This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: jpZHm1WJCr+d039aZvdJzi+FIkYj0QWm0zsemgC0Fvo= Subject key identifier: CD:02:D4:2B:FD:E6:81:9F:32:7D:53:7D:78:04:69:21:54:31:80:E1 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 2AA4C183284233BB1FA525FA834AABF72B683D4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 0534 Signing time: Thu 04 Dec 2025 19:01:09 +0000 Manifest this update: Thu 04 Dec 2025 18:56:09 +0000 Manifest next update: Mon 08 Dec 2025 04:28:09 +0000 Files and hashes: 1: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: CamY8eX6kfj5MZjd7GTKNGu0eML2pclOVMqWYRohOEs=) 2: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: HP2CIuQ7HdSouFMxhc4gbLPN64fDpck7CCz5j9Fedrs=) 3: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: OD6ds+KTm//KkPIe0CnHbGgyxy24D56HEq7afLGbIc8=) 4: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: +Ohb8AmL80BPgaiVvFCd/BXY6tohGQvqr2SFVpjVHPk=) 5: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: FyAvBZY6W2L1HwVaWtdBn1JjIwyZj/UZUwMR3y/jc5Q=) 6: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: hwFK4Ms6Uk7Qnk7qByPvAUR6emhjfGt/XtodB4HBVJo=) 7: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: Um7YNYBxTVjbF3M76ZtkS+WRPG6nd3aZ+YWjDA+f9zA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a4:c1:83:28:42:33:bb:1f:a5:25:fa:83:4a:ab:f7:2b:68:3d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Dec 4 18:56:09 2025 GMT Not After : Dec 8 04:28:09 2025 GMT Subject: CN=CD02D42BFDE6819F327D537D78046921543180E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:f5:20:7c:27:c3:a9:37:5e:bf:0f:ee:73: ed:d5:75:09:76:14:16:4d:a1:66:57:d5:ec:4f:a0: cd:21:e6:26:ab:7b:8f:31:ac:ba:45:d2:7a:ed:23: ca:91:d9:f7:61:6a:c0:11:c4:b2:03:8a:e8:4b:fa: 63:b7:a3:a8:4b:86:2d:2c:b6:29:8f:f2:ea:13:cd: ac:a3:03:fc:8e:e4:a2:2e:c7:de:47:7b:09:f8:a6: 9a:ca:e8:d4:30:d4:d8:c8:ef:94:54:6d:4c:f0:07: 18:59:1a:13:09:a1:c5:35:36:19:46:64:1e:f1:0d: aa:cf:08:93:84:ce:60:9e:3a:4f:19:6c:21:a1:53: 32:54:d4:e9:79:33:1a:a7:dc:1e:cb:1f:b6:5e:d0: 1e:ac:cc:18:99:4f:2f:17:f4:84:8c:b1:6c:af:1b: 1a:b3:fd:e8:ce:05:c3:2e:4f:b5:ec:d8:7f:8d:3e: 8a:42:66:e6:07:d6:57:c1:0f:31:ac:25:c2:14:1c: b2:8b:e5:ed:1b:24:2d:c4:c1:ad:eb:f3:6c:0c:ab: 87:1f:3b:a1:6a:3b:1a:15:26:fc:63:76:1b:2a:1c: 87:68:2b:0b:d5:d7:8e:41:af:4b:a3:65:dd:bf:d9: f2:78:78:3c:b8:c8:4d:ed:cc:77:aa:05:46:42:6b: 4e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:02:D4:2B:FD:E6:81:9F:32:7D:53:7D:78:04:69:21:54:31:80:E1 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:45:7d:0b:7c:aa:f4:7a:d3:52:ed:d5:cb:32:b1:ea:6f:80: 5d:f0:b6:2c:f9:d3:85:30:9e:28:30:f8:75:40:e2:02:53:9b: 5c:04:2e:6a:d2:b0:9c:ce:f8:b9:ea:3b:aa:15:74:97:b3:fa: 6b:0a:bd:7c:ff:4b:fc:cd:1c:c2:78:87:f6:ba:36:46:45:51: a6:29:21:d2:81:70:f9:25:3e:23:08:dc:65:52:d7:03:e5:d2: df:dc:8d:54:29:94:2a:92:45:be:c3:56:79:b6:14:a2:7e:1d: b5:a9:52:bc:67:3d:36:dc:9d:da:45:7b:9d:e5:e4:fc:95:88: 18:bd:86:18:eb:aa:ce:b0:ba:70:a5:f1:7f:71:e4:05:2d:a8: ed:30:2e:42:74:ea:da:25:26:fb:9f:18:b4:c4:fc:e1:02:9d: 02:01:e3:06:37:56:95:52:84:7c:71:71:88:5a:ca:69:9d:64: 38:f4:12:c6:5f:e9:cf:ab:39:d8:d7:81:f1:7b:36:bb:95:9d: d4:1b:18:20:90:0c:47:e2:0f:5f:65:e6:b0:7c:6a:5e:d9:a2: 2e:6f:de:3d:b5:72:23:d4:af:7d:8a:10:7c:a7:a3:2d:73:ce: 2a:82:7a:8f:e6:f5:2a:58:d9:dc:a2:1a:83:66:5d:b8:1d:3b: 74:2c:75:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKqTBgyhCM7sfpSX6g0qr9ytoPUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTEyMDQxODU2MDlaFw0yNTEyMDgwNDI4MDlaMDMxMTAvBgNV BAMTKENEMDJENDJCRkRFNjgxOUYzMjdENTM3RDc4MDQ2OTIxNTQzMTgwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+PUgfCfDqTdevw/uc+3VdQl2 FBZNoWZX1exPoM0h5iare48xrLpF0nrtI8qR2fdhasARxLIDiuhL+mO3o6hLhi0s timP8uoTzayjA/yO5KIux95Hewn4pprK6NQw1NjI75RUbUzwBxhZGhMJocU1NhlG ZB7xDarPCJOEzmCeOk8ZbCGhUzJU1Ol5Mxqn3B7LH7Ze0B6szBiZTy8X9ISMsWyv Gxqz/ejOBcMuT7Xs2H+NPopCZuYH1lfBDzGsJcIUHLKL5e0bJC3Ewa3r82wMq4cf O6FqOxoVJvxjdhsqHIdoKwvV145Br0ujZd2/2fJ4eDy4yE3tzHeqBUZCa07NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQLUK/3mgZ8yfVN9eARpIVQxgOEwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9FfQt8qvR601Lt1csysepvgF3wtiz504Uw nigw+HVA4gJTm1wELmrSsJzO+LnqO6oVdJez+msKvXz/S/zNHMJ4h/a6NkZFUaYp IdKBcPklPiMI3GVS1wPl0t/cjVQplCqSRb7DVnm2FKJ+HbWpUrxnPTbcndpFe53l 5PyViBi9hhjrqs6wunCl8X9x5AUtqO0wLkJ06tolJvufGLTE/OECnQIB4wY3VpVS hHxxcYhaymmdZDj0EsZf6c+rOdjXgfF7NruVndQbGCCQDEfiD19l5rB8al7Zoi5v 3j21ciPUr32KEHynoy1zziqCeo/m9SpY2dyiGoNmXbgdO3QsdTc= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:43 2025 by rpki-client