This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: LiF73evRli1zXJ8BNHbv8ORf+P4GxgL5GtTXSzWQL60= Subject key identifier: 23:47:E2:FA:96:E7:5E:BA:50:CA:12:AD:F8:31:76:9D:36:50:88:F7 Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 0660546656EBA19B4769B2498FA51A9BA3BFF994 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 053E Signing time: Sat 06 Dec 2025 06:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:56:07 +0000 Manifest next update: Tue 09 Dec 2025 15:38:07 +0000 Files and hashes: 1: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: 1h7fo52sVm4cJACJ1QTb5QR43dKEDAqoDnfictr7I+U=) 2: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: 7h/3W2bGdLIjMdUMgBu8FR4XNT4NQYcV5o3N2X7pjuU=) 3: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: tHhLDdHHbsCkG+UHT3p88TUY2+W5e4f+3agioxt0A6g=) 4: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: ArGX3GK83LFApxV4uLSs4kfPXNu12xplyTp4FBzO9Nw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:60:54:66:56:eb:a1:9b:47:69:b2:49:8f:a5:1a:9b:a3:bf:f9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: Dec 6 05:56:07 2025 GMT Not After : Dec 9 15:38:07 2025 GMT Subject: CN=2347E2FA96E75EBA50CA12ADF831769D365088F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:0f:f1:fb:c0:49:5c:7f:b1:6e:f9:25:92: 8a:fd:b3:91:8f:35:93:4b:f0:35:a3:19:a5:1e:a6: 81:d6:6c:55:99:06:4b:f4:d6:7e:74:53:41:b9:f7: e4:c3:a5:0d:91:e7:5f:23:35:69:64:dd:ce:dd:3a: ad:b2:fe:c3:cf:db:c0:ba:66:d4:9b:34:7b:72:fc: 44:23:32:c4:a2:98:2a:d9:80:1b:85:11:bd:61:9a: 9e:e8:4c:9c:d0:8c:92:b4:79:7a:aa:30:0f:3e:0b: 8d:d3:07:ab:45:d2:67:06:e7:76:32:0f:8f:18:b8: 9b:72:85:a4:8d:06:78:ec:bc:be:4d:7f:94:20:ee: 2b:66:4d:c2:a9:1b:f1:69:41:48:0a:8e:39:0a:05: 6d:d2:f5:97:64:58:7a:20:58:91:6b:c2:a5:3b:a1: bb:8c:27:f4:2c:01:8d:dc:20:2f:34:22:a5:8c:cf: 0b:36:7e:71:25:4b:49:52:80:5b:80:5f:78:65:76: c4:58:14:58:67:00:29:bf:7e:08:5c:1b:1b:1c:ed: 29:3d:07:70:e9:28:2c:88:60:18:cd:2f:5d:4b:7e: e0:4a:96:79:9b:f2:1d:2c:20:db:a7:20:bc:97:c4: 67:73:01:a4:0d:13:67:cb:f3:6c:09:59:cd:02:e9: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:47:E2:FA:96:E7:5E:BA:50:CA:12:AD:F8:31:76:9D:36:50:88:F7 X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:33:16:1c:a0:e2:fc:72:ba:db:6c:ae:91:85:27:3e:f2:0d: 54:64:51:92:7a:8e:51:71:75:bc:9d:34:7c:3d:6d:6d:ca:46: ee:e0:08:a1:8e:10:89:69:08:4f:2e:56:8d:53:a2:ec:0c:f4: bf:14:5a:74:6a:da:9c:04:bb:9d:6f:38:2a:c9:11:21:4d:71: ec:2a:e9:e3:ea:d5:70:54:2a:d8:25:95:75:5d:2d:1b:35:38: a7:a9:2f:9c:0c:a9:b9:f0:dd:32:35:7d:2d:c7:54:31:20:9a: ee:74:80:e0:41:3b:c2:e2:28:49:6d:55:e9:f2:12:7b:94:89: 47:28:50:25:4f:30:d0:6a:48:8e:76:42:ce:86:14:98:a7:29: c2:82:e2:95:38:09:ec:11:b5:58:92:98:02:6f:56:f7:37:0e: 96:08:bd:ed:a9:7a:2f:d9:7c:c8:a1:93:28:eb:e3:bb:0e:e7: d2:9d:13:c7:58:4d:52:43:b1:ec:15:2f:de:af:94:ae:eb:30: 99:96:c5:93:5f:f5:82:ac:d2:55:95:aa:6d:bf:24:13:04:75: 3c:dc:e8:f7:9d:14:78:b6:92:d2:5d:f4:fe:79:cb:cd:7e:5a: b9:e9:00:dd:88:c2:88:39:12:33:7e:5f:ce:02:e4:73:95:b2: e8:57:35:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmBUZlbroZtHabJJj6Uam6O/+ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNTEyMDYwNTU2MDdaFw0yNTEyMDkxNTM4MDdaMDMxMTAvBgNV BAMTKDIzNDdFMkZBOTZFNzVFQkE1MENBMTJBREY4MzE3NjlEMzY1MDg4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tQ/x+8BJXH+xbvklkor9s5GP NZNL8DWjGaUepoHWbFWZBkv01n50U0G59+TDpQ2R518jNWlk3c7dOq2y/sPP28C6 ZtSbNHty/EQjMsSimCrZgBuFEb1hmp7oTJzQjJK0eXqqMA8+C43TB6tF0mcG53Yy D48YuJtyhaSNBnjsvL5Nf5Qg7itmTcKpG/FpQUgKjjkKBW3S9ZdkWHogWJFrwqU7 obuMJ/QsAY3cIC80IqWMzws2fnElS0lSgFuAX3hldsRYFFhnACm/fghcGxsc7Sk9 B3DpKCyIYBjNL11LfuBKlnmb8h0sINunILyXxGdzAaQNE2fL82wJWc0C6VL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0fi+pbnXrpQyhKt+DF2nTZQiPcwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIozFhyg4vxyuttsrpGFJz7yDVRkUZJ6jlFx dbydNHw9bW3KRu7gCKGOEIlpCE8uVo1TouwM9L8UWnRq2pwEu51vOCrJESFNcewq 6ePq1XBUKtgllXVdLRs1OKepL5wMqbnw3TI1fS3HVDEgmu50gOBBO8LiKEltVeny EnuUiUcoUCVPMNBqSI52Qs6GFJinKcKC4pU4CewRtViSmAJvVvc3DpYIve2pei/Z fMihkyjr47sO59KdE8dYTVJDsewVL96vlK7rMJmWxZNf9YKs0lWVqm2/JBMEdTzc 6PedFHi2ktJd9P55y81+WrnpAN2Iwog5EjN+X84C5HOVsuhXNZY= -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:52 2025 by rpki-client