This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: PMOsFPHDzofJ0So+WVHf6EH5S1SRtTrEIMM7jRASeE4= Subject key identifier: A0:B9:C4:0D:43:AF:BA:2A:48:44:22:AD:87:D9:16:1D:14:E6:38:F5 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 1A7579EEAADBAC55AA80432FCED09E939696C7A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 01ED Signing time: Sat 06 Dec 2025 09:30:55 +0000 Manifest this update: Sat 06 Dec 2025 09:25:55 +0000 Manifest next update: Tue 09 Dec 2025 18:54:55 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 2: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 3: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=) 4: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: 08rOsvMI2GDjmdSylVKzsR4ijaEZtoobepg3ZCeS9B0=) 5: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=) 6: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:75:79:ee:aa:db:ac:55:aa:80:43:2f:ce:d0:9e:93:96:96:c7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Dec 6 09:25:55 2025 GMT Not After : Dec 9 18:54:55 2025 GMT Subject: CN=A0B9C40D43AFBA2A484422AD87D9161D14E638F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:be:14:79:91:7a:3f:e6:f9:54:fb:1a:2f:99: 59:2a:5a:8e:01:6a:7d:ac:56:b8:2a:c0:f8:10:17: 65:8e:a4:cc:08:49:5b:86:24:b9:c0:50:fb:2c:b8: e7:89:be:b5:b8:f8:86:f7:05:a4:f5:c2:2e:c0:48: 22:26:34:c2:07:32:e7:50:45:83:0c:0b:8a:b3:17: 3a:bf:10:78:d6:17:25:8f:c0:ee:64:47:cf:65:ee: 09:8c:4a:0a:f9:23:27:a7:bb:a3:20:05:67:0f:b2: 59:5c:73:3d:72:a5:0a:5b:4a:a5:79:34:53:4f:41: 01:9c:bb:a7:f5:cb:4c:c7:45:81:b6:03:82:8f:92: 27:7a:6e:b9:09:25:81:f3:39:ca:cd:1b:05:f3:b2: e1:3a:41:01:57:c3:35:c6:68:d8:dc:d1:d9:1b:b0: 9c:f5:de:df:58:9b:a1:72:95:46:7c:58:6f:74:cf: d3:fd:59:20:b7:cf:63:34:92:69:df:d8:d9:91:e7: b7:33:b0:2a:05:70:ae:16:e3:8b:63:0d:34:48:fb: 36:59:83:bb:7b:c1:54:07:c3:85:20:f5:ae:06:16: 24:7b:6e:52:61:23:77:eb:67:aa:1d:b1:e7:d0:ec: f3:2a:0b:a3:40:10:ea:7b:22:5e:96:93:f9:10:91: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B9:C4:0D:43:AF:BA:2A:48:44:22:AD:87:D9:16:1D:14:E6:38:F5 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1e:59:9d:92:86:bb:96:4f:8d:7c:4d:3f:f0:a1:d5:6f:d6: a4:4d:b2:99:d5:c7:b5:66:6f:6f:a4:a3:a6:43:01:0a:a3:1f: f8:d0:e9:3a:1d:8c:8f:a6:a2:49:aa:99:f5:43:e1:c6:e0:94: d0:2c:bc:f6:40:08:32:7b:09:28:99:a6:20:5d:98:fd:70:84: e3:4e:3a:ba:c2:a2:b3:e3:b6:40:17:f2:6f:9e:7f:e6:1a:50: 3d:c9:5a:75:1c:e1:7b:13:fd:75:8f:25:04:96:77:08:23:ad: 78:76:74:61:89:4c:37:35:6f:1c:0c:f5:8e:71:9e:3c:58:bc: 3a:a5:cd:c0:22:12:8e:7d:e5:ba:3c:e9:fc:ca:15:65:52:ac: c6:bc:54:32:22:8d:41:ad:a4:19:b1:be:0f:56:92:58:f8:19: 28:ec:cf:95:d7:1e:d5:a8:d9:82:6d:46:61:62:7b:7a:7c:27: e2:df:a7:9c:7a:ac:0e:b8:9a:93:de:60:b6:d7:d0:fc:20:d3: b3:a5:aa:b8:03:cc:6e:e5:e7:f8:09:e7:47:d0:5c:e4:5b:2d: 8d:91:96:f6:93:ba:32:5e:2a:94:e1:e1:9f:1f:5b:b0:b5:ab: 0d:60:b0:d1:f7:6d:8f:1b:6f:59:fa:f9:82:87:8d:d4:7c:dd: 4d:bc:5f:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnV57qrbrFWqgEMvztCek5aWx6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTEyMDYwOTI1NTVaFw0yNTEyMDkxODU0NTVaMDMxMTAvBgNV BAMTKEEwQjlDNDBENDNBRkJBMkE0ODQ0MjJBRDg3RDkxNjFEMTRFNjM4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3vhR5kXo/5vlU+xovmVkqWo4B an2sVrgqwPgQF2WOpMwISVuGJLnAUPssuOeJvrW4+Ib3BaT1wi7ASCImNMIHMudQ RYMMC4qzFzq/EHjWFyWPwO5kR89l7gmMSgr5Iyenu6MgBWcPsllccz1ypQpbSqV5 NFNPQQGcu6f1y0zHRYG2A4KPkid6brkJJYHzOcrNGwXzsuE6QQFXwzXGaNjc0dkb sJz13t9Ym6FylUZ8WG90z9P9WSC3z2M0kmnf2NmR57czsCoFcK4W44tjDTRI+zZZ g7t7wVQHw4Ug9a4GFiR7blJhI3frZ6odsefQ7PMqC6NAEOp7Il6Wk/kQkTHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLnEDUOvuipIRCKth9kWHRTmOPUwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAeWZ2ShruWT418TT/wodVv1qRNspnVx7Vm b2+ko6ZDAQqjH/jQ6TodjI+mokmqmfVD4cbglNAsvPZACDJ7CSiZpiBdmP1whONO OrrCorPjtkAX8m+ef+YaUD3JWnUc4XsT/XWPJQSWdwgjrXh2dGGJTDc1bxwM9Y5x njxYvDqlzcAiEo595bo86fzKFWVSrMa8VDIijUGtpBmxvg9Wklj4GSjsz5XXHtWo 2YJtRmFie3p8J+Lfp5x6rA64mpPeYLbX0Pwg07OlqrgDzG7l5/gJ50fQXORbLY2R lvaTujJeKpTh4Z8fW7C1qw1gsNH3bY8bb1n6+YKHjdR83U28X0Q= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:48 2025 by rpki-client