This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft File: F39BE26D48730B565C23C6A842B313B08B39B1C6.mft (raw, json) Hash identifier: jIrRk9ZuQP013UoLGKxOmP47nZAIonPabxpS0LlIT94= Subject key identifier: 1A:82:18:DA:2E:19:F0:AB:30:69:15:B0:D4:77:01:EF:25:CC:52:9A Authority key identifier: F3:9B:E2:6D:48:73:0B:56:5C:23:C6:A8:42:B3:13:B0:8B:39:B1:C6 Certificate issuer: /CN=F39BE26D48730B565C23C6A842B313B08B39B1C6 Certificate serial: 02EC3698B82CDF56C23594EDE3A71D1DF1AD970F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft Manifest number: 033D Signing time: Sat 06 Dec 2025 19:10:39 +0000 Manifest this update: Sat 06 Dec 2025 19:05:39 +0000 Manifest next update: Wed 10 Dec 2025 05:53:39 +0000 Files and hashes: 1: 3130332e3136322e3234302e302f32332d3234203d3e20313431363731.roa (hash: NsTk3LwG0u5kc3QUM4C41dpciSHuC8BHPLSvS5qOqNA=) 2: F39BE26D48730B565C23C6A842B313B08B39B1C6.crl (hash: GnTBxdehjcoElSg83Z2zGiOrT3xnr3QB8V/reyVpyMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.crl rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ec:36:98:b8:2c:df:56:c2:35:94:ed:e3:a7:1d:1d:f1:ad:97:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39BE26D48730B565C23C6A842B313B08B39B1C6 Validity Not Before: Dec 6 19:05:39 2025 GMT Not After : Dec 10 05:53:39 2025 GMT Subject: CN=1A8218DA2E19F0AB306915B0D47701EF25CC529A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:69:6e:38:8b:28:c2:04:c9:44:e8:cc:9e: cf:c8:95:a9:8f:07:e7:61:97:a5:cc:23:59:29:8c: 6b:0d:ba:de:83:6d:e6:67:0c:fe:61:75:a6:ee:5b: 50:a5:52:69:90:b3:93:39:7b:df:ab:45:54:28:ef: dc:16:ee:03:ac:23:d4:25:b5:d0:99:c5:5c:43:ee: 43:2e:e3:af:5e:dd:5b:7c:94:67:19:c6:47:6c:9c: 95:ba:c9:b8:09:e3:3d:41:18:38:2a:16:2c:22:5c: 4e:43:22:5a:d3:f0:a4:84:02:b6:60:c2:74:84:90: f3:10:88:4c:49:27:f3:6e:cf:3d:81:3e:c7:ea:b1: 73:fa:88:dd:ab:56:35:7e:be:34:0c:3b:80:53:55: ef:fb:f3:10:48:83:30:9e:72:17:79:f1:ba:29:2c: 26:ef:29:60:c4:50:d7:e9:d4:23:f2:15:78:ce:8d: 42:c0:e3:3e:e8:c8:9b:87:c2:3e:c0:c4:68:97:ce: 7d:a8:67:08:78:a8:be:1e:79:a3:36:25:ef:82:f5: a9:10:2e:0a:66:54:27:84:54:30:9b:36:7e:ea:13: 0d:32:04:ef:f9:8d:86:6a:24:ed:e2:05:c0:40:ea: ba:1e:07:aa:aa:67:fa:48:a6:0a:e6:00:d9:8d:ba: 0d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:82:18:DA:2E:19:F0:AB:30:69:15:B0:D4:77:01:EF:25:CC:52:9A X509v3 Authority Key Identifier: keyid:F3:9B:E2:6D:48:73:0B:56:5C:23:C6:A8:42:B3:13:B0:8B:39:B1:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39BE26D48730B565C23C6A842B313B08B39B1C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23024d24-9faa-4ab0-8fa4-0ce608c6d0a3/0/F39BE26D48730B565C23C6A842B313B08B39B1C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:52:59:16:ee:d2:a8:65:7e:30:61:ef:61:4c:ff:34:9c:d4: ce:95:14:2c:45:30:8d:eb:02:0d:02:01:f6:e6:71:15:50:80: 48:ad:8e:70:6d:2f:c0:e0:58:ce:45:e2:4c:28:6f:2c:8e:8a: 77:8f:ff:58:c3:72:5b:8d:37:48:9d:4c:a0:83:f1:26:b0:c9: 68:bf:61:75:1c:91:27:56:ce:5d:a8:b0:22:39:c5:73:a7:67: 3b:ef:ba:f0:c4:f1:02:50:1c:58:60:99:70:86:d4:9e:60:80: d0:dc:ef:75:36:2d:59:14:12:7f:e9:59:5c:ac:8e:df:f3:71: 2d:fc:11:75:5c:cc:8e:f9:8d:d2:8b:b5:41:c1:80:e6:5d:4a: 1d:03:04:6f:aa:4e:0b:30:b0:37:e0:01:2d:b1:f8:5c:41:44: 35:ac:80:81:ed:84:b5:b4:42:e6:a8:76:f5:9e:3b:83:ba:30: 58:0d:bf:03:3d:17:52:10:fd:9f:08:8b:4b:1e:77:93:d3:36: 52:d4:56:58:e0:cd:c6:50:5d:ca:46:23:24:2a:ba:16:fd:bd: 68:e4:d6:ff:78:76:86:76:df:3b:14:15:1c:a8:40:3a:99:2f: 1a:da:fb:b3:24:f7:ab:b5:a4:1f:ec:8e:8b:18:d5:3e:f5:96: 53:86:04:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuw2mLgs31bCNZTt46cdHfGtlw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEzQjA4 QjM5QjFDNjAeFw0yNTEyMDYxOTA1MzlaFw0yNTEyMTAwNTUzMzlaMDMxMTAvBgNV BAMTKDFBODIxOERBMkUxOUYwQUIzMDY5MTVCMEQ0NzcwMUVGMjVDQzUyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUs2luOIsowgTJROjMns/IlamP B+dhl6XMI1kpjGsNut6DbeZnDP5hdabuW1ClUmmQs5M5e9+rRVQo79wW7gOsI9Ql tdCZxVxD7kMu469e3Vt8lGcZxkdsnJW6ybgJ4z1BGDgqFiwiXE5DIlrT8KSEArZg wnSEkPMQiExJJ/Nuzz2BPsfqsXP6iN2rVjV+vjQMO4BTVe/78xBIgzCechd58bop LCbvKWDEUNfp1CPyFXjOjULA4z7oyJuHwj7AxGiXzn2oZwh4qL4eeaM2Je+C9akQ LgpmVCeEVDCbNn7qEw0yBO/5jYZqJO3iBcBA6roeB6qqZ/pIpgrmANmNug0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGoIY2i4Z8KswaRWw1HcB7yXMUpowHwYDVR0j BBgwFoAU85vibUhzC1ZcI8aoQrMTsIs5scYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzAyNGQyNC05ZmFhLTRhYjAtOGZhNC0wY2U2MDhjNmQwYTMvMC9GMzlCRTI2RDQ4 NzMwQjU2NUMyM0M2QTg0MkIzMTNCMDhCMzlCMUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEzQjA4QjM5 QjFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMwMjRkMjQtOWZhYS00YWIwLThm YTQtMGNlNjA4YzZkMGEzLzAvRjM5QkUyNkQ0ODczMEI1NjVDMjNDNkE4NDJCMzEz QjA4QjM5QjFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpSWRbu0qhlfjBh72FM/zSc1M6VFCxFMI3r Ag0CAfbmcRVQgEitjnBtL8DgWM5F4kwobyyOineP/1jDcluNN0idTKCD8SawyWi/ YXUckSdWzl2osCI5xXOnZzvvuvDE8QJQHFhgmXCG1J5ggNDc73U2LVkUEn/pWVys jt/zcS38EXVczI75jdKLtUHBgOZdSh0DBG+qTgswsDfgAS2x+FxBRDWsgIHthLW0 QuaodvWeO4O6MFgNvwM9F1IQ/Z8Ii0sed5PTNlLUVljgzcZQXcpGIyQquhb9vWjk 1v94doZ23zsUFRyoQDqZLxra+7Mk96u1pB/sjosY1T71llOGBNU= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:48 2025 by rpki-client