This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft File: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json) Hash identifier: Zu3hYj75jkpMrUi4hsRahIgFohHrOaWj5h4piNrkHnY= Subject key identifier: 3E:4C:58:9E:7C:F5:61:EF:13:22:0A:ED:E3:99:F7:97:7B:75:30:B7 Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 02EB963030C752D15DDBDEFC1E5D848D7C96E1A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft Manifest number: 0388 Signing time: Wed 17 Dec 2025 12:12:03 +0000 Manifest this update: Wed 17 Dec 2025 12:07:03 +0000 Manifest next update: Sat 20 Dec 2025 23:56:03 +0000 Files and hashes: 1: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: nSNHUbZiqo6P3F9SIZ9EN5nCLPpwycyYrfB+M+PV3zw=) 2: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: nikRTC901Bllan4GreFOs5fithEDsAsxTQDrjRSiako=) 3: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: FgWk4lEb+N8VyrkhQkA7AsDgO4pzlnxAR+so0eMn0MM=) 4: 3230322e39312e33312e302f32342d3234203d3e20313532303639.roa (hash: S7MlEVaiyvjAdB83EWitfmwmyo4wzjPWQGuZFYtjp34=) 5: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: tGztSZAQJ35/hLuECvtTcpELlM1IpNOZ8zjyOffPPVE=) 6: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: f+5HOc/sgnjP7t42vcbumcmwD5c7eyke5qlw/e0UPsk=) 7: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: WLK6N6lYU6j7qmPlWLYHBoNW0CsjIHOLp3K/3Jfw78k=) 8: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: 3mPJMmSU87HxOCz1kx2GnX89IU0Xnf2eTb3lccTca1k=) 9: 3230322e39312e33302e302f32342d3234203d3e20313532303639.roa (hash: v4GScNp+JRLvaXyvj8xalK2YN2m8f7pYE4HXkH+LiDo=) 10: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: 1P8bQ+4sp44rshpX+yT9K2dZvNwMOXGIkZkh+b2eOKg=) 11: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=) 12: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: aOzMI9PHIaU1+JYfqj3PgTWOSMZrS1G3wjVf+KJcQuA=) 13: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 8CMqMpoCs6b6HNia3ifuD/WpzvcJj1kVCsO8zPSQ7wc=) 14: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: KiKi/4BGJg0K48DdjCfOcOBa77JCOo4OxuIg38BvrXI=) 15: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6Gn2L5Gc0xaArWW6fS4YuSQAyW4Nw2vh1NIUwUVsqyA=) 16: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: p6w84x+sTkId9KJBAsf0out+ASQwEBO6MAkMqXPQJmY=) 17: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:eb:96:30:30:c7:52:d1:5d:db:de:fc:1e:5d:84:8d:7c:96:e1:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: Dec 17 12:07:03 2025 GMT Not After : Dec 20 23:56:03 2025 GMT Subject: CN=3E4C589E7CF561EF13220AEDE399F7977B7530B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:e2:45:42:1b:c0:2a:73:cf:b6:30:ea:b7: be:7d:5d:73:48:86:78:88:7f:3d:62:56:30:d4:8b: d0:47:50:e8:76:34:42:20:a1:dc:9d:e4:c6:34:d2: 7d:7e:84:32:95:0f:e6:3b:80:5b:e3:34:6c:67:20: 3b:e3:4c:d8:62:cb:a6:da:22:81:73:32:22:df:29: c3:a0:1b:14:eb:88:64:90:2c:ea:c6:dc:dc:29:73: 75:7a:26:00:4e:e5:05:4d:f9:a0:c3:e6:52:83:9c: 99:ea:f8:e1:d5:04:f4:0d:90:5a:c6:40:52:bd:96: 5a:a7:e2:90:23:25:ef:a2:d8:9a:14:3c:c8:bb:05: 64:31:6f:cb:5e:83:3b:0f:de:43:cd:80:27:2d:f0: d5:51:70:c9:11:12:9c:22:c4:50:6c:25:91:1e:43: 0b:5d:85:3b:a6:fe:f5:90:74:a2:bc:a7:d8:e3:d0: d5:09:8d:c7:5a:76:42:65:dc:90:16:f3:01:26:b7: 2c:38:c1:f6:d9:28:69:ab:57:c9:32:5b:80:b8:94: 48:59:55:5d:df:1d:b3:46:62:09:a7:6f:6a:d9:2b: f1:ab:c3:2b:4f:bb:54:b7:0f:62:34:10:da:27:18: dd:ba:24:52:ba:c3:73:92:ad:4e:d8:05:71:3e:31: 76:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4C:58:9E:7C:F5:61:EF:13:22:0A:ED:E3:99:F7:97:7B:75:30:B7 X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e9:3e:62:1f:35:f1:a8:5e:15:7f:57:e8:23:a4:8d:58:4a: 90:c6:52:4b:70:dd:6c:7f:5f:31:70:6d:a4:7a:dc:94:52:7e: 7e:c7:20:6d:5f:d9:e1:e6:04:44:2b:81:63:08:c5:da:f0:9d: 4b:6e:50:b7:50:48:f9:56:f0:8c:3e:4e:ec:3c:4d:a2:b3:bc: 0e:b1:96:62:2c:85:39:f5:21:ca:70:c0:ff:4c:8d:aa:cf:78: 35:b3:3e:77:bd:be:d3:0e:6e:d4:d1:4f:80:c4:6a:cd:90:53: 21:7b:b1:7d:88:f0:9e:ac:7c:b7:cd:6b:ab:f9:76:d2:59:f1: e5:c2:77:2e:f0:7b:d7:4e:35:6d:7a:43:97:8e:63:94:47:58: a3:77:52:f8:ad:41:3c:c6:53:01:94:86:ee:93:a8:b4:c3:2d: aa:58:7b:57:80:43:ad:fb:5c:80:00:e1:17:08:d5:1a:66:b8: 61:18:76:06:01:88:a7:06:d5:95:6e:a8:19:6b:25:12:78:d6: d3:b0:37:39:9f:c1:6a:35:a6:cb:e5:78:a3:f8:a8:1a:62:28: b3:19:f9:fc:8a:1b:a0:21:75:bf:c7:a7:30:6e:60:aa:a5:ed: e1:e7:fd:35:f6:c3:11:0c:7a:77:ef:50:4c:7f:26:ce:f5:6e: 14:6f:8a:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuuWMDDHUtFd2978Hl2EjXyW4aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNTEyMTcxMjA3MDNaFw0yNTEyMjAyMzU2MDNaMDMxMTAvBgNV BAMTKDNFNEM1ODlFN0NGNTYxRUYxMzIyMEFFREUzOTlGNzk3N0I3NTMwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDazOJFQhvAKnPPtjDqt759XXNI hniIfz1iVjDUi9BHUOh2NEIgodyd5MY00n1+hDKVD+Y7gFvjNGxnIDvjTNhiy6ba IoFzMiLfKcOgGxTriGSQLOrG3Nwpc3V6JgBO5QVN+aDD5lKDnJnq+OHVBPQNkFrG QFK9llqn4pAjJe+i2JoUPMi7BWQxb8tegzsP3kPNgCct8NVRcMkREpwixFBsJZEe QwtdhTum/vWQdKK8p9jj0NUJjcdadkJl3JAW8wEmtyw4wfbZKGmrV8kyW4C4lEhZ VV3fHbNGYgmnb2rZK/GrwytPu1S3D2I0ENonGN26JFK6w3OSrU7YBXE+MXZJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPkxYnnz1Ye8TIgrt45n3l3t1MLcwHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlhYjYwYjEtYTI0NC00YTc4LWIz MWItZmVjYTNkMTRlZDlmLzAvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3 OTZERDNDNjcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7pPmIfNfGoXhV/V+gjpI1YSpDGUktw3Wx/ XzFwbaR63JRSfn7HIG1f2eHmBEQrgWMIxdrwnUtuULdQSPlW8Iw+Tuw8TaKzvA6x lmIshTn1IcpwwP9MjarPeDWzPne9vtMObtTRT4DEas2QUyF7sX2I8J6sfLfNa6v5 dtJZ8eXCdy7we9dONW16Q5eOY5RHWKN3UvitQTzGUwGUhu6TqLTDLapYe1eAQ637 XIAA4RcI1RpmuGEYdgYBiKcG1ZVuqBlrJRJ41tOwNzmfwWo1psvleKP4qBpiKLMZ +fyKG6Ahdb/HpzBuYKql7eHn/TX2wxEMenfvUEx/Js71bhRvihw= -----END CERTIFICATE-----Generated at Wed Dec 17 13:48:43 2025 by rpki-client