This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
File: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json)
Hash identifier: Jqx7gz1tgu463ypebPgsLviu7bJ9Ckdy9Flk/bXjIKc=
Subject key identifier: CB:BA:03:F2:20:F9:73:91:9A:BF:50:85:F2:B6:1F:BB:43:DD:09:B0
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial: 61128FE0235BFBA5EE5F9913991FDCEBA2F74267
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
Manifest number: 053B
Signing time: Fri 05 Dec 2025 16:11:12 +0000
Manifest this update: Fri 05 Dec 2025 16:06:12 +0000
Manifest next update: Mon 08 Dec 2025 17:43:12 +0000
Files and hashes: 1: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=)
2: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: 9ttsEv8xyQdIj2ysOYcOeKd2yqYa6sGhfUajffTzKd4=)
3: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=)
4: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=)
5: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: HhAj5FXKG+WPBMJHSmfCQ5YyDXmhJH0Hqke8PTIqGvE=)
6: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=)
7: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=)
8: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: LJtkS1u42VgpDkEe+6wdTyQqubNO880MVogJY9ymV9c=)
9: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=)
10: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=)
11: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=)
12: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: YHfOb3XSEMDVEIcVfiAIW6kLWlhlW9/hxOsVCiJWMDg=)
13: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=)
14: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=)
15: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=)
16: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: AZYO50pcht7zbgRleVLHSfxxSeX3cLrYkpQk4y4IB8g=)
17: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 17:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:12:8f:e0:23:5b:fb:a5:ee:5f:99:13:99:1f:dc:eb:a2:f7:42:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Validity
Not Before: Dec 5 16:06:12 2025 GMT
Not After : Dec 8 17:43:12 2025 GMT
Subject: CN=CBBA03F220F973919ABF5085F2B61FBB43DD09B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:45:f5:be:c1:75:58:58:01:99:a4:a4:e5:
87:f8:46:16:6e:b9:02:28:ab:c5:3c:0f:8c:82:e7:
f0:ea:5c:11:27:73:01:c1:04:40:a4:cb:2c:72:54:
fc:67:78:cb:dd:ae:be:75:3a:85:ba:5f:8b:c1:49:
7d:32:27:83:ed:71:f7:ab:68:ec:f7:bf:75:f8:6e:
0a:51:49:4e:ab:06:b0:ba:dc:92:a4:06:8c:19:9a:
a9:4b:d1:12:92:3b:9c:6a:1e:41:c8:f8:71:66:82:
b4:63:4b:b5:72:5c:34:20:04:08:1f:f7:96:f7:42:
4e:80:7a:1f:da:32:30:2e:2d:6e:b8:d6:f0:34:e2:
cb:56:05:79:ce:ed:64:09:f0:86:a8:eb:44:92:de:
3c:68:3b:32:2a:e1:c5:dd:4e:05:f8:92:89:a6:bd:
9a:e0:fe:2f:26:33:18:c7:ba:5c:e9:8b:3c:43:f9:
1d:72:c3:fd:e8:47:b5:e5:b8:0e:49:11:ec:72:4a:
8f:48:1a:d3:8b:26:3e:16:68:bc:26:63:78:6d:3c:
3b:96:61:b7:fb:95:4c:1a:63:7e:24:c5:bd:eb:dd:
9c:40:a9:4f:b7:42:8f:22:c8:b6:43:95:b3:be:66:
30:fb:d0:8d:78:3c:24:c7:6e:1d:5b:00:e6:84:fd:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:03:F2:20:F9:73:91:9A:BF:50:85:F2:B6:1F:BB:43:DD:09:B0
X509v3 Authority Key Identifier:
keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:44:00:28:06:ac:76:c0:12:e8:6c:e7:68:95:3c:b4:0e:ac:
16:6d:a0:63:2b:80:ac:fd:21:dc:e0:18:26:a6:c1:ef:b1:91:
62:9d:ff:53:3f:8e:89:be:c4:b7:ed:2e:9a:1c:bf:f6:08:a4:
a1:b7:44:ba:72:7f:69:69:83:57:8f:00:17:44:e1:6d:d4:46:
ab:f8:f4:1b:15:8a:c0:27:43:07:92:c2:c8:c7:a7:3f:c0:ed:
f3:dd:e3:c6:20:01:8d:5a:63:43:a3:e9:45:b3:a2:7e:88:a7:
1e:9c:ef:00:2f:43:4f:f0:cc:03:00:f7:d6:d5:1b:11:e9:fe:
a4:69:02:3e:db:79:89:62:51:44:6d:9f:d4:df:65:24:c7:0c:
6c:2d:d9:8b:00:75:91:cd:ed:d7:3f:15:26:e6:ed:46:56:d7:
25:2c:29:b4:82:92:07:ed:36:e4:bc:ab:02:13:b0:e2:d6:b4:
b8:91:61:cb:a7:00:86:1e:a5:91:2d:97:b3:ca:a2:48:d3:2b:
f4:f3:b9:b5:4a:42:28:e4:c8:27:c2:28:a5:e0:ef:89:d2:e0:
54:55:0e:2a:fc:c0:fe:1d:2e:bb:fa:17:a6:6b:92:b3:aa:32:
93:7d:2e:f4:4c:4b:6a:17:f1:96:d0:88:a4:a1:43:bb:89:3d:
0c:69:da:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:52:53 2025 by rpki-client