This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: EPdrtRxXXiKT6+wd4HaoJxdTIc9NDOwd3edMliMD4bE= Subject key identifier: F0:35:3A:A9:59:6D:15:40:4C:7C:E9:66:6B:99:7B:EB:1D:CC:E7:13 Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 3F8CA7ED84A4626796B83F445B526202A2DC8051 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: CF Signing time: Fri 05 Dec 2025 13:31:26 +0000 Manifest this update: Fri 05 Dec 2025 13:26:26 +0000 Manifest next update: Mon 08 Dec 2025 15:01:26 +0000 Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) 2: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: 7BtCpoDnus1VGIMYHf+4DZLRLThFRhmmEAsDwcRf9HM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8c:a7:ed:84:a4:62:67:96:b8:3f:44:5b:52:62:02:a2:dc:80:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Dec 5 13:26:26 2025 GMT Not After : Dec 8 15:01:26 2025 GMT Subject: CN=F0353AA9596D15404C7CE9666B997BEB1DCCE713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:44:9c:6e:d5:d3:86:ca:79:41:fb:97:0f:6b: bd:2e:22:31:a6:fc:30:cb:86:18:82:d7:b3:af:71: e3:3e:84:8c:75:b7:43:16:a0:7f:9d:6f:d8:32:18: f9:87:43:1a:16:e9:cc:cb:aa:03:de:c1:c5:81:eb: ca:e0:c8:2e:e8:75:72:16:c3:87:01:6a:da:26:1f: 76:63:a9:69:4c:72:99:70:2f:66:8d:11:85:6a:4c: cb:90:f2:60:ea:3d:42:4c:f4:44:18:df:04:c5:37: 0b:4c:32:1e:af:10:aa:17:83:d3:d6:27:9d:4c:53: 22:39:c0:1c:48:37:8b:c1:f9:81:5d:59:b6:0a:36: ca:fb:c5:3f:63:e1:61:79:9f:03:3a:2d:68:f9:48: ba:4b:c8:eb:00:23:2c:57:63:d3:3a:95:db:14:48: d3:c9:da:26:6b:9f:9b:d3:53:ea:ff:31:93:a6:b4: ad:eb:ea:03:c8:ff:12:17:04:73:8c:a4:c9:2f:5c: 0e:97:1a:53:19:5e:cb:ea:82:aa:4b:d6:66:84:ac: c7:fa:87:81:a7:82:f5:f4:16:2d:9c:ba:cd:b4:05: 72:b5:3b:c7:c0:2a:7a:0f:2c:b0:89:3b:9b:6c:27: 10:c2:bb:bd:8d:3a:30:94:ee:7a:dc:12:13:8f:f6: ca:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:35:3A:A9:59:6D:15:40:4C:7C:E9:66:6B:99:7B:EB:1D:CC:E7:13 X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a0:51:d1:3e:b4:52:45:35:21:b3:15:e4:f9:01:d5:5a:ca: 26:2f:89:7e:04:e5:45:be:b5:d3:3b:32:d8:6f:15:da:1e:fa: 9b:94:99:4e:9a:30:01:e9:2a:7c:7f:55:c4:af:a8:8a:26:26: 41:21:de:cc:d7:e8:47:bf:15:04:0f:b9:07:86:1c:2c:ea:a9: fc:2e:89:3e:02:8f:4f:7b:7d:64:6a:11:dd:75:47:31:d9:10: fb:ce:0f:37:33:b6:7c:b4:f1:bd:83:c9:4e:4a:ef:b3:4e:b2: ed:87:7a:dd:35:a5:32:ca:d2:55:ae:55:7e:dc:e3:2d:7a:75: b9:6d:21:11:52:03:b5:22:8d:a2:b6:65:cf:9d:3f:3e:45:5b: 40:91:5e:89:ce:8b:a0:86:27:be:66:4c:ee:b5:ee:39:ca:15: 6e:5a:d1:e4:62:ef:5f:a8:77:ee:96:a5:01:78:d4:94:2f:45: 4e:c0:ec:ff:91:0e:68:d6:b6:03:ff:45:ec:0b:36:0b:51:78: 47:f2:b4:9f:90:5e:62:ba:49:1c:b1:aa:65:50:9c:a0:be:de: 14:8a:4f:40:30:c3:ef:fe:48:57:cd:92:94:1b:5b:d1:14:c2: 02:70:d4:b1:07:9d:75:74:6f:7a:dc:cc:5d:52:4b:67:a3:56: 34:80:af:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4yn7YSkYmeWuD9EW1JiAqLcgFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTEyMDUxMzI2MjZaFw0yNTEyMDgxNTAxMjZaMDMxMTAvBgNV BAMTKEYwMzUzQUE5NTk2RDE1NDA0QzdDRTk2NjZCOTk3QkVCMURDQ0U3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhRJxu1dOGynlB+5cPa70uIjGm /DDLhhiC17OvceM+hIx1t0MWoH+db9gyGPmHQxoW6czLqgPewcWB68rgyC7odXIW w4cBatomH3ZjqWlMcplwL2aNEYVqTMuQ8mDqPUJM9EQY3wTFNwtMMh6vEKoXg9PW J51MUyI5wBxIN4vB+YFdWbYKNsr7xT9j4WF5nwM6LWj5SLpLyOsAIyxXY9M6ldsU SNPJ2iZrn5vTU+r/MZOmtK3r6gPI/xIXBHOMpMkvXA6XGlMZXsvqgqpL1maErMf6 h4GngvX0Fi2cus20BXK1O8fAKnoPLLCJO5tsJxDCu72NOjCU7nrcEhOP9sqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8DU6qVltFUBMfOlma5l76x3M5xMwHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADugUdE+tFJFNSGzFeT5AdVayiYviX4E5UW+ tdM7MthvFdoe+puUmU6aMAHpKnx/VcSvqIomJkEh3szX6Ee/FQQPuQeGHCzqqfwu iT4Cj097fWRqEd11RzHZEPvODzcztny08b2DyU5K77NOsu2Het01pTLK0lWuVX7c 4y16dbltIRFSA7UijaK2Zc+dPz5FW0CRXonOi6CGJ75mTO617jnKFW5a0eRi71+o d+6WpQF41JQvRU7A7P+RDmjWtgP/RewLNgtReEfytJ+QXmK6SRyxqmVQnKC+3hSK T0Aww+/+SFfNkpQbW9EUwgJw1LEHnXV0b3rczF1SS2ejVjSAr/4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:17:47 2025 by rpki-client