This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft File: F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft (raw, json) Hash identifier: 49Osd63EFgr3Jc694f4n6AXclxNg81mhVglT//DFzi4= Subject key identifier: 62:EB:73:CA:AD:70:AA:E4:2F:40:35:23:27:1B:0E:E9:AD:4E:70:2E Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Certificate serial: 3ABB8502C21E67B9D9F8CDFDC6B9DEE86AA4E5F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft Manifest number: 029C Signing time: Thu 04 Dec 2025 19:20:02 +0000 Manifest this update: Thu 04 Dec 2025 19:15:02 +0000 Manifest next update: Mon 08 Dec 2025 05:46:02 +0000 Files and hashes: 1: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: LrqOLogV2pqJm1JD+jgGDFnoqudanN5BU7ote6ngSrk=) 2: F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl (hash: 84Bv0zbhCWmt46vM5y4s1wqoYUu6wrGiwONSVOht9uo=) 3: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: XeC/h72IOu7dA+NCUWie+KTWNqBhpQyXbuk3uFJs7XQ=) 4: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: R48/rgbNCjjp4lN8u0WLGy1+WSaMSCFGbeTToOjbzmw=) 5: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: oOGj5tlcgCuOuQ6ORsdrfX31aFz0B3FN8fvqd8j5T/A=) 6: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: yBAmYPcX6Hw9g9sbt5o4PVcLnMdm+J2PfCuUjXQ0T5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:bb:85:02:c2:1e:67:b9:d9:f8:cd:fd:c6:b9:de:e8:6a:a4:e5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Validity Not Before: Dec 4 19:15:02 2025 GMT Not After : Dec 8 05:46:02 2025 GMT Subject: CN=62EB73CAAD70AAE42F403523271B0EE9AD4E702E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:9a:0a:4c:89:0b:28:b4:6c:dd:bc:ea:88: 28:73:a8:69:76:60:bd:5a:df:fa:83:90:90:2d:9d: de:79:84:55:ae:b2:7e:79:c3:1c:49:a5:29:f9:89: 07:e4:32:54:fa:48:98:2f:62:ff:6c:51:06:f0:f1: 51:6d:cb:c9:63:15:d1:fa:a6:00:2f:2b:96:37:0e: 36:13:cd:e1:0f:71:03:36:e3:fe:4c:aa:c0:fe:47: cd:a3:eb:cb:ae:14:91:6a:c5:eb:a9:e2:3a:e5:b5: 33:5d:9c:b6:1c:1f:4a:3b:8e:61:a5:e1:1e:5b:68: 60:10:9a:1b:b5:ac:d1:41:0f:a6:40:fc:cb:85:22: 48:04:87:da:3f:aa:03:a6:ae:49:ec:f6:8f:e7:88: c1:a9:a3:2d:db:26:cf:e3:44:df:76:ac:67:d8:92: 29:bb:34:df:a5:e8:d9:27:f1:74:0f:a7:4a:87:19: 28:20:52:44:7e:e2:29:7d:e7:3f:3c:2e:ec:2f:2f: 4b:ad:ca:5c:11:b7:87:d2:61:71:6a:53:c8:3c:57: ef:f4:f0:1f:4b:04:8b:95:f9:5c:fd:28:65:c4:e6: b0:34:20:68:f4:a3:0c:e8:e2:08:64:04:ff:42:8a: 16:05:da:a3:3d:fb:ae:ce:a3:7f:68:1f:52:59:5c: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EB:73:CA:AD:70:AA:E4:2F:40:35:23:27:1B:0E:E9:AD:4E:70:2E X509v3 Authority Key Identifier: keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:36:13:f0:24:a0:0c:e6:81:67:32:67:49:37:11:5f:35:32: 5b:58:b0:6e:e8:f4:5e:32:42:fe:1a:c1:68:90:18:11:83:27: de:fe:9c:ec:ea:99:cb:34:90:92:03:4c:6e:38:c6:c7:82:05: 3d:d2:1e:5a:27:51:a6:30:e6:cd:fd:fc:f1:a6:25:5b:0f:97: 3a:85:40:fa:7b:a2:51:26:5a:1c:61:de:1b:f3:1b:35:5b:19: 52:88:42:12:74:52:5f:15:0a:89:57:d3:d6:44:3e:c5:99:4f: 58:20:45:83:77:77:84:51:12:d5:b8:ec:d7:ac:d9:64:a1:54: e7:ee:8c:c3:3d:61:94:0d:29:18:73:7f:15:85:14:b5:a7:39: e9:0c:70:95:eb:92:11:e2:5d:ea:db:f7:8b:bd:bb:5c:bc:25: 34:43:30:a0:f8:17:ea:24:cf:95:8e:d6:e0:14:00:82:6e:d4: 06:59:32:95:bc:0c:dd:9d:77:dc:b4:3e:9c:1e:ad:c4:2a:19: eb:0b:40:4e:b0:d0:52:bc:20:1c:9d:4d:2b:aa:4c:5d:2f:bf: cf:ab:a9:a3:44:0b:f8:12:74:71:b6:6c:17:c8:0f:51:33:11: ea:4d:05:45:b8:51:2e:c5:ca:76:26:38:48:fa:26:d0:91:ba: e2:24:5e:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOruFAsIeZ7nZ+M39xrne6Gqk5fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkx QkJCOTJGNzAeFw0yNTEyMDQxOTE1MDJaFw0yNTEyMDgwNTQ2MDJaMDMxMTAvBgNV BAMTKDYyRUI3M0NBQUQ3MEFBRTQyRjQwMzUyMzI3MUIwRUU5QUQ0RTcwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLn5oKTIkLKLRs3bzqiChzqGl2 YL1a3/qDkJAtnd55hFWusn55wxxJpSn5iQfkMlT6SJgvYv9sUQbw8VFty8ljFdH6 pgAvK5Y3DjYTzeEPcQM24/5MqsD+R82j68uuFJFqxeup4jrltTNdnLYcH0o7jmGl 4R5baGAQmhu1rNFBD6ZA/MuFIkgEh9o/qgOmrkns9o/niMGpoy3bJs/jRN92rGfY kim7NN+l6Nkn8XQPp0qHGSggUkR+4il95z88LuwvL0utylwRt4fSYXFqU8g8V+/0 8B9LBIuV+Vz9KGXE5rA0IGj0owzo4ghkBP9CihYF2qM9+67Oo39oH1JZXMhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYutzyq1wquQvQDUjJxsO6a1OcC4wHwYDVR0j BBgwFoAU+N9A5Mlfnr+BRThwc2mV6Ru7kvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDAzYWYwMS1mMjM5LTRhMWYtODFjZC00MTA2YmViYjJhMjIvMC9GOERGNDBFNEM5 NUY5RUJGODE0NTM4NzA3MzY5OTVFOTFCQkI5MkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkxQkJC OTJGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1 RTkxQkJCOTJGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI2E/AkoAzmgWcyZ0k3EV81MltYsG7o9F4y Qv4awWiQGBGDJ97+nOzqmcs0kJIDTG44xseCBT3SHlonUaYw5s39/PGmJVsPlzqF QPp7olEmWhxh3hvzGzVbGVKIQhJ0Ul8VColX09ZEPsWZT1ggRYN3d4RREtW47Nes 2WShVOfujMM9YZQNKRhzfxWFFLWnOekMcJXrkhHiXerb94u9u1y8JTRDMKD4F+ok z5WO1uAUAIJu1AZZMpW8DN2dd9y0PpwercQqGesLQE6w0FK8IBydTSuqTF0vv8+r qaNEC/gSdHG2bBfID1EzEepNBUW4US7FynYmOEj6JtCRuuIkXgo= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:20 2025 by rpki-client