This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: xfQlHFTbrgVlqIPGi5XY6w7E/0V1Nd3tHMQgvspkVww= Subject key identifier: 74:F6:D3:F1:1E:82:83:49:70:E6:3D:E7:A9:9A:CA:7E:42:8D:65:87 Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 72FD3F04B2C7688F181ED7D75EDD2801C095BF8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 0399 Signing time: Fri 05 Dec 2025 23:20:01 +0000 Manifest this update: Fri 05 Dec 2025 23:15:01 +0000 Manifest next update: Mon 08 Dec 2025 23:52:01 +0000 Files and hashes: 1: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: uQ2lNYFZctQjtseGT/wzHT4giq7wlDo/uVXWwYPTnAY=) 2: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js=) 3: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=) 4: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: eA3SoETXwwcPC2+tDSlUAMa6l/fae5O8GTjFVdv/2Tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fd:3f:04:b2:c7:68:8f:18:1e:d7:d7:5e:dd:28:01:c0:95:bf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Dec 5 23:15:01 2025 GMT Not After : Dec 8 23:52:01 2025 GMT Subject: CN=74F6D3F11E82834970E63DE7A99ACA7E428D6587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0f:1c:12:03:3a:f3:74:b0:90:bc:ea:e6:8a: aa:7a:40:27:2b:fe:90:67:f2:fd:2e:4e:04:b9:91: 00:ef:84:c3:e1:34:69:60:78:d6:36:2f:8b:50:cc: 12:95:37:18:21:d1:65:98:b6:91:27:e3:fa:2c:b4: de:7a:2f:5b:5d:4b:d4:aa:18:7d:81:aa:04:3d:3d: 2f:5e:d4:55:d6:8f:78:86:36:3e:f4:27:20:c2:7f: 34:38:e5:13:02:03:df:4b:1a:2f:0c:8a:9c:7c:b1: 44:b2:df:89:2a:c2:fd:63:d8:df:8c:4e:52:28:8a: 80:6c:2e:88:35:29:4b:28:78:a4:bb:6d:99:5f:7f: d3:28:9c:55:1a:b6:5b:99:aa:b8:c6:39:a6:08:66: ca:38:0b:6b:d0:35:24:e4:fb:87:20:42:cd:b4:5c: 79:f4:32:eb:95:6e:63:99:0e:08:71:52:57:11:03: 28:22:9e:a8:01:d4:15:1f:4d:76:7b:55:52:ad:14: d7:d9:20:9b:bc:2b:04:ea:a9:88:f9:8c:0e:1b:50: b5:7e:10:74:b5:94:3b:5b:58:7f:db:bd:17:88:b8: 40:3a:49:a0:81:84:cb:60:05:72:0e:6d:79:89:b4: 5b:df:8c:d2:57:7b:cf:2f:ce:07:ff:25:5e:74:a4: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F6:D3:F1:1E:82:83:49:70:E6:3D:E7:A9:9A:CA:7E:42:8D:65:87 X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:70:53:59:97:d0:fb:17:e1:3a:9b:01:e2:bb:f0:a5:f9:f6: b3:38:a6:dc:06:c3:f9:4f:5d:27:43:49:22:07:e1:df:09:10: a0:47:40:60:75:d8:fd:13:b0:35:2b:b4:f0:d4:7f:b8:ed:76: ea:2b:b7:29:f2:09:46:57:57:c4:72:65:9e:5e:95:a6:b4:b8: 81:af:d4:ae:7a:02:a6:4a:94:1e:c2:a8:68:af:73:4f:69:9d: 88:42:39:25:50:b1:ae:78:9e:de:87:c0:16:d7:65:fc:9e:a7: 27:e1:da:29:92:8d:cd:f1:98:6c:ed:6e:16:c3:d6:74:97:bf: 00:f0:cc:6c:0c:da:28:6e:00:c4:98:60:dd:70:6b:a2:bf:95: 5b:c7:76:ba:37:47:27:f9:90:72:0c:d1:a0:e9:f2:a4:01:67: 9b:25:4a:cf:1e:ea:fe:dd:1e:5f:5c:8d:3e:58:a8:16:60:db: 04:b6:b0:bf:50:17:b0:b4:fa:9f:41:2d:d6:70:72:d6:bd:b6: 88:bd:e2:5e:60:c8:6f:f0:32:f2:df:4c:f0:86:d6:00:8e:13: 37:22:6d:f1:18:ff:aa:b0:c7:a4:0c:da:21:89:14:63:20:f2: db:ba:d0:68:da:58:64:9c:38:5a:62:ec:b5:3f:02:b0:fe:31: 37:5b:dd:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcv0/BLLHaI8YHtfXXt0oAcCVv4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNTEyMDUyMzE1MDFaFw0yNTEyMDgyMzUyMDFaMDMxMTAvBgNV BAMTKDc0RjZEM0YxMUU4MjgzNDk3MEU2M0RFN0E5OUFDQTdFNDI4RDY1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDxwSAzrzdLCQvOrmiqp6QCcr /pBn8v0uTgS5kQDvhMPhNGlgeNY2L4tQzBKVNxgh0WWYtpEn4/ostN56L1tdS9Sq GH2BqgQ9PS9e1FXWj3iGNj70JyDCfzQ45RMCA99LGi8Mipx8sUSy34kqwv1j2N+M TlIoioBsLog1KUsoeKS7bZlff9MonFUatluZqrjGOaYIZso4C2vQNSTk+4cgQs20 XHn0MuuVbmOZDghxUlcRAyginqgB1BUfTXZ7VVKtFNfZIJu8KwTqqYj5jA4bULV+ EHS1lDtbWH/bvReIuEA6SaCBhMtgBXIObXmJtFvfjNJXe88vzgf/JV50pKw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdPbT8R6Cg0lw5j3nqZrKfkKNZYcwHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFwU1mX0PsX4TqbAeK78KX59rM4ptwGw/lP XSdDSSIH4d8JEKBHQGB12P0TsDUrtPDUf7jtduortynyCUZXV8RyZZ5elaa0uIGv 1K56AqZKlB7CqGivc09pnYhCOSVQsa54nt6HwBbXZfyepyfh2imSjc3xmGztbhbD 1nSXvwDwzGwM2ihuAMSYYN1wa6K/lVvHdro3Ryf5kHIM0aDp8qQBZ5slSs8e6v7d Hl9cjT5YqBZg2wS2sL9QF7C0+p9BLdZwcta9toi94l5gyG/wMvLfTPCG1gCOEzci bfEY/6qwx6QM2iGJFGMg8tu60GjaWGScOFpi7LU/ArD+MTdb3Zw= -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:39 2025 by rpki-client