This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: FG3L/hnMAlabK/MsShQsjkMhBKXTWZHJjNd2C6bdjQA= Subject key identifier: 38:40:24:0F:5F:54:3C:B0:A2:4B:8A:6D:8F:3C:DA:2E:50:5E:0D:8A Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 6DA20F2C65898E49E6C37707135F5863F305CB43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 0217 Signing time: Fri 05 Dec 2025 09:00:55 +0000 Manifest this update: Fri 05 Dec 2025 08:55:55 +0000 Manifest next update: Mon 08 Dec 2025 19:14:55 +0000 Files and hashes: 1: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 2: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) 3: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: zk1aHUhdw2apGoRN6YybYJ+rNHUd/6Ag1bBs46aUS6c=) 4: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a2:0f:2c:65:89:8e:49:e6:c3:77:07:13:5f:58:63:f3:05:cb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Dec 5 08:55:55 2025 GMT Not After : Dec 8 19:14:55 2025 GMT Subject: CN=3840240F5F543CB0A24B8A6D8F3CDA2E505E0D8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:fa:92:5b:cb:dc:96:30:8b:49:bb:9e:6d: c3:87:8b:8a:87:c8:2d:44:1a:e4:58:60:4f:00:d2: ba:96:67:52:e9:4e:32:c5:79:31:8c:3b:cd:20:45: 8e:31:8b:44:c2:a0:62:52:75:1e:85:48:6a:a8:aa: 3b:44:0e:bd:7d:9a:18:dc:c6:df:c3:4d:63:98:85: 77:70:71:50:b3:46:2f:c8:b5:52:ee:75:63:b2:c7: 7f:7f:2d:60:b0:d6:78:b3:23:46:ee:5f:db:c1:b3: d2:f0:9c:c3:f4:da:b6:ff:60:25:ae:60:b3:79:00: 11:0f:23:8d:28:5e:ce:13:f3:d0:7e:29:eb:99:cc: 68:31:1f:40:e7:d4:1b:8f:42:e7:ed:93:75:7a:48: 25:c0:02:14:32:0e:62:ad:0a:9a:4c:52:26:f7:97: 69:b2:22:36:64:02:64:e5:35:46:9a:e7:53:47:4d: 0e:c7:e3:7e:d3:e0:50:88:ae:ee:19:63:2f:12:33: a2:5d:87:51:8b:bf:cc:e9:c0:21:6d:cf:ff:25:7b: 44:24:4a:03:65:1e:a6:0f:0a:e1:1a:47:ca:e8:8e: 0b:1e:88:62:22:b5:f9:98:3f:18:db:e5:f0:dd:6e: e6:e2:f8:37:dd:b3:eb:8b:db:4d:a7:fc:d0:01:e1: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:40:24:0F:5F:54:3C:B0:A2:4B:8A:6D:8F:3C:DA:2E:50:5E:0D:8A X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:81:3d:46:e9:98:65:ca:94:0b:62:d2:f6:50:a3:a8:88:97: 7d:4c:59:30:d8:53:de:1c:0b:b8:7d:77:eb:0a:c0:a8:de:42: fb:4e:6e:59:ec:e9:b8:67:37:3d:c4:4c:f9:c7:d7:ad:5e:6e: e0:fa:f7:35:17:68:38:39:d9:bd:78:04:08:52:0c:78:db:53: eb:dd:f6:4b:69:fb:e3:b2:1e:c6:c0:ed:cc:f2:4f:ae:31:7e: 31:1e:56:67:91:37:8e:4f:97:07:c2:ac:e5:44:cf:ce:89:eb: 26:a9:b7:5c:64:7a:d5:44:1d:16:3b:9e:02:b7:02:5b:a4:d4: 67:91:33:38:4a:c7:bd:e7:7b:bf:74:07:44:19:b0:95:be:f5: 05:b6:b7:4e:65:d6:c1:8d:68:a3:85:9b:8f:0d:6d:a2:a3:c8: 46:97:bb:3c:72:67:e5:42:d9:ef:a0:7d:e2:56:40:8e:bf:0c: e9:fb:08:a4:17:b0:61:9a:2c:7c:3f:d2:7c:bc:0b:95:64:01: 7d:70:30:48:09:01:9a:37:91:9a:ae:1c:10:c6:5f:92:0e:52: f0:c5:fb:f1:3a:26:1d:38:ae:3a:57:c5:c6:88:c6:9f:6c:5f: b1:c1:d8:c3:0e:f6:ef:14:e7:e6:40:a0:5a:3c:1b:92:03:55: 38:c2:ec:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbaIPLGWJjknmw3cHE19YY/MFy0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTEyMDUwODU1NTVaFw0yNTEyMDgxOTE0NTVaMDMxMTAvBgNV BAMTKDM4NDAyNDBGNUY1NDNDQjBBMjRCOEE2RDhGM0NEQTJFNTA1RTBEOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeOvqSW8vcljCLSbuebcOHi4qH yC1EGuRYYE8A0rqWZ1LpTjLFeTGMO80gRY4xi0TCoGJSdR6FSGqoqjtEDr19mhjc xt/DTWOYhXdwcVCzRi/ItVLudWOyx39/LWCw1nizI0buX9vBs9LwnMP02rb/YCWu YLN5ABEPI40oXs4T89B+KeuZzGgxH0Dn1BuPQuftk3V6SCXAAhQyDmKtCppMUib3 l2myIjZkAmTlNUaa51NHTQ7H437T4FCIru4ZYy8SM6Jdh1GLv8zpwCFtz/8le0Qk SgNlHqYPCuEaR8rojgseiGIitfmYPxjb5fDdbubi+Dfds+uL202n/NAB4b4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOEAkD19UPLCiS4ptjzzaLlBeDYowHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaBPUbpmGXKlAti0vZQo6iIl31MWTDYU94c C7h9d+sKwKjeQvtOblns6bhnNz3ETPnH161ebuD69zUXaDg52b14BAhSDHjbU+vd 9ktp++OyHsbA7czyT64xfjEeVmeRN45PlwfCrOVEz86J6yapt1xketVEHRY7ngK3 Aluk1GeRMzhKx73ne790B0QZsJW+9QW2t05l1sGNaKOFm48NbaKjyEaXuzxyZ+VC 2e+gfeJWQI6/DOn7CKQXsGGaLHw/0ny8C5VkAX1wMEgJAZo3kZquHBDGX5IOUvDF +/E6Jh04rjpXxcaIxp9sX7HB2MMO9u8U5+ZAoFo8G5IDVTjC7D0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:43 2025 by rpki-client