This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: FFShf0v5NKbcDe8I+Nm3aHv7Y3AqmPeEwoKIUREZEfI= Subject key identifier: 1F:A6:AC:16:D0:16:AC:72:04:AA:F5:4F:74:39:FF:59:C4:58:3D:E3 Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 4A49E53CEF501E28AFE4541A98A49BE9C48A5F9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 021C Signing time: Tue 16 Dec 2025 06:30:55 +0000 Manifest this update: Tue 16 Dec 2025 06:25:55 +0000 Manifest next update: Fri 19 Dec 2025 16:59:55 +0000 Files and hashes: 1: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 2: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: QqPa6Xom3ZtbeekWpGrVf2Mc6OggmrcR3AUPOJVCFrk=) 3: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) 4: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 16:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:49:e5:3c:ef:50:1e:28:af:e4:54:1a:98:a4:9b:e9:c4:8a:5f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Dec 16 06:25:55 2025 GMT Not After : Dec 19 16:59:55 2025 GMT Subject: CN=1FA6AC16D016AC7204AAF54F7439FF59C4583DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:74:1e:26:90:89:cf:4d:c2:52:22:f9:2b: c0:e4:7a:14:b1:03:7f:a4:68:2d:68:c7:9f:0f:9e: 67:15:35:7a:f8:a1:99:26:71:59:7d:28:cd:b1:6c: 2d:fa:c8:00:9d:cf:f0:ae:93:af:8c:93:91:30:5b: 4a:fa:60:1a:f2:b4:67:01:78:9d:77:79:b7:1d:a4: 37:8b:67:0b:ee:48:ab:a7:fe:e8:bd:3a:06:52:ab: 83:49:32:bc:60:0c:6c:38:7b:02:63:3f:d5:20:e6: 09:46:1e:e8:8c:d8:2d:c7:c1:13:b0:31:39:c7:1d: 83:5c:22:eb:54:ff:a8:c8:92:97:78:1f:a9:85:6b: ce:93:c1:79:8b:99:f8:22:91:00:eb:9d:f7:b7:fa: e0:12:73:e3:2a:4f:36:f9:91:2c:ed:59:84:29:af: 2a:de:cb:93:2e:ed:df:49:59:b3:d5:5b:88:74:73: 32:1a:ab:b5:5d:73:83:df:4f:2e:fe:47:2a:ae:7c: 7e:af:e0:40:ab:35:24:ee:ac:ba:d5:37:5a:72:c3: c3:98:fe:64:5d:d3:f9:51:b9:b8:a2:33:09:36:59: 4e:a5:89:e2:7b:98:da:bb:05:77:cb:e9:0d:7c:c3: de:cc:96:56:2f:06:e8:24:ad:69:84:eb:2f:3e:3c: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A6:AC:16:D0:16:AC:72:04:AA:F5:4F:74:39:FF:59:C4:58:3D:E3 X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:de:6c:f7:40:18:dd:42:c3:ad:d7:ab:12:af:80:c3:ee:0a: e8:ce:f8:3f:d2:36:bc:db:92:a4:13:89:f0:4d:24:a9:d0:68: 42:65:27:67:9c:c3:87:be:3d:0f:70:b0:5c:8f:99:b4:26:e8: 46:7f:25:2a:9a:5f:f3:fa:4c:1b:90:43:53:cb:e5:70:9d:9c: 13:40:ee:6b:d3:7b:21:46:4f:1d:93:b5:73:38:bf:41:ee:c7: 22:90:ad:cd:b3:7d:32:04:1e:0f:b5:6e:99:49:5a:d7:7d:86: 62:04:ee:82:f8:1e:75:90:8f:b2:8a:8b:89:a8:80:fa:12:16: f3:ce:1c:a4:30:67:ab:0f:95:ef:81:93:2d:c2:58:74:7a:ca: 86:42:96:64:e9:6e:bd:db:9d:ed:1a:da:94:d0:c2:7a:d9:db: 39:23:a4:9d:3b:48:14:4d:c4:d9:9c:84:ac:6d:95:3b:12:b0: 23:45:58:ce:4b:b1:2e:46:bb:ac:8b:fd:3b:84:bb:f7:79:53: 08:5d:66:82:a4:82:cc:5a:4b:86:28:4a:05:02:f8:a4:a9:a4: 12:24:13:91:1c:a0:47:6f:51:2a:0b:46:f9:ab:66:68:1a:37: b8:d4:3f:d0:06:8c:10:53:1d:a2:f4:1f:82:89:a3:e6:51:cc: 90:af:9c:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSknlPO9QHiiv5FQamKSb6cSKX50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTEyMTYwNjI1NTVaFw0yNTEyMTkxNjU5NTVaMDMxMTAvBgNV BAMTKDFGQTZBQzE2RDAxNkFDNzIwNEFBRjU0Rjc0MzlGRjU5QzQ1ODNERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAb3QeJpCJz03CUiL5K8DkehSx A3+kaC1ox58PnmcVNXr4oZkmcVl9KM2xbC36yACdz/Cuk6+Mk5EwW0r6YBrytGcB eJ13ebcdpDeLZwvuSKun/ui9OgZSq4NJMrxgDGw4ewJjP9Ug5glGHuiM2C3HwROw MTnHHYNcIutU/6jIkpd4H6mFa86TwXmLmfgikQDrnfe3+uASc+MqTzb5kSztWYQp ryrey5Mu7d9JWbPVW4h0czIaq7Vdc4PfTy7+RyqufH6v4ECrNSTurLrVN1pyw8OY /mRd0/lRubiiMwk2WU6lieJ7mNq7BXfL6Q18w97MllYvBugkrWmE6y8+PE8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH6asFtAWrHIEqvVPdDn/WcRYPeMwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjebPdAGN1Cw63XqxKvgMPuCujO+D/SNrzb kqQTifBNJKnQaEJlJ2ecw4e+PQ9wsFyPmbQm6EZ/JSqaX/P6TBuQQ1PL5XCdnBNA 7mvTeyFGTx2TtXM4v0HuxyKQrc2zfTIEHg+1bplJWtd9hmIE7oL4HnWQj7KKi4mo gPoSFvPOHKQwZ6sPle+Bky3CWHR6yoZClmTpbr3bne0a2pTQwnrZ2zkjpJ07SBRN xNmchKxtlTsSsCNFWM5LsS5Gu6yL/TuEu/d5UwhdZoKkgsxaS4YoSgUC+KSppBIk E5EcoEdvUSoLRvmrZmgaN7jUP9AGjBBTHaL0H4KJo+ZRzJCvnH0= -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:00 2025 by rpki-client