This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: N6FI4Vr+Ag4qHTPpAG8SHCPXYf0/ywGTjC+ZDHT1ldc= Subject key identifier: 42:DA:7B:BE:8D:C8:B5:FC:C4:FD:4B:E8:37:86:17:7D:BD:76:04:4C Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 3138B75F3B89AA5D8095D900D0CFBEB3259EED53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 032A Signing time: Sat 06 Dec 2025 01:10:52 +0000 Manifest this update: Sat 06 Dec 2025 01:05:52 +0000 Manifest next update: Tue 09 Dec 2025 07:12:52 +0000 Files and hashes: 1: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: umMXNYB5RwjlwGFC5Wpd2rzxhTLaoa08yJ2/wNUcpx0=) 2: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: wesud4Ud3HCpFz3TbmwbzTcWOeds/1nSTc4iWrxHtOo=) 3: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: cZF7+zuDnLM1x9M3+l4q0llMyLz1cT8Vez2g2BI943E=) 4: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: tU2O/OAH1O/qSyyJqDlWC4HBTQpL06kLsKSpR1jZ5rg=) 5: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: u4aBEtuM2QHTp7BELhEUw3EMWzsVzmaE71DRbevw9IE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:38:b7:5f:3b:89:aa:5d:80:95:d9:00:d0:cf:be:b3:25:9e:ed:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Dec 6 01:05:52 2025 GMT Not After : Dec 9 07:12:52 2025 GMT Subject: CN=42DA7BBE8DC8B5FCC4FD4BE83786177DBD76044C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b1:79:31:0b:03:e9:a9:fb:bb:66:76:cc:86: 4d:d4:8e:a8:28:0b:0c:a0:27:e5:b3:bf:e4:ed:b0: 2c:2e:4c:19:85:52:1b:61:71:d9:63:b1:04:c2:13: 34:6f:4c:ea:4c:7a:36:04:b2:06:e1:45:50:f5:62: 13:b0:aa:bd:c2:d7:2e:00:17:df:84:56:ef:fd:6d: 8d:0e:5c:b9:34:ad:5e:8e:9f:79:2e:9b:b9:84:d8: c4:9b:47:b4:33:8a:ce:3b:e9:13:ca:47:cc:cf:8f: f9:8c:2d:cb:fb:55:0d:35:2a:17:b8:dd:57:2a:86: 81:0a:3e:7c:91:b3:0e:00:0b:99:f3:8e:31:11:40: da:8c:20:13:08:b1:d0:5a:84:11:7d:08:6e:0f:c8: b1:06:24:f7:3c:07:d7:a6:a7:85:4e:75:ff:ad:72: 9b:a7:b1:1f:cc:99:ea:25:ed:2f:9e:1b:0f:76:75: bd:5f:7d:f6:11:ab:c6:b4:a6:c0:de:d6:1b:a7:86: eb:96:64:77:f4:94:7f:cf:8c:b8:3c:e8:d6:9b:5e: fe:8d:e3:34:8e:54:bc:de:55:80:ee:c9:ea:38:f6: 2a:79:18:1b:27:89:6c:71:f5:71:93:2b:dd:ac:40: f1:02:f5:91:d8:ce:59:b2:6f:a2:c1:af:b1:8e:86: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DA:7B:BE:8D:C8:B5:FC:C4:FD:4B:E8:37:86:17:7D:BD:76:04:4C X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b0:05:d3:3e:fd:e5:db:59:44:8f:9c:d4:ef:52:77:9d:53: 8a:70:86:0f:68:7d:01:bb:57:16:89:7b:15:e1:84:c3:0d:09: 13:76:c6:68:f4:a0:e1:ad:ba:29:ba:e5:bd:fa:54:d5:73:16: 91:6b:8c:39:fd:bb:00:15:c8:b4:73:1a:3b:fc:20:5b:27:f3: 5a:e4:9f:05:8b:74:37:3c:e0:78:29:07:0f:67:6f:f7:d9:b7: 21:55:4c:7b:60:25:7d:f7:7f:00:8c:1d:3c:69:96:26:1b:c0: 84:7f:ae:a4:10:44:7c:12:7e:3d:dc:eb:6b:25:5f:e0:8c:e2: 0b:78:82:44:82:10:e8:aa:61:bd:77:c9:ec:27:07:f2:59:f3: 26:43:06:ac:7d:d2:12:9c:eb:90:b9:2b:ab:7f:56:83:e9:93: 69:26:0b:5a:77:dd:41:a4:d4:02:b5:38:9e:74:fe:5e:5a:cf: 1b:fb:2a:12:47:52:d0:2a:cd:98:0e:15:7f:02:4b:b5:12:d2: 2a:69:7d:8a:f5:6a:78:0a:10:b7:7d:34:27:46:11:6e:bc:82: f9:71:b6:91:1b:ea:9f:bf:b0:f5:cb:dd:75:8c:dc:fb:ac:8c: 62:7a:bc:20:c6:8f:d3:23:46:ad:cc:49:19:8c:ec:83:b7:7e: ac:cc:57:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTi3XzuJql2AldkA0M++syWe7VMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTEyMDYwMTA1NTJaFw0yNTEyMDkwNzEyNTJaMDMxMTAvBgNV BAMTKDQyREE3QkJFOERDOEI1RkNDNEZENEJFODM3ODYxNzdEQkQ3NjA0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsXkxCwPpqfu7ZnbMhk3Ujqgo CwygJ+Wzv+TtsCwuTBmFUhthcdljsQTCEzRvTOpMejYEsgbhRVD1YhOwqr3C1y4A F9+EVu/9bY0OXLk0rV6On3kum7mE2MSbR7Qzis476RPKR8zPj/mMLcv7VQ01Khe4 3VcqhoEKPnyRsw4AC5nzjjERQNqMIBMIsdBahBF9CG4PyLEGJPc8B9emp4VOdf+t cpunsR/Mmeol7S+eGw92db1fffYRq8a0psDe1hunhuuWZHf0lH/PjLg86NabXv6N 4zSOVLzeVYDuyeo49ip5GBsniWxx9XGTK92sQPEC9ZHYzlmyb6LBr7GOhikhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQtp7vo3ItfzE/UvoN4YXfb12BEwwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiwBdM+/eXbWUSPnNTvUnedU4pwhg9ofQG7 VxaJexXhhMMNCRN2xmj0oOGtuim65b36VNVzFpFrjDn9uwAVyLRzGjv8IFsn81rk nwWLdDc84HgpBw9nb/fZtyFVTHtgJX33fwCMHTxpliYbwIR/rqQQRHwSfj3c62sl X+CM4gt4gkSCEOiqYb13yewnB/JZ8yZDBqx90hKc65C5K6t/VoPpk2kmC1p33UGk 1AK1OJ50/l5azxv7KhJHUtAqzZgOFX8CS7US0ippfYr1angKELd9NCdGEW68gvlx tpEb6p+/sPXL3XWM3PusjGJ6vCDGj9MjRq3MSRmM7IO3fqzMV14= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:59 2025 by rpki-client