This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft File: 1FA59BCEE428AFC03264229113A5539024697A14.mft (raw, json) Hash identifier: zMoSQuHjLlJqRp4jLu+vyERQ0lKVfiFB4sjlf0I4VFc= Subject key identifier: 3A:53:03:7B:FF:AF:87:94:4A:CF:69:8F:1F:7E:8A:85:0C:FB:9F:45 Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 Certificate issuer: /CN=1FA59BCEE428AFC03264229113A5539024697A14 Certificate serial: 39D4970EDD2F8728BCC9CEDA82C7213A7E2679F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft Manifest number: 052D Signing time: Fri 05 Dec 2025 23:00:06 +0000 Manifest this update: Fri 05 Dec 2025 22:55:06 +0000 Manifest next update: Tue 09 Dec 2025 03:46:06 +0000 Files and hashes: 1: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: pJwvm882Mg2XhUmsTwO4kQV+vaRmkryt9jvtdZPqIks=) 2: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: nRE7xahMjMVa2flPv3xh8lSxkHzcuvl44NR7lfyUvFs=) 3: 1FA59BCEE428AFC03264229113A5539024697A14.crl (hash: XO/OQ7bItwiFZXSfdtTFCOnHm8URaszH7VP/UsiKHuY=) 4: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: GvgldOQCXz+vUN0l5dc2pbWfnQQKd7ihZyYtPpd8mRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d4:97:0e:dd:2f:87:28:bc:c9:ce:da:82:c7:21:3a:7e:26:79:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14 Validity Not Before: Dec 5 22:55:06 2025 GMT Not After : Dec 9 03:46:06 2025 GMT Subject: CN=3A53037BFFAF87944ACF698F1F7E8A850CFB9F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:49:4e:d2:9e:e5:90:6e:e4:c4:b6:0e:c0: 42:af:46:62:b4:e2:08:0e:3b:11:3b:c3:2e:1c:a4: 06:ea:b2:f6:cd:85:e4:60:79:c1:d2:ed:f2:57:f9: 17:53:73:31:91:a0:02:21:a8:32:0d:d0:40:fd:4e: 0d:91:fc:16:7c:25:60:5e:b3:7d:74:37:fd:43:ab: 74:95:26:cf:05:1f:0c:87:db:b3:28:93:3d:04:17: cb:b4:4e:ed:fc:fe:00:35:c5:c3:0f:f1:2d:4b:f7: 6d:37:24:5f:44:12:3c:d4:ae:5e:c8:c8:32:a8:cb: 33:14:d7:0c:eb:21:a0:65:30:f6:4e:a9:d4:71:b1: 37:b5:60:fa:cc:c2:ba:c3:c7:6b:60:42:35:78:b0: 0d:d2:e6:f8:c6:32:a9:c3:ab:fa:3d:39:44:13:99: 58:5e:a2:12:44:47:18:ae:c6:36:43:cf:7b:3f:1e: 20:25:87:64:24:a6:9e:5e:18:59:1c:f7:24:61:dc: 56:e0:b5:42:01:ef:11:c9:c9:bf:f7:01:05:a8:47: 1b:32:d2:b1:01:d3:56:ed:3a:10:c0:9c:03:e5:5b: 2e:24:65:aa:08:aa:5a:49:b5:5e:d3:fe:85:5c:b6: 54:71:86:b0:b9:47:89:93:4e:f7:b0:9f:da:b7:71: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:53:03:7B:FF:AF:87:94:4A:CF:69:8F:1F:7E:8A:85:0C:FB:9F:45 X509v3 Authority Key Identifier: keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f1:94:f6:42:65:6f:a7:be:5b:33:c8:ce:9f:76:9b:1e:17: 00:17:99:f6:28:b8:78:3e:38:88:a6:a1:21:15:72:af:26:31: de:1d:7a:12:01:1e:34:de:76:4f:45:9c:12:98:54:2a:1b:aa: 5f:be:bc:84:3e:93:25:29:fd:a7:b5:d4:9d:1d:b1:d5:e9:d0: 22:43:c0:f3:7f:1f:7a:70:9a:cb:c7:aa:d7:16:af:1e:a0:78: cc:6c:e9:8e:e7:89:c5:40:d2:b0:78:08:c7:ee:a7:2c:24:dc: 8b:dc:e6:06:c3:58:13:0e:17:6d:84:23:26:97:de:20:93:ee: 10:27:a6:6c:6c:cb:ae:87:cf:8e:ae:3b:4c:e0:e9:5b:7b:f7: 6d:88:ee:1b:49:8e:99:5a:da:ac:30:9b:89:02:e8:88:9f:ca: 01:8e:79:88:ec:56:d0:e2:33:18:2c:a8:77:1d:9c:3b:04:64: 29:24:39:c7:25:44:87:3d:a2:9e:06:6e:d6:e7:d5:ea:9f:81: b8:3c:dc:39:49:fa:ca:5d:61:bc:f2:0f:54:b3:8a:5e:fa:02: cb:34:d5:ad:5f:04:f3:17:41:a0:c9:bd:5c:97:1b:39:4a:89: f2:1d:d9:01:f7:f0:17:a3:3c:8f:0c:cb:8a:50:e7:23:0d:a7: c8:8a:0b:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOdSXDt0vhyi8yc7agschOn4mefAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAy NDY5N0ExNDAeFw0yNTEyMDUyMjU1MDZaFw0yNTEyMDkwMzQ2MDZaMDMxMTAvBgNV BAMTKDNBNTMwMzdCRkZBRjg3OTQ0QUNGNjk4RjFGN0U4QTg1MENGQjlGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvUlO0p7lkG7kxLYOwEKvRmK0 4ggOOxE7wy4cpAbqsvbNheRgecHS7fJX+RdTczGRoAIhqDIN0ED9Tg2R/BZ8JWBe s310N/1Dq3SVJs8FHwyH27Mokz0EF8u0Tu38/gA1xcMP8S1L9203JF9EEjzUrl7I yDKoyzMU1wzrIaBlMPZOqdRxsTe1YPrMwrrDx2tgQjV4sA3S5vjGMqnDq/o9OUQT mVheohJERxiuxjZDz3s/HiAlh2Qkpp5eGFkc9yRh3FbgtUIB7xHJyb/3AQWoRxsy 0rEB01btOhDAnAPlWy4kZaoIqlpJtV7T/oVctlRxhrC5R4mTTvewn9q3cZAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlMDe/+vh5RKz2mPH36KhQz7n0UwHwYDVR0j BBgwFoAUH6WbzuQor8AyZCKRE6VTkCRpehQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQ0MjA0My0yNDRlLTRiODctYjAwYy1lNTdmNDg3MWQwZWYvMC8xRkE1OUJDRUU0 MjhBRkMwMzI2NDIyOTExM0E1NTM5MDI0Njk3QTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAyNDY5 N0ExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUz OTAyNDY5N0ExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPxlPZCZW+nvlszyM6fdpseFwAXmfYouHg+ OIimoSEVcq8mMd4dehIBHjTedk9FnBKYVCobql++vIQ+kyUp/ae11J0dsdXp0CJD wPN/H3pwmsvHqtcWrx6geMxs6Y7nicVA0rB4CMfupywk3Ivc5gbDWBMOF22EIyaX 3iCT7hAnpmxsy66Hz46uO0zg6Vt7922I7htJjpla2qwwm4kC6IifygGOeYjsVtDi MxgsqHcdnDsEZCkkOcclRIc9op4Gbtbn1eqfgbg83DlJ+spdYbzyD1Szil76Ass0 1a1fBPMXQaDJvVyXGzlKifId2QH38BejPI8My4pQ5yMNp8iKC4w= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:04 2025 by rpki-client