This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft File: F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json) Hash identifier: k2N7WzQK6nT0Zouy1cKmrz+hVdoqCqL2APTL1tqXdns= Subject key identifier: 82:47:A4:14:DF:57:E1:FD:0B:8F:D6:03:A5:3C:59:8A:03:95:DB:35 Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Certificate serial: 2F144B93888EC34B0AE4E0A6A3F41142B48078DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft Manifest number: 054D Signing time: Sat 06 Dec 2025 08:21:14 +0000 Manifest this update: Sat 06 Dec 2025 08:16:14 +0000 Manifest next update: Tue 09 Dec 2025 10:59:14 +0000 Files and hashes: 1: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=) 2: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=) 3: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=) 4: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=) 5: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=) 6: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=) 7: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: +Lak36D6TTrctFm/cTemHvzoDnhU7qeyIa/NocHMiNU=) 8: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=) 9: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=) 10: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=) 11: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=) 12: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=) 13: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:14:4b:93:88:8e:c3:4b:0a:e4:e0:a6:a3:f4:11:42:b4:80:78:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Validity Not Before: Dec 6 08:16:14 2025 GMT Not After : Dec 9 10:59:14 2025 GMT Subject: CN=8247A414DF57E1FD0B8FD603A53C598A0395DB35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:a1:fb:a1:e1:99:d2:27:4a:06:02:2c:fb: 92:3a:2c:fd:a3:7b:4f:0b:da:82:57:75:78:6b:43: 24:46:9e:af:4f:11:f9:0d:17:7a:9f:26:87:e9:79: 33:a8:35:ab:da:c4:24:bb:2f:41:62:d0:b4:be:4b: 72:b2:11:89:81:0f:4b:1a:79:8d:76:ea:0b:79:ca: b0:c9:a9:93:a8:a0:61:85:2a:47:d9:3f:2d:78:02: 39:46:c4:3c:93:93:17:22:91:49:61:e8:04:a2:36: 19:d4:5f:2d:5b:d9:38:f4:7f:dd:1c:25:57:d2:cd: e8:e8:1c:52:0d:82:01:42:ce:5f:09:b1:59:18:e7: 03:8b:7f:72:6a:b4:04:dd:d3:f0:c9:41:de:d9:c1: fb:56:ec:ea:f5:84:2f:20:17:c2:79:e6:25:e5:57: 47:84:56:7a:50:67:55:51:ca:31:26:bf:0b:30:71: 2b:73:de:00:2b:a6:f5:95:08:a9:67:fe:09:4e:78: 2a:79:b4:5c:f7:6a:f9:91:18:d9:2c:11:5a:f6:c8: b1:9b:c4:7c:52:a3:ce:9d:dd:73:fc:73:27:09:7d: 12:c2:b0:2b:6c:9d:09:ce:c0:b5:04:bb:5e:c0:e1: b0:f3:2a:62:70:d5:e7:d3:69:54:b4:af:5e:e6:73: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:47:A4:14:DF:57:E1:FD:0B:8F:D6:03:A5:3C:59:8A:03:95:DB:35 X509v3 Authority Key Identifier: keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d3:1f:82:b9:ff:c4:51:8e:a6:b4:36:30:fa:47:72:d0:e7: 8a:97:e1:c9:58:d3:43:c1:86:c6:53:9f:e7:55:02:18:d1:26: 0b:99:26:2a:a7:5f:26:19:a3:3e:48:9a:9e:67:3a:f2:3c:a6: aa:bd:93:fd:74:a7:d0:08:66:44:6a:f7:3a:1f:69:25:42:d1: b7:ba:5e:f8:81:c8:17:44:10:96:8a:a0:ce:0f:5f:07:3a:de: c9:16:eb:d3:0a:c2:a6:84:1c:fe:4d:d8:a5:94:26:8b:5c:bd: 24:ea:37:24:a0:9c:bc:e1:b2:b3:d9:27:e0:e6:6d:52:17:c8: 66:b1:68:e6:79:81:07:cf:86:f8:9d:9c:81:cb:ce:a2:86:f4: 09:0f:57:24:3a:20:52:85:70:07:a3:e5:f1:fc:3b:6d:3e:02: 8a:08:48:04:fa:d6:e8:30:c9:39:69:19:94:eb:25:16:b8:23: f9:46:4a:e0:6b:f8:ac:67:51:ac:23:8b:6f:c1:ef:cf:d9:10: 23:f6:d8:2d:81:80:48:3c:d6:9a:0b:1e:98:98:21:51:98:ab: 09:71:72:b1:7a:ed:ce:27:60:44:36:30:30:66:9a:da:f9:8b: f2:c2:fc:53:ca:11:d7:55:10:23:50:bf:53:3f:5d:58:bc:6f: d5:8d:bc:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxRLk4iOw0sK5OCmo/QRQrSAeNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz MDlCM0YzQjAeFw0yNTEyMDYwODE2MTRaFw0yNTEyMDkxMDU5MTRaMDMxMTAvBgNV BAMTKDgyNDdBNDE0REY1N0UxRkQwQjhGRDYwM0E1M0M1OThBMDM5NURCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAaH7oeGZ0idKBgIs+5I6LP2j e08L2oJXdXhrQyRGnq9PEfkNF3qfJofpeTOoNavaxCS7L0Fi0LS+S3KyEYmBD0sa eY126gt5yrDJqZOooGGFKkfZPy14AjlGxDyTkxcikUlh6ASiNhnUXy1b2Tj0f90c JVfSzejoHFINggFCzl8JsVkY5wOLf3JqtATd0/DJQd7ZwftW7Or1hC8gF8J55iXl V0eEVnpQZ1VRyjEmvwswcStz3gArpvWVCKln/glOeCp5tFz3avmRGNksEVr2yLGb xHxSo86d3XP8cycJfRLCsCtsnQnOwLUEu17A4bDzKmJw1efTaVS0r17mcwHJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgkekFN9X4f0Lj9YDpTxZigOV2zUwHwYDVR0j BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC M0YzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4NmIwOTItNTI3ZC00ODhmLWE5 ZjctMjQ3OTdkOTc3NGNiLzAvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlB NjgzMDlCM0YzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjTH4K5/8RRjqa0NjD6R3LQ54qX4clY00PB hsZTn+dVAhjRJguZJiqnXyYZoz5Imp5nOvI8pqq9k/10p9AIZkRq9zofaSVC0be6 XviByBdEEJaKoM4PXwc63skW69MKwqaEHP5N2KWUJotcvSTqNySgnLzhsrPZJ+Dm bVIXyGaxaOZ5gQfPhvidnIHLzqKG9AkPVyQ6IFKFcAej5fH8O20+AooISAT61ugw yTlpGZTrJRa4I/lGSuBr+KxnUawji2/B78/ZECP22C2BgEg81poLHpiYIVGYqwlx crF67c4nYEQ2MDBmmtr5i/LC/FPKEddVECNQv1M/XVi8b9WNvNI= -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:48 2025 by rpki-client