This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: gPkcV8+TRRD7MMI1Atwc7PjS0I8RzesnBf9uq05SzJ0= Subject key identifier: 21:EC:47:DE:E4:A1:80:4B:0E:8C:26:03:77:20:53:62:4C:E5:39:40 Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 17B11B54443E043C70900737F2A32014BE44EDCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 0332 Signing time: Wed 24 Dec 2025 07:32:23 +0000 Manifest this update: Wed 24 Dec 2025 07:27:23 +0000 Manifest next update: Sat 27 Dec 2025 11:07:23 +0000 Files and hashes: 1: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: umMXNYB5RwjlwGFC5Wpd2rzxhTLaoa08yJ2/wNUcpx0=) 2: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: u4aBEtuM2QHTp7BELhEUw3EMWzsVzmaE71DRbevw9IE=) 3: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: tU2O/OAH1O/qSyyJqDlWC4HBTQpL06kLsKSpR1jZ5rg=) 4: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: wesud4Ud3HCpFz3TbmwbzTcWOeds/1nSTc4iWrxHtOo=) 5: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: XHq+xPXaQhaFFM8rKVuF1dbeK+zU1xwC655cPFKf2aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b1:1b:54:44:3e:04:3c:70:90:07:37:f2:a3:20:14:be:44:ed:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Dec 24 07:27:23 2025 GMT Not After : Dec 27 11:07:23 2025 GMT Subject: CN=21EC47DEE4A1804B0E8C2603772053624CE53940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:42:59:16:67:0a:d5:cc:5e:f3:10:9b:ef: 72:58:c8:77:25:2a:04:fd:4d:6c:d2:b4:00:9c:8a: b4:7b:02:f8:98:83:c7:b9:8f:cb:5b:88:6c:2e:9a: 56:56:84:42:9b:fa:bc:5c:63:db:75:01:94:03:91: 49:6f:c5:b0:2d:5e:9c:22:30:4d:72:79:17:a8:78: 6f:c8:23:aa:cf:87:a8:90:19:3f:01:10:97:5e:d7: ea:a4:26:0c:cb:80:b0:60:75:cc:51:11:16:29:44: 7a:24:d9:2e:a6:ef:08:18:4c:04:7d:f1:3f:f9:04: 5b:f9:4f:e4:28:43:2e:c3:56:c0:d1:1c:93:7d:69: 75:99:fd:f2:8b:fd:27:16:7c:1e:8b:3a:99:95:b7: 72:4b:65:bf:8b:d0:e4:34:e5:3c:c3:ec:78:36:a8: 19:64:46:db:16:0b:2e:c2:06:a4:58:c9:7c:06:64: 5b:f2:41:e8:1e:b3:71:79:c5:78:a8:c5:d1:da:1c: ef:30:48:3c:82:80:41:a7:bc:be:ed:02:04:2d:fb: 9e:66:48:a9:65:dc:90:63:0e:80:37:78:f3:e6:b5: 96:73:ef:1a:ae:32:f0:49:2b:d3:21:26:dd:bc:e2: 36:04:3c:ae:de:40:43:4e:7b:6c:47:9f:d7:3d:0a: 32:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EC:47:DE:E4:A1:80:4B:0E:8C:26:03:77:20:53:62:4C:E5:39:40 X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:49:08:ad:2a:27:0a:56:56:0e:94:4a:bf:f7:b2:11:f5:9e: 61:4c:66:ca:2b:08:02:a7:4b:9b:98:28:c6:25:33:ec:a6:84: 5f:d2:a8:bf:01:76:99:4c:0d:8a:b5:88:a4:a3:e8:21:54:18: 46:ac:5b:47:25:f7:c9:ab:81:6a:98:95:77:3f:8f:f1:95:fb: ee:96:3c:43:98:58:42:23:b7:56:56:5a:d3:74:6b:34:eb:48: e2:c9:c5:8d:e1:6d:7a:6e:55:99:af:a6:27:66:fe:42:31:70: 46:a0:e5:87:60:4a:88:50:1e:0b:b3:37:ab:7f:fd:82:f6:37: 0d:37:82:a8:4a:ac:da:4c:2b:06:2a:5e:a8:9f:d4:75:15:8d: fc:0b:93:58:7e:da:38:75:cd:47:3f:70:6f:c2:22:90:4d:af: fe:18:92:61:35:0e:96:15:1b:ca:7e:f7:25:f9:fd:34:ff:4b: c5:01:70:91:cb:a5:55:42:f7:54:e4:50:ce:34:15:0d:2d:c8: 61:ea:a5:19:77:eb:71:38:33:e9:1d:03:88:67:68:d0:c7:59: 8a:42:81:1e:15:f8:a1:27:6b:b8:ab:4c:23:ae:d0:6a:66:88: 6a:0a:1f:61:e9:60:78:b7:80:39:3e:61:1e:db:ab:46:50:1c: f3:1b:48:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF7EbVEQ+BDxwkAc38qMgFL5E7cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTEyMjQwNzI3MjNaFw0yNTEyMjcxMTA3MjNaMDMxMTAvBgNV BAMTKDIxRUM0N0RFRTRBMTgwNEIwRThDMjYwMzc3MjA1MzYyNENFNTM5NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/kJZFmcK1cxe8xCb73JYyHcl KgT9TWzStACcirR7AviYg8e5j8tbiGwumlZWhEKb+rxcY9t1AZQDkUlvxbAtXpwi ME1yeReoeG/II6rPh6iQGT8BEJde1+qkJgzLgLBgdcxRERYpRHok2S6m7wgYTAR9 8T/5BFv5T+QoQy7DVsDRHJN9aXWZ/fKL/ScWfB6LOpmVt3JLZb+L0OQ05TzD7Hg2 qBlkRtsWCy7CBqRYyXwGZFvyQeges3F5xXioxdHaHO8wSDyCgEGnvL7tAgQt+55m SKll3JBjDoA3ePPmtZZz7xquMvBJK9MhJt284jYEPK7eQENOe2xHn9c9CjIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIexH3uShgEsOjCYDdyBTYkzlOUAwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxJCK0qJwpWVg6USr/3shH1nmFMZsorCAKn S5uYKMYlM+ymhF/SqL8BdplMDYq1iKSj6CFUGEasW0cl98mrgWqYlXc/j/GV++6W PEOYWEIjt1ZWWtN0azTrSOLJxY3hbXpuVZmvpidm/kIxcEag5YdgSohQHguzN6t/ /YL2Nw03gqhKrNpMKwYqXqif1HUVjfwLk1h+2jh1zUc/cG/CIpBNr/4YkmE1DpYV G8p+9yX5/TT/S8UBcJHLpVVC91TkUM40FQ0tyGHqpRl363E4M+kdA4hnaNDHWYpC gR4V+KEna7irTCOu0GpmiGoKH2HpYHi3gDk+YR7bq0ZQHPMbSOY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:49 2025 by rpki-client