:f9:f6:22:d4:64:d6:cd:fe:a2:9b:a8:66:2c:5e:53:ef: 2b:e8:4a:f2:a6:30:d5:dd:0c:06:41:ba:64:58:e3:d4:a3:44: bb:88:1e:f7:b6:65:2c:e6:8d:35:26:5d:39:3c:9e:ae:b9:db: 17:f2:8c:c8:00:57:3e:3a:dd:d2:3f:1e:61:89:23:ee:e8:9b: b7:e9:da:a1:e5:40:c2:1b:bd:f9:f0:54:6f:c0:8c:8e:d8:65: 09:6e:af:3b:66:9a:48:74:7f:d5:e3:09:8d:65:7f:8d:6d:1b: 02:dc:12:94:f1:11:81:e6:15:5c:47:21:e5:7a:bf:5d:19:fa: a8:d9:d7:5e:66:92:cc:67:7b:e6:54:b2:95:31:b2:8f:9e:3a: 71:a5:14:cc:1c:38:bf:ad:44:9c:86:29:69:5c:fd:81:1e:a6: 75:5e:3e:92:1a:a2:3d:da:ae:c1:02:dc:8b:02:88:8f:25:a5: 8d:c1:47:4a:45:c4:d9:26:99:4a:bf:b4:a3:13:30:14:89:fa: e1:44:6c:5f:58:b9:d3:62:6a:d7:58:d7:20:25:94:2c:3f:79: d1:46:f7:76:c1:f3:a7:90:80:88:bc:2f:81:57:e8:7a:14:9a: df:ac:99:7f:85:63:47:2c:f4:e3:45:1e:97:20:4c:f9:81:6e: 0f:2e:3f:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwnYj8KjNUWbS3relLxpcSQeVYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTEyMTcyMTE2NTdaFw0yNTEyMjAyMzU4NTdaMDMxMTAvBgNV BAMTKEU5Q0ZDNDRCN0I0MzExMTE3MDhBMEM1MDRFNzVEOThGOTM3Nzk3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SNmt8eTPIOY3WpuFnszOPgw4 z/fX2krC/dDLdZHazh9GwqCA1i53p/7UnagB2o7doZkKPGYsZBnPyq22ruME05hZ vww3eKotrw56mHcg1exeZcdPD9Bui3EUuU/xMUlXMqRBh0e+zfdaJdBwOx6XoRvl QFwNle+F2ynijcc1g9d3eKp1u1cmhwV3E2645tawBn+DhJhLFXJc/4GFyXjuVSTu vjvsfMZ08LkICJ4D4IQ7u9sy3lr4krw6KVIu/9ZlXcBVH7GKx6uM6jrQFZLeuyCb 0WHbEG5tM/XospaPO76k/NDWMmG4pVrdeWd5L7ZykMLkFaeG9H6tHfSCx5z9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6c/ES3tDERFwigxQTnXZj5N3l94wHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWP+fYi1GTWzf6im6hmLF5T7yvoSvKmMNXd DAZBumRY49SjRLuIHve2ZSzmjTUmXTk8nq652xfyjMgAVz463dI/HmGJI+7om7fp 2qHlQMIbvfnwVG/AjI7YZQlurztmmkh0f9XjCY1lf41tGwLcEpTxEYHmFVxHIeV6 v10Z+qjZ115mksxne+ZUspUxso+eOnGlFMwcOL+tRJyGKWlc/YEepnVePpIaoj3a rsEC3IsCiI8lpY3BR0pFxNkmmUq/tKMTMBSJ+uFEbF9YudNiatdY1yAllCw/edFG 93bB86eQgIi8L4FX6HoUmt+smX+FY0cs9ONFHpcgTPmBbg8uP+w= -----END CERTIFICATE-----Generated at Sat Dec 20 10:42:32 2025 by rpki-client