This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft File: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json) Hash identifier: VjadvdSvDsrnQvG/4wiD7J6vUcDA0QfhlT5xSUlttnE= Subject key identifier: E7:FC:79:37:00:6E:12:42:18:EE:BF:CE:DC:19:95:F1:A5:06:18:97 Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 04AC058C3885DE14082BA7C6D7942C3F93FA4E50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft Manifest number: 0540 Signing time: Wed 17 Dec 2025 03:31:11 +0000 Manifest this update: Wed 17 Dec 2025 03:26:11 +0000 Manifest next update: Sat 20 Dec 2025 11:12:11 +0000 Files and hashes: 1: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: 9ttsEv8xyQdIj2ysOYcOeKd2yqYa6sGhfUajffTzKd4=) 2: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: 6tYZRHS1gp6lxrRLkcMQOZpyzT7UZqMxo9oLwoeh2Kk=) 3: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: d6ntFAxplRzwyKe0xQxyG4+KwJQk7udceL2awdwfKCc=) 4: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: PAUNyFLoTuXnyzJaaygCGIoZ2kkR7s3iDrCXWwkOWpM=) 5: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: qZ2majG5cGcPiPcNAPu4jGy/H5NlD9ILAfwhNapK3KI=) 6: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: VSjVNeF6CQhhuIMP9VzYdgPpAyYTICUyURNkkRPZvf0=) 7: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: +kWoeqncIsg2yG08LA8FNhnez+6IikrA0zXpF5e1dxk=) 8: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: dn2LxIR2i9f98oBHTTzMm7c0l11yZxH5BdOjGXs/ET8=) 9: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: YN/2s31112uMwq4KT5YT8EMIK9P8Spv9BQ+gu6aYN4g=) 10: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo=) 11: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: yvTVsKwfMbm9/tZX55oqWjXKQNBRGzzlj+jV8XkeY/A=) 12: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: addoLGX7l1qN9yrFfHEwbDZZ1vggnAx8LkSg4qCXPoA=) 13: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc=) 14: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: AZYO50pcht7zbgRleVLHSfxxSeX3cLrYkpQk4y4IB8g=) 15: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: YHfOb3XSEMDVEIcVfiAIW6kLWlhlW9/hxOsVCiJWMDg=) 16: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: HhAj5FXKG+WPBMJHSmfCQ5YyDXmhJH0Hqke8PTIqGvE=) 17: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: lsw9Lj4TdivwiY9urFVLBPCnaQDyjQIHv9L2rFNGJcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ac:05:8c:38:85:de:14:08:2b:a7:c6:d7:94:2c:3f:93:fa:4e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Dec 17 03:26:11 2025 GMT Not After : Dec 20 11:12:11 2025 GMT Subject: CN=E7FC7937006E124218EEBFCEDC1995F1A5061897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:80:26:e0:c0:f8:57:f2:73:5b:62:02:24: 6d:64:38:7f:6c:bf:04:f1:8f:5a:a1:2a:73:bc:28: 89:c6:9f:9c:a5:a9:17:a2:a2:a5:76:8c:19:6a:69: ce:a5:02:5e:2c:46:fc:8f:97:bc:c3:23:0d:96:3c: 6e:29:d4:8c:07:61:89:03:ee:39:e6:d5:3f:9a:b2: 15:e0:35:53:9b:d4:58:1e:0a:d7:20:11:e6:ce:5b: 99:ce:08:84:21:d1:6f:96:85:61:a3:6b:05:3a:47: c4:b1:4a:7e:f6:07:23:54:d9:cd:c4:ee:81:9b:75: 45:59:00:8e:7e:a6:8a:bd:79:e6:b2:e6:7c:7d:8c: 6a:30:4f:39:2b:78:e7:72:d2:66:5d:4b:99:25:78: 3b:e7:05:e8:d3:d7:2f:e5:a3:3e:42:12:4b:36:f5: de:74:4f:c6:61:27:28:bf:5c:e9:b6:5e:28:0d:8f: ef:b3:54:ad:65:ce:f8:84:60:96:5e:bc:cc:40:3a: 44:68:67:77:1f:4e:cb:1e:ea:27:c6:2d:bf:20:ca: bf:67:dc:91:30:ae:69:3a:79:43:8e:f2:0a:4f:17: a3:63:0d:d9:e6:f7:f4:14:67:f2:9d:bb:32:b0:a8: 50:d8:25:8b:44:6b:12:97:d7:3a:bc:a6:63:52:90: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FC:79:37:00:6E:12:42:18:EE:BF:CE:DC:19:95:F1:A5:06:18:97 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5c:16:eb:4a:97:3a:a3:e3:fe:61:ea:d4:1c:00:5e:ab:ef: f5:30:76:42:dd:40:e2:05:26:2c:33:66:26:f4:31:c5:6f:ae: fa:f0:a8:dc:3b:f4:59:44:77:e2:2f:bb:ae:d0:66:bc:59:7c: 58:e2:90:5f:07:af:1f:09:c4:4c:9e:82:36:0f:2e:b7:49:a2: f6:c3:33:ca:2a:63:5d:cd:0a:ec:55:0c:4d:ad:1b:1e:c5:0d: c8:03:58:2c:25:c3:6d:c5:34:ed:76:50:65:1c:f1:73:f6:56: c0:1e:1a:10:26:db:3c:47:f7:ff:97:7d:48:b2:1c:44:73:21: 71:16:3b:1f:1a:6a:76:ba:89:03:fd:ce:e9:63:50:6d:d3:ac: fd:4e:7c:75:aa:7c:53:2e:68:92:5d:46:5b:ca:0d:59:7a:23: 28:c9:9c:18:16:9c:2f:56:e5:0d:11:a7:56:8b:d1:db:e2:ab: 0d:31:9f:f8:5f:95:07:3d:85:68:3f:36:08:87:ab:14:cc:53: 95:d2:49:d7:f2:bf:f9:0e:f1:42:95:3d:4b:a7:5a:8a:12:19: 40:53:e2:db:21:bb:f0:86:cd:1f:c5:35:38:3a:34:20:16:42: 97:2c:d4:df:a6:72:fc:c7:b5:cf:5f:16:5f:5d:38:9d:20:d3: 6b:a7:1a:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKwFjDiF3hQIK6fG15QsP5P6TlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTEyMTcwMzI2MTFaFw0yNTEyMjAxMTEyMTFaMDMxMTAvBgNV BAMTKEU3RkM3OTM3MDA2RTEyNDIxOEVFQkZDRURDMTk5NUYxQTUwNjE4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9F4Am4MD4V/JzW2ICJG1kOH9s vwTxj1qhKnO8KInGn5ylqReioqV2jBlqac6lAl4sRvyPl7zDIw2WPG4p1IwHYYkD 7jnm1T+ashXgNVOb1FgeCtcgEebOW5nOCIQh0W+WhWGjawU6R8SxSn72ByNU2c3E 7oGbdUVZAI5+poq9eeay5nx9jGowTzkreOdy0mZdS5kleDvnBejT1y/loz5CEks2 9d50T8ZhJyi/XOm2XigNj++zVK1lzviEYJZevMxAOkRoZ3cfTsse6ifGLb8gyr9n 3JEwrmk6eUOO8gpPF6NjDdnm9/QUZ/KduzKwqFDYJYtEaxKX1zq8pmNSkC/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/x5NwBuEkIY7r/O3BmV8aUGGJcwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0 MzU4NDkwM0UxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdcFutKlzqj4/5h6tQcAF6r7/UwdkLdQOIF JiwzZib0McVvrvrwqNw79FlEd+Ivu67QZrxZfFjikF8Hrx8JxEyegjYPLrdJovbD M8oqY13NCuxVDE2tGx7FDcgDWCwlw23FNO12UGUc8XP2VsAeGhAm2zxH9/+XfUiy HERzIXEWOx8aana6iQP9zuljUG3TrP1OfHWqfFMuaJJdRlvKDVl6IyjJnBgWnC9W 5Q0Rp1aL0dviqw0xn/hflQc9hWg/NgiHqxTMU5XSSdfyv/kO8UKVPUunWooSGUBT 4tshu/CGzR/FNTg6NCAWQpcs1N+mcvzHtc9fFl9dOJ0g02unGhE= -----END CERTIFICATE-----Generated at Thu Dec 18 15:26:28 2025 by rpki-client